Thanks to all the help, I managed to get my centos 7 server working perfectly with OPNsense.
Now I want to move it all over to Rocky. Having dome this before with SMF Forums, I expected this to be simple.
I copied my server1 and server2 conf files from /etc/httpd/conf.d
I copied the SMF databases over now I’ve got MySQL
I already entered the details into the DNS.
I cloned all the Aliases, Virtual IPs, NAT–>Port Forwarding and Rules, making sure to change IP and names etc.
Centos works, but not Alma.
I still have a lot of confusion over the OPNsense setup. As always, the more you read, the more confused you become because (like mySQL) there are lots of different answers, but I always seem to pick the ones that don’t work.
One confusion. I create an Alias for the Server - server1,
Content - What exactly should I use here. my INTERNAL or EXTERNAL IP Address? I see no place to put a NetMask or anything
Statistics - left blank
Description Server1 Server
I’ve seen both internal and external IP addresses. My guess is ExTERNAL, My daughter’s INTERNAL.
Now to Port Forwarding - This is what I have:
Disabled - blank
No RDR - blank
Interface - WAN???
TCP/IP version - IPV4
Protocol - TCP
Source - Advanced
Destination invert - blank
Destination WAN Address???
Destination Port Range - from rocky_ports to rocky_ports
Redirect Target IP - rocky_server (local or external IP? question above)
Redirect Target Port - rocky_ports
Pool options - Default
Log - blank
Category - blank
Description - Rocky Port Forward
Set Local Tag - blank
Match Local Tag - blank
No XMLRPC Sync - blank
NAT Reflection - Enable
Filter Rule Assoviation - None
I read this in reply to a similar problem on the OPNsense Forum:
In Interfaces > Virtual IPs > Settings keep the same netmask as for your primary IP address, probably /27.
In Firewall > NAT > Port Forwarding (and all firewall rules where you want to do something with a single VIP) use a /32 netmask, meaning “only a single address”.
Very confusing. Can you clear this up? Something isn’t right in my setup. See ???