How to Update OPNSense to a specific version

Two days ago, I updated my OPNSense to version 20.7.2.  Then I started experiencing issue with my connection.  My connection would cut off after a few hours and I could not get onto the firewall.  Luckily, I have a backup of my configuration so reinstalling the firewall should not be a big problem.

Now, I have this issue of bring the firewall up to date.  If I use the standard method to update the firewall, it will update it to the latest version, i.e. 20.7.2 which is the version I had problems with.  Hence, I need a way to bring my firewall to the last good version, e.g. 20.7.1.

After consulting the know-it-all Google, here is what I found.  On the firmware settings page, rather than using the default flavor, choose "(other)".  In the box underneath, specify the version you want to update to, e.g.

<major version>/MINT/<decimal version number>/OpenSSL

20.7/MINT/20.7.1/OpenSSL

Save the settings, and then press the "Check For Update" button as usual.  You now should get an update offer to the version you specified.

I hope I don't need to do this again in the future, but I guess this is something good to know.

ref: https://forum.opnsense.org/index.php?topic=9638.0

Setting Up UPnP in OPNSense for XBox

I know UPnP is bad but there are situations where you have no other options but giving in and using the UPnP such as getting XBox NAT state from "Strict" To "Open".

Here are steps I have taken to enable UPnP for my Xbox.

1) Install os-upnp plugin.

Under System -> Firmware -> Plugins, look for os-upnp and install this plugin if you haven't already done so.

2) Give your XBox a static IP.

You can either do this by manually assigning an IP to your XBox, or by using reserved IP option.

3) Enable UPnP Service

Under Services -> Universal Plug and Play, enable options as shown in the diagram below.  Use the IP you set in (2) for the masked part.

4) Create an Aliases for devices intending to use UPnP

Under Firewall -> Aliases, create an alias as below.  In the content box, enter the IPs of devices which are intending to use the UPnP service.

  

5) Change the Firewall:NAT:Outbound modem to hybrid.

6) Add the manual rule for port forward

Under Firewall -> NAT -> Outbound, add a manual rule similar as shown in the diagram.

With the setup above, your Xbox should show its NAT state as Open. (you may need to reboot your XBox)

The above tutorial is based on an article I found at:

https://www.tweaking4all.com/network-internet/pfsense-strict-nat-xbox-one/

Hope you find this useful.