Messages

1

General Discussion / Debian 12 DHCPv6 issues

« on: September 07, 2024, 05:37:39 pm »

I do not know if this is the correct forum for this, please let me know if it's not.

Hello, I have a slightly complicated setup, basically my ISP only gives me an IPv4. I then have a VPN client setup to a VPS that gives me "fddd:2c4:2c4:2c4::1/64" this all works fine.
I have the LAN static IPv6 set to 2001:db8::1/64 and the DHCP range to "2001:db8::2 - 2001:db8::ffff:ffff:ffff:ffff". Now Windows devices work fine, they seem to grab the IPv6 from the DHCP server, as I can see it in the DHCPv6 server leases - and I can access local devices like cisco access points, other windows devices and also WAN.
The problem is with Linux devices, now I've had Linux devices setup with "iface enp4s0 inet6 auto" - this has worked fine, but I was not able to see the devices in DHCPv6 leases as I think it was using stateless config.
When I set it to "iface enp4s0 inet6 dhcp" I only get one /128 IPv6 and I am not able to ping either anything on the local network or anything on WAN side.

I am completely out of ideas now, yes, I could use stateless, but I would like to see the devices in DHCPv6 leases if it's possible.
Sorry for the very confusing explanation, I've been trying to get this to work for about 7 hours now.

Thank you for any help!

2

Virtual private networks / Re: WireGuard - Port forwarding to VPN wireguard host.

« on: June 15, 2024, 10:20:58 pm »

So an update, this has to do with asymmetric routing, basically, I have two gateways, the WAN and the VPN. I want all of my traffic to be routed out the regular WAN gateway and I want the requests that come in through the VPN gateway to go out the VPN gateway. I could apparently do this on pfsense just fine, but I cannot get it to work here.

Any help with this is really appreciated. Thanks!

3

Virtual private networks / Re: WireGuard - Port forwarding to VPN wireguard host.

« on: June 15, 2024, 12:53:33 pm »

Sorry for the late answer, yes, the rule gets created (when choosing "Add associated filter rule") under the ATVIE2 interface and I can see it.

4

Virtual private networks / Re: WireGuard - Port forwarding to VPN wireguard host.

« on: June 14, 2024, 09:29:14 pm »

Yes, I have it on 8443. I did not have the redirects disabled, but I tried to disable them just now and still nothing.

It's also good to mention that this webserver is already forwarded to my native WAN - this IP is for services that can be proxied via cloudflare and and the direct connection was to handle websites that cannot be proxied by cloudflare and also some non-website services.

5

Virtual private networks / Re: WireGuard - Port forwarding to VPN wireguard host.

« on: June 14, 2024, 07:42:26 pm »

Please ignore the previous post, these are the real logs, however, on port 80 - but it's setup exactly like port 443.

Maybe there is a problem with the reply from the webserver?

6

Virtual private networks / Re: WireGuard - Port forwarding to VPN wireguard host.

« on: June 14, 2024, 07:01:06 pm »

So an update, it seems that the firewall does let it through as seen in the attached screenshot. However I do not get anything either when I scan the port, or when I try to load the website on that web server.

7

Virtual private networks / Re: WireGuard - Port forwarding to VPN wireguard host.

« on: June 14, 2024, 06:08:06 pm »

Thank you for the very quick response!

I changed the "Filter rule assosciacion" to "Pass" however the port is still unreachable.

8

Virtual private networks / WireGuard - Port forwarding to VPN wireguard host.

« on: June 14, 2024, 05:58:53 pm »

Hello, I've just come to OPNsense from PFsense. Everything went smoothly apart from this.
Now I had this setup on pfsense for about 2 years now so I know that the port forwarding to the wireguard client on the server is setup correctly.

I've managed to setup "Host -> OPNsense -> Wireguard server -> Internet" configuration just fine however I am struggling to setup "Internet -> Wireguard server -> OPNsense -> Host" basically said port forwarding to the VPN interface.

I am attaching my current port forward config (HTTPS). If I need to attach anything else, please let me know!

The port is not open for some reason.

I am right now stuck and I really don't know what to do next. Any help is appreciated.
Thank you!