Messages

Hello Monviech,
thank you for your quick response.
what you suggest seems to be the solution.
I'll test it soonest.
Greetings
Dario

Hello to all,
my environment:
- a LAN interface that hosts approximately 10 PCs
- two public interfaces connected to two different Internet accesses (A and B)
from all the PCs connected to the LAN I want to be able to direct a specific traffic (https) towards network B while all Internet browsing must go out through network A.
I guess this is fixable by configuring static routing in the firewall.
The problem is that to access the web app on network B Imust use a proxy made available by the manager of network B and I ask if there is the possibility to configure communication through the proxy on the firewall so I don't have to change the browser configuration every time that change Internet access.
Thank so much for your gracefull help.
Greetings
Dario

Hello adn77, nice to read from you.
what you suggest to me is a solution that I had already identified but it is not applicable because each user can download all the certificates.
I am looking for a solution to enable each user to be able to download only the certificate linked to its username, but apparently this is not possible.
Thanks for your kind cooperation.
Best regards.
Dario.

Thank you adn77 but this's not what I'm lookig for.
I need to connect from remote with my credential (stored into the firewall) and download only my certificte, like Watchguard and PaloAlto done.
Best regards.
Dario

Hello folks,
Opnsense 21.7.8
Is there a way to remotely download the VPN client configuration?
Currently I have to connect to the firewall as root, go to VPN - OpenVPN - Client Export and choose the certificate to download in Archive format then pass the file to the user to insert it in the OpenVPN client.
I wish customers could download the certificate by connecting remotely to the firewall (Palo Alto Global Protect style).
Thanks for your help
Best regards
Dario

I solved the issue creating the file:
/var/etc/openvpn-csc/1/sandro.d
populated with the directive:
ifconfig-push 10.10.10.10 255.255.255.240

Hello folks,
in OPNsense 21.7.5 I'm not able to force a static IP address to a VPN client.
The Tunnel Network configured in the vpn server is 10.10.10.0/28
I tried configuring  VPN / OpenVPN / Client Specific Overrides as follow:
- Servers: name of the OpenVPN servers (or blank)
- Common name: the name of the user as created in System / Access / Users (in this case the name is sandro.d)
- Advanced: ifconfig-push 10.10.10.10 255.255.255.240
When I connect the vpn client I expect to receive the address 10.10.10.10 but I always receive 10.10.10.2 or 10.10.10.3
Any suggestion?
Best regards
Dario

Hello folks,
I just got a couple of firewall WatchGuard XTM 810 and my target is to install OpnSense on it.
Tooking a look on google i found a treat regarding Pfsense so I decided to ask you for a help:
Is there a way to install OpnSense on WathGuard?
Can someone explain me (better if step by step) how can I do?
Thanks so much for your precious help.
Kinds regards.
Dario

Hello,
OpnSense 20.7
I'm trying to block all communication for server 12.168.1.98 but in the logs I always get "get anything out of the firewall host itself".
Is there a way to block all inbound / outbound traffic for a specific IP?
Thank you
Dario

Hello to all,
I'm looking for a howto regarding the configuration of the captive portal expecially the traffic shaping.
I found an old release doc (https://docs.opnsense.org/manual/how-tos/guestnet.html   Step 6 - Limit Guests Bandwidth) unapplicable to the 20.1 release.
Can someone help me?
Thank so much
Best regards
Dario

Hello,
just a question: is possible to install OPNsense into a WatchGuard xtm530 ?
Thank so much
Best regards
Dario

Hello to all,
OpnSense 19.7
interface 1 clients
interface 2 servers
interface 3 WAN
I would like to use OpnSense as DNS to resolve the local IP for clients and servers, and use Google DNS (8.8.8.8 8.8.4.4) to resolve public IPs
I don't found solutions on google, can someone help me?
Thanks a lot
Best regards
Dario

Hello to all,
OpnSense 19.7
OpenVPN

I'm using OpenVPN road warrior and everything works fine but the prints are sent to remote printers while I would like to print on my local network printer.

The environment (image in attach):
I start the RDP connection from the "home PC" to the "remote PC"
From the "remote PC" I would like to send a print from the "remote LAN" to the "home printer" but it doesn't work, I can only print using the "remote printer".

Is there a way to solve this issue?
Best regards
Dario

Hello everibody,
OPNsense 19.7
looking at the OpenVPN log file in OPNsense 19.7 I find a continuous traffic as the following:

[...]
Mar 2 10:44:41   openvpn[91212]: MANAGEMENT: Client disconnected
Mar 2 10:44:41   openvpn[91212]: MANAGEMENT: CMD 'quit'
Mar 2 10:44:41   openvpn[91212]: MANAGEMENT: CMD 'status 2'
Mar 2 10:44:41   openvpn[91212]: MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Mar 2 10:43:39   openvpn[91212]: MANAGEMENT: Client disconnected
Mar 2 10:43:39   openvpn[91212]: MANAGEMENT: CMD 'quit'
Mar 2 10:43:39   openvpn[91212]: MANAGEMENT: CMD 'status 2'
Mar 2 10:43:39   openvpn[91212]: MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
Mar 2 10:42:37   openvpn[91212]: MANAGEMENT: Client disconnected
Mar 2 10:42:37   openvpn[91212]: MANAGEMENT: CMD 'quit'
Mar 2 10:42:37   openvpn[91212]: MANAGEMENT: CMD 'status 2'
Mar 2 10:42:37   openvpn[91212]: MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock
[...]

can someone explain me what's happening?
Best regards
Dario

it seems to be solved
Tracing firewall logs I found an IP responding on tcp 587
query for it whois reply me "google"
add this ip in the alias rule solved the issue
thanks
Dario