Messages

106

General Discussion / Re: Accessing self hosted SIP server outside on WAN

« on: July 28, 2024, 09:10:45 am »

which STUN server do you use?

I set up my VoIP with FreePBX and remote Grandstream Wave clients over OpenVPN. It just works.

Bart...

107

Web Proxy Filtering and Caching / Re: Why the need? OPNsense --> Proxmox

« on: July 25, 2024, 09:10:17 am »

learning material that you recommend to learn these principles from the ground up

The well-troden path to networking understanding is Cisco CCNA. Udemy has some low-priced courses: https://www.udemy.com/topic/cisco-ccna/ and local government/colleges may offer classroom or remote training.

Bart...

108

General Discussion / Re: Internet keeps dropping every 8 hours

« on: July 21, 2024, 08:06:40 am »

What protocol does your ISP use? The most common one is PPPoE, in which case head over to Interfaces: Point-to-Point: Log File

109

24.1 Legacy Series / Re: Not able to download Windows 11 ISO

« on: July 18, 2024, 07:56:28 am »

Microsoft thinks you are in a banned country (Iran, Cuba, North Korea, etc.) If you are, emigrate. If you're not, contact them.

110

General Discussion / Re: Devices

« on: July 17, 2024, 06:17:11 pm »

Put them on a separate VLAN

111

Tutorials and FAQs / Re: switch domain (x.net to x.com)

« on: July 16, 2024, 12:09:47 pm »

I think you should make a detailed plan and post the steps here for feedback on the OPNsense specific parts.

112

24.1 Legacy Series / Re: IP is Behind CGN - How to Get a Public IP to WAN Using VPS/OpenVPN for Port Fwd?

« on: July 16, 2024, 08:05:29 am »

Overlay networks like tailscale and zerotier use clients that make only outbound connections, thereby getting around the inability to port forward inbound traffic behind CGNAT.

You have to trust the network provider, although you can build a VPS to run headscale (the FOSS equivalent of tailscale) but then you have to trust the cloud provider instead

Bart...

113

24.1 Legacy Series / Re: updates never finish

« on: July 13, 2024, 03:36:24 pm »

The dots have stopped and it did update, just very slowly.

***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 24.1.8 at Sat Jul 13 14:32:27 BST 2024
Fetching changelog information, please wait... fetch: transfer timed out
fetch: /usr/local/opnsense/changelog/changelog.txz appears to be truncated: 0/137964 bytes
Updating OPNsense repository catalogue...
Waiting for another process to update repository OPNsense

I'll kick off another update but I'm wondering if there is any mileage in restoring the config to a fresh build 

Bart...

114

24.1 Legacy Series / Re: OpenVPN Connection Problem [OPNSense 24.1.9]

« on: July 10, 2024, 11:48:35 am »

Are you testing from a public IP address? 192.168.1.xxx:11194 may be blocked. Check out the 'Block private networks' flag on the interface.

115

24.1 Legacy Series / Re: IP is Behind CGN - How to Get a Public IP to WAN Using VPS/OpenVPN for Port Fwd?

« on: June 30, 2024, 09:22:10 am »

or tailscale

116

General Discussion / Re: WireGuard - Everything but RDP works

« on: June 28, 2024, 07:22:30 am »

Have you looked at NX as an alternative to RDP? https://www.nomachine.com/

117

24.1 Legacy Series / Re: PPPoE Slow Upload

« on: June 27, 2024, 08:16:08 am »

Beware of the shotgun: http://catb.org/jargon/html/S/shotgun-debugging.html

Reduce your config down to the absolute minimum - bare metal, NAT only, with default rules. Then add features one by one until you see a drop in speed.

Bart...

118

24.1 Legacy Series / Re: Static IPv6 gateway not adding route

« on: June 24, 2024, 03:26:39 pm »

IPv6 can absolutely use static routes.

I'm not saying it can't , only that you may not have to set it if the ISP router advertises the route.

119

24.1 Legacy Series / Re: Static IPv6 gateway not adding route

« on: June 24, 2024, 01:36:10 pm »

Are you allowing ICMPv6 everywhere? It is quite possible that the next hop is advertising but the WAN interface is blocking the advertisements

120

General Discussion / Re: Restore from XML File

« on: June 23, 2024, 08:06:37 am »

Hi Steve,

Disconnect the VM from the LAN in the hypervisor and restore the XML (so as to avoid an IP conflict). You'll likely need a virtual client with a browser in the same VLAN to restore from backup.

It may be quicker to shut down your physical firewall and test the virtual, but that involves down time.

Bart...