Topics

I have three VLANs, Computer, IoT and Camera. I want to block traffic from IoT to the other VLANs.




You cannot view this attachment.




When I join the IoT network with my computer, I can still access the Computer and Camera networks. What am I doing wrong?

Can we only have two policies in addition to default in home subscription? I have default, vlan and vpn. If I try to add another I get a warning that I have exceeded my plan.

I guess it does not matter since I can't get the vpn interface detected.

Is it possible to route my Openvpn traffic from my client (open vpn for android)?

If it's possible, how to configure it?

Thanks,
Terry

[I have OPNsense 23.7 running on a Dell Optiplex. Unbound is configured and working with DNS over TLS.]

I have OPNsense 23.7 running on a Dell Optiplex. Unbound is configured and working with DNS over TLS.




I am getting: error: remote control failed ssl crypto error:00000000:lib(0):func(0):reason(0)




Also, I have these DHCP errors, I don't know if they are related. Probably not:





My devices all connect without issue and DNS resolves. But I would like to correct the cause of these errors.

Any help would be appreciated

I'm curious what the update schedule is for the free version of Zenarmor. My install has rules version 1.11.22050910, is this the latest?
Last update was June 3.
Thanks

[Edit: I noticed the packets I am seeing are ICMP packets, not DNS lookups.]

I have a port forward redirect rule for DNS. I can see in the logs that the rule works. However, some DNS continues to go out from the WAN, to servers that are not what I have setup in Unbound.
I am referring to the 8.8.8.8 destination in the picture.
How do I set up OPNsense to only allow the DNS server I specify?

Edit: I noticed the packets I am seeing are ICMP packets, not DNS lookups. 

When I view traffic in reporting I see 192.168.6.120 making a connection to Amazon.com among other sites. But, 192.168.6.120 is not listed as a lease in Unbound. So, where is this address assigned from and who is it?

I have installed OPNsense 22.1.6 and setup three interfaces. WAN, LAN and IOT.

Since I am relatively new to firewall rules I would like some feedback on my setup. My goal is to have my computers and cell phones on the LAN and internet of things (Roku, Firestick and Amazon Plugs) on IOT. LAN can access IOT, but IOT is blocked from LAN.

My setup works, but is it correct and secure?