Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - franco

#1
Are you referring to this commit? https://github.com/opnsense/core/commit/7e93cdb63f030

I'm not catching the error in either, which doesn't mean it's not there.

Might be worth checking the system log file as well for "ifconfig" failures.


Cheers,
Franco
#3
I checked legacy associated rules in the config.xml and they appear to have source and destination. I export them and the CSV has source and destination.

Can you check on your end where the data goes missing? I don't see a lot of potential for losing the values since the CSV is the same structure for all rules.


Cheers,
Franco
#4
26.1 Series / Re: Suricata - Divert (IPS)
Today at 08:37:35 AM
My understanding is no. No application on divert socket = no traffic passing through.


Cheers,
Franco
#5
Historically "lo0" hasn't been an interface to put any rules on. I'd simply discard it.


Cheers,
Franco
#6
Makes no sense to me. What does this dump?

# pluginctl -g filter.rule


Cheers,
Franco
#7
Quote from: RamSense on February 01, 2026, 06:41:18 PMSee the screencapture of the interfaces - lan is there.

Ok, not an anti-lockout issue IMO.


Cheers,
Franco
#8
26.1 Series / Re: Nextcloud Backup creates multiple files
February 01, 2026, 06:31:36 PM
Just for reference the plugin maintainer/author approved these changes in October. https://github.com/opnsense/plugins/pull/4952

It was in part merged because Fabian doesn't have time for improvements in OPNsense these days and we don't want to demotivate community submissions either.

Don't mind a bit of discussion, but this outcry is a bit misplaced in my opinion for a community-based plugin and changes in plain sight (on GitHub).


Cheers,
Franco
#9
Yes, these rules don't really belong to the rules GUI. Just there for visibility as generated by the system for other settings/configuration.


Cheers,
Franco
#10
Okay, once more. This has nothing to do with the upgrade whatsoever.

Go to Interfaces: Assignments and see the "Identifiers" for all your interfaces.  I'm guessing there's no "lan" because you deleted and redid it at some point, could be years ago.


Cheers,
Franco
#11
If you deleted your original LAN interface (and possibly your WAN, identifiers "lan" and "wan") interface the ancient anti-lockout code can't really guess which one is secure so it uses the first "optX" as the base for the anti-lockout.  If that's the case the best solution is to disable the anti-lockout and just add manual rules that emulate the behaviour if you want/need it.


Cheers,
Francp
#12
26.1 Series / Re: Nextcloud Backup creates multiple files
February 01, 2026, 03:23:43 PM
There will be no flip-flopping. If you want you can install the plugin from the stable/25.7 branch and lock the package.


Cheers,
Franco
#13
> This is rather important to me, because I am using ISC DHCP and a lot of static mappings as well.

I'm not aware of a static mappings issue (yet).


Cheers,
Franco
#14
26.1 Series / Re: Nextcloud Backup creates multiple files
February 01, 2026, 12:19:38 PM
This change was submitted by a user to avoid backing up configs that haven't changed overnight and to get the full history.


Cheers,
Franco
#15
26.1 Series / Re: Can't import rules in new rules UI?
February 01, 2026, 12:18:51 PM
Which is planned based on user feedback in 26.1.x ;)

As said elsewhere we did not expect so many people to migrate this quickly.  It's very good, just not expected.


Cheers,
Franco