Show posts

#1

26.7 Series / Audit - security

August 05, 2026, 01:08:13 PM

I made an audit - security and got this output:

***GOT REQUEST TO AUDIT SECURITY***
Currently running OPNsense 26.7.1_1 (amd64) at Wed Aug 5 13:06:29 CEST 2026
Fetching vuln.xml.xz: .......... done
unbound-1.25.1_1 is vulnerable:
unbound -- multiple vulnerabilities
CVE: CVE-2026-56444
CVE: CVE-2026-56416
CVE: CVE-2026-55991
CVE: CVE-2026-55990
CVE: CVE-2026-55973
CVE: CVE-2026-55717
CVE: CVE-2026-55708
CVE: CVE-2026-54478
CVE: CVE-2026-52863
CVE: CVE-2026-50252
CVE: CVE-2026-50251
CVE: CVE-2026-50248
CVE: CVE-2026-50243
CVE: CVE-2026-50046
CVE: CVE-2026-50045
CVE: CVE-2026-46582
CVE: CVE-2026-44690
CVE: CVE-2026-44687
CVE: CVE-2026-44621
CVE: CVE-2026-42955
CVE: CVE-2026-41637
CVE: CVE-2026-40691
CVE: CVE-2026-32665
CVE: CVE-2026-14586
WWW: https://vuxml.freebsd.org/freebsd/f63b4b88-6901-4c12-b13d-5a821e25e9bf.html

python313-3.13.14 is vulnerable:
Python -- poplib module, when passed a user-controlled command, can have additional commands injected using newlines
CVE: CVE-2025-15367
WWW: https://vuxml.freebsd.org/freebsd/6d3488ae-2e0f-11f1-88c7-00a098b42aeb.html

Python -- imaplib module, when passed a user-controlled command, can have additional commands injected using newlines
CVE: CVE-2025-15366
WWW: https://vuxml.freebsd.org/freebsd/0be929a5-2e0f-11f1-88c7-00a098b42aeb.html

3 problem(s) in 2 package(s) found.
***DONE***

#2

26.7 Series / Re: IPS - unable to download rules

July 30, 2026, 10:45:57 AM

I have run cleanup, connectivity, health and security.
No problems found.

When I try to do download the IPS rules, then it stops the download process immediately and not nothing happens then.

Should I reinstall and try to download the IPS rules ?

#3

26.7 Series / IPS - unable to download rules

July 30, 2026, 06:15:04 AM

I am trying to setup IPS.

But I can´t download the IPS rules.

#4

26.7 Series / Re: Realtek 2.5 Gbit Lan

July 29, 2026, 12:56:59 PM

With the dual port Intel 1 GBit card, it now works fine.

#5

26.7 Series / Re: Auto detection of WAN port does not work

July 27, 2026, 05:41:52 PM

The setup is at follows.

Fritzbox 7530 -> OPNsense (at Lan) -> Fritzbox 4040.

The IP adress of Fritzbox 7530 is 192.168.178.1 with DHCP and DNS server.

Actually I am using OPNsense 26.7.

OPNsense runs on physical hardware - not VM.

#6

26.7 Series / Auto detection of WAN port does not work

July 27, 2026, 01:26:25 PM

Since some time, the auto detection of the WAN does not work.

I have a Fritzbox 7530 as modem / router.

#7

26.7 Series / Re: Realtek 2.5 Gbit Lan

July 26, 2026, 07:59:50 PM

I have bought an Intel 82576 based dual port Lan card.

#8

26.7 Series / Realtek 2.5 Gbit Lan

July 26, 2026, 05:18:38 PM

I have two Realtek 2.5 Gbit Lan adapters is my new firewall computer.

But no network adapters are found during installation.

Is the hardware defective ?

#9

26.7 Series / Re: System update

July 24, 2026, 07:30:59 PM

Here is the output of pacman -Syu:

systemd-resolvconf-261.2-1-x86_64 3,4 KiB 52,6 KiB/s 00:00 [----------------------------------------------------] 100%
systemd-sysvcompat-261.2-1-x86_64 6,6 KiB 96,5 KiB/s 00:00 [----------------------------------------------------] 100%
systemd-libs-261.2-1-x86_64 1447,9 KiB 4,49 MiB/s 00:00 [----------------------------------------------------] 100%
systemd-261.2-1-x86_64 10,4 MiB 9,64 MiB/s 00:01 [----------------------------------------------------] 100%
Gesamt (4/4) 11,8 MiB 10,7 MiB/s 00:01 [----------------------------------------------------] 100%
(4/4) Schlüssel im Schlüsselbund werden geprüft [----------------------------------------------------] 100%
(4/4) Paket-Integrität wird überprüft [----------------------------------------------------] 100%
(4/4) Paket-Dateien werden geladen [----------------------------------------------------] 100%
(4/4) Auf Dateikonflikte wird geprüft [----------------------------------------------------] 100%
:: Paketänderungen werden verarbeitet ...
(1/4) Aktualisiert wird systemd-libs [----------------------------------------------------] 100%
(2/4) Aktualisiert wird systemd [----------------------------------------------------] 100%

#10