Messages

Could you please format this in way so it's readable?

Are you using the os-git-backup plugin? Because if you don't I don't quite get what you are talking about. There is no git repo in /conf/backup.

And you cannot undelete a file on UFS, sorry. Neither can you do that on ZFS. ZFS only lets you roll back if you created a snapshot before the delete operation. Manually or automated, but ZFS does not do versioning or history on its own.

If the interface is not configured up it won't go operationally up when you plug in a cable, either. Configured down is like switched off.

It's all step by step written on the migration assistant page in the UI. Just follow that. 🙄

You mean when you boot the installer from USB or did you do a production installation on a USB drive? Of course only configured interfaces are brought up on an installed firewall but you should really configure them with the UI, not employ arbitrary ifconfig commands.

1/ While back I upgrade from 25 -> 26. Now I see extra tab Firewall Rules [New]. Does this change my current configuration? Or I have to move the ' old ' ones to this? Or how does this work?

You are supposed to migrate your rules from the old to the new interface before upgrading to 26.7. So while on 26.1 use the migration assistant to do that. Instructions are on the migration assistant page in the UI.

Ein guter managed 10G Switch wird schon richtig teuer - dann noch die DACs ... das geht richtig ins Geld

https://mikrotik.com/product/crs310_1g_5s_4s_in

Deutlich unter 200 € für 8 Ports, neu.

EDIT: laut fs.com und anderen Quellen verbraucht AOC minimal mehr Strom und hat eine etwas höhere Latenz als passives DAC. Dafür ist es weniger störanfällig - klar bei Glas.

Wenn es nur um Home-Use geht würde ich nach 10G Kupfer-Hardware schauen - das spart gefummel mit SFPs und Glasfasern und hält die Kosten in Grenzen und die Verfügbarkeit ist gut.

Da bin ich anderer Meinung, aus Erfahrung. 10GBASE-T verbraucht irrsinnig viel Strom und wird auch entsprechend heiß. Es kann dir bei Switchen mit SFP+ passieren, dass man deshalb keine 2 Kupfer-Module direkt nebeneinander betreiben soll.

SFP+ im Gerät und DAC-Kabel sind im Moment der beste Weg bezgl. Stromverbrauch und Einfachheit. Aber auch Glas ist noch deutlich besser als 10GBASE-T.

There is no log rate limit, yet. @meyergru created a hack using the rule application limit and two consecutive rules to achieve the desired effect.

You do not need a port forward rule to access the UI on WAN. Just a simple allow rule on the interface and of course "disable reply-to" must ve active globally.

Oh and do not mess with the "listen interface" settings.

Destination NAT is port forward. Source NAT is just regular outbound masquerading.

If your WAN is an Ethernet (broadcast network) and you are trying to access OPNsense from a system connected to that same network, did you disable reply-to?

Originally you told the OP:

What makes you think that you need to install the bootloader to the secondary drive?

And the answer is that a ZFS mirror does not mirror the boot loader. So we are trying to correct that downright dangerous advice of yours.
If you run a ZFS mirror you absolutely must install the boot loader on the second drive because the OPNsense installer does not do that.

Clear now?

Don't know anything about PIA, but did you import

- a certificate only
- a certificate and a private key

?

Only with the latter you will be able to use that combination to sign more certificates. If it was the former, that is so your OPNsense can verify the peer of your VPN connection. How you get your client certificate - no idea, that's up to PIA I guess.

Gemini is stating BS. You cannot deprive a bridge device from operating on layer 3. It never will, because a bridge is layer 2.