Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Topics - Firewire

#1
Hello,

my OPNsense is configured as a DNS upstream server and the domain "home.arpa" was added in General System Settings.

I have an issue where the domain is applied external requests.
When DNS requests are answered by Unbound, the "home.arpa" domain is added as a suffix.

Example:
cloud-jobs.linkplay.com
is changed to
cloud-jobs.linkplay.com.home.arpa

That happens not with all, but with many domains and results in a SERVFAIL error.
Unbound is set in transparent mode, to resolve local requests (for DHCP static leases) and external requests

Could someone tell me how this can be fixed?
#2
Hello,

since a few OPNsense versions now, I discovered that my Wireguard VPN tunnel is not coming up after a reboot automatically. After restarting my OPNsense shows no active connection via "VPN -> WireGuard -> Status"

Workaround:
To solve the issue until the next reboot, I have to manually disable and enable the WireGuard instance via "VPN -> WireGuard -> Instances"

My guess:
The issue might be related to my WAN uplink, probably the service tries one connection only and it fails since my WAN link is not up yet. The service does not seem to try it again after the WAN link is up and the WireGuard instance keeps being down.

Does someone have an idea how to fix this?
I'm running the latest OPNsense 24.1.5_1 version.

Kind regards
#3
Hello,

today I discovered my whole network went offline today after making changes days ago.
After troubleshooting and resetting my whole OPNsense install, I discovered the reason for the issue.

I have 3x interfaces configured (LAN, WAN, Wireguard).
LAN and WAN are running with default settings.
Wireguard is an interface I added after successfully configuring a Wireguard config, which is policy based and only meant for specific clients with specific source IPs.

The VPN setup worked great, until my Firewall was restarted than everything went offline.
After checking my routing table I discovered the default route was deleted.

This happens when on my Wireguard interface following option is configured:


Everything works when this option is enabled, until my router gets restarted.
Then the VPN still works but internet traffic from other devices is not sent out anymore since the default route gets deleted. Disabling this option makes everything work again for my Non-VPN Clients.

Could someone help me to fix this?