Messages

Thanks both, turns out I had three faulty cables :-) and when tried the forth one (and the newest one), it now negotiates at 1000 Mb/s

@_Dave_
That's a great guide, many thanks. QQ: to whom the 4.2.2.1 & 4.2.2.2 IP addresses belong to?

[doktornotor]

I've followed the instructions by doktornotor here and that seems to work.

The issue I have (and I don't know what the root cause is) is that the modem GUI interface I created negotiates at 100 Mb/s rather than 1000 Mb/s: why on earth this is happening?

Tia.

Okey dokey, thanks for the responses

Lastly, would it make any difference whether before I'd backup my current configuration, I'd enable back the root user?

I'm not really sure, but I recall a post where the OP, while trying to import the backup file, went into troubles because the root user was disable.

I read the official article of how to import an existing configuration, and it seems quite straight forward.

I also came across with this post where the OP stated the importer doesn't work as expected and he used a workaround - has anybody used the  importer and in case can confirm whether or not it works as in the guide?

Tia.

Just follow the instructions:

Go to System -> Settings -> Tunables and add:

1) Enable multi threads

Code Select Expand

net.isr.maxthreads=-1
2) Enable bind threads

Code Select Expand

net.isr.bindthreads=1
3) Enable RSS

Code Select Expand

net.inet.rss.enabled=1
4) Set the value of net.inet.rss.bits
       

Code Select Expand

- for 4-core systems, use '2'
- for 8-core systems, use '3'
- for 16-core systems, use '4'
- etc.

The N100 should suffice.

Thank you, it worked :-)

I've set up two wireguard instances, one for ProtonVPN and one for Mullvad (and they both work), what I don't understand why on the dashoboard under gatewaus I can't see the Mullvad entry, any suggestions?

Tia.

[/var/log RAM disk]

I have upgraded my device to 16GB of RAM, and considering my OPNsense uses around 1.5GB (give or take), I was thinking to enable both /var/log RAM disk & /tmp RAM disk options (so I can avoid some writes to the SSD) - apart from the fact I will lose the logs on reboot, any drawback I have to be aware of?

Tia.

[Disable anti-lockout]

P.S. Also disable that global "anti-lockout" thing.

Is it the checkbox Disable anti-lockout in Firewall -> Settings -> Advanced ?

My ISP is German Telekom, bound by EU customer protection and privacy legislation including GDPR so why should I hand my DNS requests to a US based company on a silver platter?

Then Quad9 should  be fine as they are based in Switzerland.

It's a tricky one, I read many users saying they are happy for Unbound to do the job as they don't care whether or not their ISP can see the DNS queries, but personally I do use DoT with Quad9.

Have a look at the official guide here: https://docs.opnsense.org/manual/unbound.html#dns-over-tls

I suggest do a lot of research before making up your mind.

I'd want to allow only two devices within the LAN to access the OPNsense gui (and ssh too), can someone explain to me how do I do that?

Tia.

So, yes, there was 'something else' and that was the PS5  ::)  I forgot I manually configured the DNS with Quad9

As soon as I turn it off, all that 'noise' stops  ;D

Thank you all.