opnSense reply-to & AWS' source/destiny check
Never forget those two things:
- disable the AWS source/destiny check
- disable the
reply-to
check (functionality?) in opnSense (Firewall -> Settings -> Advanced)- interestingly, this applies to “WAN interfaces” according to the help string, yet my instance only has a LAN interface … 🤷🏼♂️