[SOLVED]WebUI is accessible over Internet

[Patrick M. Hausen]

Does the system you named "Server" have the LAN IP address of the OPNsense as its default gateway?

The 5erver have a IP 192.168.1.100 and a fixed IPv6 (ping -v6 joelmueller.ch) from ISP and is a client of the router(opnsens) also directly connected to LAN(bridge0) but I can't ping the local ipv4 neither ipv6.

Yes. ip addr shows me two IPv6 adresse and 192.168.1.100 as IPv4

That does not answer the question if the server has got the correct default gateway.

[Morta]

Does the system you named "Server" have the LAN IP address of the OPNsense as its default gateway?

The 5erver have a IP 192.168.1.100 and a fixed IPv6 (ping -v6 joelmueller.ch) from ISP and is a client of the router(opnsens) also directly connected to LAN(bridge0) but I can't ping the local ipv4 neither ipv6.

Yes. ip addr shows me two IPv6 adresse and 192.168.1.100 as IPv4

That does not answer the question if the server has got the correct default gateway.

How can I figure out?

[Patrick M. Hausen]

Whatever your "Server" is - check the network settings that you configured. If someone else did, ask that person. How should I know? I have no clue what operating system your "Server" is running.

Please ... read up on fundamental networking concepts or get someone to assist who does know. This is far beyond the assistance that can be expected from a voluntary community forum.

"How can I figure out the default gateway of my server?" Seriously?

[Morta]

I said the gateway of my server is 192.168.1.1.
It‘s a dhcp client of dhcp server of the router and is arch linux machine.

I can not write more than yes the router ip‘s is the router gateway. I don’t know what is wrong at my answer above. I did ip a and shows me 192.168.1.1/24 as gateway and 192.168.1.100 as ip.

So the problem isn’t only on the server but n all devices plugged to lan(bridge) interface.

[Morta]

I fixed the issue with this value of tunables on OPNsense

Code: [Select]

net.link.bridge.allow_llz_overlap 0
net.link.bridge.inherit_mac 0
net.link.bridge.ipfw 1
net.link.bridge.ipfw_arp 0
net.link.bridge.log_stp 0
net.link.bridge.pfil_bridge Set to 1 to enable filtering on the bridge interface 0
net.link.bridge.pfil_local_phys Set to 1 to additionally filter on the physical interface for locally destined packets 0
net.link.bridge.pfil_member Set to 0 to disable filtering on the incoming and outgoing member interfaces. 0
net.link.bridge.pfil_onlyip Handling of non-IP packets which are not passed to pfil (see if_bridge(4))

Here the link

https://forums.freebsd.org/threads/routing-between-bridged-interfaces.73803/

Now I can ping the clients and access the services in the same network.

Sorry for the missunderstanding my english is not so good and I was insecure of your question. I know what a gateway is and how to find out but my answer was unclear.