Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - metacyx

#1
Quick update/mea culpa on this issue!

Turns out the v25.7.6 upgrade was a total red herring! My bad, everyone.

After some deep digging and going over my configs, I finally tracked down the real culprit: I messed with the NAT Outbound settings the day before yesterday, and that's what actually broke the IPv6 on WAN1.

It had absolutely nothing to do with the new version.

My sincere apologies for causing confusion and wasting anyone's time on this! Consider the "bug report" retracted. Thanks to those who looked into it!
#2
Hey everyone, need some help troubleshooting a weird issue after the recent update.

I just upgraded my OPNsense firewall to v25.7.6, and immediately ran into a serious hiccup with my WAN setup.

The Problem:

WAN1 PPPoE is totally failing to get an IPv6 address. I checked the logs, and the system is spitting out "DHCPv6 permission denied" errors specifically for the IPv6 assignment process.

The Weird Part (It's a Dual WAN Setup):

I'm running a Dual-WAN setup with two separate PPPoE connections. The thing is, WAN2 is working flawlessly—it connects, authenticates, and gets its IPv6 address without any issues. Only WAN1 is affected.

My Setup & Temporary Fix:

    My OPNsense is installed as a VM on Proxmox (PVE). (Just giving full context, though I doubt it's the root cause.)

    I tried rolling back to the previous version, and everything went back to normal. WAN1 immediately got its IPv6 address again.

It really looks like a bug introduced in v25.7.6. Has anyone else with a dual PPPoE setup run into this? Any thoughts on where I should start digging besides the logs?

Thanks in advance for the help!
#4
So, on my OPNsense box, I'm running dual PPPoE connections. When I enable Router Advertisements (RAs) via dnsmasq, clients seem to get their IPv6 addresses just fine. However, in actual use, IPv6 frequently drops or just won't connect. But if I disable the dnsmasq RAs and switch to Services: Router Advertisements (which is basically radvd), then everything works perfectly fine.
#5
Quote from: bbx8 on April 12, 2023, 05:43:47 PM
Correct. MSS clamping fixed the problem. Thanks.
Thank you so much for sharing, it solved a problem that has been bothering me for months
#6
I set up exactly according to this document, and I can access the LAN resources of the server, but the Internet cannot be accessed through the server. I have tested using Openwrt or Windows Wireguard to connect to the server and everything is normal, but there is a problem with OPNsense as a client accessing Internet through the server. This problem plagues me. It's been a long time, can anyone help me? Thanks
#7
I follow the document settings, but I can't Passing Traffic. I have tested many settings, but the problem still exists.