Messages

[System: Gateways: Configuration]

I've had problems with a 5G provider dropping pings with smaller than usual payload sizes, like those sent by dpinger by default. One thing to try is setting your ping payload size to 56 bytes so it looks like a normal ping.

To change this setting in OPNsense go to System: Gateways: Configuration, edit your gateway, switch on "advanced mode", and change Data Length to 56.

Creating your own scripts should no longer be necessary. The Beszel Hub Web GUI can now generate a FreeBSD command line you can copy which will take care of everything for you, including configuring automatic updates.

Console option 1 and 2 have always authoritatively changed defaults because they are tailored for initial setups and recovery purposes.

Thank you, this is good to know. I will need to change the LAN IPs of my system when I move it from test to production and wasn't sure whether the console or Web UI was the better choice.

I am guessing I will need to add additional rules for WebGUI and SSH access as well?

There are automatically generated rules for SSH and HTTPS that should take care of these, I think.

For anyone wondering, console option 2 did still work on an already installed system and updated the range in Dnsmasq.

I ran Option 2 twice (to change the LAN addresses as a test and then change them back) and both of my Dnsmasq ranges were deleted.

It looks to me like the process causing these regular CPU bumps is "configd.py console".

I found this issue in GitHub: wizard: auto configure DHCP/DNS registration query forwarding #8969. So it's a known limitation that the Wizard does not connect Dnsmasq and Unbound for you yet.

I'm also a pfSense user who's preparing to migrate (so I probably shouldn't be attempting to answer since I haven't migrated yet), but I think as of 25.7 you need to ignore any existing tutorials and look at the Configuration examples section of the Dnsmasq section of the documentation.

Basically you configure Dnsmasq to listen for DNS queries on an alternate port, and then configure Unbound to forward queries for your local domain to Dnsmasq. I'm not sure the Wizard sets up this forwarding for you, though, but it probably should.

The nice part of this scheme is that Unbound doesn't have to be restarted every time one of your DHCP mappings changes.