91
19.1 Legacy Series / Re: 2 NIC with same GW
« on: September 06, 2019, 02:07:20 am »
when you say it is for remote access... is it really a WAN?
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
92
19.7 Legacy Series / Re: "Forwarding" a port directly to OPNsense
« on: September 06, 2019, 02:02:47 am »
what is your setup?
do you have a modem before your opnsense server? is it in route or bridge mode?
maybe you can show a network diagram, so it would be faster
to use forwarding, you goto
Firewall->NAT->port forward
do you have a modem before your opnsense server? is it in route or bridge mode?
maybe you can show a network diagram, so it would be faster
to use forwarding, you goto
Firewall->NAT->port forward
93
19.1 Legacy Series / Re: NAT - Port Forward not working from Windows PC's
« on: September 05, 2019, 07:55:14 pm »
destination should be "this firewall" not wanaddress if you want to port forward
yes, writing wanaddress sound correct but the destination is "thisfirewall"
you already indicated that you have tap the "wan" port
(modem)---dmz opnsense/or port forward---(opnsense server)---nat port forward---(clients)
maybe you could write a network diagram
yes, writing wanaddress sound correct but the destination is "thisfirewall"
you already indicated that you have tap the "wan" port
(modem)---dmz opnsense/or port forward---(opnsense server)---nat port forward---(clients)
maybe you could write a network diagram
94
Tutorials and FAQs / Re: i can't connect to internet
« on: September 05, 2019, 02:20:56 pm »good to hear that
95
General Discussion / Re: Captive Portal auto pops up on Wireless connections but not on wired connections
« on: September 05, 2019, 10:57:21 am »
agree, tried it on may end also. conenct the lan to captive portal.
on opening of chrome, automatically showed captive portal only twice in 6 startups...
hope some veteran could shed some light.
but cold you confirm/remember that on the hotel? they will force redirect you to the hotel page after login?
on opening of chrome, automatically showed captive portal only twice in 6 startups...
hope some veteran could shed some light.
but cold you confirm/remember that on the hotel? they will force redirect you to the hotel page after login?
96
Tutorials and FAQs / Re: i can't connect to internet
« on: September 05, 2019, 10:49:06 am »
is the WAN interface correct? imean does it have the correct IPs/gateway of your ISP?
is your fiber modem configure as router or bridge?
I would delete all your current GW and set it up again..
it is odd to have a GW_lan_net if you have only 1 WAN
in opnsense->interface-diagnostic-ping
ping your modem/router, see if you can
(select your wan interface or if you get public ip then ping any public address)
you could also set it up suing command line
using #2
you should be able to set up initial wan and lan
is your fiber modem configure as router or bridge?
I would delete all your current GW and set it up again..
it is odd to have a GW_lan_net if you have only 1 WAN
in opnsense->interface-diagnostic-ping
ping your modem/router, see if you can
(select your wan interface or if you get public ip then ping any public address)
you could also set it up suing command line
using #2
you should be able to set up initial wan and lan
97
General Discussion / Re: Captive Portal auto pops up on Wireless connections but not on wired connections
« on: September 05, 2019, 08:49:29 am »
it should do the same, did the same computer you used, the one you said edge popup automatically is not doing the same for your opnsense setup?
not to my knowledge, though that would be really cool, if opnsense could also how how intruct the machine
to show a login page on first instance of connection or maybe on first attempt to browse
not to my knowledge, though that would be really cool, if opnsense could also how how intruct the machine
to show a login page on first instance of connection or maybe on first attempt to browse
98
Tutorials and FAQs / Re: i can't connect to internet
« on: September 05, 2019, 03:09:41 am »
if indian is wrking, safe to assume you have disable DHCP server in opnsense?
"If I at OPNSENSE do as gw the fw1 works but not as I would like."
question: is your opnsense setup properly?
is this an initial install (meaning has not work ever since)?
what is your setup? is it 1 wan 1 lan?
in the dash board do you see the status of your WAN?
you can goto interface->diaggnostics->ping
then ping an external domain or IP
if yes, then what is set setting of your client.
IP, gateway and DNS settings?
"If I at OPNSENSE do as gw the fw1 works but not as I would like."
question: is your opnsense setup properly?
is this an initial install (meaning has not work ever since)?
what is your setup? is it 1 wan 1 lan?
in the dash board do you see the status of your WAN?
you can goto interface->diaggnostics->ping
then ping an external domain or IP
if yes, then what is set setting of your client.
IP, gateway and DNS settings?
99
19.1 Legacy Series / Re: NAT - Port Forward not working from Windows PC's
« on: September 05, 2019, 03:00:04 am »
do not answer the "source"
your destination is the firewall, since it is the one blocking your internal network
your destination is the firewall, since it is the one blocking your internal network
100
19.1 Legacy Series / Re: NAT - Port Forward not working from Windows PC's
« on: September 05, 2019, 02:54:35 am »
you are redirecting to itself?
whats whit the 4433 and 433?
based on the rules you created it was never used?
to open a port goto
Firewall: NAT: Port Forward
disabled: unchecked
interface: {your wan interface}
TCP: ipv4 or 6
Protocol: TCP
Destination: {This firewall}
destination port range: what ever ports you want to open ex. external ports 4433
redirect target ip: {internal IP, ex 192.168.0.240}
redirect port: {it not the same with external... ex http or 80 if an internal webserver)
Firewall: NAT: Port Forward EXAMPLE a webserver
disabled: unchecked
interface: {WAN1; your wan interface}
TCP: ipv4 or 6
Protocol: TCP
Destination: {This firewall, or ip of firewall}
destination port range: 99 (what ever ports you want to open)
redirect target ip: 192.168.0.240 {your target internal IP or internal server ip}
redirect port: 80 {becuase it is a webserver)
whats whit the 4433 and 433?
based on the rules you created it was never used?
to open a port goto
Firewall: NAT: Port Forward
disabled: unchecked
interface: {your wan interface}
TCP: ipv4 or 6
Protocol: TCP
Destination: {This firewall}
destination port range: what ever ports you want to open ex. external ports 4433
redirect target ip: {internal IP, ex 192.168.0.240}
redirect port: {it not the same with external... ex http or 80 if an internal webserver)
Firewall: NAT: Port Forward EXAMPLE a webserver
disabled: unchecked
interface: {WAN1; your wan interface}
TCP: ipv4 or 6
Protocol: TCP
Destination: {This firewall, or ip of firewall}
destination port range: 99 (what ever ports you want to open)
redirect target ip: 192.168.0.240 {your target internal IP or internal server ip}
redirect port: 80 {becuase it is a webserver)
101
General Discussion / Re: Captive Portal auto pops up on Wireless connections but not on wired connections
« on: September 04, 2019, 02:23:06 pm »
it should... but not always... same with mobile. if you get disconnect (force or idle) there maybe cases wherein you have to disconnect and reconnect. mobile devices have develop protocols to "connect" via captiveportal...
one you connect wirelesly, it actually calls a site behind the scene (captive.x.com depending on the vendor) obviously that site is not SSL. hence the device will be able to detect if connected to the internet.
I believe modern os and browser should do that also..
in my test case, because I use a PC to test the captive portal...
once you launch a browser for the first time (Im using chrome) it will show the captive portal.
but yes... either I dont have a target page for the target page is not SSL.
I think sometimes it will still launch the portal as long as the browser is launch for the first time.
one you connect wirelesly, it actually calls a site behind the scene (captive.x.com depending on the vendor) obviously that site is not SSL. hence the device will be able to detect if connected to the internet.
I believe modern os and browser should do that also..
in my test case, because I use a PC to test the captive portal...
once you launch a browser for the first time (Im using chrome) it will show the captive portal.
but yes... either I dont have a target page for the target page is not SSL.
I think sometimes it will still launch the portal as long as the browser is launch for the first time.
102
19.7 Legacy Series / Re: accessing dsl modem behind firewall with some caveats...
« on: September 02, 2019, 02:50:19 am »
the simplest way would be, for your machine. to have 2(or 3) nics with direct connection to your modems.
you don't want that right?
you still want to go trough your opnsense server/lan?
since it is configured as multiwan... opnsense will somehow allow only connection to one gateway at a time.
since it would not be possible for one client to have 2 gateways at a time
when you say
"i want access from lan net to wan1modem net and wan2modem net..."
you mean you just want to administer the modem/router via its HTTP configuration?
you don't want that right?
you still want to go trough your opnsense server/lan?
since it is configured as multiwan... opnsense will somehow allow only connection to one gateway at a time.
since it would not be possible for one client to have 2 gateways at a time
when you say
"i want access from lan net to wan1modem net and wan2modem net..."
you mean you just want to administer the modem/router via its HTTP configuration?
103
19.7 Legacy Series / Re: Firewall Rules not working?
« on: August 31, 2019, 01:24:45 pm »
port 53 is for dns request
it is allowed in automatic rules
try this, create a rule
sourceip 172.16.16.23/32
port any
destinationip any
port any
check if 172.16.16.23 will have zero access to internet and any local machine
it is allowed in automatic rules
try this, create a rule
sourceip 172.16.16.23/32
port any
destinationip any
port any
check if 172.16.16.23 will have zero access to internet and any local machine
104
19.7 Legacy Series / Re: Firewall Rules not working?
« on: August 31, 2019, 05:24:25 am »
by using /24 your actually blocking your whole subnet
that why it has alot of evaluations
but does not answer why the connections are not being blocked...
have you set each client machine to have the gateway of 172.16.16.16?
if they dont have a "gateway" it is possible that they are connecting "locally" via there static IPs
that why it has alot of evaluations
but does not answer why the connections are not being blocked...
have you set each client machine to have the gateway of 172.16.16.16?
if they dont have a "gateway" it is possible that they are connecting "locally" via there static IPs
105
19.7 Legacy Series / Re: accessing dsl modem behind firewall with some caveats...
« on: August 31, 2019, 03:13:14 am »
yes and no...
opnsense may have allowed the connection but
does not mean your PC/machine will be able to received it...
since it is of different subnets...
assuming you have 2 NICs connected to both subnets... then your PC/machine should have NO ISSUE routing your request to the right subnet. as it "knows" to which NIC to send and received the request.
opnsense may have allowed the connection but
does not mean your PC/machine will be able to received it...
since it is of different subnets...
assuming you have 2 NICs connected to both subnets... then your PC/machine should have NO ISSUE routing your request to the right subnet. as it "knows" to which NIC to send and received the request.