Messages

I think I am going to do a new install and work with ddhcp kea and unbound to se if I can get things working.

Hi again...
Yes, this is a recent install and the default is https...
I have port 8443
I get ERR_CONNECTION_TIMED_OUT

bookie56

Sorry I had missed the domain bit in your earlier post..
If I do a nslookup for my subdomain i have from duckdns it gives me:
The name of the router and the router ipaddress..
and it gives me non-authorititave reply with the same info - but has my subdomain.duckdns.org.duckdns.org Which shouldn't happen?
If I do a https//:hostname.subdomain.duckdns.org I get it can't be reached.

bookie56

Hi Seimus!
Yes, on my PRIVATE_LAN
Ok... nslookup that gives me
Defaulut server which is the host name of my OPNSense and the gateway of the LAN I am on...
I always work from the PRIVATE_LAN and connecting to my firewall



bookie

Hi guys!
I have created a subdomain with duckdns.org
I have created an acount...
I have created a challenge type with DNS-01 and used DuckDNS and my api token...
I have created and automation for restart of OPNSense web gui...
I have created a certificate and my common name is my subdomain.duckdns.org I have may alt name is the same.
I have set my ssl certificate in web gui admin the alt name here is the HostnameSubdomain.duckdns.org.
I can ping my Hostname.Subdomain.duckdns.org from pc on network but I cannot login with Hostname.Subdomain.duckdns.org only ip address?
Where do I start to see what is wrong?


bookie56

Thanks nero3555
Nice bedtime reading....lol

Hi guys!
I have had a lot to do recently but wanted to get back to OPNSense to have things setup right:
I have mendtioned before that I have a Intel 49Y4242 IBM Ethernet Quad Port Server Card 94Y5167 49Y4241 low Profile
I use the inbuilt nic for my WAN
The 4 port nic is setup as follows:
Private_LAN
Company_LAN
Private_wifi
Company_wifi
I obviously could have created vlans to do the same job but having the 4 port network card saved that work....
Each port has its own subnet for that network..
To stop my company lan and wifi from talking to private lan and wifi I setup an alias...
Not sure if I did it the right way..
I called it private_networks and in content I added the two private subnets...
The rest as default and saved.
I then created firewall rules to stop the private and company networks from talking to each other..

I then Went to  Dnsmasq DNS & DHCP:
General I chose all interfaces apart from WAN
The DNS Listen Poort: 53053
I setup DHCP Ranges for:
Private_LAN: 192.168.11.100 - 192.168.11.200
Company_LAN: 192.168.12.2  - 192.168.12.20
Private_wifi: 192.168.13.100 - 192.168.13.200
Company_wifi: 192.168.14.2 - 192.168.14.20
And that is as far as I have come....
I really don't know how to setup the DHCP Options?
Can someone give me examples from the above configuration?
Should I have done something different?
I am open to suggestions and learning how everything works....


bookie56

Hi nero355!
I definitely like Palemoon but there is a fly in the ointment....there is no support for Bitwarden.....
Have you any other suggestions that are supported in Palemoon?

bookie56

Hi guys!
Thanks for coming by...
ProximusAl that sounds interesting....but probably a little more than I was looking for...but do elaborate a little so I can get a better understanding...

nero355 Yes, everything that is on tha lan....which in my case covers four ports...I like your suggestion and definitely will look into Palemoon..I agree with protecting my privacy which as we all know Microsoft never will, Chrome is as bad....

Patrick M. Hausen can you elaborate a little...sounds also very interesting.... just want everything from my lan side to not have to worry about ssl certs all the time and the fact it doesn't matter what device on the network that connects is also ok...

I have a lot of servers running OMV but they are not online all of the time only when I am backing up files...I am looking into a server on line all of the time like opnsense that will backup all of my business via NextCloud to eliminate the need for the crap called onedrive....

bookie56

Hi guys!
New guy on the block....and before I get shot down...I know that my question has been asked before...just that searching on the forum is not easy...

Here is the situation....
I have a home network consisting of many computer some Windows most Linux....
It would be nice to be able to access everything on my home network without getting ssl certificate is not safe...
Yes, I know how to add selfsigned ones....but it means adding the certificates on all devices in my network...bit time consuming.

Is there a kind sole here that can get me up and running with that....?
I have heard good things about duckdns...but am open to advice from those that can....

I have only recently made the switch from pfsense to opnsense.....when something is opensource it should be left open source....or still provide the same quality of service to home users....which sadly is not the case with pfsense any more...

Running a business I don't always have the time to research things and a family member was horrified that I was on pfsense using a closed source product...


I do not mind putting the work in to set all this up - if someone would help me.....

My router at the moment has a four port nic and instead of vlans I have a dedicated port for company...company wifi....private...and private wifi ...

With firewall rules stopping the company network being able to talk to the private network.....

I will stop waffling on now...

Thankyou!

bookie56