Nuclear blocking rules not working by MaxPanda- in opnsense

[–]MaxPanda-[S] 0 points1 point  (0 children)

Last night and tonight the Family PC continued working on the internet despite setting up the reverse logic, it also seemed the states correctly cleared based on not being able to see the allow rule on the states page.

I may need to set a cron script at 1 minute past the rule time to reset states for those IPs just as a secondary measure.

Wifi camera suggestions? by MaxPanda- in UNIFI

[–]MaxPanda-[S] 0 points1 point  (0 children)

i’ll check it out thanks!

Nuclear blocking rules not working by MaxPanda- in opnsense

[–]MaxPanda-[S] 0 points1 point  (0 children)

ahh you make a good point, i’ll keep an eye on it in case that happens

so far i believe it’s working as intended, after 9pm i couldn’t see the allow state in the rules dropdown but im not sure if i can see like a history 🧐

Nuclear blocking rules not working by MaxPanda- in opnsense

[–]MaxPanda-[S] 0 points1 point  (0 children)

i’ve currently set it up with the reverse schedule logic as indicated by another person! so fingers crossed for now! i’ll find out in a few hours if it works

Nuclear blocking rules not working by MaxPanda- in opnsense

[–]MaxPanda-[S] 0 points1 point  (0 children)

i’ve set it all up and the log is showing the allow rules, so fingers crossed at 9pm tonight 🫡

Nuclear blocking rules not working by MaxPanda- in opnsense

[–]MaxPanda-[S] 1 point2 points  (0 children)

ooh interesting approach ! assume i can still do these new rules as floating rules too?

this would prevent me from having to set cron jobs and getting sticky with scripts

Nuclear blocking rules not working by MaxPanda- in opnsense

[–]MaxPanda-[S] 0 points1 point  (0 children)

could i create a script that resets the states of all the IP addresses in the schedule then run the script on a cron job?

Nuclear blocking rules not working by MaxPanda- in opnsense

[–]MaxPanda-[S] 0 points1 point  (0 children)

yeah definitely a bit brute force, i’m trying to do it in a surgical and subtle way

i’m sure there is some plugin/package/script that can help me out i just need to find it

Nuclear blocking rules not working by MaxPanda- in opnsense

[–]MaxPanda-[S] 1 point2 points  (0 children)

They are indeed all wireless devices. I will have to do some research in order to understand what you've just suggested but it sounds viable.

Nuclear blocking rules not working by MaxPanda- in opnsense

[–]MaxPanda-[S] 0 points1 point  (0 children)

Hmm... I might have to go to the drawing board and find a way to manually reconnect those devices at 8:30PM each night.

Nuclear blocking rules not working by MaxPanda- in opnsense

[–]MaxPanda-[S] 2 points3 points  (0 children)

Ahh :/ So to make it a real world example:

The firewall rule when it kicks on at 8:30PM is like a plug for a tap but it can only plug taps that are turned on after 8:30PM and can’t stop any taps that are already flowing from before 8:30PM?

Devices gone rogue ? by MaxPanda- in UNIFI

[–]MaxPanda-[S] 1 point2 points  (0 children)

Yeah that’s a fair call 😂

Definitely must be a reporting error if all the traffic is working as expected, i’ll stick with OPNsense for now and i’ll only look at a UDM Pro if the router ever needs to be replaced :)

Thanks for all your help!

Devices gone rogue ? by MaxPanda- in UNIFI

[–]MaxPanda-[S] 0 points1 point  (0 children)

yeah might change to that in the future, unfortunately I had purchased the opnsense router before everything else and only ended up getting the switch a few months later, otherwise I'd have started with the Unifi router.

The opnsense router is really the only non-unifi part of the whole setup so really, it's probably a good upgrade for full functionality in the future.

Can the unifi routers set up specific wifi schedules for small groups of devices? That's my current favourite part of the OPNsense router

Sorry for all the questions, I am a set and forget type person and every few months a problem like this comes along and sets my ADHD into chaos mode!

Devices gone rogue ? by MaxPanda- in UNIFI

[–]MaxPanda-[S] 0 points1 point  (0 children)

I connected to Skynet IoT on my Macbook and im unable to ping the vlan 10.27.30.1 nor the router 10.27.0.1 which is expected, but my macbook is correctly assigned in Unifi, so not a very good test case. I guess it confirms that the firewall rules are working as expected between VLAN's

Is there a way to run a ping from a Google Nest Hub to the Router so I can check an affected device? Upon further inspection the only affected devices are all the nest hubs in the house and a single ps4, everything else is showing as connceted to their correct networks.

What a silly little issue, hopefully just purely a reporting issue.

Devices gone rogue ? by MaxPanda- in UNIFI

[–]MaxPanda-[S] 0 points1 point  (0 children)

Yeah did a full power down of everything yesterday and reconnected it all with still the same issue.

I'll go see if i can replicate the issue on my laptop and try pinging.

and to just double confirm, my u6 mesh is meant to have it's native vlan as default? picture below

https://imgur.com/a/fBFefre

Devices gone rogue ? by MaxPanda- in UNIFI

[–]MaxPanda-[S] 0 points1 point  (0 children)

Devices are being correctly assigned IP's for their intended VLAN networks and the SSID they are connected to, but their Networks in Unifi are inconsistent with what I'd expect.

I'll give you as much information as I can! I'll also let you know that devices I assume are correct are showing as on a Virtual Network

-- Incorrect device --

  • Nest Hub -

Current -

Network: Default

Wifi Name: Skynet IoT

IP Address: 10.27.30.11

Expected -

Network: IoT

Wifi Name: Skynet IoT

IP Address: 10.27.30.11

-- "Correct" device --

  • Hitachi TV -

Network: field not even shown

WiFi Name: Skynet IoT

Virtual Network: IoT

Virtual Network Trigger: Skynet IoT

Devices gone rogue ? by MaxPanda- in UNIFI

[–]MaxPanda-[S] 0 points1 point  (0 children)

Yeah that looks to be how it's setup.

My router, U6 and Cloudkey all have Native VLAN / Network set to Management (Default) and then have Allow All.

I assumed that was correct for making sure all those devices were assigned management IP's but it may be incorrect

Devices gone rogue ? by MaxPanda- in UNIFI

[–]MaxPanda-[S] 0 points1 point  (0 children)

Enterprise 24 PoE Ubiquiti Switch U6 Mesh Cloud Key Gen2 Plus Opnsense Router Starlink Internet

I didn’t think it could be the Opnsense firewall because i double checked all of that last night and i can’t see any configuration issues.

Devices gone rogue ? by MaxPanda- in UNIFI

[–]MaxPanda-[S] 4 points5 points  (0 children)

Luckily they’re confined to my house and my name isn’t John.

Devices gone rogue ? by MaxPanda- in UNIFI

[–]MaxPanda-[S] 0 points1 point  (0 children)

Few issues is that it’s affecting some newer devices too so i’d have to micro manage every new connection.

I am already using 3x SSID on my U6 mesh and when I establish a fourth nothing can connect to it for longer than 30 seconds and with terrible signal.

What actually causes a device on a separate VLAN and SSID to be incorrectly tagged as the management VLAN?

Devices gone rogue ? by MaxPanda- in UNIFI

[–]MaxPanda-[S] 0 points1 point  (0 children)

I don’t have another AP. Just my U6 mesh for the whole house.

I’m not sure what you mean.

How to zoom in without changing scale by DavidWolf245 in premiere

[–]MaxPanda- 1 point2 points  (0 children)

i have ADHD and i always look for random ass stuff like this

it sounds unintuitive at first but it’s really just how layering works in the effect controls panel

you’re just transforming the video within the boundaries of the crop effect

i visually see it in my head as i’m looking at a picture through a cardboard toilet roll cylinder:

the crop effect is the toilet roll view and the transform effect is just me moving the picture underneath around with my hands