Messages

Apparently OPNsense uses the driver from bsd.

I see this driver you mentioned exists but I'm unclear what you had to do to get it...

https://docs.broadcom.com/doc/Release_Notes-238.1.138.6

Open a GitHub issue in OPNsense/src and mention this thread.

> Are there any plans to level python up to 3.15


In a world flooded by AI emergencies-likely some things will have to change.

Beginning of the year and prior 3.11 was more or less abandonware upstream although still very much the default in Fbsd 14.x and theoretically supported upstream.

Things got so bad that a move mid release was necessary. So shortly after 26.1 we moved on to 3.13.

Why 3.13 ? Iirc things weren't much better with 3.12 and unusable with 3.14 which is still the latest stable version until 3.15 is officially available.


So I'm expecting 3.15 to be available as soon as possible - meaning that everything depending on it can be built and works correctly. Whether that's going to be an easy job or a waiting game where all the upstream projects adjust for 3.15 and the changes it brings remains to be seen.


That's how I remember it watching from the sidelines.

Change the mirror.

Try this in the terminal. If it finishes successfully reboot. Else post the output here

Code Select Expand

opnsense-update -bkr 26.7.3

No need really to import things from the start.

Install OPNsense.

Do some initial config on wan and lan so you can access it and the internet

Update

Install the plugins you need

Import the configuration



Make sure you have all the needed config files. The OPN one you can download from GUI, Adguardhome you'll need to scp. Others...similar with Adguardhome.

There weren't any igc updates for 26.7.3 afaik...

Are you sure there weren't any radix issues when booting the previous kernel ?

It's not.

OpenSSL released the patches this week for all supported versions. Vulnerabilities rated medium were the highest in the lot, none of them required an out of band patching for BE. They will be addressed on the next dot release.

The same is true for OpenSSH. Versions 10.4 and 10.5 came out weeks apart, July 7th and August 11th.

26.4.2 BE on August 14th included 10.4 as it was the latest available on Freshports at the time.


No available patches are missed. It's all a matter of timing and risk assessment. Nothing critical is missing from BE and there's no need to jump between CE and BE for security reasons.

Erm...I was thinking about this thread when I answered. If that applies to you then what I wrote about a testing kernel still applies.

https://forum.opnsense.org/index.php?topic=52686.0


In this thread in particular the OP might have a hdd failure...that's still unclear.

In short, if you're affected by the ciss issue then the fix will come either in a test kernel or 26.7.4.


OTOH if you find your issue to be different than the one discussed in the thread I mentioned please open a dedicated thread with all the proper details - jumping in other people's threads only muddies the water.

[No Reinstall is Required.]

First and foremost, in case of a kernel crash:

- even if on UFS

-even on ZFS - and forgot to take a snapshot


There are always 2 kernels available on the machine. And the one that is crashing is the first/latest one.

When dealing with a kernel crash, assuming everything else including hdd is healthy, No Reinstall is Required.

Booting into the second kernel from the boot menu will suffice.



In this particular case, if people are asking, Franco may be able to provide a 26.7.3-ciss kernel that you may be able to install with

Code Select Expand

OPNsense-update -zkr 26.7.3-ciss then temporarily lock the kernel in the GUI and upgrade everything else to 26.7.3_8

Whether the above happens or not remains to be seen.

In the meantime it is safe to upgrade the packages and reboot.

Code Select Expand

OPNsense-update -p

If you're back up and running on 26.7.3 then your hdd may be dying.

igb or igc interfaces ?

Set the firmware to Community and check for updates. You should find 26.7.2. Apply the updates and reboot.

In case of errors post here the full output.

> Breakdown of the rule:
-- Interface: ZN_WAN (group with WAN1 and WAN2 interfaces)
-- Version: IPv4+IPv6
-- Protocol: TCP
-- Destination Address: This firewall
-- Destination Port: TCP/22
-- Redirect Target IP: Git server

This rule won't ever match

> Installation out of date. The update to opnsense-26.7.2_2 is required.


To solve this conundrum the following steps must be followed:

1- Learn how to read and follow instructions

2- Update OPNsense to the latest stable version

3- Install and configure plugins

4- Forget about Development versions. There be Dragons and reading is a mandatory skill.

@meyergru Did you enable syncookies in FW -Settings? The Anti DDoS settings that is.

Try Adaptive, Start at 95% End at 70%