Topics

Dear community,

my fiber bridge does have a second IP for local configuration web interface: 192.168.33.1
For this I configured a virtual IP (IP alias) on the WAN interface. Ok - this works.

From the LAN side I can only reach it when doing a port forwarding using ssh (ssh -L 88:192.168.33.1:80 root@opnsense).
When configuring a Firewall-NAT-Port forwarding I am failing:

Code Select Expand

LAN1 TCP * * This Firewall 88 192.168.33.1 80 (HTTP)
Also tried a firewall rule:

Code Select Expand

IPv4 TCP LAN1 net * * 88 * * Glasfaser Modem
But nothing helps.

Any ideas welcome. Thx!

Hi all,

Recently my email account was blocked because my domain/email provider told me he had an attack from my IP:
IM360 WAF: Infectors. Dirb like fuzzing||MVN:REQUEST_FILENAME||MV:/debian/pool/main/f/felix-shell/felix-shell_1.4.3.orig.tar.xz||T:APACHE||

That's when I started to watch my traffic towards my provider and realized that not only the PC running Outlook is contacting my provider, but also my Android TV. See screenshot attached.

Now I have a lot of questions:

• What reasons could Android TV do that?
• Anyone else observed that same behaviour?
• The screenshot shows only a live view, but is there any history stored I can view?
• How can I analyze the traffic further?

Appart from this Android TV anomaly, what would you do now?

thx!

[65536 Bytes. Ist doch verdächtig oder?]

Hallo Leute,

habe so meine Probleme mit OPNsense und komm nicht drauf ob ich was falsch mache.

Ich habe ein recht einfaches Setup: WAN<->LAN und das wars. Das WAN steht in einer DMZ hinter meinem Modem und hat eine Public IP.

Port forward habe ich eingerichtet auf einen meiner Ubuntu Server im LAN.

Also mache ich

Code Select Expand

ssh thomas@<public ip> - fragt mich nach Passwort und bin drinnen.
Mache ich jedoch

Code Select Expand

scp datei.iso@<public ip>: kommt alsbald die Fehlermeldung "Connection reset by peer". Schau ich wieviel übertragen wurde: 65536 Bytes. Ist doch verdächtig oder?

Das Problem scheint mit meinem anderen hier zusammenzuhängen:
https://forum.opnsense.org/index.php?topic=31484.msg151880#msg151880
(nur dachte ich probier's mal in Deutsch mit anderem Titel nachdem sich niemand gemeldet hat).

Ich konnte sonst nicht viel dazu finden. Dieser Topic hier blieb leider ungelöst:
https://forum.opnsense.org/index.php?topic=27132.msg131628#msg131628

Vielleicht wisst Ihr Rat?

Danke!

Hi Folks,

I setup to access the Web Admin page through LAN - works perfect.
The WAN is in public Internet.

I can access the Web Admin page from Internet when using e.g. my mobile phone (which uses the mobile network).
But the weird thing is, when accessing the Web Admin page through my own WAN, the connection resets and looks like in the picture. I am also connecting my notebook directly on the WAN port, and it does not work.

When I access the Web GUI from LAN, but using the IP from the WAN, then it works also.

Zenarmor is turned off. WAN firewall rule is setup for incoming connection to destination "This Firewall", Source "any".

Anybody got any idea?

thx