Messages

Yup, it's UEFI

Code Select Expand

root@OPNsense:~ # sysctl machdep.bootmethod
machdep.bootmethod: UEFI

Yes it's a mirror, but this command with the -l doesn't change the output

Code Select Expand

root@OPNsense:~ # gpart show -l
=>       40  937703008  ada0  GPT  (447G)
         40     532480     1  efiboot0  (260M)
     532520       1024     2  gptboot0  (512K)
     533544        984        - free -  (492K)
     534528   16777216     3  swap0  (8.0G)
   17311744  920389632     4  zfs0  (439G)
  937701376       1672        - free -  (836K)

=>       40  937703008  ada1  GPT  (447G)
         40     532480     1  efiboot1  (260M)
     532520       1024     2  gptboot1  (512K)
     533544        984        - free -  (492K)
     534528   16777216     3  swap1  (8.0G)
   17311744  920389632     4  zfs1  (439G)
  937701376       1672        - free -  (836K)

root@OPNsense:~ #
I ran all your commands and my boot loader is no longer too old.  Thanks!

Based upon this output:

Code Select Expand

root@OPNsense:~ # cat /etc/fstab
# Device                Mountpoint      FStype  Options         Dump    Pass#
/dev/gpt/efiboot0               /boot/efi       msdosfs rw              2       2
/dev/ada0p3             none    swap    sw              0       0
/dev/ada1p3             none    swap    sw              0       0


root@OPNsense:~ # gpart show
=>       40  937703008  ada0  GPT  (447G)
         40     532480     1  efi  (260M)
     532520       1024     2  freebsd-boot  (512K)
     533544        984        - free -  (492K)
     534528   16777216     3  freebsd-swap  (8.0G)
   17311744  920389632     4  freebsd-zfs  (439G)
  937701376       1672        - free -  (836K)

=>       40  937703008  ada1  GPT  (447G)
         40     532480     1  efi  (260M)
     532520       1024     2  freebsd-boot  (512K)
     533544        984        - free -  (492K)
     534528   16777216     3  freebsd-swap  (8.0G)
   17311744  920389632     4  freebsd-zfs  (439G)
  937701376       1672        - free -  (836K)

Is it safe (and correct) to run this:

Code Select Expand

mkdir -p /boot/efi/efi/boot /boot/efi/efi/freebsd
cp /boot/loader.efi /boot/efi/efi/boot/bootx64.efi
cp /boot/loader.efi /boot/efi/efi/freebsd/loader.efi
I don't plan on moving these drives to a new system, if I do, it'll be booting UEFI just like this one is. 

Success!  APCUPSD is now setup to access the UPS via /dev/cuau0.

I want to connect my OPNSense box to my APC UPS via a serial cable.  The problem is I can't find the serial port information.

I run

Code Select Expand

ls -l /dev/tty* and it only shows 3 items:
/dev/ttyu0
/dev/ttyu0.init
/dev/ttyu0.lock

How do I find my serial port?  How do I get OPNSense to leave it alone, and not try to output console information via the port? 

EDIT:  I've been banned from the forum?  For what, posting the solution?  Welll...no solution for you! 

EDIT:  I've been banned from the forum?  For what, posting the solution?  Welll...no solution for you!

EDIT:  I've been banned from the forum?  For what, posting the solution?  Welll...no solution for you!

EDIT:  I've been banned from the forum?  For what, posting the solution?  Welll...no solution for you!

After the couple past updates, at least 2 of us are having issues with VPN's and the Gateways. 

These are outbound Wireguard VPN's, from OPNsense, to PIA.  We have firewall rules setup to route traffic over these VPN tunnels.  After rebooting, the VPN tunnel will come up, but the traffic won't be routed over the tunnel, until we modify a firewall rule.  Then the rules are followed and traffic flows properly.

It's being discussed here:  https://github.com/FingerlessGlov3s/OPNsensePIAWireguard/issues/49

Searching the internet for ddclient and namecheap lead me here, which worked:

https://www.namecheap.com/support/knowledgebase/article.aspx/583/11/how-do-i-configure-ddclient/

Is there any update on this?  I'm stuck in the same problem.

os-dyndns works great.
os-ddclient doesn't work.

I've replicated the config from dyndns, to ddclient.  I'm trying to dynamically register subdomain.domain.net. 

I see the request in the logs:
76692 - [meta sequenceId="1"] WARNING: SENT: https://dynamicdns.park-your-domain.com/update?host=subdomain.domain.net&domain=user&password=myuniquepassword&ip=55.55.55.55

I eventually get a response back:
78126 - [meta sequenceId="22"] WARNING: <Err1>Domain name not found</Err1>

/var/unbound/dhcpleases.conf showed the entries.  I ran another nslookup and it worked perfectly.  I wonder what was up.  hmmm...

Thanks for the help!

By "domain" do you mean a windows active directory domain?  I did not.

I did tell the DHCP server to assign a "domain name" that is identical to the "domain" as defined under general - settings - system.

When a client performs an nslookup for "computername", I see in the unbound logs it is searching for "computername.domain". 

I'm running Unbound, and I cannot get the "Register DHCP leases" option to work.  "Register DHCP static mappings" works just fine.  Is it just me?