Messages

Yes, nice idea, too. I like it a little more permanent. Especially when configurate multiple opnsense at the same time for whatever reason. Thanks for mentioning.

Hello everyone,

I would like to give you some inputs. Maybe it will help others, maybe you could even include it as a feature/extension.
We have several instances of OPNsense. First we normally differentiated them with light and dark themes (especially HA).
But of course this is only partially sufficient later on - if you have more :).
In the past, I copied the themes and then edited

Code Select Expand

assets/stylesheets/main.scss
build/css/main.csswith vi replace command in both

Code Select Expand

:%s/#3C3C3B/#67b577/g
Now it's even easier.. although depending on the colours ugly 🙃

Code Select Expand

#change to themes dir
cd /usr/local/opnsense/www/themes/
#move old copy
mv cp_fw cp_fwold
#recopy original theme
cp -R opnsense cp_fw
cd cp_fw
vi build/css/main.css

#change background login-modal-head to
.login-modal-head {
  background: #67b577;

#and background navbar-default to
.navbar-default {
  background-color: #67b577;
Then you only have to select the new theme under System, Settings, General
It could also be integraded in theme customization. Altough I do know that's a super simple approach. It can help a lot.
Result is then:
You cannot view this attachment.
You cannot view this attachment.

In older version you could create a certificate right on creating a user.
Now there's no option to create a user certificate upon creation of that user.
In regards to create users for openvpn this makes the process a lot less straight-forward.

Ok, I'll try to reproduce.

would it help you if I later be able to retest? Then I'd stay at this point.

I'm also surprised that I'm having a 8G swap :D

The right spot to check the disk prior to upgrade is there now, but it hasn't been done. What's not so nice is that this doesn't seem to show in the upgrade window which is strange because that means tar isn't erroring either?

no was standing at the point "Extracting packages-25.1-amd64.tar..." for a very long time.

disk layout for the record.

Code Select Expand

=>      40  25165744  vtbd0  GPT  (12G)
        40    532480      1  efi  (260M)
    532520      1024      2  freebsd-boot  (512K)
    533544       984         - free -  (492K)
    534528  16777216      3  freebsd-swap  (8.0G)
  17311744   7852032      4  freebsd-zfs  (3.7G)
  25163776      2008         - free -  (1.0M)


Got surprised on one of my machines. Did not long ago a fresh install of an opnsense system.
Installed it on top of a proxmox hv. Where I added a 12G disk. Must made a mistake that I didn't expand the disk or whatever.
So my update to 25.1 did try to extract 25.1 and because it took forever I've taken a look into the system and was heavily suprised that I've seen the 100% usage. While I was surprised that I wasn't aware of the small size, I also was suprised, that there is no size checking here.

Code Select Expand

***GOT REQUEST TO UPGRADE***
Currently running OPNsense 24.7.12_4 (amd64) at Fri Jan 31 08:47:52 CET 2025
Fetching packages-25.1-amd64.tar: ........................... done
Fetching base-25.1-amd64.txz: ........... done
Fetching kernel-25.1-amd64.txz: ...... done
Extracting packages-25.1-amd64.tar...

Wouldn't it make sense to have here a business topic somewhere, so the business user can share there thoughts and problems at the right place, too?
Or did I oversee?

herzlichen Dank schonmal für das Plugin. Hat sich das schon jemand umgeschrieben für die "neuen" OpenVPN Instanzen?

thank you - was trying to configure wireguard along with the openvpn connection for side to side.
I wondered why I see neverever something coming up.
When I deselected the LAN addresses in the allow list, the tunnel was up pretty fast.

same here from 23.1.6 to 23.1.7
but see: https://forum.opnsense.org/index.php?topic=33655.msg162723#msg162723

did receive a failure at the webinterface

/usr/local/opnsense/mvc/app/library/OPNsense/Core/Backend.php:69: Class "OPNsense\Phalcon\Logger\Logger"

Das etwas spezielle: fixe DHCP Adressen müssen ausserhalb des DHCP Ranges liegen.

Check you are able to expose the real hardware accelerated encryption functions are exposed in your VM. I'm able to use CHACHA20-POLY1305 and get speeds closer to the wire.

this is not solved with moving to vmware. What "hardware" ar you using? VMXNET3?