Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - terry274

#16
I used a WiFi sniffer on my phone to discover the MAC address, which corresponded to the ip address of an Alexa. But, Alexa is on the IOT network, not the LAN.
#17
Ping results in 100% packet loss. This address may be related to some virtual machines I setup on my Debian linux box. I bridged the ethernet adapter.
I will keep digging.
#18
When I view traffic in reporting I see 192.168.6.120 making a connection to Amazon.com among other sites. But, 192.168.6.120 is not listed as a lease in Unbound. So, where is this address assigned from and who is it?







#19
General Discussion / Re: critique my setup
April 29, 2022, 08:27:10 PM
The printer has a static address assigned at the firewall. I manually configured my computer and cell phone with the address and I can print from the computer and cell phone. They can not detect the printer dynamically. Since I know I can set up the devices without the dynamic discovery I'm not going to pursue the issue.

I think you are correct about the diagnostic test on the firewall running "after" the interface firewall rule.

Thank you for your help!
#20
General Discussion / Re: critique my setup
April 29, 2022, 05:32:10 PM
The problem with the printer is mDNS I suspect. I have not resolved this issue. The printer is a Brother MFC-J450DW.
It supports mDNS, IPP, LPD and LLMNR among other protocols.

I do have my LAN clients setup to print on the IOT printer by adding the printer address manually. I gave the printer a static address.

If I log onto my IOT and ping the LAN, no packets are allowed through. Good!

If I log onto my LAN and ping the IOT, all packets are allowed through. Good!

If I go use the OPNsense gui and go to "interfaces, diagnostics, ping" and select a LAN host and a IOT source address the packets are transmitted, no loss. I don't understand why that happens.
#21
General Discussion / Re: critique my setup
April 27, 2022, 03:17:23 PM
Thank you for your reply Edwin. I have edited my rules and now have this:






I can ping IOT from LAN successfully, Chromecast and Alexa work. Pings from IOT to LAN are blocked.

I have not yet gotten my printer to work. I can ping it, but it does not show as available to my computer or cell phone.

Any suggestions?
#22
General Discussion / critique my setup
April 26, 2022, 03:26:19 PM
I have installed OPNsense 22.1.6 and setup three interfaces. WAN, LAN and IOT.

Since I am relatively new to firewall rules I would like some feedback on my setup. My goal is to have my computers and cell phones on the LAN and internet of things (Roku, Firestick and Amazon Plugs) on IOT. LAN can access IOT, but IOT is blocked from LAN.

My setup works, but is it correct and secure?