Видео

hard time configuring multiple IP via NAT 1:1 via OPNSense.

Is there a GUI for Bhyve on FreeBSD ??? KDE is nice GUI for FreeBSD but can I use Bhyve?

yeah we can actually skip the step with installing a vm to config the opnsense in the browser. We can use the SSH cmd on our host with the flag -L which can do a port forwarding. Example: Opnsense has the IP 10.0.0.2/30 so: ssh root@x -i .ssh/x -L 8443:10.0.0.2:443 after login in you should be able to go to your browser and write localhost:8443 to be redirected to 10.0.0.2:443 (keep in mind what you did in the opnsense Config either HTTPS or HTTP for OPNSense Interface)

This is great video, although I'm not sure if things have changed on version 7, As the triggers work, but for some reason they don't populate in the PROBLEMS widget, i even followed another guide, with slight check trigger and it does worked as well in the "web monitor" widget, it didn't populate in the PROBLEMS anybody else have same experience?

Add these two rules to your interfaces file and it will work correctly! (Hetzner) post-up iptables -t raw -I PREROUTING -i fwbr+ -j CT --zone 1 post-down iptables -t raw -D PREROUTING -i fwbr+ -j CT --zone 1

I think I followed all the steps, but when ufw is enabled my webgui console stops connecting, but I can connect via ssh from my local machine

Enabled UFW it would not let me into PROXMOX - had to go in and disable it. you have an alternate intructions with iptables only?

Getting ERROR: problem running ufw-init with ufw Bad argument `*filter' Error occurred at line: 26

Tried this on proxmox 8 and no longer able to access proxmox or ping the server- maybe you need to update the tutorial

The wireless capabilities are insane. Doesn't work for me in OPNsense (QCA986x/988x 802.11ac Wireless Network Adapter)

In 2024 - OpnSense has been using the latest version of FreeBSD way before PFSENSE. - In 2023-2024 Pfsense recommended everyone moved over to PFSENSE plus, so they did, they then said you shouldn't (screwed everyone). - Pfsense is less open-source in 2024 than OpnSense. - Pfsense in 2024 will absolutely mess up your routers config if you add another NIC to your Proxmox virtualisation server, it absolutely shits itself. - Opnsense tends to get more newer stuff sooner than pfsense. - Opnsense developers are more active in the community than pfsense.

How quick was that! Great video!

Thank you!! - Although it was just a walk-through, seeing how it all fits together is the perfect starting point for more advanced learning.

Thanks for the tutorial, I want to add a Realtek WiFi key, but I can't always do it.

Saved this beginner hours. Thanks for this simple run-through, just brilliant.

hi dear is there a way to access internal VMs by ssh from proxmox host ?

Just a question, could you not set up pfsense in hyper-v on your laptop and route all your traffic through it, as your laptop is far superior and will cut down what looks like a lot of extra baggage?

Amazing video, thank you so much for making this. Worked 100%. Only thing I'll add is ensure you either have a hosted domain name to use or a dynamic DNS host entry which needs to match the name of the router. Hope you come back and make more videos as yours is outstanding!!!

thanks

Would blocking Private IPs block my access to OPNsense firewall itself if it is only accessable on my LAN1?

Great video

Thanks

LoL. I wouldn't do it like this

Man, I watched this video 3 times, created and checked 3 times, and still I have a problem: I can reach my mail server that is on my proxmox from OUTSIDE od my LAN, but cannot from INSIDE the LAN - what the heck? OPNsense I mean.

Is it required to have a FQDN ? I have researched and it looks like you do require a FQDN. Is there a method to not need a FQDN?

very well huge help thanks a lot !

I suggest merging the first "allow internet" and the second "block private ranges" rules together for simplicity. Instead of the two, you can make one "pass" rule where you choose "private ranges" as the destination and then INVERT the match. This way, the single pass rule allows traffic to all destinations except the private ranges - in other words only the internet. As a rule of thumb, avoid drop/reject rules when you can simply make stricter pass rules on top of the default "drop everything" rule.

thanks for the video, What are the strategies for mitigating hard drive wear? after around 4 to 5 years it will die, you will need to stop the server to change hardware, how do you handle that?

This is brilliant, thank you for this. Best opnsense video I've seen so far on firewall rules.

The firewall rule to allow incoming traffic on the WAN should use "WAN address" as destination, not "This firewall".

How will the development of High Availability (HA) be implemented for the OPNsense firewall?

Why talking about the box?

Oh thats fab! ..my preconfigured captive portal worked too ;)

спасибо было понятно

@Gateway IT Tutorials: do you have a tutorial on how to make ZFS over iscsi work with proxmox? I tried with the newest versions but with no luck. Even patched from the most recent source code, but it is not working with TrueNAS. Seems not to work because truenas no longer use istgt for iscsi implementation. Do you have any suggestions for me?

What is the difference between UFW or NFTABLES? I aways use NFTABLES

Much better than the Hetzner tutorial ! Thanks a lot!

This is a brilliant tutorial - many thanks. The gateway trick is very useful. However would you be kind enough to show us how you setup the virtual machines in Virtualbox? That way we can setup our own firewall test-beds to check the firewall rules / DNS / web access etc is working - for example we could emulate a guest user but make sure the guest can't access the firewall admin page etc. I hope that's ok, many thanks in advance.

Thanks for this!. I'm on TrueNAS-13.0-U3.1 and I had to select 640x480 to get Bhyve menus to show up correctly.

how did you connect both debian with firewall.

So If you always use ip addreses of your devices (like ip cams) you will never get an encripted connection? You need to setup a dns for each device?

Thanks for this video

Thanks for taking the time to make this video but please include the commands

Wireguard setup is definitely wrong

how do you go about obtaining the domain name?

I keep getting check that a DNS record exists for this domain

You are a very good teacher, thanks for the upload!!!

i think its only suitable for those who already has home server running 24 hours and have extra storage space to spare.

amazing video. thank you for sharing this. your instruction is crystal clear

Great video, thank you! Regards from Chile.