• 0 Posts
  • 18 Comments
Joined 10 months ago
cake
Cake day: September 8th, 2023

help-circle



  • I already do use firewall rules, this is just an extra step I take to segment things which also serves to make it a bit easier for me to remember certain addresses. It is entirely unnecessary, but I like it this way.

    Let’s say I have a static IPv4: 72.235.228.162

    And IPv6 block: 2660:1100:45f0:c17:: /60

    What I do is set up a Virtual IP in OPNSense and give it the address 2660:1100:45f0:c171:72:235:228:162

    Then I set up the firewall rules for that IP.

    Then I NAT 1:1 that IP to the NGINX VM’s IP and now the Internet doesn’t need to know about it.





  • Yeah, I gave up because it wasn’t really necessary for me. I have a /29 plus I can open ports so I just decided to set up an SMTP relay on my VPS because my ISP blocks outbound on port 25. I can still do inbound on port 25 so no issues receiving emails. It actually might benefit you to have an SMTP relay on the VPS to properly route the outbound email if you don’t want to have two Wireguard tunnels running.