"Recent posts
#1
German - Deutsch / Re: SSD Killer gesucht
Last post by Patrick M. Hausen - Today at 06:58:52 AMDie Netflow Daten an einen externen Collector schicken, wie beispielsweise Elastiflow.
#2
Hardware and Performance / Re: Inseego MiFi Pro M4 as WAN...
Last post by BrandyWine - Today at 06:04:57 AMQuote from: Greg_E on August 31, 2026, 05:04:46 PMBut if I connect the USB.....??
Why exactly are you plugging in a mifi pro m4 into the fw with USB ? For batt charging ? Why ?
Use a StarTech USBSCHAAMF data blocker.
Why it's messing with the fw, look at logs. Perhaps the device is loaded with malware?
#3
General Discussion / WAN out connection Issues
Last post by Tetra - Today at 03:44:45 AMI've ran into an issue setting up my personal physical network. I currently can't ping my ISP Router from my endpoint but I can ping the Opnsense WAN from the same endpoint. I believe it might be a routing issue between the WAN and ISP but I'm hopping someone could provide more input. The following is my topology for clarity:
Endpoint --> SVI --> Switch Routed interface --> Opnsense LAN --> Opnsense WAN --X--> ISP Router --> Modem
Endpoint --> SVI --> Switch Routed interface --> Opnsense LAN --> Opnsense WAN --X--> ISP Router --> Modem
#4
26.7 Series / Re: Confused by 26.7 upgrade
Last post by defaultuserfoo - Today at 03:35:32 AMInteresting, a couple weeks ago when I found that the migration broke all my firewall rules, I was told that I shouldn't have used it and there would be years before before anyone would have to migrate.
And now suddenly the migration has apparently become mandatory. That kind of behaviour means that we can no longer trust the developers in any way ever again, if we ever did.
And now suddenly the migration has apparently become mandatory. That kind of behaviour means that we can no longer trust the developers in any way ever again, if we ever did.
#5
26.7 Series / how much data was transferred?
Last post by defaultuserfoo - Today at 03:28:37 AMHi,
how do I find out how much data was transferred over an interface over a certain period of time, like how much was transferred over a WAN interface within a month?
It seems it would be a simple, basic feature of a router/firewall to be showing that information, but somehow I can't find it.
how do I find out how much data was transferred over an interface over a certain period of time, like how much was transferred over a WAN interface within a month?
It seems it would be a simple, basic feature of a router/firewall to be showing that information, but somehow I can't find it.
#6
26.7 Series / Re: Lenovo M720q randomly hang...
Last post by userunkn4wn - Today at 03:06:16 AMQuote from: Patrick M. Hausen on September 01, 2026, 07:57:39 PMWe need to fix that bug in the boot loader. I am quite a bit disappointed the issue in the tracker has not got any attention. In March a volunteer intending to fix the problem asked for some information - no response so far.
I'll raise some "management attention" in a week ;-)
Kind regards,
Patrick
Hi Patrick,
Thank you so much for bringing this up and pushing for a fix! It's great to know that the issue is being looked into.
Please let me know if I can assist in any way, whether by providing logs or testing a patch/build on my system.
Best regards,
Fabian
#7
26.7 Series / Re: Lenovo M720q randomly hang...
Last post by userunkn4wn - Today at 03:01:19 AMQuote from: shadesh on September 02, 2026, 08:12:17 AMI have the same hardware and same problem. Mine is running Manjaro Linux because its my Linux desktop.
I think it makes no difference which OS is installed, because it had this problem also with other OS installed.
Mine also have a display attached all the time, which makes me think it could be a genereal bios or hardware problem.
For me its just a power-off and power-on if it fails to boot and it cames back with 99% success after that.
No, this is not my experience. I just downloaded the latest Ubuntu ISO and tried to boot into the live environment (installer) multiple times without any problems. After plugging in the monitor to check if it worked, the installer was visible a few seconds later.
I don't think these Lenovo mini PCs have a general problem with headless booting, since I see them used all over YouTube for homelab projects.
Does your problem occur every time or, like mine, only occasionally?
Unfortunately, this seems to be an OPNsense bootloader problem, even though I would like to spare the OPNsense maintainers the trouble...
#8
Tutorials and FAQs / How I updated my I226-V NVM fi...
Last post by ElderberryHamlet - Today at 02:59:44 AMIntel does NOT offer a standalone NVM update for any i226 nics. Instead, they expect you to obtain their firmware from your device OEM but this is often unavailable or grossly outdated.
The Work Around. BEWARE YOU RISK BRICKING YOUR NIC => MAKE A BACKUP !!!
1. Download & Extract -- https://www.intel.com/content/www/us/en/download/15084/intel-ethernet-adapter-complete-driver-pack.html -- look inside for NVMUpdatePackage/I225/I225.tar.gz and extract -- look further into this I225 folder until you find nvmupdate64e (updater tool). Leave this tool where it is. Make a companion I226-V work folder and copy the nvmupdate64e + nvmudate.cfg from the I225 folder to the I226-V work folder.
2. Open a terminal inside this new folder </> sudo ./nvmupdate64e -i -l inventory.txt </> -- Take note of what this text file says the ETrackID numeric value is for your i226 NIC. This is the firmware identifier you currently have installed.
3. Visit BillyCurtis Community Repo for I226 firmware https://github.com/BillyCurtis/Intel-I226-V-NVM-Firmware/tree/main -- find your NIC and your current ETrackID. Find the latest 1mb or 2mb firmware version for your NIC, Take note of the ETrackID for the latest 1mb or 2mb firmware version for your NIC and download it.
4. Drop this firmware update directly into the local I226-V work folder.
5. Open any text editor and change the nvmupdate.cfg file -- example below
6. Open a terminal in this same folder </> sudo ./nvmupdate64e -u -l -b -c nvmupdate.cfg </>
NOTE: If by some chance you also need to update any I225 NIC, do that first if you intend to overwrite the initial I225 nvmupdate.cfg file. You can also update other Intel NICs using the other update folders respectively. In every case, you can use the same command listed in step 6 above. This will begin the process of evaluating your NIC Non-Volatile Memory chip (NVM) for update (-u). It will verbosely log its progress (-l). Make a backup (-b). Using the config file (-c) nvmupdate.cfg. If you neglect the -l flag it will proceed silently. If you neglect the -b flag there will be no backup. You can also use the update tool to inventory all your NICs and output to a text file as suggested in step 2.
I226-V Config file Process. Use ETrackId numeric values for your NIC firmware. Don't guess
A. This is the output of my initial discovery command above in step 2, minus sensitive info
</> sudo ./nvmupdate64e -i -l inventorty.txt </>
[00:005:00:00]: Intel(R) Ethernet Controller I226-V
Vendor : 8086
Device : 125C
Subvendor : 8086
Subdevice : 0000
Revision : 4
LAN MAC : ### LAN MAC is hidden by me ###
Alt MAC : 000000000000
SAN MAC : 000000000000
ETrackId : 80000308
SerialNumber : ### SerialNumber is hidden by me ###
NVM Version : 2.23(2.17)
PBA : G23456-000
VPD status : Not set
VPD size : 0
NVM update : No config file entry
checksum : Valid
B. This README file section is where I verified the correct (1MB) firmware for my i226-V NIC
-- https://github.com/BillyCurtis/Intel-I226-V-NVM-Firmware/tree/main/README.md
I226-V
1MB File Name Ver EtrackID 2MB File Name Ver EtrackID
FXVL_125C_V_1MB_2.14.bin 2.14 80000290 FXVL_125C_V_2MB_2.14.bin 2.14 8000028D
FXVL_125C_V_1MB_2.17.bin 2.17 80000308 FXVL_125C_V_2MB_2.17.bin 2.17 80000303
FXVL_125C_V_1MB_2.23.bin 2.23 8000039D FXVL_125C_V_2MB_2.22.bin 2.22 80000371
FXVL_125C_V_1MB_2.27.bin 2.27 80000425 FXVL_125C_V_2MB_2.25.bin 2.25 800003AD
FXVL_125C_V_1MB_2.32.bin 2.32 80000425 FXVL_125C_V_2MB_2.27.bin 2.27 80000422
FXVL_125C_V_2MB_2.32.bin 2.32 80000422
you can see above my intial firmware is ETRackID 80000308 which tells me I need a 1MB size version of which the latest is version 2.32, ETrackID 80000425.
C. Just above where the README file is posted, I clicked on the I226-V > 2.32 downloads folder and downloaded FXVL_125C_V_1MB_2.32.bin raw file for my 1226-V NIC
-- https://github.com/BillyCurtis/Intel-I226-V-NVM-Firmware/tree/main/I226-V/2.32 -- and dropped it into my local I226-V work folder.
D. Having copied the initial i225 config file to my I226-V work folder, I overwrote it as follows
CURRENT FAMILY: 1.0.0
CONFIG VERSION: 1.20.0
; Upgrade all 4 onboard Intel i226-V controllers
BEGIN DEVICE
DEVICENAME: Intel(R) Ethernet Controller I226-V
VENDOR: 8086
DEVICE: 125C
SUBVENDOR: 8086
SUBDEVICE: 0000
NVM IMAGE: FXVL_125C_V_1MB_2.32.bin
EEPID: 80000425
REPLACES: 80000308
RESET TYPE: NONE
END DEVICE
E. Save and open a terminal </> sudo ./nvmupdate64e -u -l -b -c nvmupdate.cfg </>
D. I'm told I can restore the backups created by the -b flag by running the following.
</> sudo ./nvmupdate64e -r -l -c nvmupdate.cfg </>
However, I've had no need to use this command and therefore don't know it it'll work or if the config file needs more info or what.
I226-V Release Notes
Version Onboard I226-V
2.32 Fixes an issue in MDI lane swap handling that caused the P (positive) and N (negative) signal polarities to be swapped incorrectly.
2.27 General Note:
1. PHY FW: 4C08_88B6
2. EFI LAN driver in 2MB: 0.10.06
Bug Fix:
• HSD 13012034657: [Foxville][NVM] QV Tools External Loopback test fails with NVM version 2.25
2.25 General Note:
1. PHY FW: 4C08_08a6
2. EFI LAN driver in 2MB: 0.10.06
Bug Fix:
• HSD 13010560068: Link Flaps with Energy Efficient Ethernet Enabled
• HSD 13011274310: Unexpected Link
2.23 General Note:
1. PHY FW: 4C08_889D
2. EFI LAN driver in 2MB: 0.10.06
Bug Fix:
• HSD 13011253836: Device Not Enumerated during power cycle (restart, power-on, etc.)
2.22 1. Update PHY FW to 4C08_889D
2. EFI LAN driver: 0.10.06 (recommend to update to the latest version in Doc ID: 615203).
Bug Fix:
• #1309832919: LAN Device not enumerated after WR cycle
• #13010560068: Link flaps with Energy Efficient Ethernet
o Note: Energy Efficient Ethernet Setting is controlled by OS drivers for both Windows and Linux and the default setting is Disabled.
• #16020921487: [AMT provisioned] Sporadically Autowake during S3/S4
RCR:
• #1309242132: Prevent NVM update between I225 and I226
• #1307470158: Enable RTD3 ULP wake from LAN_DISABLE_N negation
• #18022583990: [AMT provisioned] Enable DHCP server (port 67) for PreBoot Network Boot Support
• #1308723082: Dynamic D3Cold support for preventing D3Cold in S0 upon request from CSME
2.17 1. Update PHY FW to 4C07_888D
2.14 Production Release
1. PHY FW to 4C08_7877
2. Management FW: 1.54
3. Energy Efficient Ethernet is enabled by the driver (Windows & Linux)
2.13 Initial Release
1. PHY FW to 4C08_7877
2. Management FW: 1.53
3. Alternative MAC address section is permanently removed
4. Energy Efficient Ethernet is disabled by default
The Work Around. BEWARE YOU RISK BRICKING YOUR NIC => MAKE A BACKUP !!!
1. Download & Extract -- https://www.intel.com/content/www/us/en/download/15084/intel-ethernet-adapter-complete-driver-pack.html -- look inside for NVMUpdatePackage/I225/I225.tar.gz and extract -- look further into this I225 folder until you find nvmupdate64e (updater tool). Leave this tool where it is. Make a companion I226-V work folder and copy the nvmupdate64e + nvmudate.cfg from the I225 folder to the I226-V work folder.
2. Open a terminal inside this new folder </> sudo ./nvmupdate64e -i -l inventory.txt </> -- Take note of what this text file says the ETrackID numeric value is for your i226 NIC. This is the firmware identifier you currently have installed.
3. Visit BillyCurtis Community Repo for I226 firmware https://github.com/BillyCurtis/Intel-I226-V-NVM-Firmware/tree/main -- find your NIC and your current ETrackID. Find the latest 1mb or 2mb firmware version for your NIC, Take note of the ETrackID for the latest 1mb or 2mb firmware version for your NIC and download it.
4. Drop this firmware update directly into the local I226-V work folder.
5. Open any text editor and change the nvmupdate.cfg file -- example below
6. Open a terminal in this same folder </> sudo ./nvmupdate64e -u -l -b -c nvmupdate.cfg </>
NOTE: If by some chance you also need to update any I225 NIC, do that first if you intend to overwrite the initial I225 nvmupdate.cfg file. You can also update other Intel NICs using the other update folders respectively. In every case, you can use the same command listed in step 6 above. This will begin the process of evaluating your NIC Non-Volatile Memory chip (NVM) for update (-u). It will verbosely log its progress (-l). Make a backup (-b). Using the config file (-c) nvmupdate.cfg. If you neglect the -l flag it will proceed silently. If you neglect the -b flag there will be no backup. You can also use the update tool to inventory all your NICs and output to a text file as suggested in step 2.
I226-V Config file Process. Use ETrackId numeric values for your NIC firmware. Don't guess
A. This is the output of my initial discovery command above in step 2, minus sensitive info
</> sudo ./nvmupdate64e -i -l inventorty.txt </>
[00:005:00:00]: Intel(R) Ethernet Controller I226-V
Vendor : 8086
Device : 125C
Subvendor : 8086
Subdevice : 0000
Revision : 4
LAN MAC : ### LAN MAC is hidden by me ###
Alt MAC : 000000000000
SAN MAC : 000000000000
ETrackId : 80000308
SerialNumber : ### SerialNumber is hidden by me ###
NVM Version : 2.23(2.17)
PBA : G23456-000
VPD status : Not set
VPD size : 0
NVM update : No config file entry
checksum : Valid
B. This README file section is where I verified the correct (1MB) firmware for my i226-V NIC
-- https://github.com/BillyCurtis/Intel-I226-V-NVM-Firmware/tree/main/README.md
I226-V
1MB File Name Ver EtrackID 2MB File Name Ver EtrackID
FXVL_125C_V_1MB_2.14.bin 2.14 80000290 FXVL_125C_V_2MB_2.14.bin 2.14 8000028D
FXVL_125C_V_1MB_2.17.bin 2.17 80000308 FXVL_125C_V_2MB_2.17.bin 2.17 80000303
FXVL_125C_V_1MB_2.23.bin 2.23 8000039D FXVL_125C_V_2MB_2.22.bin 2.22 80000371
FXVL_125C_V_1MB_2.27.bin 2.27 80000425 FXVL_125C_V_2MB_2.25.bin 2.25 800003AD
FXVL_125C_V_1MB_2.32.bin 2.32 80000425 FXVL_125C_V_2MB_2.27.bin 2.27 80000422
FXVL_125C_V_2MB_2.32.bin 2.32 80000422
you can see above my intial firmware is ETRackID 80000308 which tells me I need a 1MB size version of which the latest is version 2.32, ETrackID 80000425.
C. Just above where the README file is posted, I clicked on the I226-V > 2.32 downloads folder and downloaded FXVL_125C_V_1MB_2.32.bin raw file for my 1226-V NIC
-- https://github.com/BillyCurtis/Intel-I226-V-NVM-Firmware/tree/main/I226-V/2.32 -- and dropped it into my local I226-V work folder.
D. Having copied the initial i225 config file to my I226-V work folder, I overwrote it as follows
CURRENT FAMILY: 1.0.0
CONFIG VERSION: 1.20.0
; Upgrade all 4 onboard Intel i226-V controllers
BEGIN DEVICE
DEVICENAME: Intel(R) Ethernet Controller I226-V
VENDOR: 8086
DEVICE: 125C
SUBVENDOR: 8086
SUBDEVICE: 0000
NVM IMAGE: FXVL_125C_V_1MB_2.32.bin
EEPID: 80000425
REPLACES: 80000308
RESET TYPE: NONE
END DEVICE
E. Save and open a terminal </> sudo ./nvmupdate64e -u -l -b -c nvmupdate.cfg </>
D. I'm told I can restore the backups created by the -b flag by running the following.
</> sudo ./nvmupdate64e -r -l -c nvmupdate.cfg </>
However, I've had no need to use this command and therefore don't know it it'll work or if the config file needs more info or what.
I226-V Release Notes
Version Onboard I226-V
2.32 Fixes an issue in MDI lane swap handling that caused the P (positive) and N (negative) signal polarities to be swapped incorrectly.
2.27 General Note:
1. PHY FW: 4C08_88B6
2. EFI LAN driver in 2MB: 0.10.06
Bug Fix:
• HSD 13012034657: [Foxville][NVM] QV Tools External Loopback test fails with NVM version 2.25
2.25 General Note:
1. PHY FW: 4C08_08a6
2. EFI LAN driver in 2MB: 0.10.06
Bug Fix:
• HSD 13010560068: Link Flaps with Energy Efficient Ethernet Enabled
• HSD 13011274310: Unexpected Link
2.23 General Note:
1. PHY FW: 4C08_889D
2. EFI LAN driver in 2MB: 0.10.06
Bug Fix:
• HSD 13011253836: Device Not Enumerated during power cycle (restart, power-on, etc.)
2.22 1. Update PHY FW to 4C08_889D
2. EFI LAN driver: 0.10.06 (recommend to update to the latest version in Doc ID: 615203).
Bug Fix:
• #1309832919: LAN Device not enumerated after WR cycle
• #13010560068: Link flaps with Energy Efficient Ethernet
o Note: Energy Efficient Ethernet Setting is controlled by OS drivers for both Windows and Linux and the default setting is Disabled.
• #16020921487: [AMT provisioned] Sporadically Autowake during S3/S4
RCR:
• #1309242132: Prevent NVM update between I225 and I226
• #1307470158: Enable RTD3 ULP wake from LAN_DISABLE_N negation
• #18022583990: [AMT provisioned] Enable DHCP server (port 67) for PreBoot Network Boot Support
• #1308723082: Dynamic D3Cold support for preventing D3Cold in S0 upon request from CSME
2.17 1. Update PHY FW to 4C07_888D
2.14 Production Release
1. PHY FW to 4C08_7877
2. Management FW: 1.54
3. Energy Efficient Ethernet is enabled by the driver (Windows & Linux)
2.13 Initial Release
1. PHY FW to 4C08_7877
2. Management FW: 1.53
3. Alternative MAC address section is permanently removed
4. Energy Efficient Ethernet is disabled by default
#9
General Discussion / Re: software cost of opnsense ...
Last post by cooleb09 - Today at 01:42:54 AMQuote from: sopex on June 16, 2026, 06:12:56 PMYou can always just buy a license if you plan to use it longish term. No? At around 4 months, you break even.
But I believe it as the automatic table mentions $0.05/hour + Azure infrastructure costs
Is the cost / hr meant to be for PAYG business license? The marketplace image seems to still need a seperate subscription purchased to activate business tier features (so what is the 5c/hr covering), and there doesn't seem to be a 'free' BYOL tier like how most NVA vendors would resell an image that uses externally purchased licenses.
Buying licenses individual and making our own images would work, but I'm also not sure how the '1 license to 1 install' would work given the 'ephermal' nature of cloud resources.
#10
General Discussion / Re: opnsense.org, deciso.com D...
Last post by pfry - Today at 01:15:31 AMopnsense.org DNS debugging
Posted 47 seconds later. Heh. (Issue began ~09:00 CDT, some hours ago.) Here for reference.
Posted 47 seconds later. Heh. (Issue began ~09:00 CDT, some hours ago.) Here for reference.
