Skip Navigation

User banner
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)N
nap @ nap @sh.itjust.works
Posts
1
Comments
11
Joined
2 yr. ago

  • Need Support: DMZ at home with nginx proxy to LAN

    Jump

  • Update: ditched the second OpnSense and figured out that MTU discovery with PVE and stuff needs some hard tweeking. Got it to work now. Hit me up for guidance 😅

  • Need Support: DMZ at home with nginx proxy to LAN

    Jump

  • Should the nginx Proxy receive that package? If i trace between the LAN Host and GW, there are no Public IP's

  • Need Support: DMZ at home with nginx proxy to LAN

    Jump

  • I think I let it rest for a day, I'm confused

  • Need Support: DMZ at home with nginx proxy to LAN

    Jump

  • Hm, could be a little bit much but Public IP -> WG0 -> Proxy -> Router -> Server and back should not be ok?

  • Need Support: DMZ at home with nginx proxy to LAN

    Jump

  • What? That's totally confusing. Took my Laptop (192.168.35.242), tethered to my Mobile (192.168.35.116) and wiresharked. 192.168.35.0/24 should never ever be a part of my Network.

  • Need Support: DMZ at home with nginx proxy to LAN

    Jump

  • Never got the time to learn to read Captures :'(

    At a time I tried to use two proxies but I changed it back to one. The host I try to reach is a Docker Host with Immich running. So the only real proxy should be "192.168.1.1".

  • Need Support: DMZ at home with nginx proxy to LAN

    Jump

  • There is one DNAT rule at the public OPNsense routing the HTTP/s traffic to my proxy. Inside my DMZ an LAN is no NAT, only routing. Back out again there is a Masq/SNAT rule for my local IPs

  • Need Support: DMZ at home with nginx proxy to LAN

    Jump

  • green boxes are IP, red are FQDN

    Curl capture (made first so DNS is captured aswell)

    Firefox capture

  • Need Support: DMZ at home with nginx proxy to LAN

    Jump

  • I tested with my Mobile with LTE and got the same results

  • Need Support: DMZ at home with nginx proxy to LAN

    Jump

  • Ah sry, bad choise but i masked my real LAN IPs

  • Selfhosted @lemmy.world
    nap @sh.itjust.works

    Need Support: DMZ at home with nginx proxy to LAN