Topics

1

General Discussion / No internet on LAN computers after WireGuard setup

« on: April 20, 2021, 01:35:18 pm »

I followed this to setup WireGuard: https://docs.opnsense.org/manual/how-tos/wireguard-client.html
It's working fine when I connected my phone as a client and I can access my network, my phone also has internet.

Other computers (non WireGuard clients) that are connected to LAN unfortunately don't have internet access. I have to disable Wireguard VPN to bring back the internet connection. It looks like a DNS resolution issue as indicated in my browser. Unbound by default is listening to all outgoing interfaces so this shouldn't be a problem? Btw, I also use DNSCrypt-Proxy so Unbound serves as a forwarder. Any idea on how to solve this?

2

21.1 Legacy Series / I lose ipv6 after a few minutes

« on: March 13, 2021, 10:59:42 pm »

I keep losing my ipv6 connectivity after setting ipv6 on my WAN interface.

Here are the steps that I did:
1. Added DHCPV6 as ipv6 type
2. Set my ISP delegated prefix which is 56
3. Set Send ipv6hint to checked (I also tried checking Use IPV4 connectivity)
4. Reboot

After rebooting I get 20/20 from https://ipv6-test.com/. I also allowed ICMPV6 echo request to WAN.

Then after a couple of minutes (I don't exactly know how many minutes, maybe 30+ minutes), I do the ipv6 test again and it says I don't have ipv6. I get 4/20. I also tried testing from other websites and they can't detect my ipv6 address.

Although looking at the Interface settings - Overview - WAN, I can see an ipv6 address. I know there's a flag "Do not wait for RA" but I can't see it. I think this is what my ISP requires. Is this is already enabled in the code?

There's another issue btw, in the Dashboard - gateway_titles widget, DHCP6 gateway doesn't show my ipv6 address all the time, even though there's one in the Overview - WAN.

3

20.7 Legacy Series / Duplicate Wireguard in Firewall Rules Menu

« on: October 04, 2020, 04:08:26 pm »

Current version is with the latest patch as of 5 Oct 2020.

I got a duplicate Wireguard from the fiirewall rules menu after enabling Wireguard VPN. So I tried deleting the Wireguard interface thinking that it will remove both from the FW Rules menu, but it removed only 1. The other Wireguard remained.

I then tried setting up, disabling and enabling Wireguard VPN again, and created WG0 interface. It generated the corresponding FW Rule menu WG0 as seen in the screenshot. The Wireguard menu from the FW rule is still there unfortunately. How do I get rid of it? It's not mapped to any interface.

Sent from my LYA-L29 using Tapatalk

4

20.7 Legacy Series / Unbound - URLs of Blacklists bug

« on: September 04, 2020, 01:50:57 pm »

OPNsense doesn't apply the url/s added to Unbound - URLs of Blacklists after rebooting. You have to click the Save button to apply it (it looks like it needs to download the list of domains again).

5

Intrusion Detection and Prevention / Very slow connection when choosing LAN interface

« on: September 02, 2020, 08:01:06 am »

When choosing the LAN interface, my connection becomes very slow to the point that I can't access the internet.

I have a Core i5 4300Y and 8 GB RAM. Aside from the default services after opnsense installation, I only have IDS enabled, with around 6-10 ET* rules enabled, IPS and Promiscuous mode enabled, and Hyperscan.

What could be the problem?