Topics

1

17.1 Legacy Series / [SOLVED] NAT from same external network

« on: March 30, 2017, 05:04:54 pm »

Hello,

I have 6 OPNSense firewalls running in HP Gen7 machines with raid disks and I have a little problem with nat rules.

We have the next scenario:

Gateway => 5.1.2.1/24
Firewall1 => 5.1.2.2/24
Firewall2 => 5.1.2.3/24
Another client => 5.1.2.254/24

In Firewall1 we make nat from internal ip 192.168.0.1:8000 to the wan 5.1.2.2:8000

We can access successfuly the machine behind the nat from all public ips but from 5.1.2.0/24 cannot and we don't know why.

It is a bit annoying because I have my machines behind firewall2 and I want to access the content from firewall1

Thanks!

2

16.7 Legacy Series / [SOLVED] IPS Mode not working

« on: August 24, 2016, 09:03:20 am »

Hello,

I'm testing a virtual machine (4 gb ram, 8 core) with the last opnsense firewall.

All work great but Intrusion Detection with IPS activated.

If I disable IPS all work again, but if I enable IPS (with and without promiscuous mode) I can't do anything. I have teste without any rulesets without success.

It will be really great to have it working.

Thanks

3

16.7 Legacy Series / [SOLVED] SSH neighbor host

« on: August 23, 2016, 12:34:29 pm »

Hello,

I just installed OPNSense in a virtual kvm host (4 GB RAM, 8 core) for testing purpose.

All running fine.

I want to use it basically for web filtering and vpn server as I have the ISP firewall.

My scenario is the next:

I have 2 network providers (2 Gbps each one) and I do load balancing with an ASR1001 (1.2.3.1).
Next hop I have the ISP firewall in transparent mode.
Behind the firewall I have the different services (wimax, fiber, cmts, etc) and my network.
My network is 1.2.3.0/24 and the firewall have 1.2.3.12/24 with 1.2.3.1/24 as gateway.

When I ping another host from 1.2.3.0/24 all is ok but if I try to ssh in the machine I cannot. traceroute stucks too at firewall's LAN port.

I really never used this software and I can't guess what's happening.

As I can see, from the LAN port can't go to direct connected hosts from WAN's port.

Anyone have any idea about what's happening?

Tranks.