Topics

1

24.7 Production Series / OpenVPN DNS Suffix not pushing

« on: July 28, 2024, 11:15:05 pm »

OpenVPN Instances option DNS Default Domain does not seem to be working.  This should push a Connection Specific DNS Suffix.  And I just see that blank in my ipconfig /all entry on my client.

Everything works/routes as expected if I use FQDNs, but trying to use a hostname without the FQDN, doesn't work.

Just updated to 24.7 just to rule that out.

I also tried using DNS Search List, and that also doesn't seem to work.

I think the custom OpenVPN option ADAPTER_DOMAIN_SUFFIX should work, but the option for custom options has  been removed.

Is there any way to get this to work as expected?

I'm testing this with a windows client.  Using the latest version of OpenVPN client and OPNSense is fully updated.

2

20.7 Legacy Series / Single Application stops working with bridge filtering on

« on: December 19, 2020, 06:26:59 am »

Hello all, new to OPNsense, so go easy on me here...

I've got everything setup, it took a little bit to figure out a few things, but pretty much everything is working as I want it to.

Only one thing is a bit of an issue right now.  When I enable net.link.bridge.pfil_bridge (I have a 6 port mini-pc with an i5 CPU, and I am just using it as a full on switch/router), a single application breaks.  Literally everything else in the network works, I have file servers, VPN traffic, Web servers, all kinds of internal traffic that flows without issue... It's literally this one app that I'm having an issue with.

This application operates on UDP using port 55355.  If I disable the filtering, the application works as expected.

Thing is, these two clients do a LOT more than just this one application.  I do streaming on Twitch and with this, I use the two PC's to do a lot of things back and forth... My sound/mic goes from one PC to the other for capturing, I use MouseWithoutBorders to control the second client with the same keyboard and mouse, and a bunch more.  Everything else these two clients do with each other work without issue, it's literally just this one app.

I checked firewall logs, don't see any blocking between the two, I have no actual blocking rules there anyway... it's a very basic install at this point, I only added rules to do my VPN kill switch, which is working without issue.

I did some Wiresharking, and I see the traffic on both PCs (with the filtering on)... I don't know much on how to diagnose network captures beyond that, I was just making sure they were seeing traffic and they do...  So it's not like it's not transmitting...  It's almost as if it's like "slow" in some fashion.

This application does a lot of like "state" reading and it's reporting a "busy" state on the functions it's attempting, and thus breaks it's functionality, because it's waiting for it to be ready.

Naturally, this is likely netcoding issues with this application.  But I was wondering if there was anything I can try to attempt to fix this.  I'd rather not have to disable the filtering if I don't have to.

While everything else works great without the filtering, the one thing I lose then is NAT reflection for my externally hosted services, which I do use...

I'm open to any ideas here...

Thanks!