Recent posts

#1

General Discussion / Re: moving from PFsense to OPN...

Last post by trident - Today at 09:32:28 PM

port 80 wan go to a web not the gui with no problem as webgui should never be on wan only on lan

#2

Hardware and Performance / Re: Upgrade from J6413 Questio...

Last post by nero355 - Today at 09:20:32 PM

Alas, the "cheap" hardware options have left the building a while ago :-(

100% AGREE :'(

#3

Q-Feeds (Threat intelligence) / Re: Q-Feeds, Suricata, Crowdse...

Last post by Greg_E - Today at 09:18:23 PM

Lab is back up and I'm getting things running again... Which one is likely to be fastest? That said, I have 200mbps down on a good day, more likely 100mbps down and maybe 50mbps up. Running this on my mifi device because it made life more simple.

I may try many of these to see the speed difference, I'm now running on an HP T740 with 16gb of ram (AMD V1756b processor), also on a quad port intel x710 with gigabit adapters installed. I may change to 10gb for LAN-LAN traffic, but clearly gigabit is plenty fast for my WAN connection. Harvester and Truenas Scale are up and ready to do some work.

But first things first, I need to get Netbird set back up on this "new" firewall so I can get back in from home.

#4

General Discussion / Re: moving from PFsense to OPN...

Last post by viragomann - Today at 09:17:45 PM

pfSense redirects port 80 as well as long as you didn't check System: Advanced: Admin Access > WebGUI redirect.

#5

General Discussion / Re: moving from PFsense to OPN...

Last post by trident - Today at 09:13:34 PM

ok thanks, funny pfsense is fine with that but i will try again and come back again thanks

#6

General Discussion / Re: moving from PFsense to OPN...

Last post by viragomann - Today at 09:12:37 PM

Ensure that System: Settings: Administration > HTTP Redirect is checked to disable redirection of port 80 to the web GUI.

#7

General Discussion / Re: moving from PFsense to OPN...

Last post by Patrick M. Hausen - Today at 08:46:38 PM

"WAN address" is all addresses on WAN including the virtual IPs. Configure the individual addresses explicitly. With or without a "speaking" alias is your choice.

#8

General Discussion / moving from PFsense to OPNsens...

Last post by trident - Today at 07:44:46 PM

hi am trying to moving from PFSense to OPnSence
am trying to do the same setup on OPNsense that i have in pfsence and i have 16 internet ip that can be used but hiting a problem
this is part of the setup have hidden my ip

Wan **.**.***.210 /28
Gateway **.**.***.209

Lan 192.168.1.2 /24
Dmz 10.10.10.10 /24

Virtual IPS
**.**.***.211/28
**.**.***.212/28
**.**.***.213/28
**.**.***.214/28
**.**.***.215/28
**.**.***.216/28
**.**.***.217/28
**.**.***.218/28
**.**.***.219/28
**.**.***.220/28

Outbond nat mode
Automatic outbound NAT rule generation.
(IPsec passthrough included)

Nat /Port Forward
Interface Protocol Source Address Source Ports Dest. Addr Dest. Ports NAT IP NAT Ports Description Actions
WAN   TCP   *   *   WAN address   993 (IMAP/S)   192.168.1.18   993 (IMAP/S)   imap ssl
WAN   TCP   *   *   WAN address   143 (IMAP)   192.168.1.18   143 (IMAP)   MAIL IMAP
WAN   TCP   *   *   WAN address   110 (POP3)   192.168.1.18   110 (POP3)   MAIL POP
WAN   TCP   *   *   WAN address   80 (HTTP)   192.168.1.18   80 (HTTP)   cb http
WAN   TCP   *   *   WAN address   443 (HTTPS)   192.168.1.18   443 (HTTPS)   cb https
WAN   TCP   *   *   WAN address   587 (SUBM)   192.168.1.18   587 (SUBMISSION)
WAN   TCP   *   *   WAN address   25 (SMTP)   192.168.1.165   25 (SMTP)   cb mail
WAN   TCP/UDP   *   *   WAN address   8320   192.168.1.85   8320   
WAN   TCP   *   *   WAN address   8081      192.168.1.100   8080   
WAN   TCP   *   *   WAN address   465 (SMTP/S)   192.168.1.165   465 (SMTP/S)   cb smail
WAN   TCP   *   *   **.**.***.216   25 (SMTP)   10.10.10.151   25 (SMTP)   z mail
WAN   TCP   *   *   **.**.***.216   22 (SSH)   10.10.10.163   22 (SSH)   z mail
WAN   TCP   *   *   **.**.***.216   587 (SUBM)   10.10.10.163   587 (SUBM) z mail
WAN   TCP   *   *   **.**.***..216   465 (SMTP/S)   10.10.10.163   465 (SMTP/S)   z mail
WAN   TCP   *   *   **.**.***.216   2703      10.10.10.163   2703   z mail 2703
WAN   TCP   *   *   **.**.***.213   80 (HTTP)   10.10.10.5   80 (HTTP)   4 http
WAN   TCP   *   *   **.**.***.213   443 (HTTPS)   10.10.10.5   443 (HTTPS)   4 https
WAN   TCP/UDP   *   *   **.**.***.213   34000   10.10.10.5   34000   4
WAN   TCP   *   *   **.**.***.211   80 (HTTP)   10.10.10.30   80 (HTTP)   z http
WAN   TCP   *   *   **.**.***.211   443 (HTTPS)   10.10.10.30   443 (HTTPS)   zf https
WAN   TCP   *   *   **.**.***.211   8080      10.10.10.30   8080   z magmi
WAN   TCP   *   *   **.**.***.211   8022      10.10.10.30   22 (SSH)   z ssh


the problem is everry time someone try to access 213 port 80 it keep going to wan port 80
in pfsence this work fine but it seem to alway fail
what am i doing wrong and why pfsense is fine but not OPNsense

hope is a silly diffrent am missing
thanks

#9

Zenarmor (Sensei) / Re: Certain Youtube videos kee...

Last post by abenaou - Today at 07:04:24 PM

While the decision is yours, I respect that.
But it is expected to have a basic understanding of how Zenarmor works to really make an informed decision and ditch it.
Some settings are not suitable for some hardware and will break stuff, the provided documentation is far from ideal but solutions do exist and it takes some trial and errors to reach the "sweet spot", you can read my post and/or other members posts to find solutions to issues that people encountered before.
At the end of the day time is expensive and some of us have better uses for their time but if you decide to resume the troubleshooting, help is available here.

#10

26.7 Series / Re: [CALL FOR TESTING] PPP(oE...

Last post by abulafia - Today at 07:04:10 PM

PPPoE with dedicated physical port (PCIe passthrough to an ESXi VM), with VLAN 40, mini-jumbo frames.

Applied cleanly, no noticeable issues after reboot.