Messages

I just noticed something very odd while digging into this.  I have be doing this all from an EndeavourOS workstation.

My private key is 27 lines long, including the "Begin" and "End" text.  When I copy the key into the OPNsense GUI, the total lines increases to 37.

I did a diff between the two and there is very little in common.  The data is getting changed somehow.

Using a Windows workstation, I was able to successfully copy the correct key into the OPNsense GUI.

Yes, I made sure there are no line breaks.  Here is an example of what I pasted:

-----BEGIN OPENSSH PRIVATE KEY-----
<key data>
-----END OPENSSH PRIVATE KEY-----

Trying to get the sFTP backups working.  From opnsense cli, I can sftp to my server using the needed private key.

From the GUI, I get this error when using the same private key:

The following input errors were detected:

    <user>@<server>: Permission denied (publickey). Connection closed

Any thoughts on what/where the issue may be?

DNScrypt is running locally on my opnsense device.

I am wanting to my own secure DNS server that I can use on my Android phone from anywhere.

I have DNScrypt setup to listen on port 853 because that is what Android wants to you use by default.

Things look great when I point my Android to my LAN IP while connected to my internal network.

When I disconnect from my network to use the cellular network, I am not able to resolve anything.  Although, I can see successful connections on my WAN interface.


Am I just doing something wrong here?  Could I be trying to force a square block through a round hole?

Well....now it is working.  Not sure what it was though.

NPTv6 is set like this:

Interface: WAN
Internal IPv6 Prefix: <internal ipv6 addr>
External IPv6 Prefix: <external ipv6 addr>
Track interface:  None

Firewall rule is literally allowing any and all IPv6 traffic in.

I have a wide open "any/any" IPv6 rule on the WAN interface.

If I can get this to work, I will then look at tightening the rule.

Running 25.1.2, I have IPv6 working outbound.  I am able to ping and browse to multiple IPv6 only sites on the Internet.

My trouble is with IPv6 traffic being allowed IN to my LAN.

Even with a NPTv6 entry, I keep seeing the traffic being blocked by the WAN interface Default Deny rule.

What am I missing here?

I have some stale records in my DNS cache but cannot find anywhere in the GUI to edit the records.

Can someone point me in the right direction?

Cheers,