Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - franco

#1
Well, the right way would be to add a user with limited privileges. Admin + exclusions are not possible. I know that's a churn for "almost everything", but that's also not a typical use case.

You can also remove pages from the menu for everyone via adding menu override files, but the URLs are still accessible manually so only do this if you're not trying to improve security.


Cheers,
Franco
#2
> I think its irresponsible for OPNsense to expect us to not provide a direct iso link

I think it irresponsible to ask for direct bandwidth for uncompressed ISOs that are going to be abused by every cloud provider out there offering a "show me an iso and I'll boot your VM".

You'd think someone would be smart enough to allow decompression in their infinite wisdom. But I'm sure they know how not to support mirror maintainers at all. So a compressed iso is the best we've all got and can offer.  :D


Cheers,
Franco
#3
Hi,

It could be related to .10 but not the ticket.  Unsure how to debug this, but you can use

# opnsense-revert -r 25.7.9 opnsense

and a reboot to confirm that is the actual issue or not.


Cheers,
Franco
#4
This was fixed in https://github.com/opnsense/core/commit/7192016ac9

Thanks for the report!


Cheers,
Franco
#5
> Just following up that I still see a memory leak in dnsmasq even after a reboot and an update to 25.7.10.

I don't think it's surprising given the fact that the binary did not change.


Cheers,
Franco
#6
General Discussion / Re: NAXSI
December 24, 2025, 10:52:06 AM
> Nonetheless... that person is a troll. Floodding the forum with bullshit bingo, which potentially harm others.

Yeah, trolling back is not a great plan.

Just report the thread(s) and we'll deal with it.


Cheers,
Franco
#7
General Discussion / Re: NAXSI
December 24, 2025, 09:14:14 AM
@fastboot you posted this 3 times. If I see another one you get a temp ban because this is will be considered spam.


Cheers,
Franco
#8
This is a known issue on LTE connections.


Cheers,
Franco
#9
You'll need to be a lot more specific please.


Cheers,
Franco
#10
On ixl cards? Intel probably just broke it again after I had to advocate for a revert when the first commit came in.

https://github.com/opnsense/src/commit/aa1fce8528200

Good luck with that.

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=283820


Cheers,
Franco
#11
25.7, 25.10 Series / Re: NAXSI Archived
December 24, 2025, 09:02:57 AM
Yes, years ago.


Cheers,
Franco
#12
"force down" isn't about fbsd at all, it's a sense thing that came to be with the gateway monitoring and is effectively labelled incorrectly. It's more of a "do not use for automation" flag with the twist that it blanks the status for the gateway. Won't be easy to clean this up.  ;)


Cheers,
Franco
#13
> I have the same problem

I don't?  :)
#14
General Discussion / Re: Unable to remove neighbor entry
December 22, 2025, 08:25:16 AM
If you're not using static ARP and the neighbor is found via ARP it's not going anywhere.


Cheers,
Franco
#15
If you have a concept for it you can open a ticket and see.

For now I noted your wish, but would like to hear from others in unrelated topics, too. So far this is the only one I've heard.


Cheers,
Franco