Recent Posts

91

Topic Suggestions / Re: How to Write WAN and NAT Port Forward Firewall Rules in OPNsense

« Last post by Home Network Guy on June 13, 2021, 09:15:59 PM »

This how-to has been written. See https://homenetworkguy.com/how-to/configure-wan-and-nat-port-forward-rules-in-opnsense/

92

Topic Suggestions / Re: OpnSense Howto Updates?

« Last post by Home Network Guy on June 11, 2021, 04:23:01 PM »

Thanks for the suggestion! The default direction is "in" for firewall rules and is what most users will want to use because it processes more efficiently and is likely easier to think about how to write the rules. When I specify settings for the rules, I usually leave out the values that should be left at the default (so I don't have to list 50 data elements and their values). However, I could make mention that you should usually leave that at the default.

I have been slowly working through my old guides and updating them. I've updated the following guides in the last few months: firewall rule cheat sheet, the Sensei Free vs. Home Edition comparison, how to configure WireGuard, and redirecting local DNS requests. Next on my list to update is the intrusion detection how-to since I know it's out of date. I'm trying to mix in new content in between updating the old content.

93

How-to Discussions / Re: VLAN DHCP In OPNSense?

« Last post by Ruok2bu on June 09, 2021, 11:26:06 PM »

I couldnt get OpnSense to work, even when matching the VLAN ids. So i gave up and bought another Sonicwall (Sonicwall SOHO 250).

Thanks for the help though!

94

How-to Discussions / Re: VLAN DHCP In OPNSense?

« Last post by Home Network Guy on June 01, 2021, 07:30:52 PM »

It looks like from the screenshot that you didn’t create the same VLANs on your network switch. The VLAN IDs you defined in OPNsense needs to match the VLAN IDs on your switch. You need to make sure you have the proper ports selected as tagged and untagged ports for each VLAN you create. It’s not a bad idea to configure your OPNsense/network switch from the default VLAN so you don’t lose access to the web interfaces.

95

How-to Discussions / Re: VLAN DHCP In OPNSense?

« Last post by Ruok2bu on May 30, 2021, 05:57:38 PM »

HNG, i need your help

I followed all the instructions in:

https://homenetworkguy.com/how-to/configure-vlans-opnsense/
https://homenetworkguy.com/how-to/configure-dhcp-vlans-opnsense/

Created the VLAN interfaces (i have 7), enabled DHCP for each of them in a different range, added the firewall rules to access internet (the current version of OpnSense auto adds the DHCP firewall rules).

But when i enable 802.1Q VLAN on the smart switch, my computer fails to get an IP address.

I was told by a friend that i should set VLAN 1 to untagged and the rest to tagged but that doesnt fix it. Find attached what the switch page looks like.

96

Topic Suggestions / OpnSense Howto Updates?

« Last post by Ruok2bu on May 28, 2021, 05:09:00 PM »

A lot of the guides are referring to functions that have been changed in newest version of OpnSense and its confusing to follow them as a newbie.

For example, the rules dont specify if IN or OUT should be used for direction.

Can you update them?

97

Troubleshooting / Re: Opnsense content filtering

« Last post by Home Network Guy on May 28, 2021, 12:38:16 PM »

Yeah the documentation is lacking for several things. That is one thing that inspired me to create my site. Not just for OPNsense but for other more advanced home networking topics.

98

Troubleshooting / Re: Opnsense content filtering

« Last post by ejayb9 on May 28, 2021, 12:09:12 PM »

Thanks for the reply.
Yes, I used a combination of the Opnsense documentation with 2 Youtube videos
https://www.youtube.com/watch?v=EWGt6mWhN_o
https://www.youtube.com/watch?v=PmmzsKuEdCw

The first is for pfSense but combined with the other 2 sources it helps to fill in the blanks.

Wish there was more documentation and examples.

99

Troubleshooting / Re: Opnsense content filtering

« Last post by Home Network Guy on May 28, 2021, 11:15:11 AM »

I just took a quick look and that is one of the lists on the Web Proxy help page on OPNsense so that means it is in the right format. I apologize since I haven't looked into implementing the Web Proxy in my network so I don't have much experience with it. I would like to explore using it at some point, but I thought for my purposes, it may be helpful for transparently caching commonly downloaded files so it more than one device on my network needs the same files to download, it will be quicker to hit the local cache.

100

Troubleshooting / Re: Opnsense content filtering

« Last post by Home Network Guy on May 28, 2021, 11:10:26 AM »

It sounds like you are trying to use the Web Proxy for a blocklist. I haven't tried using the Web Proxy for this purpose. I have created a few block lists but created a firewall alias which updates periodically and use a floating rule to block that list for all of my internal networks. The blocklist I use for this is a simple text file with IP addresses -- one on each line. (One list is the Spamhaus block list: https://www.spamhaus.org/drop/drop.txt)

When looking at that list you linked to, it is in a specific format that may only work for Squid and other types of firewall plugins/features that recognize that format. I don't know if the Web Proxy supports blocklists in that format.