Redirect issue - Can't reach certain sites

[tessierp]

Hi,

I am new to OPNSense coming from Nethserver. I have reinstalled a few times thinking I have done something wrong but I have a problem that persists. I have installed the basics, configured passwords and DHCPV4 and that is about it. I also added Global DNS IPs such as 8.8.8.8 and 8.8.4.4.

What is happening is, when I try to load webpages outside of my network, sometimes it will load on the first try, sometimes it will tell me that it can't find the page and I will need to hit F5 a few times and then it will fetch me the page. The same happens with all other services for instance if I try to send EMAILS, I will have to try a few times for it to go through.

I have my ISP Router / Firewall which is set to DMZ for the NIC that is set for my WAN on my OPNSense firewall, the flow is like this : ISP -> OpnSense -> My network

I have 3 NICS on my system, 1 for the WAN, 1 for my network, 1 that is not used.

Any has a clue as to what I am missing? This setup works great with Nethserver.

Any help you can provide I would appreciate.

Thanks

[tessierp]

I think I may have found the answer to my question. I looked under Gateway and by default I had this :

WAN_DHCP6   WAN   IPv6   254         ~   ~   ~   Pending   Interface WAN_DHCP6 Gateway
WAN_DHCP (active)   WAN   IPv4   254   10.0.0.1      ~   ~   ~   Online   Interface WAN_DHCP Gateway

So I am even surprised it was "sometimes" routing traffic from my internal systems to the outside. I added this :

AQUILA_LAN_GW   AQUILA_LAN   IPv4   254   192.168.20.1      ~   ~   ~   Online

And now it seems to be OK although sometimes some pages are not being drawn perfectly and need to be reloaded.

I have 2 questions :

1) Is it normal by default no gateway is set for the LAN?
2) Is that a patch I just did or am I supposed to add a gateway for my LAN?

Thanks

[tessierp]

Nevermind, that didn't work, did a search for "Microsoft Family Account" from the browsers search bar and it gave me a "can't find the site, maybe you need to enter this in your DNS" kind of message...

Any help?