Newbie Question: Changing NAT Rules via SSH

[DanielE.]

Hallo,

I am new to the OPNSense Firewall and havend got the whole scope of what the OPNSense can and can't do.

I have a specific task wich I hope, the OPNSense can do.

I have a Failover-Setup from 3CX local. The Second 3CX watches the first 3CX and if the first one fails, a script is executed wich must switch the Internal DNS (which is used to provision all devices) and the portforwarding Rule for the Port 5060 from one IP to another.
The DNS is already taken care of but I need a appliance which allows the change of the Port-Forwarding via SSH.

Can someone tell me, if this is possible and how?

Thank You very much,

Daniel

[M@rch0n]

Hallo DanielE,

If I understood correctly, the connections occur by name and when the main equipment fails the script changes the A record in its DNS to the IP of the second device (failover) ?!

If yes, and if your OPNsense firewall uses the same DNS for queries, create a host alias with the name and apply that alias to the target of your portforward rule.

[DanielE.]

Hallo M@rch0n,

that was exactly the information I needed!!!!

Thank You very much !