Questions tagged [opnsense]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-2 votes
1 answer
118 views

Can I use Laptop with one WiFi and one Ethernet Port interface to setup firewall - OPNSense?

I am trying to setup OPNsense Firewall at my residence using a spare laptop which has one WiFI and one Ethernet interface. I was able to install OPNsense and configure the interfaces to LAN and WAN. ...
  • 1
1 vote
1 answer
119 views

OPNsense move interface to other hardware port

I have an OPNsense with interfaces directy configured to the hardware ports. The corresponding switch port is also an access port. We plan to change the switch port to a trunk port to transport ...
  • 131
0 votes
1 answer
567 views

Routed IPv6 on internal bridge with virtualized OPNsense router

I'm struggling with adding IPv6 to the internal bridge of my setup, here is what I have: ┌────────────────────────────────────────────────────────────────────────────────────────────────────...
1 vote
1 answer
59 views

NTP Traffic, but NTP not installed

I have recently started with OPNSense and have limited outgoing traffic to HTTP/s, SSH ports. When analyzing my blocked traffic i found sporadic outgoing NTP-Requests from my local Linux machine. I am ...
0 votes
0 answers
289 views

Cannot connect to OPNsense web console from LAN

I'm facing a strange issue with a new install of OPNsense on ESXi 6.7 that I hope someone can help me figure out. I'm thinking the problem is on ESXi not OPNsense, since I had a working setup using ...
  • 33
0 votes
0 answers
374 views

Properly configured TAP mode - OpenVPN

I am using OPNsense to host my OpenVPN server. I can connect to the VPN server from a VPN client using the "tun" device mode. In this mode, I am able to successfully navigate my LAN via the ...
0 votes
1 answer
586 views

"DNS address could not be found" in OPNsense using OpenVPN configured for ProtonVPN

I'm trying to route the WIFI and OPT nets from my OPNsense box to my VPN. The LAN port is connected to another router and passes directly to my WAN (for greater speed and less privacy). When I connect ...
0 votes
0 answers
78 views

Movistar and OPNSense

I have a web server on my ip 192.168.1.100 under DMZ ... with a Movistar WAN I can access from the local network, I can access from the domains assigned to it and everything without problems, I can ...
1 vote
0 answers
639 views

Wireguard Destination Host Unreachable on internal network

I'm setting up Wireguard to tunnel from a cloud VM to our internal network. The local server is using the Wireguard plugin for OPNSense. OPNSense acts as firewall, dhcp, etc. The cloud VM is not ...
  • 593
0 votes
0 answers
133 views

How can i connect OPNsense router to Mikrotik Switch

I've encountered this situation where I'm to access the switch from my router: Here is what i have set: Lan (DHCP 192.168.50.1 , DHCPIPV6) WAN (DHCP 192.168.80.1,DHCPIPV6) Mikrotik (DHCP 192.168.80.1,...
1 vote
1 answer
1k views

OPNsense NAT/Port Forward: Forward multiple protocols and ports

I want to forward ICMP and specific TCP and UDP ports on OPNsense but I'm unable to find a concise solution. Specifically I want to forward ICMP, http, https and UDP 32768-65535. I'm adding a new port ...
0 votes
1 answer
883 views

OPNSense logs every second: postfix/smtpd OTP unavailable because can't read/write key database /etc/opiekeys: Permission denied

I am using Postfix on OPNSense as a Smart Host for my local servers to relay mail for notifications. When I first set it up, it would spam System: Log Files: General with the following message: ...
  • 129
0 votes
0 answers
482 views

Unbound not returning A records over IPv6

I recently replaced my pfSense installation with OPNsense and have been struggling a bit with the Unbound installation. In short, it's IPv6 enabled and everything works well (both IPv6 and IPv4) in ...
0 votes
0 answers
103 views

OpnSense: Interface Offline

I'm setting up a newtwork @ home and would like to keep Wired Devices and Wireless Devices separated. My main network interface is on em0 - 10.0.0.1/24 I've created a VLAN on em5 - 1.0.100.1/24 This ...
  • 1
1 vote
1 answer
2k views

OPNsense WAN failover causes disruption when non-active WAN is down

I have the latest version of OPNsense set up in a VM on ESXi 7. OPNsense is very similar to pfSense, and I suspect the solution would apply to both. All the NICs are PCI passthrough devices: A ...
0 votes
1 answer
558 views

OPNSense and Unifi RADIUS issue

I have an OPNSense firewall and a Unifi controller I am trying to enable Radius authentication and Radius Vlan assignment On the unifi side I have done the following Created an SSID Created A radius ...
0 votes
0 answers
53 views

How to implement firewall to grant network access for VPN users as-needed (per-user principle of least privilege, OpenVPN)

How can I setup OpenVPN in conjunction with my firewall in such a way that my VPN users' traffic is DROPed by default to all network resources, and only ACCEPTed through the firewall if that user ...
1 vote
2 answers
3k views

Offloading PPPoE from an OPNsense router

I'm running opnSense, a FreeBSD-based firewall and router similar to pfSense, in a virtual machine under VMware ESXi 7 on a Dell PowerEdge R230, as a router for my home network. No other VMs are ...
1 vote
0 answers
63 views

Can't see docker ports from external machines when using a veth interface with an OPNSense KVM

Quick summary of the setup: Ubuntu Server 20.04 with 4 network ports OPNsense router running in libvirt KVM One port is WAN, three ports are LAN (bridged) Router works great Server (same one running ...
2 votes
1 answer
33 views

Should I run 2 firewalls or manage everything from one?

I currently have a UniFI Firewall in place and I plan to get a OPNsense firewall mainly for a VPN. Setup: Modem - OPNsense Firewall - UniFI Firewall - VLANS (Rules made by UniFi) Are there any ...
  • 23
1 vote
0 answers
130 views

NTP ManualPeerList Client Sync Issue, Windows Server 2019

I am facing NTP syncing issue on my Windows Server 2019 which is syncing as an NTP Client. The OPNSense firewall is syncing from : 2.ie.pool.ntp.org 0.europe.pool.ntp.org 3.europe.pool.ntp.org I have ...
0 votes
0 answers
1k views

Load balancing with OPNSense, relayd or haproxy?

There is two main options for load-balancing in OPNsense (and pfSense): relayd and haproxy. pfSense has removed relayd in favour of haproxy [1,2], but OPNsense still supports it. In what usecases we ...