1
24.7 Production Series / Cannot import crl certificates
« on: August 19, 2024, 08:28:25 pm »
The system/trust/revocation section in the webui lacks of the add button...how can I import a new crl certificate?
Any help?
Any help?
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
21.1 Legacy Series / iperf not working
« on: March 07, 2021, 08:42:49 am »
I searched the forum and could not find anything useful about this subject...iperf does not work on my opnsense.
I go to Interfaces/Diagnostic/iperf and create a new instance on lan interface. After few seconds a result summary appears where the port is declared. Then, I run my iperf client pointing to the firewall ip and port of iperf instance...this connection fails by timeout.
I took a packet capture from opnsense and I can see the client trying to connect but the firewall does not respond.
I also ckecked the firewall log and I can confirm no rules are blocking this communication.
Any ideas?
Thanks,
Fabrizio
I go to Interfaces/Diagnostic/iperf and create a new instance on lan interface. After few seconds a result summary appears where the port is declared. Then, I run my iperf client pointing to the firewall ip and port of iperf instance...this connection fails by timeout.
I took a packet capture from opnsense and I can see the client trying to connect but the firewall does not respond.
I also ckecked the firewall log and I can confirm no rules are blocking this communication.
Any ideas?
Thanks,
Fabrizio
3
20.7 Legacy Series / Unsolicited source natted lan bridge traffic
« on: September 29, 2020, 08:02:00 am »
Hi, I am a senior network admin but I am also new in Opnsense usage.
I created a lan bridge following documentation (https://docs.opnsense.org/manual/how-tos/lan_bridge.html) and everything seems to work.
Except that I discovered that traffic flowing from one lan (bridge) interface to another it is source natted with the wan address. Why?
After some investigations I found out that disabling bridge filter (net.link.bridge.pfil_bridge=0) solves the issue.
But this way I have no firewall filtering.
Would you please explain the logic of this behavior and a possible solution?
Thanks in advance for your help.
I created a lan bridge following documentation (https://docs.opnsense.org/manual/how-tos/lan_bridge.html) and everything seems to work.
Except that I discovered that traffic flowing from one lan (bridge) interface to another it is source natted with the wan address. Why?
After some investigations I found out that disabling bridge filter (net.link.bridge.pfil_bridge=0) solves the issue.
But this way I have no firewall filtering.
Would you please explain the logic of this behavior and a possible solution?
Thanks in advance for your help.
Pages: [1]