Recent posts

#1

26.1, 26,4 Series / Re: NUT 2.8.5_1: upsc, upscmd,...

Last post by RAT - Today at 09:01:30 PM

Thank you for your swift reply. I'm a bit ashamed I didn't find your solution on my own 🫣�

#2

General Discussion / Re: NUT is Broken After Udatin...

Last post by RAT - Today at 08:58:27 PM

Code Select Expand

opnsense-revert -r 26.1.7 nut
pkg lock nut


Thank you!

#3

26.1, 26,4 Series / Re: 26.1 upgrade chaos, Realte...

Last post by computer_freak_8 - Today at 07:28:34 PM

The DVD image is really for DVD burning AFAIK so no wonder only Ventoy worked eventually :)

In the past, the only way I've been able to get a bootable flash drive of OPNsense (or pfSense, so I assume it's a BSD thing?) is writing the ISO directly to a UFD. The IMG files never worked on a UFD, neither directly nor with Ventoy once that became a thing. The only way I've got IMGs to boot in the past was to write them directly to internal media.


BUT, I will definitely accept any fault for not re-trying the recommended tactics this round. :-) Habits built from repeated troubleshooting die hard, I guess.

#4

26.1, 26,4 Series / Re: 26.1 upgrade chaos, Realte...

Last post by nero355 - Today at 06:43:40 PM

I downloaded the amd64 DVD ISO and tried to put it on a flash drive to install on new_hardware, but neither dd- nor cat-created UFDs were able to boot; I had to drop the ISO into a Ventoy drive to be able to boot it at all. (26.1.6). (Yes, I validated the checksum and then unzipped it first.)

The DVD image is really for DVD burning AFAIK so no wonder only Ventoy worked eventually :)

See : https://docs.opnsense.org/manual/install.html#installation-images

#5

General Discussion / Re: DNS Best practices

Last post by nero355 - Today at 06:11:06 PM

I've recently setup my OPNsense firewall with DNS failover

May I ask how exactly ?

The reason I am asking is that a lot of people seem to think that configuring a device with multiple DNS Servers will give them DNS Redundancy in theory while it does not work like that in the real world !!

A well known example :
- Primary DNS = Pi-Hole/AdGuard
- Secondary DNS = Google/Quad9/CloudFlare

And then people wonder why their adblocking does not always work, because they expect the Secondary DNS to be used only when the Primary DNS is DOWN and not all the time at random moments...

#6

26.1, 26,4 Series / Re: Opnsense randomly (?) cras...

Last post by nero355 - Today at 06:04:20 PM

Its right there in his signature.

I see signatures of users but his is empty ?!

I also have to correct myself: the SSD is not running in raid1.

It's a single SSD but as a live OS is also crashing I assume it's not the SSD.
I also doubt that a faulty SSD crashes the whole machine.

Sometimes Live CD/ISO Images try to mount local storage automatically and if that fails in a certain way it can cause issues too so I would check that again just to be sure !!

- Which model is it ?
- Are there firmware updates available ?
- What does smartctl/nvmecontrol say ?
- Are there known issues with it in certain scenarios ?

And indeed : Memory testing should be done for at least 24 hours !!

#7

26.1, 26,4 Series / Re: 26.1.9 broke my DNS?

Last post by newsense - Today at 05:49:44 PM

To get rid of the sed buffer issue you can deploy this patch before and after upgrading edge to 26.1.9

https://github.com/opnsense/core/commit/5de581cd4


Regarding DNS, you haven't said much about it so I won't guess what could be blocking things occasionally there. My main takeaway is that the issue is transient

#8

26.1, 26,4 Series / Re: 26.1 upgrade chaos, Realte...

Last post by newsense - Today at 05:42:18 PM

After installing 26.1 if you don't have another nic available then download os-Realtek-re and realtek kmod packages from here, copy on a stick and install manually


http://pkg.opnsense.org/FreeBSD:14:amd64/26.1/MINT/26.1/latest/All/


Once connected to the Internet apply patches and install plugins, many of whom will be reinstalled automatically when checking for updates once more after the patches have been applied.

Once fully updated and with the plugins installed import the needed config.xml


Do whatever necessary configuration you need to have the internet functional and don't worry about it. Importing the correct configuration will not be tainted by the temporary settings you made to bring everything up.

#9

26.1, 26,4 Series / Re: NUT 2.8.5_1: upsc, upscmd,...

Last post by Patrick M. Hausen - Today at 04:59:17 PM

Known problem. Downgrade and lock the NUT package.

https://forum.opnsense.org/index.php?topic=51916.msg267114#msg267114

#10

26.1, 26,4 Series / Re: 26.1 upgrade chaos, Realte...

Last post by computer_freak_8 - Today at 04:20:34 PM

How do you fix the chicken-egg problem of "install packages before doing config" and "config needed to reach internet to install packages"?

Especially when one of those packages is a driver that makes the NIC work? At some point the included Realtek driver worked "enough" that I could use it to download the proprietary driver, but that seems to not be the case anymore for some hardware. (I intend to validate the NIC hardware is still good sometime in the next couple days.)