Messages

Ok figured it out and got it working. Under advanced firewall settings, there's a checkbox labelled "Disable automatic rules which force local services to use the assigned interface gateway." Uncheck it and the OPNsense box can reach things on the other side of the tunnel.

I have faced the same issue after migrating from Legacy IPSEC tunnel to IPSEC Connections.
This setting solved the issue.

Hi,

Problem solved after firmware upgrade to latest version    25.1.2

Thank you

@newsense : Thank you for your response but no luck here...
From the Serial console, I can see that there is a new firmware available...
I'm Currently running OPNsense 25.1.1 (amd64) at Sat Mar  1 03:00:49 IST 2025
The latest one is 25.1.2 >> released yesterday 2025-02-28
Trying to update from the console ...
Hope it will solve the issue...
Will update you on the outcome...
Thanks again.

some more info - if this helps :

************************************************************************************************
root@PPDAS-Firewall:~ # sudo configctl service status unbound
unbound is not running.



root@PPDAS-Firewall:~ # service unbound status
unbound is not running.
root@PPDAS-Firewall:~ # service unbound start
Cannot 'start' unbound. Set unbound_enable to YES in /etc/rc.conf or use 'onestart' instead of 'star                             t'.
root@PPDAS-Firewall:~ # sudo service unbound start
Cannot 'start' unbound. Set unbound_enable to YES in /etc/rc.conf or use 'onestart' instead of 'start'.
root@PPDAS-Firewall:~ # sudo service unbound onestart
Obtaining a trust anchor...
Starting unbound.
[1740771629] unbound[46595:0] error: bind: address already in use
[1740771629] unbound[46595:0] fatal error: could not open ports
/usr/local/etc/rc.d/unbound: WARNING: failed to start unbound



root@PPDAS-Firewall:~ # service webgui status
webgui does not exist in /etc/rc.d or the local startup
directories (/usr/local/etc/rc.d), or is not executable
root@PPDAS-Firewall:~ # sudo service webgui status
webgui does not exist in /etc/rc.d or the local startup
directories (/usr/local/etc/rc.d), or is not executable
************************************************************************************************

I'm completely new to OPNSENSE - just trying it out on old hardware.

Overview :
Fresh installation OK
Multi-WAN setup OK
Firmware update OK
Other basic settings OK
VPN setup OK
Unbound DNS - OK
--- so far so good---
Unbound DNS - added Adguard blocklist
GUI crash - BUT otherwise the system is still working OK
GUI error - 503 Service Unavailable


Can anybody help with this? or else I have to perform a Reset to factory defaults and reload my last good configuration?