Messages

Hi

I am trying to set up an OpenVPN server on my OPNsense. The client can connect to the server just fine and receives the route. However, I cannot access the LAN via OpenVPN. Under Firewall -> Rules -> OpenVPN I have two pass-all rules:

Code Select Expand


-> IPv4+6 * * * * * * *
<- IPv4+6 * * * * * * *

but I still see *some* packets from ovpns1 getting dropped by the "Default deny / state violation rule" of the firewall in the live view. This makes no sense to me, as this rule is last-match, but I have the pass-all rules as first match, so this should never happen imo.

Sometimes, packets from the VPN server to my LAN get dropped, e.g., 192.168.10.250:46092 -> 192.168.10.175:8006,
but sometimes they also get through. I cannot see a difference between these two packets, except for the random source port.

I'm running latest version 25.1.12. Reboot doesn't help.

Any help would be appreciated.

Cheers

Hi,

I am using OPNsense 23.7.10 and I am currently in the process of setting up IPv6. I have a /56 prefix from my ISP, and a /60 prefix is delegated to OPNsense via ISP router. I set up DHCPv6 and set Router Advertisements to "Managed".

My LAN devices get global IPv6 addresses. The problem is they can ping each other, but neither the LAN nor WAN interface of OPNsense nor anything beyond.

What could be the problem here?

EDIT: I have a floating rule which allows ALL IPv6 traffic. I can see the Ping reaches LAN and Loopback.