Messages

Ahh, excellent thanks - it seems I have auto-renew already on, so no action required.

Just checking - what is the best way to renew my Plus license?

I've got the email warning me it expires soon, the link inside takes me to TIP account settings. Eventually, I worked out I need to go top right from there to click on my username and select licenses (it would be helpful if the email link went straight there..).

It's not clear to me how I renew/extend - the only option appears to be 'Buy Licence' which takes me to the original packages page. Do I buy a new one here and it gets added to my existing subscription, or will I end up with a parallel license?

I'm keen to extend with the minimum of fuss. Thanks. 

Thanks Patrick - I have just set this up on my system, forwarding the data to the container on my unRaid System that monitors my array drives. All good!

They have a false positive reporting form in your TIP.

Yep, submitted. Just wondered if there was anything worth doing in the meantime. Hopefully it'll be reviewed swiftly.

AHH, brilliant - thanks both - I missed that. Didn't think to search for 43.131.0.0. (Yes, I'm on plus).

What's the best way to whitelist/bypass for that single address? I notice you can add domain whitelist in qfeeds, but not sure you can add an IP?

I searched the qfeeds block file and 43.131.7.8 isn't contained there.

virustotal.com also shows zero reported security issues wirh that ip

Vendors Analysis:
No security vendors flagged this URL as malicious
Final URL:
http://43.131.7.8/
Domain:
43.131.7.8

Look at your logs to see why it's being blocked for you?

All of that is in my original post.

It is being blocked by the qfeeds rule - as indicated by the firewall log, and as indicated by being in the qfeeds event list - despite, as I said above, not being on the IOC list, or the qfeeds alias list on the device itself.

Disabling the qfeeds rule resolves the problem.

Hi All,

I am not sure if this is a Q-feeds issue, OPNSense Firewall Issue, or a me issue.

After working for some time, I noticed the other day that my Aqara presence sensors can no longer be controlled by the Aqara app. Upon looking at the OPNSense firewall live log, it appears that connections from those devices into the firewall/out to the internet is suddenly being blocked by my Qfeeds rule blocking connections to the qfeeds created malware-ip feed.

EDIT: The event is also shown in the Qfeeds events pane.

When I search for the IP on the TIP, nothing comes up - no IOC's.

This (happily) appears to be the only connection being blocked by this rule - connection to this IP from the two Aqara Device IP's.

EDIT: If I go to firewall > Diagnostics > aliases and select the qfeeds malware alias in the dropdown, and search for the IP, it does not appear to be in the list. Why is it being blocked? What can I do to work out why this is suddenly being blocked. If I disable the qfeeds rule, all is well.

The IP in question is 43.131.7.8

Thanks - I appreciate any help anyone can give!

There seems to be some cloudflare wrong-doings. Either i'm told I've been limited or

Code Select Expand

Error 1000 Ray ID: a20430019928d268 • 2026-07-24 16:09:08 UTC
DNS points to prohibited IP

Code Select Expand

Error 1015 Ray ID: a204460fdb0cd268 • 2026-07-24 16:24:11 UTC
You are being rate limited


Yes, there was an issue yesterday that was quickly resolved after I submitted a ticket. All OK now for the Cloudflare issue.

That's a shame, I thought that would probably be the case - except for a very select few people, the same constraints/complaints about the Home tier remain for most. 

Should we be being offered an update to 2.6.x? Version 2.5.1 from May 22 is showing as up to date for me.

Yeah, I have noticed massive battery drain on my mobile when connected via WiFi at home recently caused by the email client, and also unable to send emails. When I have checked Tip, exchange2019.ionos.co.uk is also on the list which is Ionos UK Exchange Server for all their customer emails.

Hi all, I have been following this thread for a while with the thought evolution and also the changes in 26.1 related to interface tracking. My IPv6 experience is not very good, and I am certain it is a misconfiguration on my part and I have lost my way somewhere.

Is there a latest and greatest summary of optimum setup steps that include the most recent changes to interface tracking that I can follow? I use DNSMasq for my DHCP if that matters. I have both windows and android devices on my main Vlan I wish this to be enabled on and get delegated a /48 prefix on Zen UK.

Thanks.

Thanks.

Is there any more detail on the premium DNS? E.g. how to see if it is active and best ways to use it etc? Thanks. Keep up the great work!

I'm seeing the same issue. I found this thread before upgrading so I blanked all the MTU boxes prior to upgrading, but putting 1508 back into the PPPoE adapter post upgrade also results in breaking a lot of the internet as other people here mentioned. I've had to go back to blank/default for now which isn't ideal.

Has anyone who has seen this issue tried 26.1.2 yet? I am stumped.

EDIT: Setting WAN MTU to Blank on 25.7.11_9, and upgrading to 26.1.2 and then setting it back to 1508 works. It now works as before, and gives expected results of 1440 and 1460 here http://pmtud.enslaves.us/

I'm seeing the same issue. I found this thread before upgrading so I blanked all the MTU boxes prior to upgrading, but putting 1508 back into the PPPoE adapter post upgrade also results in breaking a lot of the internet as other people here mentioned. I've had to go back to blank/default for now which isn't ideal.

AHH, that saves me trying that then. Clearly something has changed in the implementation but it only affects a subset of previously working setups.