OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Profile of stefanpf »
  • Show Posts »
  • Messages
  • Profile Info
    • Summary
    • Show Stats
    • Show Posts...
      • Messages
      • Topics
      • Attachments

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

  • Messages
  • Topics
  • Attachments

Messages - stefanpf

Pages: 1 2 [3] 4 5
31
German - Deutsch / Re: Kein Internet zugriff auf dem VLAN
« on: April 19, 2020, 09:07:50 pm »
Magst du mal deinen Aufbau mit IP Adressen skizzieren?
Wenn man den Text so liest könnte man da auch hineininterpretieren, dass du die Sense mit zwei Beinchen in den Switch des Routers gesteckt hast.

32
General Discussion / Re: Unbound returns IPs of all interfaces OPNsense
« on: April 18, 2020, 05:45:23 pm »
It could Work with a view  that's bound to a subnet via acl.
Here you found an example (the post ist German, but the code should be clear)
https://forum.opnsense.org/index.php?topic=12557.msg57830#msg57830

33
20.1 Legacy Series / Re: Sonos speakers on a VLAN
« on: April 16, 2020, 08:52:08 pm »
Sonos is a bitch :-)

A few hints from my setup

I use udpbroadcastrelay on port 1900(SSDP), 5353 (MDNS) and 6969 (Used by the initial Sonos setup)

As far a I remember I came out without highports up to the moment my wife wanted to use her audible app.

I restricted the highport rule from the speakers to the alias that holds the sonos controllers.
 
Sure my setup ain't perfect, but maybe it helps:

Code: (UDPRelay) [Select]
<udpbroadcastrelays version="1.0.0">
      <udpbroadcastrelay uuid="557cb61a-a020-4793-9429-7668dddef74c">
        <enabled>1</enabled>
        <interfaces>lan,opt7</interfaces>
        <multicastaddress>239.255.255.250</multicastaddress>
        <sourceaddress/>
        <listenport>1900</listenport>
        <InstanceID>1</InstanceID>
        <description>SSDP Sonos TV Hue</description>
      </udpbroadcastrelay>
      <udpbroadcastrelay uuid="0a5f9b44-a848-4f9c-b0bc-d2ff89b250e2">
        <enabled>1</enabled>
        <interfaces>lan,opt7</interfaces>
        <multicastaddress>224.0.0.251</multicastaddress>
        <sourceaddress>1.1.1.1</sourceaddress>
        <listenport>5353</listenport>
        <InstanceID>2</InstanceID>
        <description>UPNP Hue</description>
      </udpbroadcastrelay>
      <udpbroadcastrelay uuid="58af3a1f-465e-4793-9eff-199b99cd1f5e">
        <enabled>1</enabled>
        <interfaces>lan,opt7</interfaces>
        <multicastaddress>239.255.255.250</multicastaddress>
        <sourceaddress/>
        <listenport>6969</listenport>
        <InstanceID>3</InstanceID>
        <description>Sonos Anfangskonfiguration</description>
      </udpbroadcastrelay>
    </udpbroadcastrelays>

Code: (Aliases for reference) [Select]
    <aliases>
          <alias uuid="e521d9b2-9249-4f70-b122-b25df8db8ec3">
            <enabled>1</enabled>
            <name>P_Sonos_Controller_TCP</name>
            <type>port</type>
            <proto/>
            <counters>0</counters>
            <updatefreq/>
            <content>1400
1443
4444</content>
            <description>TCP Ports vom Controller zum Lautsprecher</description>
          </alias>
          <alias uuid="ab010fa7-5d8d-4f83-8a51-66261b226d00">
            <enabled>1</enabled>
            <name>P_Sonos_TCP</name>
            <type>port</type>
            <proto/>
            <counters>0</counters>
            <updatefreq/>
            <content>3400
3401
3500</content>
            <description>Sonos TCP Ports Lautsprecher zu Controller</description>
          </alias>
          <alias uuid="afb317f8-ef26-4fff-9e7e-bd4b7cd36337">
            <enabled>1</enabled>
            <name>P_Sonos_UDP</name>
            <type>port</type>
            <proto/>
            <counters>0</counters>
            <updatefreq/>
            <content>6969
1900:1905</content>
            <description>Sonos UDP Ports Lautsprecher zu Controller</description>
          </alias>
          <alias uuid="22b1538a-5e81-44ce-85b9-b9359bc8ad2f">
            <enabled>1</enabled>
            <name>Sonos_UDP2</name>
            <type>port</type>
            <proto/>
            <counters>0</counters>
            <updatefreq/>
            <content>1900
6969</content>
            <description/>
          </alias>
          <alias uuid="a40414d2-f32f-471a-bdd9-9c7d1e662f78">
            <enabled>1</enabled>
            <name>P_SSDP</name>
            <type>port</type>
            <proto/>
            <counters>0</counters>
            <updatefreq/>
            <content>1900</content>
            <description>SSDP UDP  1900</description>
          </alias>
          <alias uuid="3b5dd673-d7e2-46d3-9732-884a67d195b5">
            <enabled>1</enabled>
            <name>H_Sonos</name>
            <type>host</type>
            <proto/>
            <counters>0</counters>
            <updatefreq/>
            <content>10.11.23.210
10.11.23.211
10.11.23.212
10.11.23.213
10.11.23.214
192.168.49.1
10.11.23.215</content>
            <description>Sonos Speaker</description>
          </alias>
          <alias uuid="2767c8d7-e80c-4502-abc6-7c860a393ef7">
            <enabled>1</enabled>
            <name>P_MDNS</name>
            <type>port</type>
            <proto/>
            <counters>0</counters>
            <updatefreq/>
            <content>5353</content>
            <description/>
          </alias>
          <alias uuid="7306819b-4aae-494c-bd82-152bcf6c598c">
            <enabled>1</enabled>
            <name>P_HTTP_HTTPS</name>
            <type>port</type>
            <proto/>
            <counters>0</counters>
            <updatefreq/>
            <content>80
443</content>
            <description/>
          </alias>
          <alias uuid="f635b1e5-1f92-4d04-a200-e99226cd1cc7">
            <enabled>1</enabled>
            <name>H_SonosController</name>
            <type>host</type>
            <proto/>
            <counters>0</counters>
            <updatefreq/>
            <content>H_MI9T
H_Galaxy9
H_HuaweiGX8
H_SP001
H_WindowsTab</content>
            <description/>
          </alias>


Code: (Rules) [Select]
<filter>
   <rule>
      <type>pass</type>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>Sonos Setup (Speaker zu Controller)</descr>
      <direction>in</direction>
      <category>SONOS</category>
      <floating>yes</floating>
      <log>1</log>
      <quick>1</quick>
      <protocol>udp</protocol>
      <source>
        <address>H_Sonos</address>
      </source>
      <destination>
        <network>lan</network>
        <port>6969</port>
      </destination>
      <updated>
        <username>root@10.11.21.254</username>
        <time>1581761822.5349</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1581761822.5349</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>
      <type>pass</type>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>Sonos Setup (Controller zu Speaker)</descr>
      <direction>in</direction>
      <category>SONOS</category>
      <floating>yes</floating>
      <log>1</log>
      <quick>1</quick>
      <protocol>udp</protocol>
      <source>
        <network>lan</network>
      </source>
      <destination>
        <address>H_Sonos</address>
        <port>6969</port>
      </destination>
      <updated>
        <username>root@10.11.21.254</username>
        <time>1581762241.1712</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1581762214.4773</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
   <rule>
      <type>pass</type>
      <interface>lan</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>SSDP Multicast</descr>
      <direction>in</direction>
      <category>Sonos</category>
      <allowopts>1</allowopts>
      <quick>1</quick>
      <protocol>udp</protocol>
      <source>
        <any>1</any>
      </source>
      <destination>
        <address>239.255.255.250</address>
        <port>P_SSDP</port>
      </destination>
      <updated>
        <username>root@10.11.21.155</username>
        <time>1582392413.8701</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1581752754.2206</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>
      <type>pass</type>
      <interface>lan</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>SSDP Sonos</descr>
      <direction>in</direction>
      <quick>1</quick>
      <protocol>udp</protocol>
      <source>
        <address>H_Sonos</address>
      </source>
      <destination>
        <any>1</any>
        <port>P_SSDP</port>
      </destination>
      <updated>
        <username>root@10.11.21.254</username>
        <time>1580846372.0546</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1580846372.0546</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>

      <type>pass</type>
      <interface>lan</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>MDNS f. Spotify m. Sonos</descr>
      <direction>in</direction>
      <allowopts>1</allowopts>
      <quick>1</quick>
      <protocol>udp</protocol>
      <source>
        <address>H_SonosController</address>
      </source>
      <destination>
        <address>224.0.0.251</address>
        <port>P_MDNS</port>
      </destination>
      <updated>
        <username>root@10.11.21.101</username>
        <time>1582396474.989</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1581763660.1383</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
 
  <rule>
      <type>pass</type>
      <interface>lan</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>#Sonos  TCP Controller zu Lautsprecher</descr>
      <direction>in</direction>
      <category>SONOS</category>
      <allowopts>1</allowopts>
      <quick>1</quick>
      <protocol>tcp</protocol>
      <source>
        <address>H_SonosController</address>
      </source>
      <destination>
        <address>H_Sonos</address>
        <port>P_Sonos_Controller_TCP</port>
      </destination>
      <updated>
        <username>root@10.11.21.101</username>
        <time>1582396576.6225</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1580637513.4949</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
 
   <rule>
      <type>pass</type>
      <interface>opt7</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>MDNS f. Spotify m. Sonos</descr>
      <direction>in</direction>
      <category>Sonos</category>
      <allowopts>1</allowopts>
      <log>1</log>
      <quick>1</quick>
      <protocol>udp</protocol>
      <source>
        <address>H_Sonos</address>
      </source>
      <destination>
        <address>224.0.0.251</address>
        <port>P_MDNS</port>
      </destination>
      <updated>
        <username>root@fe80::e573:1f84:64bd:3d10</username>
        <time>1586515939.6648</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1581752260.6259</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
 
   <rule>
      <type>pass</type>
      <interface>opt7</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>SSDP</descr>
      <direction>in</direction>
      <allowopts>1</allowopts>
      <log>1</log>
      <quick>1</quick>
      <protocol>udp</protocol>
      <source>
        <network>lan</network>
      </source>
      <destination>
        <any>1</any>
        <port>P_SSDP</port>
      </destination>
      <updated>
        <username>root@10.11.21.155</username>
        <time>1582392300.2027</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1580846215.0811</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>
      <type>pass</type>
      <interface>opt7</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>SSDP</descr>
      <direction>in</direction>
      <allowopts>1</allowopts>
      <quick>1</quick>
      <protocol>udp</protocol>
      <source>
        <network>opt7</network>
      </source>
      <destination>
        <any>1</any>
        <port>P_SSDP</port>
      </destination>
      <updated>
        <username>root@10.11.21.155</username>
        <time>1582392221.7059</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1580795773.9516</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
  <rule>
      <type>pass</type>
      <interface>opt7</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>#Sonos Speaker to Controller TCP</descr>
      <direction>in</direction>
      <category>Sonos</category>
      <allowopts>1</allowopts>
      <quick>1</quick>
      <protocol>tcp</protocol>
      <source>
        <address>H_Sonos</address>
      </source>
      <destination>
        <address>H_SonosController</address>
        <port>P_Sonos_TCP</port>
      </destination>
      <updated>
        <username>root@fe80::e573:1f84:64bd:3d10</username>
        <time>1586515999.4429</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1580638374.0761</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>
      <type>pass</type>
      <interface>opt7</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>Sonos Setup Speaker zu Controller(Broadcast zu Relay)</descr>
      <direction>in</direction>
      <category>Sonos</category>
      <quick>1</quick>
      <protocol>udp</protocol>
      <source>
        <address>H_Sonos</address>
      </source>
      <destination>
        <address>255.255.255.255</address>
        <port>6969</port>
      </destination>
      <updated>
        <username>root@fe80::e573:1f84:64bd:3d10</username>
        <time>1586516014.4254</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1581761591.3468</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>
      <type>pass</type>
      <interface>opt7</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>Sonos IGMP</descr>
      <direction>in</direction>
      <category>Sonos</category>
      <allowopts>1</allowopts>
      <quick>1</quick>
      <protocol>igmp</protocol>
      <source>
        <address>H_Sonos</address>
      </source>
      <destination>
        <any>1</any>
      </destination>
      <updated>
        <username>root@fe80::e573:1f84:64bd:3d10</username>
        <time>1586516029.7104</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1582384864.7173</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
    <rule>
      <type>pass</type>
      <interface>opt7</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>Sonos HighPorts 30000-65000 f audible</descr>
      <direction>in</direction>
      <category>Sonos</category>
      <log>1</log>
      <quick>1</quick>
      <protocol>udp</protocol>
      <source>
        <address>H_Sonos</address>
      </source>
      <destination>
        <address>H_SonosController</address>
        <port>30000-65000</port>
      </destination>
      <updated>
        <username>root@fe80::e573:1f84:64bd:3d10</username>
        <time>1586516046.5996</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.155</username>
        <time>1582391358.3726</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
   <rule>
      <type>pass</type>
      <interface>opt7</interface>
      <ipprotocol>inet</ipprotocol>
      <statetype>keep state</statetype>
      <descr>Sonos 2 Internet HTTP/S</descr>
      <direction>in</direction>
      <category>Sonos</category>
      <quick>1</quick>
      <protocol>tcp</protocol>
      <source>
        <address>H_Sonos</address>
      </source>
      <destination>
        <any>1</any>
        <port>P_HTTP_HTTPS</port>
      </destination>
      <updated>
        <username>root@2003:d1:8733:d121:2160:8666:ba03:54bb</username>
        <time>1586679343.5829</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@10.11.21.254</username>
        <time>1581751455.8046</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
 

      <type>pass</type>
      <interface>opt9</interface>
      <ipprotocol>inet6</ipprotocol>
      <statetype>keep state</statetype>
      <descr>Opnvpn</descr>
      <direction>in</direction>
      <log>1</log>
      <quick>1</quick>
      <protocol>udp</protocol>
      <source>
        <any>1</any>
      </source>
      <destination>
        <network>(self)</network>
        <port>1194</port>
      </destination>
      <updated>
        <username>root@fe80::7d90:ca3b:f31c:5050</username>
        <time>1586776848.7852</time>
        <description>/firewall_rules_edit.php made changes</description>
      </updated>
      <created>
        <username>root@fe80::7d90:ca3b:f31c:5050</username>
        <time>1586776848.7852</time>
        <description>/firewall_rules_edit.php made changes</description>
      </created>
    </rule>
  </filter>



34
20.1 Legacy Series / Re: NAT Reflection not working
« on: April 15, 2020, 09:58:41 pm »
I just did a quick test:
- portforwarding TCP 80 to internal Webserver
- enable only "Reflection for port forwards"
- create an A-record in Unbound with my external WAN IP
Works as expected   ???

35
German - Deutsch / Re: NAT - Port Forward - UniFi Inform-URL - TCP 8080
« on: April 14, 2020, 12:36:02 pm »
Prinzipiell schon, wenn du eigene Regeln erstellt, die diesen TCP Status blocken und kein Log aktivierst.
Fraglich ob man das dann noch "beherrschen" kann bzw. ob das irgendwelche Nebenwirkungen nachzieht.
Google mal nach TCP:FA, da gibt es einige Treffer zu pfsense/opnsense in denen das schon Mal durchgekaut wurde.
Eventuell hat da jemand seine Erfahrungen preisgegeben

36
German - Deutsch / Re: Opnsense-Cloud-Server -> VPN -> Fritzbox -> Lokaler Server?
« on: April 13, 2020, 07:30:30 pm »
Ich hatte Mal an etwas ähnlichen gearbeitet, aber es damals verworfen (die genauen Gründe weiß ich leider nicht mehr, aber zumindest für eine produktive Nutzung war mir das zuviel Bastelei).
Ich habe es dann damals über einen remote Port per SSH gelöst.

Was spricht den dagegen auf den Cloud Server einen Mailrelay für den innenliegenden Server zu betreiben?

37
German - Deutsch / Re: NAT - Port Forward - UniFi Inform-URL - TCP 8080
« on: April 13, 2020, 07:12:03 pm »
Die TCP:FA Pakete gehören zu nicht mehr gültigen Verbindungen und das blocken ist normal und kann ignoriert werden.

38
20.1 Legacy Series / Re: Rules
« on: April 12, 2020, 08:55:12 am »
I can confirm, that your example doesn't work.
As I never blocked FB before I can not confirm that this should work as you expect.

It seems to have problems with DNS round Robin, as the same technique works with 'normal' Internet sites that only have one IP per DNS record.

39
General Discussion / Re: SSH unresponsive after multiple unsuccessful login efforts
« on: April 10, 2020, 09:46:28 pm »
Use the Combobox (which actually Shows 'bogons') and select 'sshlockout'.

40
20.1 Legacy Series / Re: what should the rules be if...
« on: April 10, 2020, 07:32:24 pm »
1st I would have a look at punctuation rules :-)

2nd Allow UDP 137 + 138
3nd Allow TCP 139 + 445

41
General Discussion / Re: SSH unresponsive after multiple unsuccessful login efforts
« on: April 10, 2020, 07:09:47 pm »
Have a Look at
 Firewall -> Diagnostics -> pf tables
There should be a table 'sshlockout'

42
20.1 Legacy Series / Re: IKEv2 Phase 2 Button missing
« on: April 10, 2020, 12:28:36 pm »
Have a look on the plus on the right side.

43
20.1 Legacy Series / Re: OpenVPN Client export for mobile devices missing
« on: April 09, 2020, 11:07:26 pm »
I guess the cause ist the Server certificate:
You use the self signed Web Ui cert that came with
the Sense. That cert isn't signed by your ca.

Pleased try to create a new cert for the openvpn server.

44
German - Deutsch / Re: Let's Encrypt & HAProxy
« on: April 09, 2020, 07:24:52 am »
Quote from: stefanpf on April 09, 2020, 07:08:52 am
Die Webui von Opnsense benutzt die Ports bereits.
Ein Weg:
System: Settings: Administration
Https Port z.B. auf 444 ändern

"Disable web GUI redirect rule" aktivieren um Port 80 frei zu bekommen


Zur Funktionsweise (vereinfacht):
- in den Realservers legst du die echten internen Entpunkte (Nginx, Apache,..) an
- Jeder Realserver bekommt einen Backend-Pool
  Eigentlich ist der Pool dafür gedacht um z.B. loadbalancing zwischen mehreren Entpunkten, die den gleichen Dienst anbieten zu machen. Das trifft aber bei dir vermutlich nicht zu.

- Ein Public Service nimmt die Anfragen von "aussen" an.
  Dieser kann entweder ein Default BackendPool besitzen (alle Anfragen werden an diesen weitergereicht) oder
  über "selected rules" werden verschiedene Regeln angeboten die dann z.B. fallweise den BackendPool bestimmen.

Rules könnten dann z.B. sein
"Seafile" an " SeafileBackend" wenn Condition "host_seafile" erfüllt.

Die Condition dazu könnte dann so aussehen
Type: host-regex
Host-regex: ^seafile\.meinedomain\.de(:80|:443)?$

Speziell zu letsencrypt kann ich dir leider nichts sagen, da ich dort die DNS Validierung nutze und mir das in Ha nicht angesehen habe.

45
German - Deutsch / Re: Let's Encrypt & HAProxy
« on: April 09, 2020, 07:08:52 am »
Die Webui von Opnsense benutzt die Ports bereits.
Ein Weg:
System: Settings: Administration
Https Port z.B. auf 444 ändern

"Disable web GUI redirect rule" aktivieren um Port 80 frei zu bekommen


Zur Funktionsweise (vereinfacht):
- in den Realservers legst du die echten internen Entpunkte (Nginx, Apache,..) an
- Jeder Realserver bekommt einen Backend-Pool
  Eigentlich ist der Pool dafür gedacht um z.B. loadbalancing zwischen mehreren Entpunkten, die den gleichen Dienst anbieten zu machen. Das trifft aber bei dir vermutlich nicht zu.

- Ein Public Service nimmt die Anfragen von "aussen" an.
  Dieser kann entweder ein Default BackendPool besitzen (alle Anfragen werden an diesen weitergereicht) oder
  über "selected rules" werden verschiedene Regeln angeboten die dann z.B. fallweise den BackendPool bestimmen.

Rules könnten dann z.B. sein
"Seafile" an " SeafileBackend" wenn Condition "host_seafile" erfüllt.

Die Condition dazu könnte dann so aussehen
Type: host-regex
Host-regex: ^seafile\.meinedomain\.de(:80|:443)?$

Pages: 1 2 [3] 4 5
OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy     | XHTML | RSS | WAP2