Messages

Thanks Franco I see it now. I knew I was being dumb :)

Hello. 26.7.3. I'm probably being extremely dumb but I do not see anything in regards to favourites. There is no star at the end of each menu item. Is there a manual switch that needs to be flipped to enable it?. Thanks in advance

Resize the widget, it should appear if you widen the widget

https://docs.opnsense.org/manual/dnsmasq.html#configuration-examples

Are `lan.internal` and 'guest.internal' standard variable names for lan traffic or is that something I have to setup separately or if I've never done anything with those names can I just ignore that part? I just want DNS resolution in Unbound and DHCP in Dnsmasq, that isn't necessary for that right?

You need to set up the query forwarding yes. So 'lan.internal' or just 'internal' works. Ignore the guest network if that's not something you need

Glad it's working :)

Leave the Domain box empty

If you're using Cloudflare Malware blocking DNS then it's 1.1.1.2.
1.1.1.1 CN is cloudflare-dns.com

Incorrect CN maybe? Show your Unbound DoT settings for Cloudflare

https://docs.opnsense.org/manual/dnsmasq.html#configuration-examples

Post #5 https://community.tp-link.com/en/home/forum/topic/214828
Apparently it's a built-in mechanism that cannot be turned off

First, let me apologise. The Tapo AP's ping those servers (reddit, netflix etc) to check the connection is still up. So sorry about questioning that. I still think that's absurd if they're in AP Mode. But it is a ping only, there's no data telemetry. You can block those pings on opnsense but the AP will show a constant red light as if network is down, even when it's up.

The telemetry you talk about isn't originating from the AP itself but from the clients connected to that AP (laptop, phone, pc etc.), as already pointed out. If you want to limit such telemetry then you can use Unbound DNSBLs or Adguard Home plugin on the main OPNsense machine (things may break and you'll need to unbreak them if you're aggressive in your blocking). You have a lot of plans with regards to your network but I think it's best to start with the easy stuff. Understand what an AP does. It's just a bridge to your opnsense. Make sure it's in AP Mode and not Router Mode. Unbound/Adguard for telemetry blocking. These are things you can do right now before you get your managed switch. :)

If it still doesn't work keep lowering your mss value until it does

Interfaces>wan

Try clamping your mss to 1492