routing

Hi! I'm trying to get wireguard to connect from one internal IP on my freebsd-server but the traffic doesn't seem to go through the tunnel. cat wg0.conf [Interface] PrivateKey = Hidden Address = 10.72.42.46/32 DNS = 1.1.1.1, 8.8.8.8 [Peer] PublicKey = Hidden AllowedIPs = 192.168.10.138/32...

I'm trying to emulate some functionality from a previous linux-based OpenVPN solution onto a new FreeBSD-based OpenVPN solution with different IP ranges. Old VPN network: 10.0.0.0/8 (there are lots of smaller customer ranges within for isolation) New VPN network: 172.29.0.0/16 (ditto)...

Hi, My freebsd has multiple network interfaces and have one default gateway e.g. 192.168.0.1/24 . I want that the gateway should be 10.0.0.1/24 when any request/traffic arrives on the IP 10.0.0.20/24, I mean it should not consider the default gateway when the traffic comes for IP 10.0.0.20/24 ...

Hello, I know, I put this thread in the [firewall/PF] place too, but I think the problem is the fib part, it's why I add it here. I want to change my firewall (FW) because it's not a freebsd machine. The freebsd machine will become my new firewall. The version is "13.2-RELEASE-p8 FreeBSD...

Hi, I have a FreeBSD server running 14.0. It's primary network interface receives public IP and default route via dhclient. Sometimes after fiddling with static routes in fib 1 and adding these to rc.conf I need to run: service netif restart service routing restart This however removes the...

Hello, I want to change my firewall (FW) because it's not a freebsd machine. The freebsd machine will become my new firewall. The version is "13.2-RELEASE-p8 FreeBSD 13.2-RELEASE-p8 GENERIC amd64 I want to create a Wireguard VPN tunnel between my new firewall and the outside, but only for...

I'm missing something obvious. Why NAT doesn't work in a Wireguard server to route clients' traffic? ext_if="vtnet0" wg_clients="10.40.0.0/24" nat on $ext_if inet from $wg_clients to any -> ($ext_if) The server's Wireguard IP address is 10.40.0.1, the client's - 10.40.0.30. Running tcpdump on...

having an issue... Bhyve runs fine by itself. Bastille runs fine by itself. When I try to run them at the same time Bhyve messes up my routing completely. I think it has something to do with Bhyve creating a 2nd bridge and you can't have 2 bridges at once? or I need to add the bhyve bridge to...

UPDATE: I may have actually solved this, by swapping the order so that the jail creates the RFC1918 address on that interface FIRST, and then creates the loopback interface second. Now this confuses me even more, since I cannot route using ipv4 from the host system on that FIB, but it is...

Hi, I am using PF firewall and have a logical interface vlan1010 which has a live IP, I want to write a nat/masquerade rule which says that whatever packet goes out from this interface, it should have source-IP same as the live IP assigned to this logical interface i.e. vlan1010 and when the...

tl;dr - Second NIC doesn't get a def router via DHCP breaking multiple routing table setup Hello, I need to setup a VM with 2 NICs on DHCP, we need a separate routing table (fib) per NIC, but I'm not getting the default router for the second one. What I've done so far: In /boot/loader.conf...

I run FreeBSD 13.1 RELEASE on my RPi 3 Model B+. I want to set up Wireguard client on it, so I have installed wireguard from pkg. To run the client, I use wg-quick up /path/to/config. The command gives out no errors, I can access local hosts, but I cannot access the Internet. I believe this is a...

Hello everyone So i need some assistance with a configuration ive been doing some reading before i joined the forums and this is what i need. I'm coming from a Linux specifically Debian background and am interested in adding a FreeBSD vm in my stack for some networking services as i already us...

no internet from inside my jail... would like to assign jail an ipv6 address I added this line to sysctl.conf security.jail.allow_raw_sockets=1 I have some sysctl forwarding IPv6 jail.conf is as follows: hydroshop { host.hostname = "hydroponique.shop"; # Hostname...

Update 2023-12-20 This guide applies only to the VMware based "Virtual Server Cloud" VPS servers, which have been discontinued in mid 2023 and replaced with the "VPS Linux" servers. Due to problems with getting IPv6 to work reliably with the IONOS VPS, I have also updated the IPv6 Networking...

I use the {link removed} service, most recently configured to work with my wired network at home. gif(4), em(4). Re: <https://forums.freebsd.org/posts/556270> I temporarily used Wi-Fi instead of a wired connection, to compare speeds. Then, wishing to revert to wired networking: service netif...

I have a FreeBSD router that doesn't seem to be forwarding packets to its default gateway, and I can't see why that might be. Here's a diagram of the network: I would like to get traffic from client -> router1 -> gateway -> internet. client is able to ping router1, and router1 is able to ping...

I'm trying to build a multi-router setup in VirtualBox using FreeBSD machines as the routers. I have two VMs, router-1 and router-2, which are on the same subnet and are able to ping one another. router-1 has a bridge interface with the host machine and is able to ping the wider internet. It...

I'm having some problem setting routing inside a jail. I added to rc.conf (inside jail) and it did not work. I then tried "route add 172.16.0.1" and it responded "route: writing to routing socket: Operation not permitted" I think it is not possible to set routing from inside. So, how do I...

I have a problem that I think FreeBSD can solve for me. I have routers at various off-site locations that I need to be able to log into via SSH for monitoring, configuration, and maintenance. The problem is that none of the routers have static IP addresses, some of them are behind carrier NAT...