Linuxmuster-setup läuft nicht durch (SSH-Verbindung zur Firewall)

Server
21

Hi Fenyo,

unfortunalty the setup, either done by cli or WebGui, does make kind of a fuss to the firewall. You need to reconfigure the UnBoundDNS-Section of the opnSense after you ran linuxmuster-setup (see Murks nach linuxmuster-setup im Setup der opnSense - #18 von Adrian). Otherwise you will probably experiance DNS-Loop-Issues.

Kind regards
Thomas

22

Hi,
Thanks for the idea, but unfortunately I have set the unbound dns tool to query forward in opnsense, but it does not help, still no name resolution, only ping works after gateway recovery. One more oddity is that the server after websetup becomes read-only in the filesystem, so even if I wanted to I couldn’t poke into the config files.

lmnafterwebsetup
lmnafterwebsetup1920×1440 180 KB

In parallel, I also started to try another free solution, Linux Schools Server, which is far less painful to install, works for the first time, at least on a basic function level (dhcp, dns, samba, proxy etc), and it can be used to domain a Win10 client without any problems, but it has practically no documentation. In principle it has an exam user and tftp can be enabled, but it seems far from as elaborate as lmn exam mode and linbo.
I know free solutions, don’t want too many.

23

Hi Feyno,

im very sorry that you experiance such hardship while installing linuxmuster.net.
This is not normal.
Thomas has noticed the Problems some weeks ago and we were not able yet to resolve these.

I made some screenshots for you so you can see, how the unbound should be configured.
Regard the „use system Nameservers“ which has no tick!

Restart the services afterwards or the OPNsense itself and then test again.

Bildschirmfoto vom 2025-04-30 21-15-24
Bildschirmfoto vom 2025-04-30 21-15-241058×809 59.7 KB

Bildschirmfoto vom 2025-04-30 21-15-35
Bildschirmfoto vom 2025-04-30 21-15-351058×809 54.4 KB

I wanted to test the vanilla install this week: but there was no time. I’ll try to do that next week …
Yours
Holger

24

Yes, that’s exactly what I did, the description Thomas linked to did the same, but it didn’t help. I didn’t restart the opnsense but only the service (I don’t think it matters), next time I’ll be able to try again next week.