Messages

I run a public WLAN with a Captive Portal. Is this done with php, and therefor in danger. Or does that work without?

Hi,

When you boot the FW with the installer USB Stick all interfaces are automatically up.
When you boot the "installed" FW (same kernel, same config) only configured interfaces are up.

When you think about it it is clear, but I was wondering why the interface is not shown a link and a connection speed after the install, when a cable is plugged in. And I posted is because when I search for it I could not find it.

CU
Jens

Hi all,

this is more a information for other people. I had the problem that the network interfaces did show connections when booting from USB Stick, but not anymore when booting from SSD.

I found the problem myself, but maybe some has the same problem.

When booting from USB all interfaces are configured as UP.
When booting from SSD that is not the case. Only interfaces that are configured are set to up ;-)
simply run ifconfig ix0 up helpsm or whatever you interfaces name is.

May it helps some to save the 3 hours it took me to find it.

CU
Jens

The problem has been solved. debian.org and wikipedia.org are redirecting to www.debian.org and www.wikipedia.org. You have to these host as well, than it is working.
The intermittent problem appears to be a browser cache problem.
With Curl you can see the error and no intermittent problem does not exists.

The problem appers to be working temporary and then it re appears.
I deleted the post, because I tried after a reload of the alias and it worked.
Now about 10 minutes later the problem appears again.

I also added 1.1.1.1 to the allow list, and IPaddresses are working all the time.

I get a connection refused, message when I try it now.

Hi all,

I try to setup a "Child" setup with the help of Captive Portal.
I want to limit the internet time of my child, so I want to have Captive Portal that allows the child to use the internet for 30minutes after the chores are done and he got a ticket.

I also want a block and an allow liste. The blocklist works good, but the allow list does not work.
I setup the captive portal based on the Guestnet documentation. with my own firewall rules.

I added a picture of the NAT Rules and the No RDR rule. Also about the Firewall Rules.

To simplify it the allow_list_host only contains wikipedia.org and debian.org. It should be longer, but for debugging it removed the rest.

The list show the correct IPs in Firewall-Diagnostics-Aliases. If needed I can add a picture of it.

Can someone give me hint what I did wrong. Or how I can test it what goes wrong?

This was asked before with no answer

Thanks for the help.

CU
Jens


P.S.: Latest updates are installed.
OPNsense 26.1.9-amd64
FreeBSD 14.3-RELEASE-p14
OpenSSL 3.0.20

Hi,
thanks for the Link. I tried again and found the stupid error.
I forgot the set:

Optional prefix ID    
Optional interface ID

Now it is working. Thanks for the help!

Yes, but my logs show that I get a IPv6 subnet so it is enabled.

They support only certain fritz boxes. I contacted them for more information, but no infos yet.
I just found someone who got it working, so I know is is possible. . I will ask there as well.

Hi all,

I got a fiber connection via TNG (Germany) and IPv4 works great.
But IPv6 does not work.

When I look at the logfile I see this messages:

Code Select Expand

<13>1 2026-05-07T22:25:12+02:00 OPNsense.internal dhcp6c 79084 - [meta sequenceId="381"] dhcp6c_script: REQUEST on pppoe1 connected to server
<13>1 2026-05-07T22:25:12+02:00 OPNsense.internal dhcp6c 84865 - [meta sequenceId="382"] dhcp6c_script: REQUEST on pppoe1 prefix now 2a00:ffff:ffff:8000::/56

When I manually add a ipv6 address in the sub net, it is working. But that is of course not doable all the time.

Code Select Expand

# ifconfig pppoe1 inet6 2a00:ffff:ffff:8000::1 prefixlen 64 alias
the "request prefix only" is disable. (I also tried it enable, same problem).

 Does anyone has an idea what I did wrong?

I setup a new OpnSense 26.1.7_3-amd64 host, so it is a fresh install

I read: https://docs.opnsense.org/manual/how-tos/ipv6_dsl.html.

CU
Jens