OPNsense Forum

English Forums => 26.7 Series => Topic started by: ajaydharwa on October 16, 2026, 07:10:27 AM

Title: Internet Connectivity Issues After Adding or Removing Firewall Aliases in OPNsen
Post by: ajaydharwa on October 16, 2026, 07:10:27 AM
Hello OPNsense Community,

I am experiencing an intermittent connectivity issue with my OPNsense firewall and would appreciate your help in troubleshooting it.

System Information:

OPNsense Version: 26.7.6-amd64
Operating System: FreeBSD 15.1-RELEASE-p4
Issue Description:

Whenever I add or remove IP networks under Firewall → Aliases, internet connectivity occasionally stops working. At the same time, I am unable to ping our office's static public IP addresses.

The issue does not occur every time I modify an alias, but when it happens, connectivity is not restored until I restart the firewall.

I would like to understand why modifying firewall aliases might cause this behavior and whether there is a way to restore connectivity without rebooting the firewall.

My Questions:

Could this be related to firewall rule reloading, PF, routing, or gateway configuration?
Is there a known issue with OPNsense 26.7.6 that could cause this behavior?
Are there any logs or diagnostic commands I should check when the issue occurs?
Is there a recommended way to troubleshoot and resolve this issue without restarting the firewall?
Any suggestions, troubleshooting steps, or information about similar experiences would be greatly appreciated.

Thank you for your time and support.

Best regards

Ajay Dharwa
Title: Re: Internet Connectivity Issues After Adding or Removing Firewall Aliases in OPNsen
Post by: (MARLOO) on October 17, 2026, 05:16:56 AM
this is most likely related to PF rule reloading  or the gateway/default route becoming invalid after an alias change.


 
Quote from: ajaydharwa on October 16, 2026, 07:10:27 AMIs there a recommended way to troubleshoot and resolve this issue without restarting the firewall?

check

netstat -rn | grep default
pfctl -si
pfctl -sr | head -50
cat /var/log/filter/latest.log



if the default route is missing, disable and re-enable the affected gateway under System → Gateways, then apply changes