Messages

I am not sure about this one, so I am posting it here. I think I do see a higher RAM-usage. But I have no historical data and that VM has only 1 Gig of RAM to begin with.
Right now, after a reboot, it looks okayish. Maybe others have better data.

 

Proxmox?

I am running UFS.

It appears that the "cache" metric no longer exists in the memory line of the top command. "Laundry" exists in place of "cache," and it shows a non-zero value.

If the "System memory" in "Reporting Health" follows the memory metrics used by the top command, I believe it would be better to eliminate "cache" and introduce "laundry."

Is it not possible to change the cache display, given the need to maintain compatibility with past data?

In case you want to try it: opnsense-core -a sopex 5bfd77c

Otherwise it will be in some following release.
https://github.com/opnsense/core/commit/5bfd77cff2fcaf995db88cc5d4bef1eb070c95d7

The design language of the widget is completely different from rest of the project.

That being said it's very space efficient and you can very easily identify what is enabled and what disabled.

It's a combination of the virtualized host you are using and the way FreeBSD assigns interfaces.

Make sure "Prevent interface removal" is ticked on all your interfaces.

Also, we are at 26.1.11 now :)

I would make sure you have all the interface offloading disabled, but other than that, I am not sure.

<yourIP>/ui/interfaces/settings

Also, what is version 14?

Great guide, as always!

Was it working before? 26.1.9? Or we don't know?

You probably should use Traffic Shaper:
https://docs.opnsense.org/manual/shaping.html#introduction

The settings you are changing don't necessarily do what you would expect:
https://docs.opnsense.org/manual/firewall.html#settings (Choose priority)

Have you gone to your WAN interface settings on OPNsense and disabled "Block private networks" and "Block bogon networks"? I would start there.

You can also try deleting and re-adding the WAN interface.

You can always just buy a license if you plan to use it longish term. No? At around 4 months, you break even.

But I believe it as the automatic table mentions $0.05/hour + Azure infrastructure costs

No, these are not our CVEs.

I meant something along the lines of
"This business release is based on the OPNsense 26.1.9 community version with additional security and reliability improvements." because this person probably got a bit overwhelmed with all the improvements on the new version.

We are in a CVE apocalypse ofcourse no need to micromanage each security fix :)

May we expect a fix for the business edition as well?

The most recent release from today is based on 26.1.9 and there is no fix regarding this CVE mentioned on the page. So I guess, it might be still vulnerable.

Or should we go the manual path by setting the tunable?

It's fixed. Maybe there is a need for better visibility but business edition always gets security fixes.

This is the relevant mention:
o src: arbitrary file overwrite via the KTLS receive path[15]

We don't have much budget. I remember this 4600 cost around $15,000, and now the new 3790 costs around almost $20,000.
I plan to replace it with a spare HP DL388, but there's a problem. The HP server takes too long to boot up, and the self-test takes several minutes, which is quite a headache.

There is also a middle ground between spending $20,000 and wasting time and electricity with a DL388 just to run a firewall.

Official opnsense hardware :)

https://shop.opnsense.com/product/dec3940-opnsense-rack-security-appliance/

I also install nano, much better experience :) Editor wars 2.0

And on July 29th its coming to OPNsense. If all goes well :)