OPNSENSE GATEWAY

[JackySparrow]

Hi Guys, I have a small setup home, before I had PFSENSE then I moved to OPNSENSE. I do have two issues:

The first one, in my Gateways I have (active) the IPV6, where it is disabled everywhere (in the settings, in the interface, VPN, ecc) so I have no idea where this automatic entry comes from



As you can see the IPV6 on the VPN Interface is Active, even if I have never set it up (The Gateway IP is even null so it doesn't make sense). I tried to delete it, but the other one, the IPV4 is not going Active even if I lower the Priority.

The second problem that I have is that in my LIVE VIEW from the Firewall Settings, the DNS Queries are made from the VPN Ip Address but on the WAN Interface. Shouldn't it be from the VPN Interface?

Honestly PfSense was not this complex lol..

[Greg_E]

Honestly PfSense was not this complex lol..

Coming from pfsense myself, I'll give you this comment. There has definitely been a learning curve and I'm certainly not near the top of that curve yet, but I'm going forward after reading a bunch of history between all three versions (including the original monowall here). I have it mostly working the way I want right now, enough given the limited time I've had to learn and configure. Suricata is still stumping me with policies, need more time spent.

OPNsense came as a mid semester "emergency" install for my system at work, I borked pfsense pretty hard and since the hardware and software were both very old versions, I just decided I was going to force my way forward on newer hardware with OPNsense. I have a 3 year business license waiting for me to build my production hardware and for the 24.x version of business to arrive (end of month which is like a week).

[franco]

Not complex?

You mean adding way inside the pfSense OpenVPN code to figure out there is no need for an IPv6 gateway after creating an automatic gateway for OpenVPN instances is not complex?

Try the disable button. We still have the auto-creation, but not the auto-hide-auto-creation. Eventually automatic gateways are going away for tunnels anyway.


Cheers,
Franco