1
General Discussion / Re: OPNsense as VM on HDD pool?
« on: September 29, 2023, 10:24:15 am »
typing at the same time Patrick(s).
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
$ resolvectl status
Global
Protocols: -LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
resolv.conf mode: stub
Link 2 (enp0s31f6)
Current Scopes: none
Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Link 3 (wlp58s0)
Current Scopes: DNS
Protocols: +DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Current DNS Server: 192.168.5.1
DNS Servers: 192.168.5.1
DNS Domain: moomooland
I don't have any domains in the DHCP settings. All via Unbound and AdGuard.Hi, I have a weird problem:Some terminology clarity would be useful.
I am using dyndns to host some services at home. If my ISP is providing me with a new public ip address, all is synced correctly vis ddclient. DNS is resolving the correct address and also wireshark VPN (UDP!) works fine. But all requests to my piblic IP based on TCP are dropped. Or at least my self hosted websites cant be resolved.
If I reload my PPPoE connection till I get a new IP from the ISP (3 times normally), TCP traffic to my public IP is resolved correctly again. This is a very inconvenient issue, because I need to monitor my service constantly and if it's down, I need to log in via VPN to reload the PPPoE Interface till I get a new IP.
Any ideas how to debug this further? I contacted the ISP and also tried a different router. No problems there. That's why I assume it is something buggy in OPNsense...
# sockstat -l
USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS
unbound unbound 85075 5 udp4 *:5353 *:*
unbound unbound 85075 6 tcp4 *:5353 *:*
unbound unbound 85075 7 udp4 *:5353 *:*
unbound unbound 85075 8 tcp4 *:5353 *:*
unbound unbound 85075 9 tcp4 127.0.0.1:953 *:*
root AdGuardHom 16088 13 tcp4 192.168.5.1:8080 *:*
root AdGuardHom 16088 14 udp46 *:53 *:*
root AdGuardHom 16088 15 tcp46 *:53 *:*
root stubby 65272 3 udp4 127.0.0.1:8053 *:*
root stubby 65272 4 tcp4 127.0.0.1:8053 *:*
root stubby 65272 5 udp6 ::1:8053 *:*
root stubby 65272 6 tcp6 ::1:8053 *:*