Thanks for the offer. At the moment, I have to reinstall OpS as something seems to have gotten stomped on from the several resets to factory settings. However, the rules I tried that did not work was LAN -> WAN allow port 80 and 443 to WAN and WAN -> to LAN allow 80 and 443 to LAN. I did check
Since it's a statefull firewall the default configuration allows to access anything from LAN (like browsing etc.).Think of it like a normal Consumer NAT router.To be able to access a web or mail server from outside (WAN) that resides behind the Firewall, you would need the respective ports to be forwarded (NAT forwarding).
I think we need start one step back ....Can you provide a drawing of your network config, what is connected to what and IP network addresses you have used on your interfaces, modem, client, ....Br br
... and before: What is the network address in the WAN DHCP network ....Br br
curl https://google.com
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/">here</A>.</BODY></HTML>
WAN DHCP gets various addresses e.g., 24.x.x.x, 69.x.x.x 75.x.x.x so can't give you a specific one
QuoteWAN DHCP gets various addresses e.g., 24.x.x.x, 69.x.x.x 75.x.x.x so can't give you a specific oneJust to be clear: The WAN Port of your opnsense gets an address out of one of these networks?Br br
you can also do a very basic check at the opnsense firewall itself. Ssh into it, go to the shell and enter Code: [Select]curl https://google.com. When you get that response:Code: [Select]<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/">here</A>.</BODY></HTML> the Wan side of your firewall is working. The next step then should be to eliminate all other hardware between the firewall and your test device as already suggested.
When ask to give the address of the gateway for the WAN, I entered the ip address of the LAN interface (...)
(...) I then answered no to the question to use the LAN gateway address for DNS.
