Messages

Yes, I understand, but that's not it.

I even thought about that (due to a mistake I made when understanding the traffic, I thought it was an output, but I realized it was an input on the WAN), so I turned off the switch and it continued, only with OPNsense turned on on the WAN.

Thanks in advance!

[@Patrick]

What seems strange, is that the destination port is always UDP 14640 at a high rate from different sources that seem not to be from the same network. If that is not a mere concidence, I would verify that this is not traffic that one of your own clients induces.

Exactly, and I don't even have clients lol :)
I use OPNsense in my home lab to manage my network

This must be a "botnet" as @Patrick mentioned, they scan the internet and maybe the hacker behind this scan knows of a flaw in this port of some specific service, since he knows that the IPs are changing, it could be that one day it will fall on some machine that has this service active and he will exploit it.

Well, thank you very much, gentlemen.

I also set pihole as the system default in System > Settings > General > Networking

I don't know if this would be the best option, but it works :)

There is no need to log blocked connection attempts.

It is logging in by default, is there any way to turn it off?

I can't turn it off here

Hello my friends!

The IPs I receive from my ISP are constantly being attacked. How do I fix this? By reconnecting the PPPOE and receiving a new IP, easy.

But how do I reconnect my PPPOE in OPNsense?
I tried turning the interface off/on, without success.
I tried turning the PPPOE off/on, also without success.

Is there a quick and easy way to do this?

Dude, I did it like this on mine.

I use pi-hole, I put the IP in DHCP (DNS SERVERS)


I didn't need to add any rules when forwarding ports.


In the firewall rules I just allowed local access between the LANs I have, and so everything works perfectly.


Pi-Hole

Thank you very much!

I don't understand how this snapshot works, can someone explain it to me?

default - system initial
bkp.20250426 - I generated it on this date - 2025-04-26
snap.20250504 - I generated it today - 2025-05-04

What confuses me is
- which one is active?
- why are the sizes so different?

waiting, thanks!

After a few days of struggle, I managed to get SFTP working. Today I'm using shared hosting for some of my websites, so I reserved a directory for my OPNsense backups.

I hope it works :)

Edit: how can I place picture in the post instead as attachments?

Use tag

Code Select Expand

[img]URL[/img]
I recommend using this postimage: https://postimg.cc

Hi, I'm not sure if that's it, but try changing the fw rule by setting the outgoing gateway.