Messages

Have you tried pfctl -s rules on the shell?

For debugging I usually prefer looking at the rules with pfctl as it shows the raw pf configuration without any web interface obscuring what is actually going on.

Hi,

FreeBSD 15.1 introduced a VLAN aware bridge device.
This enables one to use one bridge device for multiple VLANs and therefore reduces the complexity of the network configuration.
With the old bridge device there was the need to have a separate bridge for each VLAN.

Question, does OPNsense already support the usage of the VLAN aware bridges?
If yes, how can I enable it in the web interface?
If no, are there any plans to support it in a future release?

Upstream FreeBSD has a bug which causes ARP messages to be lost when using a bridge (i.e., will not be sent out via bnxt device if).
The issue seems to be that ARP packages are not padded and therefore are shorter than the minimum ethernet frame length.
This causes the bnxt driver (and other Intel drivers) to silently drop the packet.

There is already bug report 296652 in the official FreeBSD Bugzilla.
This report already includes a patch that looks fine to me.
However, the patch is available since early July 2026 but has not been patched to the official kernel.

Is there a possibility to merge this fix for OPNsense 26.7 until FreeBSD gets it fixed in their own git repository?