Topics

The device I want to access from my Windows laptop is connected to the interface LAN2: LAN is on 192.168.0.1/24 (and my laptop is on LAN) while LAN2 is on 192.168.20.1/24 – I don't use kill switch.

I'm struggling to understand how I can access the web UI of that device which is on a different subnet of my laptop while connected thorugh my VPN (no issue when the VPN is off) ??

Tia.

Which DNS server has higher priority, in other words which one the client is going to pick up, the one I specify in Services -> DCHPv4 -> LAN or in Services -> DCHPv4 -> LAN -> Client ?

Tia.

I've installed DDNS and the service I use is Duck DNS - I'm on OPNsense 22.7.11_1

In the log file section, I see only the (first) entry of when I installed the service, so why I don't see any other activities as every 300s the service is supposed to check if the IP address has changed?

Tia.

[System -> Settings -> General -> DNS servers]

I'm playing with my raspi and I have installed/configured AdGuard Home + Unbound to use it as a DNS server and want to test it with my OPNsense.

My LAN is on 192.168.0.1/24 while the raspi is connected to another port of my OPN box and labelled LAN3 and is on 192.168.20.1/24

The raspi static IP address is 192.168.20.50

Before turn OPNsense Unbound off, I need to point my LAN devices to the raspi IP address as their new DNS server, and was wondering if it would more logic / better to do that in System -> Settings -> General -> DNS servers or in Services -> DHCPv4 -> LAN -> DNS servers

What are the pros/cons of the two optoins?

tia.

I've assigned the WAN port to the physical address (opt3) with an IP address on the same subnet of the modem, so now I can access the modem GUI, but I see lots of errors in, is there a way to fix that?

I'm on the latest version 22.1.9 (if that matters) and the LAN ports are i225-V

Tia.

I've just found out that the last update of the dnsbl.conf file goes back to April 14 just after the firewall upgrade: anybody else experiencing the same issue? The cron job is still there and enabled.

Any solution for this ?

Tia.

I have a 4x port device (1x WAN and 3x LANs): LAN1 (192.168.0.1/24) is used as the main internal network and it's connected to a WAP.

The issue I have is that the when the Raspi 4 is connected to LAN1 to one of the WAP ports, I can use VNC viewer from my Windows laptop with no problems, but if I connect the Raspi 4 directly to the free LAN port on the device/firewall, I cannot - LAN3 = 192.168.20.1/24

I can ping the Raspi 4 from my laptop also when connected to LAN3, and in firewall -> rules -> LAN3 I have the 'default allow LAN3 to any rule' but VNC viewer goes in time out: can someone please help me out to troubleshoot?

Tia.

I've ordered a second SDD for my appliance and I'd like to set up the ZFS mirror functionality: do I have to re-install OPNsense from scratch or I can do it with some commands?

Tia.

Since I upgraded to 22.1 I noticed the use of the swap file, currently at 12%, but memory usage has not changed, it's still around 40%, is that normal?

Untill 21.7.8 the swap file has been always 0.

Tia.

I did a reboot and I lost Internet connectivity, no idea what happened: can someone kindly guide me how to troubleshoot it?

Please be patient with me as I'm not a techie  ::)

Tia.

I was searching for an IP address in Diagnostics/Aliases tab of the Firewall and I've got the attached error, any idea of what it is?

Tia.

Does anybody know what those errors are?

Tia.

[any]

I'm reading two articles regarding how to configure for internal DNS only: the first on Zenarmor website and the second one from the Home Network Guy here

There are a couple of differences:

1) for the allow ineternal DNS rule, in the first case the source address is any and in the second example is XXXnet

2) for the blocking external DNS rule, in the first case the source address is any and in the second example is XXXnet

Anyone who could explain to me the logic behind?

Tia.

I found this guide here and I'm not sure which benefit stubby brings, can someone elaborate in 'plain english' ? ::)

Also, why using port 8053 ?

What about DNSCrypt?

I'm trying to learn the differnet options for DNS servers encryption.

Tia.

Briefly, my device has got 3 ports, WAN, LAN1 and LAN2, and each time I reboot the RB Pi 4 (which is connected to LAN2) all my devices (which are connected to a WAP on LAN1) lose Internet for about 2 minutes: why is that ?

Tia.

While I'll be away, I'd like to being able to remotely connect to my OPNsense with my Android phone: can someone point me to a dumb-proof guide on how to do that ?

Tia.

It seems one of the blocking lists in Unbound is blocking github.com, so I've added that domain on the whitelist, but it's still blocked, how come?

Of course, I've restarted Unbound a few times, but still no luck !

Is there any manual change I can make to overcome this issue?

Tia.

I have a pretty simple config, i.e. WAN + LAN + LAN2 with

   1) LAN =   192.168.0.1/24
   2) LAN2 = 192.168.10.1/24

I cannot access/ping the device on LAN2 - can someone please advise which rules on LAN2 I have to setup to accomplish that?

Tia.

[additional]

I'm trying to understand the level of additional protection that the free version (and the free version only) would provide to OPNsense and I'd appreciate anyone input.

Not talking about the reporting capabilities, for instance, if I look at the security policies, I can enable the block for sites that are responsible for malware, phishing, etc - am I right to say that what Sensei does here is to block access to/from a list of malicious IPs, that is the same I can configure with the blocklist feature in Unbound ?

Or adding rules as for this article https://docs.opnsense.org/manual/how-tos/edrop.html

Tia.

Eventually I was able to do fresh install of 21.7 on my APU2 (WAN + 2 LAN ports), but I can't access Internet from the 2nd LAN port: how do I troubleshoot this?

Tia.