moving from PFsense to OPNsense but ther rule not working

Started by trident, Today at 07:44:46 PM

Previous topic - Next topic
hi am trying to moving from PFSense to OPnSence
am trying to do the same setup on OPNsense that i have in pfsence and i have 16 internet ip that can be used but hiting a problem
this is part of the setup have hidden my ip

Wan **.**.***.210 /28
Gateway **.**.***.209

Lan 192.168.1.2 /24
Dmz 10.10.10.10 /24

Virtual IPS
**.**.***.211/28
**.**.***.212/28
**.**.***.213/28
**.**.***.214/28
**.**.***.215/28
**.**.***.216/28
**.**.***.217/28
**.**.***.218/28
**.**.***.219/28
**.**.***.220/28

Outbond nat mode
Automatic outbound NAT rule generation.
(IPsec passthrough included)

Nat /Port Forward
Interface Protocol Source Address Source Ports Dest. Addr Dest. Ports NAT IP NAT Ports Description Actions
WAN   TCP   *   *   WAN address   993 (IMAP/S)   192.168.1.18   993 (IMAP/S)   imap ssl
WAN   TCP   *   *   WAN address   143 (IMAP)   192.168.1.18   143 (IMAP)   MAIL IMAP
WAN   TCP   *   *   WAN address   110 (POP3)   192.168.1.18   110 (POP3)   MAIL POP
WAN   TCP   *   *   WAN address   80 (HTTP)   192.168.1.18   80 (HTTP)   cb http
WAN   TCP   *   *   WAN address   443 (HTTPS)   192.168.1.18   443 (HTTPS)   cb https
WAN   TCP   *   *   WAN address   587 (SUBM)   192.168.1.18   587 (SUBMISSION)
WAN   TCP   *   *   WAN address   25 (SMTP)   192.168.1.165   25 (SMTP)   cb mail
WAN   TCP/UDP   *   *   WAN address   8320   192.168.1.85   8320   
WAN   TCP   *   *   WAN address   8081      192.168.1.100   8080   
WAN   TCP   *   *   WAN address   465 (SMTP/S)   192.168.1.165   465 (SMTP/S)   cb smail
WAN   TCP   *   *   **.**.***.216   25 (SMTP)   10.10.10.151   25 (SMTP)   z mail
WAN   TCP   *   *   **.**.***.216   22 (SSH)   10.10.10.163   22 (SSH)   z mail
WAN   TCP   *   *   **.**.***.216   587 (SUBM)   10.10.10.163   587 (SUBM) z mail
WAN   TCP   *   *   **.**.***..216   465 (SMTP/S)   10.10.10.163   465 (SMTP/S)   z mail
WAN   TCP   *   *   **.**.***.216   2703      10.10.10.163   2703   z mail 2703
WAN   TCP   *   *   **.**.***.213   80 (HTTP)   10.10.10.5   80 (HTTP)   4 http
WAN   TCP   *   *   **.**.***.213   443 (HTTPS)   10.10.10.5   443 (HTTPS)   4 https
WAN   TCP/UDP   *   *   **.**.***.213   34000   10.10.10.5   34000   4
WAN   TCP   *   *   **.**.***.211   80 (HTTP)   10.10.10.30   80 (HTTP)   z http
WAN   TCP   *   *   **.**.***.211   443 (HTTPS)   10.10.10.30   443 (HTTPS)   zf https
WAN   TCP   *   *   **.**.***.211   8080      10.10.10.30   8080   z magmi
WAN   TCP   *   *   **.**.***.211   8022      10.10.10.30   22 (SSH)   z ssh


the problem is everry time someone try to access 213 port 80 it keep going to wan port 80
in pfsence this work fine but it seem to alway fail
what am i doing wrong and why pfsense is fine but not OPNsense

hope is a silly diffrent am missing
thanks

"WAN address" is all addresses on WAN including the virtual IPs. Configure the individual addresses explicitly. With or without a "speaking" alias is your choice.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

Ensure that System: Settings: Administration > HTTP Redirect is checked to disable redirection of port 80 to the web GUI.


ok thanks, funny pfsense is fine with that but i will try again and come back again thanks

pfSense redirects port 80 as well as long as you didn't check System: Advanced: Admin Access > WebGUI redirect.

port 80 wan go to a web not the gui with no problem as webgui should never be on wan only on lan

The default HTTP --> HTTPS redirect rule will catch traffic on all interfaces. Best disable it, you don't want the UI over plaintext HTTP, anyway.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)