Messages

Ya pude solucionarlo era mucho más fácil de lo que parecia, solo tenia que activar:
Cortafuegos->Ajustes->Avanzado
Las 3 primeras opciones de reflexion.
*Reflexión para redirección de puertos
*Reflexión para 1:1
*NAT automático de salida para Reflexión.

Con esto ya tuve acceso a internet con todos mis dispositivos sin problemas, gracias a quines se tomaron un tiempo en responerme, saludos.

I was able to solve it, it was much easier than it seemed, I just had to activate:
Firewall->Settings->Advanced
The first 3 reflection options.
*Reflection for port forwarding
*Reflection for 1:1
*Automatic NAT out for Reflection.

With this I now had access to the internet with all my devices without problems, thanks to those who took the time to respond to me, greetings.

Hello, thanks for answering, I was reviewing the logs and apparently what is happening is that for some strange reason the devices that have Android 14 are forced to use IPv6 and the firewall is disabled, which is why I cannot access the internet even if it is assigned an ipv4, I leave an example of what I found that is blocking the firewall.

Sep 7 12:33:39 LAN Block all IPv6 (1000000003) [fe80::e04e:7a9f:1d74:22aa] [ff02::2] ICMPv6.

I have IPV6 disabled both on the router and in opnsense, other devices that have Android 13 are not forced to use IPv6 and they do browse the internet without problems.

Now what I have to know is how to configure the firewall to allow the outputs that it is blocking.

I investigated how to disable IPv6 in Android 14 but some applications that use the protocol will stop working so it is not an option and I will need to configure IPv6 traffic to be able to have everything working.

Thank you very much for your reply. Could you give me an idea of ​​how to create the NAT? I have been away from firewalls for a long time and I am practically blank. Thank you.

Hello everyone and I thank you in advance for your time.

I tell you, I have opnsense configured in proxmox, I give it 2 physical cards, one for the WAN and the other for the LAN.

My operator's modem is connected to the WAN and assigns me the static IP 10.10.3.2.
I have my router connected to the LAN (I tried 2 different ones, Belkin and Tenda, both in AP mode).

When I connect a device via Ethernet I have access to the Internet without problems, the problem comes when I try to connect a device via Wi-Fi, it DOES assign me the opnsense IP, also the gateway and the DNS, but a legend appears on the screen asking for access to the internet and it never connects, from the wifi devices I ping opnsense and if it does, I ping 8.8.8.8 and google but neither of them work.

The configurations are the basic ones, I have not made additional rules or anything like that, at the time I created an additional rule to see if allowing everything to the LAN in any and IPV4/IPV6 protocol but it remained the same, any idea what could be what Is it failing me or is there anything additional I need to add?

Thank you very much for your time. Greetings.

Hola a todos y de antemano agradezco su tiempo.

Les comento, tengo configurado opnsense en proxmox, le paso 2 tarjetas fisicas una para la WAN y la otra para la LAN.

En la WAN va conectado el modem de mi operador que me asigna la ip statica 10.10.3.2.
En la LAN tengo conectado mi router(probe con 2 diferentes, Belkin y Tenda los dos en modo AP).

Cuando conecto algún dispositivo por medio de ethernet tengo acceso sin problemas a internet, el problema viene cuando trato de conectar algún dispositivo por wifi, SI me asigna ip del opnsense, tambien el gateway y los dns, pero aparece una leyenda en pantalla de buscando acceso a internet y nunca conecta, desde los dispositivos wifi hago un ping a el opnsense y si lo hace, hago ping a 8.8.8.8 y a google pero ninguno de los dos se realiza.

Las configuraciones son las basicas no he echo reglas adicionales ni nada por el estilo, en su momento cree una regla adicional para ver si permitiendo todo a la LAN en any y procolo IPV4/IPV6 pero siguio igual, alguna idea de que pueda ser lo que me este fallando o algo adicional que tenga que agregar?

Muchas gracias por su tiempo. Saludos.