Messages

thanks for this. I will try this also.

I just tried the opnsense-patch https://github.com/opnsense/core/commit/e18a9e9261146b16bf10d937df123681c3640a0d patch, but my nginx - services-nginx-configuration - Enable nginx still stays blank and after quite a while waiting it says enabled tag. Still very slow like it was(?)

N.B. It worked fine, just needed to restart nginx

Thanks for the notification. I've just updated the bios (DEC850v2)

correct, although this depends on what version of OPNsense you are running. It is now python3.11
so you should change the location to : cd /usr/local/lib/python3.11/site-packages/netaddr/eui

Hi

This has been issued earlier also, see forum post here:
https://forum.opnsense.org/index.php?topic=10380.0

and github:
https://github.com/opnsense/core/issues/3883

hope that helps

Upgrade went flawless here also. thnx! using Kea IPv4/IPv6 with Bind only, no unbound, Acme & Nginx.

I solved this, not by monit or cron job, but making a custom script in /usr/local/etc/rc.syshook.d/start

Code Select Expand

#!/bin/sh

/usr/local/sbin/configctl interface routes alarm
Named it 99-gatewayboot and made the file executable.

(99 to get it started as late as possible)

Now it is working and I have a fix for my Wireguard problem for now at reboot of OPNsense.

I have tested the command

Code Select Expand

/bin/sh -c '/usr/local/sbin/configctl interface routes alarm'after a reboot manually from shell, and wireguard instantly started getting data and starts working with ipv4 and ipv6 showing.
So I am getting closer.

I am thus looking for a way for Monit to execute this command with a reboot of my OPNsense box.

Can someone help me how to manage that with monit?

Hi,

I have my WireGuard not working after a reboot of opnsense ( looks a lot like this post: https://forum.opnsense.org/index.php?topic=41081.0 and this one https://forum.opnsense.org/index.php?topic=36688.0). When I just hit [apply] on the SYSTEM: GATEWAYS: CONFIGURATION page (without making changes) all starts working with WireGuard.

I'm trying to "fix" this by cloning the Monit alert settings [gateway alert] and in service test settings, execute and something like path:
/bin/sh -c '/usr/local/sbin/configctl interface routes alarm'

What is the cli command for "apply settings gateway, without changing configuration?"

Or is there another way to automate this after an Opnsense reboot?

Thank you for your help with this.

I'm not using Turnkey LXC Container, but docker. I think your container has no SSL certificate and gives nginx the error "SSL routines::wrong version number) while SSL handshaking to upstream"

when you set upstream - upstream Enable TLS (HTTPS) [to disable, not selected]

(and your https - http server - [your servername] - HTTPS Only [enabled] )

you should get nginx to handle the ssl and get an https connection to your container.

There is. I just converted my system from isc to kea.
For ipv4 this tool was VERY helpfull: https://github.com/EasyG0ing1/Migration/
For static ipv6 I had to enter them manually, but worked fine also.
Migration took only about 15 minutes because of this manual part for v6. I only use dynamic on the guest network.

I do not use DNSmasq, I only use BIND. (Opnsense - KEA DHCP4 and DHCP6 with Router Advertisements (radvd), and for DNS - Adguard Home -> bind on opnsense)

Since a version of 3 back, I have the update to run twice. The first time OPNsense 25.1.6-amd64 completes, it restarts the opnsense box but I have to run update again to have the missing:
os-bind  installed

and with this time the update os-postfix was also missing and installed the second run.

Others having this also?
(n.b. I only use BIND for dns, no unbound or dnsmasq etc)

thanks for sharing this. I have your WAN out rule reject IPv4_private_ranges added to firewall-rules-floating rules.
Is there a reason you have it at WAN instead floating?
And I have also added: 169.254.0.0/16

sounds promising...

I see you wrote Adguard, do you use this or Aguard Home? aka the plugin in - https://www.routerperformance.net/opnsense-repo/

With the latter, what installation guide did you follow? There is lots of info about it on the forum here, e.g. https://forum.opnsense.org/index.php?topic=22162.0