Cannot find my aliases port in destinations rules

Started by guliver235, January 12, 2024, 09:41:35 PM

Previous topic - Next topic
Like the title says I create an alias for my reverse proxy to make a rule in order to be visible for my client but I cannot find the alias in destination?

Did you click on "Apply" at the very bottom of the page used to create the alias? It's IMHO easy to miss.

January 13, 2024, 01:12:57 AM #2 Last Edit: January 13, 2024, 01:19:54 AM by guliver235
Yes, I did even several times!
Actually, I noticed the column Loaded# stay empty for this alias

Can you try for test create another port based Alias, put there any single port, save and apply. Afterwards check if that new Port Alias is seen by the FW rule?

Also how did you put in the ports into the Alias? Did you do manually or copy paste? Did you do Ranges? Are you sure that after a port/ports you didn't have any spaces?

Regards,
S.
Networking is love. You may hate it, but in the end, you always come back to it.

OPNSense HW
APU2D2 - deceased
N5105 - i226-V | Patriot 2x8G 3200 DDR4 | L 790 512G - VM HA(SOON)
N100   - i226-V | Crucial 16G  4800 DDR5 | S 980 500G - PROD

Same thing with one port, but I should admit opnSense is very new to me so I am sure I am doing something wrong but What.... :( :-\

Download a backup of your configuration, open the configuration.xml data in a text editor (like notepad++), search for "ProxyPorts" and post the xml structure of it. Maybe theres an error in it?
Hardware:
DEC740

Here we go
<alias uuid="902a2b6f-ab98-4f13-aa24-54b0b15bb8e6">
<enabled>1</enabled>
<name>ProxyPorts</name>
<type>port</type>
<proto/>
<interface/>
<counters>0</counters>
<updatefreq/>
<content>80 90 443 450</content>
<categories/>
<description>ReverseProxy</description>
</alias>
<alias uuid="ec7e59b1-eafe-448c-8299-ddee036f15a1">
<enabled>1</enabled>
<name>alias_test</name>
<type>port</type>
<proto/>
<interface/>
<counters>0</counters>
<updatefreq/>
<content>80</content>
<categories/>
<description/>
</alias>
</aliases>

I think it's the validation on the protocol. It will appear in the selection list of ports if the protocol is TCP in this case. If protocol set to "any", it won't appear. Could that be it?
p.s. whether this setup will work as you want, no idea.

January 14, 2024, 05:54:45 PM #8 Last Edit: January 14, 2024, 05:57:40 PM by guliver235
I did try it previously not working :'(
by the way I am following this tutorial https://homenetworkguy.com/how-to/deploy-nginx-proxy-manager-in-dmz-with-opnsense/

January 14, 2024, 06:15:58 PM #9 Last Edit: January 14, 2024, 06:26:28 PM by guliver235
Just noticed I pick host instead of port I can pick it in destination but I dont think this is the way according to https://homenetworkguy.com/how-to/write-better-firewall-rules-opnsense-using-aliases/#types-of-aliases

Your port aliases are not the destination. The destination is an IP address, a host alias or a network (or GeoIP or whatever has host/network properties).

Your port aliases go into "Destination port range" - see screenshot.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

January 14, 2024, 08:51:25 PM #11 Last Edit: January 15, 2024, 12:24:32 AM by guliver235
Thank you so much :) :)
I canntot believe I was not able to read the instructions from the link https://homenetworkguy.com/how-to/deploy-nginx-proxy-manager-in-dmz-with-opnsense/ Ineed better glasses!
It is working even my proxy is!