Topics

1

21.1 Legacy Series / Outbound NAT with port forwarding weirdness

« on: May 03, 2021, 03:07:50 pm »

System version: OPNsense 21.1.5-amd64

I have a simple port forward defied with http port on wan side redirected to local server.

When outbound NAT is set to Automatic or Hybrid the port forwarding works fine.
When I manually configure outbound NAT as shown on the picture, port forwarding also works fine.

However, when I change outbound NAT source to ANY (instead of defined RFC1918 subnets), port forwarding stops working! Why is that?

Thank you.

2

Zenarmor (Sensei) / Move sensei data to another disk/partition

« on: January 27, 2021, 05:24:59 pm »

What is the recommended approach to move sensei data (mongo db/logs) to another disk or partition?
Where exactly are the data located on default install?

To explain, I've added 2nd SSD to the opnsense as the system default partition was running out of space and I need to move data.

thanks

3

20.7 Legacy Series / Unbound Blocklist questions

« on: October 07, 2020, 03:49:02 pm »

I can't find documentation for the Blocklist section, if there is kindly point me to it.

My question is, when I select lists in the Type of DNSBL field do I still need to provide corresponding URLs in URLs of Blacklists field?
Or is URLs of Blacklists just for custom lists?

How often are the lists refreshed?

4

Zenarmor (Sensei) / Sinkhole for Ad Blocking

« on: October 06, 2020, 03:52:35 am »

Is there a way to provide sinkhole for Ad Blocking?
When the Ad Blocking is enabled is causes a longer page loads due to time outs. Is there a way to redirect the ad requests to a sinkhole? ...similar approach that pi-hole and pfBlocker are deploying?

5

20.7 Legacy Series / VoIP fails to register on Gateway failure

« on: October 06, 2020, 03:49:09 am »

We have dual gateway system. 1st gateway is preferred, 2nd gateway is used only if the 1st one fails.

When the 1st fails and 2nd gateway takes over everything works except internal VoIP ATA is showing "Trying to register" to internat side SIP provider and won't register.
We have to manually flush state table and restart the ATA, then it'll register.

We have kill states on gateway failure enabled as well as dynamic state reset is enabled.

Any pointers to fix the issue appreciated.