Topics

Hey all, I've done a full reinstall of Opnsense and have been learning the difference between Dnsmasq and ISC. Previous in ISC I could put in static leases with basically just the hostname, ip address, and the mac address. It would also automatically register leases into Unbound.

As far as i'm aware i've setup Dnsmasq as required - I've created DHCP Ranges for each interface and then created a bunch of Hosts entries, I found I needed to put in a Domain in order for it to resolvem, Is that correct or did I do something wrong? One thing I've also noticed is that under Hosts when I select a filter say for the LAN interface nothing actually shows up, does that mean i've set the Hosts incorrectly? I couldn't see an interface assignment or something when I created the host overrides.

I've set Dnsmasq to listen to 53053, enabled "Do not forward to system defined DNS servers", DHCP FQDN, DHCP local domain, and DHCP register firewall rules. In unbound i've set Register DHCP Static Mappings, and " Do not register system A/AAAA records" with an override to only return the LAN Ip for opnsense.

Hey all, I'm trying to figure out what's going wrong. Nearly everyday i'm losing connection on my WAN interface, and I can't find anything in the logs (though i'm not really sure which logs I should be looking at). I'm running Opnsense on bare-metal on an MSI Cubi NUC 1M (Intel Core 5, 16GB RAM, 500GB SSD). It has 2x Intel I226-V, I have the WAN interface set to auto-negotiate the speed.

When it loses connection I either need to reboot, or just go into the interface settings and click save which seems to be enough to get it reconnected. As for Opnsense, I keep the version up to date (25.7.2), I'm running IDS/IPS just on my LAN interface with the Hyperscan Pattern Matcher. Crowdsec, and Wireguard are also running. I've disabled all Hardware settings in the interface settings (CRC,TSO, LRO, VLAN Filtering).

What logs should I be looking at to help me figure out what the issue is?

Any help would be appreciated

Hi all,

I've been looking into my Intrusion Detection settings again and was trying to see if I could run it on the WAN interface. When I enable it on the WAN interface my external DNS lookups stop working completely. I just get a SERVFAIL when doing an nslookup.

I'm using Unbound and 1.1.1.1 and 1.0.0.1. If I ping something like 8.8.8.8 it works fine. I'm not seeing any alerts, so i'm not sure what the problem is here.

Cheers