Home
Help
Search
Login
Register
OPNsense Forum
»
Archive
»
17.7 Legacy Series
»
best Practise for adding the FW
« previous
next »
Print
Pages: [
1
]
Author
Topic: best Practise for adding the FW (Read 3926 times)
vikozo
Full Member
Posts: 211
Karma: 5
best Practise for adding the FW
«
on:
August 25, 2017, 11:40:21 am »
hello
i have a running web/Mail/DNS Server.
i now wish to Change the IP on the Server/Router/Switch
and also to have as short as possible the downtime of my Server.
is there somewhere a documentation, a best Practise how to do it?
As example on my fritzbox i will expose the Host (Host=FW WAN Port) but how will the DNS Request go to the Server it self?
have a nice day
vinc
Logged
apu2c4 / wle200nx / 240 Disk
--> Firewall | FW-03
---
OPNsense 22.1.6-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1n 15 Mar 2022
bartjsmit
Hero Member
Posts: 2014
Karma: 194
Re: best Practise for adding the FW
«
Reply #1 on:
August 25, 2017, 12:57:32 pm »
Hi Vinc,
If you want to change the internal IP address, I would:
- add the new IP on the server as a secondary
- change the port forward rule on OPNsense to the new IP
- remove the old IP from the server
The outage time depends on how the web server keeps state. If it is flat HTML, then hardly any at all. If it keeps session states then these may need to be renegotiated.
DNS doesn't enter the equation, since clients will continue to resolve the same public IP address of your ISP router.
Bart...
Logged
vikozo
Full Member
Posts: 211
Karma: 5
Re: best Practise for adding the FW
«
Reply #2 on:
September 05, 2017, 12:29:08 pm »
Hello @bart
thanks for your Feedback.
i will also ask in the german part to be sure to get everithing ;-)
Logged
apu2c4 / wle200nx / 240 Disk
--> Firewall | FW-03
---
OPNsense 22.1.6-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1n 15 Mar 2022
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
Archive
»
17.7 Legacy Series
»
best Practise for adding the FW