Topics

I am trying to use Services \ Monit to monitor whether my two gateways are up.
So I created a Test setup which looks like this:

failed ping4 count 5 address 192.168.101.1
failed ping4 count 5 address 192.168.102.1

Unfortunately, they are failing for whatever reason ('ICMP failed').

When I put any router's (OPNsense's) IP, for example 192.168.131.1 (LAN), 192.168.101.2 (WAN),  192.168.102.2 (WAN2), 172.16.0.1 (firewall's virtual IP) - the status is 'OK' (pings are responding).

But when I change it to any IPs that is outside of the firewall machine (any internet host like 8.8.8.8 or 8.8.4.4), the gateways (192.168.101.1, 192.168.101.2) or any IPs inside my network (192.168.131.0/24)-- the status is always 'ICMP failed'

I don't understand why as all of those IPs are perfectly pingable from the OPNsense's SSH.
It does not seem to be blocked by the firewall rule either (I found nothing in the firewall logs).

The logs say something like this:

Code Select Expand

2024-05-18T21:37:49 Error monit 'Monitor_Mobile_Gateway' ping test failed
2024-05-18T21:37:49 Error monit Cannot bind to outgoing address -- Can't assign requested address

Any ideas what can be wrong there?

I would like to delete my obsolete certs from ACME, but I was unable to find a way to do so:


How can I do that?

In my home network I have an internal DNS server hosted by Synology DSM. The latter is serving my internal DNS hosts names and is forwarding DNS queries for external hosts to Google DNS service. Simple and straightforward setup.

My DNS server IP was added to the System > Settings > General, DNS servers field in OPNsense, as well as the DHCP configuration for the LAN interface.

Everything is working great for all my devices, i.e. both internal and external host names are being resolved correctly. If the internal network names have their external equivalents (for example my www.wojtaszek.it) the name is being resolved to local IP (192.168...)

For some reason though the OPNsense server itself can't resolve my internal host names i.e. when pinging www.wojtaszek.it I am getting the public IP address (91.90.179.152), not the private one (192.168.... etc).

It worked fine for me before and at some point stopped. What do I do wrong? How can I troubleshoot that?

I recently expanded memory for my OPNsense virtual machine hosted on Proxmox, from 2GB to 8GB. Here is what I can see in the system info:



Just about 6% of memory utilized.

And here is what Proxmox shows for the same virtual machine



Over 7GB of memory is being used!

Which one is telling me truth? Funny this is that before expanding memory the system showed less than half memory used in Proxmox for that VM.

Marek

I created my own block list txt file and I put it on my web server hosted on my internal network (behind the NAT, but facing the internet). Then I created an alias entry in OPNsense where I entered the url to the txt file:



After saving it does not load any entries as you can see on the screenshot below:



even though there are several hundreds on the list:



The log shows that it was caused by a name resolve error:



When I ssh to opnsense and try to ping the host name it is indeed unable to resolve the name. It resolve it to the public IP not the internal private IP:



So my question is now: how to make OPNsense to resolve the name of the host to private IP/internal email address?
I tried to add it to the /etc/hosts name on OPNsense. It helps in terms of pinging the host from SSH, but the IP list is still not loaded in the alias entry...
I also tried to play with NAT reflection settings but honestly I do not feel comfortable with it yet...

Any idea how to fix that?

Marek