WAN PPPOE ROUTING

[mrjay84]

Hello Gents


I've recent moved over from a Virgin Media cable connection, which was connected via DHCP, to a fibre connection directly connected to the ONT.

The issue is I can't seem to port forward at all from this PPPOE connection despite changing the forward rules to reflect the new connection.

I'm obviously missing something simple here, any ideas chaps?

[cookiemonster]

The type of WAN connection doesn't matter to the firewall rules. They work on interfaces. So probably something else in play. Unless you created some sort of aliases that changed with the isp change.
Perhaps if you show/explain your port forward rule? Verify you have a successful WAN IP (public) too would help.
Also, is there a public DNS in play, that needs to update to your new WAN public IP?
It's a bit too high level at the moment

[mrjay84]

No aliases created

I have both WAN IP both v4 and v6, although the WAN v4 IP on OPNsense is different to the actual public IP.

I'm using Cloudflare DNS updated with the correct public using a CF-DDNS container on unraid.

Using NLSlookup the Public IP is listed when looking up my domain.

The ISP has confirmed port 443 and 80 are not blocked.

The exact same forwarding rules work fine on the cable connection.

Screenshot attached. GIGANET is the WAN connection.

[opnsense-user123]

WAN v4 IP on OPNsense is different to the actual public IP

I'd look into that!

[cookiemonster]

Shouldn't the public ip on OPN be the one on the WAN? That's all I can think of being a problem if it was working before. The ONT won't have one, it's only terminating the fiber into an ethernet connection, and OPN is requesting an IP from the ISP.
Maybe a packet capture will give clues otherwise.

[mrjay84]

The ISP apparently uses CG-NAT hence the different IP.

EDIT: I think I may have answered my own question there. I'll phone them first thing in the morning and ask for a public or static IP.

[mrjay84]

WAN v4 IP on OPNsense is different to the actual public IP

I'd look into that!

That was the ticket! CGNAT