Messages

I rolled back to the old rules. I have two WANs i.e. WAN and WAN2. I looked up a rule on Rules [Old] >WAN and i see this in 'Advanced features'



On my System>Gateways>Configuration i can see that WAN2 is set as active.

With this setup everything works.

Once i migrate to the new rules, do i need to change gateway for all the WAN rules to 'WAN' instead of default?

Hello,

I have a dual WAN setup and i am trying to upgrade the router over the internet. I did a migration but my forwarded ports from WAN stopped working. I rolled back to the snapshot with the old rules.

I have a few questions,

• Can i keep using using old rules and continue making changes to opnsense without breaking it (e.g. suricata)? Or does the function now depend on New rules?
• I followed the migration assistant. However i pressed the `Apply Button` in Step 4 and Step 5. Was that ok?
• Do i need to reboot the router after migration? I did not reboot, and could that be the reason that NAT broke for me.

Hello,

My router disk is getting full. It is the /var/log/filter which is the culprit. I have looked at the Rules and none of them has 'Enable Logging' turned on. How do i identify what is writing and more important have these logs rotated often?

Code Select Expand

root@OPNsense:~ # df -h
Filesystem                   Size    Used   Avail Capacity  Mounted on
zroot/ROOT/default           440G    3.1G    436G     1%    /
devfs                        1.0K      0B    1.0K     0%    /dev
/dev/gpt/efiboot0            260M    1.3M    259M     1%    /boot/efi
zroot/tmp                    436G    5.1M    436G     0%    /tmp
zroot/home                   436G    384K    436G     0%    /home
zroot/var/tmp                436G    688K    436G     0%    /var/tmp
zroot                        436G    384K    436G     0%    /zroot
zroot/usr/src                436G    384K    436G     0%    /usr/src
zroot/var/audit              436G    384K    436G     0%    /var/audit
zroot/var/crash              436G    384K    436G     0%    /var/crash
zroot/var/log                436G    1.9M    436G     0%    /var/log
zroot/usr/ports              436G    384K    436G     0%    /usr/ports
zroot/var/mail               436G    512K    436G     0%    /var/mail
tmpfs                        4.0G    4.0G      0B   100%    /var/log
devfs                        1.0K      0B    1.0K     0%    /var/dhcpd/dev
devfs                        1.0K      0B    1.0K     0%    /var/unbound/dev
/usr/local/lib/python3.11    440G    3.1G    436G     1%    /var/unbound/usr/local/lib/python3.11
/lib                         440G    3.1G    436G     1%    /var/unbound/lib

Code Select Expand

root@OPNsense:/var/log/filter # ls -la
total 4007690
drwx------   2 root wheel        192 Oct 12 11:01 .
drwxr-xr-x  18 root wheel       2432 Oct 18 03:01 ..
-rw-------   1 root wheel 1649451749 Oct 11 00:00 filter_20251010.log
-rw-------   1 root wheel 1866379578 Oct 12 00:00 filter_20251011.log
-rw-------   1 root wheel  588033927 Oct 18 04:56 filter_20251012.log

Thanks, that fixed the issue.

I cant find the plugin for nextcloud backup in the plugins.

I was able to follow these steps to reinstall. It was a painful exercise as i was doing this over internet and had to ask for a pair of hands.

Hopefully, the team can avoid such kind of issues in the future.

Please can somebody help me how to get past this,

Hello,

The gandi.net api supports TTL. However, it no exposed in the UI


Is there any way to set TTL?

Thanks

Thank you for posting this. I can confirm this behavior.

I migrated from pfsense to opnsense recently. And in pfsense i did not have to create this rule. After migration i went through similar experience, and ultimately settled on a NAT rule as you have described.

Hello,
I am migrating my config from pfsense to wireguard. pfsense allows one to select which tunnel should not be part of the Wireguard Group using "Interface Group Membership". Is there any way to set this in opnsense?

Here is a python script which creates a json file for upload.

Code Select Expand


import json
import uuid
import csv

with open('opnsense_aliases.json') as user_file:
  parsed_json = json.load(user_file)

cur_items=parsed_json['aliases']['alias']
with open('/tmp/pfsense_alias.csv', newline='') as csvfile:
reader = csv.DictReader(csvfile)
for row in reader:
    #print(row)
    item_name = row['name']
    item_data = row['data']
    item_type = row['type']
    item_description = row['description']

    if len(row['data'].split(" "))>1:
       item_data = "\n".join(row['data'].split(" "))

    item_uuid = str(uuid.uuid4())



    y =    {'enabled': '1',
            'name': item_name,
            'type': item_type,
            'proto': '',
            'interface': '',
            'counters': '0',
            'updatefreq': '',
            'content': item_data,
            'categories': '',
            'description': item_description
          }

    cur_items[item_uuid] = y
print(json.dumps(parsed_json,  indent=2))


Hello,

I want to create a 'new' alias using the API. I am able to modify an existing alias but get the following error when creating a new alias:

Code Select Expand

$curl -X POST -d '{"address":"192.168.42.42"}' -H "Content-Type: application/json" -k -u $key:$secret https://opnsense/api/firewall/alias_util/add/test
{"status":"failed","status_msg":"nonexistent alias test"}


How do i create a new alias using the API?