Which outbound IP address in a CARP setup?

[Patrick M. Hausen]

Hi all,

I will implement my first HA setup this week. With a pair of firewalls and CARP active, which IP address will OPNsense use for outbound connections to WAN/default? The individual firewall's address or the CARP one?

Important for mail, SPF records, etc.

Thanks!
Patrick

[Cerberus]

I just put a HA setup in production two weeks ago.

The Firewall itself uses its own IP, internal IPv4 traffic behind the firewall should use outbound nat and the CARP address, same goes for IPSEC and other stuff that you want in HA.

[Patrick M. Hausen]

Thanks. That means the only special case will probably be the postfix for outgoing email.

[mimugmail]

Try setting SMTP Client address to LAN, then you can Nat to HA IP in WAN