Topics

[Setup]

WAN Interface on my Protectli v1210 fails to negotiate speed/duplex correctly when ISP coax is connected to cable modem, but does negotiate properly (2500/fdx) when I disconnect the ISP coax.

I'm fairly certain this is an ISP issue, but would appreciate some advice on how to collect meaningful information to help with ISP tech support

Setup
- Cox ISP 2Gbps Internet
- Motorola SB8611 cable modem
- Protectli V1210, 2 Intel® I226-V 2.5Gigabit Ethernet NIC ports, RJ-45
- OpnSense 26.1.9

ISP---(coax)---[modem]---(cat6)---[Protectli/OpnSense bare metal]---

Issue
- WAN Interface fails to autonegotiate to 2500 and fails to get WAN IP (same issue if I hard configure 2500-t)
- Same issue with either interface (igc0 or igc1)
- Same issue with multiple cables
- Same issue with two different cable modems (Motorola SB861))
- Removing the ISP coax from cable modem, then WAN interface negotiates properly and receives default IP (192.168.100.x) from cable modem
- Factory reset / default OpnSense does not resolve nor does CMOS reset on Protectli
- Replacing OpnSense firewall with an older Asuswrt router (gt-ax6000) and the WAN interface on the router does negotiate properly to 2500/fdx and obtain WAN IP from ISP

Questions
1. Are there any interface settings and/or tunable I can configure to resolve this
2. What cli command can I run to help diagnose this + information I should capture to bring to ISP, so I can avoid the "simple" questions (change the cable, reset the router, ...)

[Scenario]

Scenario - remote small business office with Opnsense firewall, with only handful of users, none tech savvy. No OOB remote management solution (budget constraints) for console access if remote connectivity is lost for any reason.

Background - I am familiar with and successfully used snapshots, manually falling back to a "known_good" snapshot from UI and CLI on a locally accessible firewall, following Snapshot documentation.

Goal - at remote site, manually create a "known_good" snapshot, create a cron job to run in 20 minutes to fallback (e.g. bectl) to "known_good" snapshot, perform system update (24.7.x to current 25.1.x), log back into remote firewall and cancel cron job if all is good. If for some reason I can't get back into remote system, it will fallback to the "knwon_good" snapshot.

Question - is this a capability that is already available in Opnsense natively (I didn't find anything in the doc) or is there already a working solution via available plugin (my searches didn't find a working solution, but a number described the approach I'm planning), before I create my custom cron job?

[Context]

@Monviech (Cedrik): Are there any plans with Dnsmasq to have a WebUI option to add pre-defined DNSBL such as hagzei pro, oisd.big, ...?

Context
My goal is to run Dnsmasq standalone, for DHCP, local DNS (static and dynamic DHCP reservations/leases) + external DNS recursive servers (System | Settings | General), and having DNSBL capabilities for blocking "stuff" using pre-defined DNSBL, similar to what is in Unbound currently (pre-defined block lists in WebUI).

Current Understanding
I am familiar with Dnsmasq /usr/local/etc/dnsmasq.conf.d/*.conf capabilities and have successfully manually download (via curl) the hagzei pro DNSBL into a "dnsbl-hagezi-pro.conf) file under the .../dnsmasq.conf.d/  directory and have that file successfully incorporated into a running Dnsmasq configuration.

Reason for my feature request question
Before I go down the path of creating a cron job to periodically download updated DNSBL, write a script to consolidate different DNSBL, I wanted to see if this is a possible planned capability or if this could be considered for a feature request (I'll submit request if agreed to)??

Will the DNSMasq Leases UI have the following abilities similar to ISC DHCP or is it there somewhere and I'm missing it?
- show the status of a lease (e.g., online (green) or offline (red))
- add a static mapping for a dynamic lease
- delete a lease