Messages

i do like how pfsense has seperators  for the rules where this doesnt..

OPN doesn't have "separators" we have "categories" which in a way I would say is better.
You can create custom TAGs using Categories and than use these categories on the rules.
Each rule will have in default view on the left site the TAGs (with colors and name you choose) or you can in the FW rules tab enable categorization by those Categories. You can create some really amazing labeling with it.

questions does opensense offer like pfblocker

No but you can use adblock lists in Unbound, there are many good ones you just need to pick them, or you can add your own.

when updates are avaliable can you set things to auto update? or will it let you know a new version of opensense is avaliable

You can setup autoupdates for OPN but I would not advice that, basically for any network device.

will my G10Tek Fiber cards work with opnsense?  as i know pfsense doesnt like realtek cards.. 

If it worked on PF or FBSD it should work on OPN.

do you guys have a video you guys recommend for setting up things

For basic setups you can find in YT. But the best resource is the docs.
For setting interfaces is simple its done via Interface > Assigments.

If you want to do SVIs, so Interfaces per VLANs.
1st create a VLAN Interfaces > Devices > VLAN
Assign parent interface to it
Go to Interface > Assignments and choose the VLAN

The overall configuration of OPNsense follows the default logic as any other devices. Its not so hard I believe you can do it.
https://docs.opnsense.org/manual/how-tos/vlan_and_lagg.html

Regards,
S.

What is a policy for you?

For me a policy is basically the group feature, and zone is the specific interface.

Groups allows you to pair together interfaces that will inherit the same rules from the particular Group or groups.

Regards,
S.

i got multiple OpenVPN Server,Clients,, Multiple USers, Multiple Vlans etc.. how hard is it to transistion

Should not be hard to migrate just a lot of manual work.

Its better if you do re-implement everything manually, due to 2 reasons
1. Learning, so you get used to OPN vs PF
2. To have everything working correctly

If you try to push your way via some kind of random importer you may end up with partially broken setup and than be in cycles of trying to FIXIng it.
So its better to do it right the first time.

Regards,
S.

Planning to test it once I have more time.

I have two use cases I want to try.
First is same as yours.
Second is Steam link, to stream games from PC to TV.

I will definitely let you know.

Regards,
S.

I was able to reproduce this as well.

3 of 5 times when restaring ZA via GUI it crashed the whole FW with a kernel panic.

I mentioned that in my ticket additional to eastpect crashes. Provided crashlogs for both issues.

Regards,
S.

From the picture you shared,

This looks like a transparent bridge e.g a transparent FW.
Is your point about, you are worried that you can not without that feature create a transparent bridge?

Regards,
S.

I am seeing crashes on ZA as well.
Specifically this is happening when ZA has to route/process high amount of traffic (in my case ~2-2.5G/s) at its maximum it can do.
At least for me it doesn't look like is exclusive to WG as I am able to reproduce this issue on non VPN path as well.

I have already a ticket opened and I am working on capture the crash cores to sent to the support.

Regards,
S.

Looking forward for this plugin.

I have exactly the same problem/use case as you described + as well a problem with Steam play between PC and TV.
This plugin looks like exactly what I would need.

Fingers crossed it will be adopted by FBSD sooner than later!


Regards,
S.

It's honestly a bother because the Custom apps allowed more granular block or allow for stuff ZA didn't recognized such as DTLS, which is currently categorized as QUIC.

The feature is broken close for a year. I hope it will be fixed...

Regards,
S.

i tried this and couldn't get the custom application to hit. i assume i am setting things up wrong.

i tried adjusting the custom app like 10x different ways. when i go back to the live sessions after updating custom app / policy, i still just see the entry allowed (green shield)

Custom apps in ZA are broken. And for some time now.

I already did open a ticket (21.10. 2025) for it, but it's in a backlog.

Regards,
S.

Yea I see the same, the new widget looks great to the overall theme, but it was problem with longer names.

I would however not remove them from the service widget. As you can easily restart those using the service widget itself.
Its very handy.

Regards,
S.

Thanks for spotting! Easy to test?

# opnsense-patch https://github.com/opnsense/core/commit/b3112e5

Tested, this patch fixes the problem.

Thanks!

Regards,
S.

Same here,

Seeing this on the official dark & light  OPNsense theme.

Regards,
S.

Those you mentioned above + those we actually already mentioned when Q-feeds first appeared on OPN as solution ;)

- Specific Feeds for VPN providers
This is so we can include and exclude because your system my flag an IP that was abused by an malicious user, but it doesn't mean the IP is malicious itself.

- I would honestly like as well Feeds based on ASN, at least as mappings.
Feeds aggregated by ASN/Companies. This would give the user possibility to block and target specific malicious ranges from specific ASNs

- Geo based Feeds
Feeds aggregated by countries.

I have to remember what else I was suggesting last year.

Regards,
S.

If its a corruption on the wire, then the CRC counter possibly should increase. So try to check your Error Interface counters.

Otherwise it can be caused by asymmetry.

Similar to
https://github.com/opnsense/core/issues/10346

Regards,
S.