The Automation Guy
Known around here
I agree with Mike A. You need to take a step back and start over. Remove any rules on the WAN that you created (port forwarding or otherwise). You really just want a "default" setup from OPNsense. This will stop any outside sources from accessing your BI server (along with anything else on your network). You need to do this ASAP to prevent any unauthorized access.
Once you have the OPNsense back to stock configuration, then you can start to research how to create a self-hosted VPN (with OpenVPN or similar). There are some good resources on Youtube. As MikeA mentioned, when it is all said and done, you will end up with a single port being forwarded in the WAN rules.
The easiest way to "test" if your VPN is working is to use your cell phone at home, but turn off wifi and force the phone to send data through the cellular network. If you can start the VPN software on the phone and it makes a valid connection to the OPNsense device (you can see the connection on the OPNsense overview page), it is working. If the connection fails, times out, etc, then it is not set up correctly. If it is working, you should be able to view your cameras on your phone via the BI app or a web browser just like you would at home over wifi.
Once you have the OPNsense back to stock configuration, then you can start to research how to create a self-hosted VPN (with OpenVPN or similar). There are some good resources on Youtube. As MikeA mentioned, when it is all said and done, you will end up with a single port being forwarded in the WAN rules.
The easiest way to "test" if your VPN is working is to use your cell phone at home, but turn off wifi and force the phone to send data through the cellular network. If you can start the VPN software on the phone and it makes a valid connection to the OPNsense device (you can see the connection on the OPNsense overview page), it is working. If the connection fails, times out, etc, then it is not set up correctly. If it is working, you should be able to view your cameras on your phone via the BI app or a web browser just like you would at home over wifi.