Messages

Hi, new to opnsense, but not new to firewalls in general.

My situation is that I have a bunch of things I need to access using the external addresses.  This was working fine with my previous mesh system with basic port forwarding.

example

I have a single IP address which the modem gives to the WAN interface of my firewall ([home.domain.com](https://home.domain.com) in this example).

I have some nat/access rules to allow the traffic as per:

server is on [home.domain.com:1234](https://home.domain.com:1234)

nats to [192.168.0.1:80](https://192.168.0.1:80)

server is on [home.domain.com:2345](https://home.domain.com:2345)

firewall nats to [192.168.0.2:443](https://192.168.0.2:443)

and so on.

​

The NAT rules I've created work fine externally, I've put the interfaces to be both LAN and WAN and the auto created rule has created a 'floating' rule that seems correct.

I've enabled nat reflection too.  no dice.

​

I know I can create local DNS to get around it , but it only would work for the single IP address.

​

Any pointers?  I'm sure that Opnsense should be able to do this... but i am positive i must be doing something dumb.

​

Thanks in advance.

​

edit:

also if it is relevant i see this in the state tables

all tcp  192.168.0.23:53368 86.11.11.1:10443 192.168.0.2:8123 CLOSED:SYN\_SENT 
(192.168.0.23 is my device i'm testing from and the 86 IP is my obfuscated external IP and 192.168.0.2 is my server

Seems to be a horrible experience browsing these forums from a mobile device as literally every page you have to zoom in loads before anything is usable.

Is there a specific theme or url to access it by to make it more usable?

given the community nature of opnsense, i'm surprised that there is no discord channel.  most other open products I use have at least some discord presence, official or not.

yes, this would be a great idea. 
its good to have chat where you can bounce ideas and get more immediate assistance if needed (and also to help fellow geeks)

and no its not for gamers, i'm on about a few dozen discord 'channels' and a majority of them are for things like Home Assistant, Docker, Linux related chat.

thanks.  I ended up selecting Elastic, i assume i can remove it and go down the mongo route?  yes its for a home deployment and likely the most actual concurrent users would be about 10 at the most.  Yes my network has many dozens more devices, but they are unlikely to do be doing much on the internet (IoT devices that connect to my home assistant system etc for example).

As long as i'm getting my line speed, I'm happy.  although I noticed that I cannot do any per user settings using this unless I pay $99 a year.  Unfortunately that's unlikely to happen with budgets like they are.  So its all pretty much testing to see what works best for our needs right now. 
I've came from a mesh system that had user based url/risk blocking and so on, and have moved to a hardware router/firewall and controller based AP's, so i'm trying to get the most of what i can

hi, new to opnsense and sensei in general, but i cannot seem to find the answer to this.
I'm running on a 4core atom / 8gb ram appliance and am trying to set up sensei.   
my question is, which db to choose? i know it says high end /low end get different options, but that doesn't really go any distance to explaining the pros and cons of using either.  I see if you have 8gb+ you can choose elastic locally.  But does that mean you should? if a low end system can get away with mongo, would that not be overall better to use unless you have oodles of ram?   
I can set up elastic on a docker container too on my server (connected via gigabit), would that be better for overall firewall/sensei performance ?
also , is it just for reporting/logging or is it constantly in use whilst Sensei is being used?  I guess if it's just for logging and reporting then performance is probably not an issue in terms of throughput of traffic
thanks in advance