No Wan access after upgrade

[hjint]

I have a small home office network with multiple lan points connecting to opnsense server, which connect to an dsl modem.

After upgrade from 18.1.13 to 18.7, all wan access is blocked. Prior to the upgrade everything worked 100% since December 2017

Current status:
Dashboard shows Wan & Lan interfaces are running, Gateway is online, Dynamic Dns service is Opendns & Cached IP is green. All services are green.

I have rebooted the opnsense server multiple times after the upgrade, but no success.

If I bypass the opnsense server and connect the lan directly to the dsl modem, wan access is working.

Am I missing some changes / settings in 18.7 that needs to be changed?

Thanks for an awesum product

[Meditux]

Hi,

check Services: Dnsmasq DNS: Settings: Interfaces and set this to LAN ;-)

Interface IPs used by the DNS Forwarder for responding to queries from clients. If an interface has both IPv4 and IPv6 IPs, both are used. Queries to other interface IPs not selected below are discarded. The default behavior is to respond to queries on every available IPv4 and IPv6 address.


greeting Meditux

[franco]

I've heard about a setup where the outbound NAT doesn't behave correctly anymore for IPv4, but we have been unable to reproduce this until now.

If the problem is not fixed by restoring DNS, would you mind sending us a copy of the /tmp/rules.debug files in 18.7 and on 18.1 (e.g. via USB stick live mode and config import to retain your current system).

You can send it to project@opnsense.org


Thanks,
Franco

[hjint]

Thanks Meditux, that solved the wan access. No trouble since the setting change

[eugenezv]

Same problem, and this solution was usable. Thank you.

[faranhor]

I'm having the same issue but mine started after I triggered a service reload via terminal while using OpenVPN from work (not setup on OPNSense).

How does one restore DNS can this be done via terminal? Thanks in advance.

EDIT: Main issue is no ping to outside world from the router (OPNSense) but DNS resolution seems to work. Every other device behind the router is able to exit to Internet and have been gaming and using VoIP since the issue started without any trouble. I've tried turning on the option to prefer IPv4 resolution and also experimented with turning on the local resolution prevention option, to no avail. This also prevents me from running opnsense-revert since it can't acquire the package. Is there a way to place it somewhere and tell -revert where it is?

EDIT2: Linking rules.debug: https://paste.ubuntu.com/p/kBY3wzp5qV/

Next I'll try to load the previous version up on a stick and import the current config.

[faranhor]

Nobody really? My WAN access is still down after the upgrade and clearly caused by the upgrade. Please let me how to down-grade without re-installing without WAN access.

Can I download all packages on a different machine and place them on the router?

[cguilford]

Did you make sure that your rules where still in place?  IE the Lan *** to allow out via WAN?