Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Topics - Profiteer

#1
I've seen this one mentioned a couple of times throughout the years, but I haven't seen an answer so far that would be applicable to 25.1. I have an OpenVPN Client configured to operate as a tunnel from my firewall to my VPN provider of choice to forward my internet traffic through. However, my connection to the remote VPN server dies very frequently (every 10ish minutes for the last few days or so). I've been trying to figure out how to configure Monit (given I have no other option) to monitor the status of my VPN tunnel and restart when the status is anything other than "connected," but every solution I've tried to implement simply does not work and I have no clue where to go from here. Remotely pinging the VPN's gateway is one of the solution's I've tried and it hasn't been going well and none of the information provided by the .conf, .stat, .sock, or .up files seems to be useful. I'm very used to PFSense's Watchdog plugin, which makes it very easy to tell it to watch the service and restart when it dies or behaves abnormally. Any help on getting started would be greatly appreciated!
#2
Hey everyone! So, in my quest to migrate from PFSense to OPNSense, I appear to have come across a very bizarre routing issue I haven't seen before. I have configured several VPN tunnels to push certain traffic from designated subnets that I want anonymized (i.e. IoT and Server devices). However, I created a VPN bypass list that I designated particular devices the ability to connect without a VPN tunnel (to access streaming services without running into VPN/Proxy detection) straight through my WAN gateway. In my case though, the devices on my bypass list don't appear to be able to connect to a bunch of different websites. I can access duckduckgo, YouTube, and the OPNSense forum to name a few, but can't connect to websites like Hulu, Netflix, or even Google. Anything being pushed through my VPN tunnels have no issues whatsoever, but that makes streaming far more difficult when companies like Disney and Netflix are actively monitoring for VPN or Proxy-related traffic and fingerprints. If anyone has any suggestions on where I can begin to troubleshoot, I'd greatly appreciate it! It's been 3-4 days and I'm hopelessly lost.
#3
Hey all! In my quest to migrate completely from PFSense to OPNSense, I've run into another snag that I might need help troubleshooting. When I used PFSense, I used to run all of my traffic through Surfshark VPN just to help protect my data from my ISP (with it being AT&T and all the security concerns being raised recently, it feels like it's best practice to do so). However, getting this set up has proven to be more of a hassle than it was on PFSense. I configured my VPN connections to the remote servers correctly (OpenVPN statuses and gateways prove so), Unbound has been configured appropriately, NAT has the correct rules generated/created, and my Firewall allows anything from my desired subnet out through the VPN gateway that I set. However, none of the hosts within my subnet can connect to the internet when all is said and done. I hope this is a quick fix that I'm overlooking, but I haven't been able to find anything. Any help would be greatly appreciated!
#4
Hey everyone! So, in my quest to completely migrate from PFSense to OPNSense, I have been trying to set up HAProxy as I used it to proxy out a lot of my internal services that I wanted to host (i.e. Plex, Home Assistant, etc). I had a pretty robust setup on my PFSense instance, so I'd love to be able to re-implement that on OPNSense rather than having to move to a different solution like Nginx on a VM. However, whenever I try and set up my first service and turn HAProxy on, the service refuses to start and the only thing that the logs provide me is an exit code status 1. I'd appreciate any advice or troubleshooting steps on this, because I have no clue where to start diagnosing this. I implemented the recommended patches (which broke the entire thing and required a full re-installation) and combed through my entire configuration, but can't find any issues.
#5
Hey all. So, this one's got me stumped and I have no idea how to proceed with it. I've finally decided to make the jump from virtualized PFSense+ to OPNSense on bare metal, since they decided to take the Home/Lab license away. I finally have my entire configuration moved from one instance to the other, but... nothing on my LAN/DMZ will connect to the internet. Well, I shouldn't say that. Nothing can resolve via DNS. I can ping IP addresses just fine (i.e. 1.1.1.1 or 8.8.8.8). However, it won't resolve hostnames at all. I followed a lot of the guidance on the forums and made sure NAT was configured correctly (I went full manual, because I'm a control freak), DNSSEC was completely turned off on Unbound, and (just for testing purposes) created a rule that allowed any-any through the default gateway (in and out). Does anyone else have ideas on what I can check next? This firewall is supposed to completely replace the VM that powers my entire home network infrastructure, so it's super important to me that I get this figured out ASAP. Thanks!