Messages

indeed, many vodafone ips are on the blocklist now, with good reputation.

thanks franco and the team. we are now updated all our firewall to 26.4 Business!

Work like a charme! very good work, thanks for your software !

thanks, i look and found nothing. but zero trust on me , so i wait for the patch , and closed the front.

i though the packages come directly from freebsd , so a okg update ngixn worked. so thanks for the inside!

so the fix is not in the version. it is possible to update from the cli? or only wait for the new plugin?

Hey,

which version runs on the opnsense plugin for nginx?

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295270

it came a to a critical heat buffer overflow.

Greets

so as example on 25.10 , we can on the cli /shell opnsense-patch , as example the sctp cve ?

as i see , you are in germany, have a good free day and long weekend!

thanks franco,

you and your team are awesome!

Is it possible to release the CVE patches that have been backported for 25.10? There are still some users who haven't upgraded to 26.4 yet because they're still in the testing phase and the rollout hasn't started yet (since a lot has changed).

greets

Franco, I really appreciate your work! There's no question about that. The only question was how critical this vulnerability is, and it currently appears that it doesn't need to be patched immediately. Is that correct?

Hey,

i saw that the community edition are become the fixes for several cve. What are with the business edition? give it the patches for 25.10 and for 26.4?

like CVE-2026-7164

greets

Hey,

hat noch jemand ein Problem mit der repo von mimugmail? kommt immer errro certificate verififcation fehler 44.

auf der shell kann ich das cert korrekt prüfen, aber sobald es als repo eingebunden ist, geht kein pkg ohne Fehler mehr.

opn-repo.routerperformance.net

Anders ausgedrückt.

wie müsste ich einen port forward (dnat), jetzt anlegen, dass trotzdem vorab! die regel auf dem , zb wan Interface greifen ( Blocklisten).

DNAT Regel, mit manuell, register rule oder erlauben.

Liebe Grüße!

 In den alten regel war ja, das wenn man blocklisten fährt, beim port forward/dnat den haken bei regel anlegen machen musste, damit die blocklisten vor dem , pass für die nat regel kommt.
Wie läuft da sjetzt mit den neuen regeln ab ( in der doku steht , manuelle als satndard) bloß dann würde doch nat vor den normalen regeln gelten und die blocklisten die auf den interfaces sind nicht mehr greifen.

thanks, now its loaded and worked like a charme!

Have a good weekend , and thanks for this beautiful software!

can i force the download?

i cleared the url and push the apply button = count = 0 .

How often load the database?

 I have used the maxmind on the community . After upgrade to business license, i thought , the geoip database come frome desico/ifconfig. And we must clear the url string.
But now its loaded nothing.

What must in the geoip url field , with a business license ?