"Recent posts
#1
26.7 Series / Re: How to enable/disable webg...
Last post by nero355 - Today at 04:45:29 PMIf you can do this : https://docs.opnsense.org/troubleshooting/webgui.html
I am guessing stop/disable can be done too ?!
Let us know! ;)
I am guessing stop/disable can be done too ?!
Let us know! ;)
#2
26.7 Series / Re: Invalid argument errors wh...
Last post by nero355 - Today at 04:43:13 PMQuote from: (MARLOO) on Today at 02:34:29 PMYour SMART output looks okActually I think something weird is going on :
QuoteCould be the SATA cable, SATA Controller or something wrong with the SSD components inside itself.Code Select195 Hardware_ECC_Recovered 0x0032 100 100 050 Old_age Always - 492
And then there are all those unknown values :
QuoteI would replace it and then keep an eye on the values with the new drive and hope for the best...Code Select160 Unknown_Attribute 0x0032 100 100 050 Old_age Always - 0
161 Unknown_Attribute 0x0033 100 100 050 Pre-fail Always - 100
163 Unknown_Attribute 0x0032 100 100 050 Old_age Always - 10
164 Unknown_Attribute 0x0032 100 100 050 Old_age Always - 303794
165 Unknown_Attribute 0x0032 100 100 050 Old_age Always - 3728
166 Unknown_Attribute 0x0032 100 100 050 Old_age Always - 336
167 Unknown_Attribute 0x0032 100 100 050 Old_age Always - 617
168 Unknown_Attribute 0x0032 100 100 050 Old_age Always - 7000
169 Unknown_Attribute 0x0032 100 100 050 Old_age Always - 92
#3
26.7 Series / Re: firmware > status is loadi...
Last post by nero355 - Today at 04:31:36 PMData corruption or the storage device starting to fail ?!
What does smartctl -a /dev/<whateveryourdeviceiscalled> say ?
What does smartctl -a /dev/<whateveryourdeviceiscalled> say ?
#4
Hardware and Performance / Re: Semi parts bin new build
Last post by nero355 - Today at 04:25:18 PMQuote from: opnsenseguy on Today at 01:18:40 AMI do have a Dell Intel 4V7G2 X550-T2 2 port 10Gb that I could use or atleast I've used in the past and can grab from a machine or buy another.Just don't forget to put some tape on the right PCIe pins when using DELL hardware in non-DELL motherboards ;)
#5
General Discussion / Re: Problem - Asymmetric routi...
Last post by nero355 - Today at 04:21:50 PMQuote from: HatalaTitla48 on Today at 02:33:21 AMProbably easy fix...where I should look?I am guessing Policy Based Routing on the Server with multiple NICs/Interfaces itself instead of OPNsense :)
Imagine something like this :
eth0 - 192.168.1.0/24
Only this Interface has a Gateway configured : 192.168.1.1/24
eth0.10 - 10.0.0.0/24
eth0.172 - 172.16.0/24
These two are just P2P Interfaces basically.
And now you grab a Client that's connected to either the eth0.10 or the eth0.172 network and SSH into this Server to IP Address 192.168.1.1/24 :
- The session times-out in about 30 to 60 seconds.
- The cause is because the Server uses both Interface eth0 and one of the eth0.10 or eth0.172 Interfaces depending on where you are connecting from to communicate with the SSH Client.
And to fix this you simply add a Policy Based Routing Rule to the Server telling it that it should keep on communicating via it's Default Gateway with that Client instead of the directly connected Interfaces :)
Fun fact about this is that I only found about it after I had started using OPNsense and the Default Drop/Deny Rule got triggered again and again, while my old Router never complained about it for whatever reason...
#6
26.7 Series / Re: os-net-snmp: OID for pendi...
Last post by franco - Today at 04:13:14 PMHi,
In theory there is a latest script output you can use to display the last version it can find vs. the current version installed.
In reality there's a number of factors that may end up ruining the experience:
- hotfix level wanted or not
- non-core fixes never show in release notes
- e.g. current PHP out of band update shows no detectable updates other than what the package manager says
- the package manager can lie too
last know to the box:
# configctl firmware changelog latest
vs. last installed on the box:
# configctl firmware changelog current
Is the most stable form, but it will only tell you about minor updates that are pending when it knows about them.
Building a matrix for everyone is a problem we're not looking at solving.
Cheers,
Franco
In theory there is a latest script output you can use to display the last version it can find vs. the current version installed.
In reality there's a number of factors that may end up ruining the experience:
- hotfix level wanted or not
- non-core fixes never show in release notes
- e.g. current PHP out of band update shows no detectable updates other than what the package manager says
- the package manager can lie too
last know to the box:
# configctl firmware changelog latest
vs. last installed on the box:
# configctl firmware changelog current
Is the most stable form, but it will only tell you about minor updates that are pending when it knows about them.
Building a matrix for everyone is a problem we're not looking at solving.
Cheers,
Franco
#7
General Discussion / Re: Sophos XGS 3300 - Interfac...
Last post by abdelmonem - Today at 04:08:47 PMHi Hoerli, you hoped someone would find this thread one day with a driver. Here it is, a bit late. pfry was right: every port belongs to the Cavium OCTEON TX (CN83XX) behind PCIe, and FreeBSD had no driver for it. I've written one, plus an OPNsense plugin around it. On an XGS 3300 all 12 front ports now come up as normal interfaces, the 4x10G expansion module too, with connections and IPsec offloaded to the coprocessor.
It's still an alpha and needs OPNsense 26.7, so given what you said about a normal Internet connection, I'd try it on a bench first. Details, measurements and the image builder are in this topic: https://forum.opnsense.org/index.php?topic=53202.0
It's still an alpha and needs OPNsense 26.7, so given what you said about a normal Internet connection, I'd try it on a bench first. Details, measurements and the image builder are in this topic: https://forum.opnsense.org/index.php?topic=53202.0
#8
General Discussion / Re: weird issues with network
Last post by nero355 - Today at 04:08:04 PMQuote from: curiousgeorge on Today at 06:30:39 AMI have a 8 core, 16 thread AMD ryzen 5 with 32GB RAM. Of this, 14 threads are assigned to the opnsense along with 28GB of RAM.Why use Proxmox at all when almost all of it is OPNsense ?!
About your issue itself :
How do you know it's OPNsense and not something else ?!
I can imagine WiFi compatibility issues between the Omada Accesspoints and the car and the new PC you mentioned for example.
Another very easy thing to check is WiFi Channels or complete Accesspoints overlapping because 2.4 GHz is very annoying to tune down :
Even the 4dBi on Ubiquiti UniFi products and 7 dBi with the antenna gain included on TP-Link Omada products is sometimes not low enough !!
I ended up completely disabling it on one Accesspoint to avoid connection issues ;)
Have you tried a different Router instead of OPNsense ?
Did you capture the traffic of the Clients having issues and analyse it in Wireshark ?
You can do that both at your Switches and OPNsense to compare/check different stages of communication.
#9
26.7 Series / Re: Critical PHP vuln: php2she...
Last post by FraLem - Today at 04:00:48 PMQuote from: meyergru on October 21, 2026, 03:43:32 PMSpark DGX
Thanks for the clarification regarding exposure to the web interface.
Looking forward to hearing from your experience with this guy.
#10
26.7 Series / How to enable/disable webgui v...
Last post by jonm - Today at 03:19:15 PMI have a remote site I'd like to be able to access via the GUI but only when necessary. How can I disable/enable it from ssh? Is this possible?
