Recent posts

#1

26.7 Series / Re: Can anyone at OPNsense cre...

Last post by Igor - Today at 09:02:04 PM

I just create an instance for surfshark using wireguard, same setup for it.

Create instance and peer (from manual setup file),
Create interface,
Create Source NAT,
Create Gateway, 10.14.0.1

Added in my vpn group as tear1 for test - working well.

#2

Tutorials and FAQs / Re: What to do and what to avo...

Last post by meyergru - Today at 08:57:58 PM

You are using the wrong documentation. Please read the first paragraph of the initial post in this thread and follow the linked swanctl Roadwarrior documentation. The guide you linked describes the old/legacy IPsec configuration, which is why those menus do not exist in your installation.

#3

General Discussion / Re: nfSensei ( fork pfsense )

Last post by Netlearn - Today at 08:30:18 PM

We all know how much time it takes for a project like this to get mature... if it started recently and suddenly it has all the features, I would say that it is likely completely AI coded.

Can't say how mature the project is at this moment, because there is no any official release I can find, so I suppose the dev considers it's not enough to publish it.

But anyway, it's being developed since 2004.

#4

General Discussion / Re: The joys of Google AI

Last post by OPNenthu - Today at 07:44:33 PM

I'm using LocalAI in Vulkan mode which seems to be the highest performance I can get out of the little machine I'm using.

I would like to do the same kind of thing, but the only machine I have that might be adequate enough is my main PC (RTX 5070 Ti, 16GB).  It's running a linux desktop but that's not the problem, I think.  The issue is that I would want to run the LLMs in some kind of strong isolation like KVM but Nvidia doesn't allow partitioning on their consumer class GPUs. :(  I don't know how to expose it to the VM without completely losing display output on the host.

Anybody have luck with containers?  Assuming it works for getting access to the GPU, is it safe enough for this purpose?

#5

26.7 Series / Re: General feedback

Last post by notspam - Today at 07:20:08 PM

opnsense-update -bkp

gives the possibilities to fine graduated updates


basic system (-b)
kernel (-k)
packets/plugins (-p)

Not updating a firewall system for a year is really unusal.

#6

26.7 Series / Re: Are ports currently broken...

Last post by thingy - Today at 07:20:03 PM

Did you tamper with your local /usr/tools repository? It's probably stuck on another branch or self-committed change.

No. I've not touched that folder/repository. Running git status on that folder shows:

Code Select Expand

root@opnsense:/usr/tools # git status
On branch master
Your branch is behind 'origin/master' by 100 commits, and can be fast-forwarded.
  (use "git pull" to update your local branch)

nothing to commit, working tree clean
root@opnsense:/usr/tools #

Should I run "git pull" ?

According to: git log --pretty=format:"%h%x09%an%x09%ad%x09%s" last commit was from Dec 19 2025.

Code Select Expand

68d6dbe Franco Fichtner Fri Dec 19 13:41:39 2025 +0100  build/download: deal with kernel vs. kernel-dbg ambiguity
6890a15 Franco Fichtner Wed Dec 17 14:12:34 2025 +0100  build: stray newline
081ba4c Franco Fichtner Fri Dec 12 09:11:38 2025 +0100  README: remove a lie
f825159 Franco Fichtner Fri Dec 12 09:05:29 2025 +0100  build: add REMOTEDIR Makefile support again, fix nightly side effect
bab138a Franco Fichtner Wed Dec 10 09:38:37 2025 +0100  build/download: missed aux set
c83a3f9 Franco Fichtner Wed Dec 10 08:35:58 2025 +0100  build/download: allow REMOTEDIR change and consolidate away from UPLOADDIR
993bad6 Franco Fichtner Thu Dec 4 11:28:20 2025 +0100   build: change wording and use normal pkgname-pkgversion print
92f00c7 Self-Hosting-Group      Thu Nov 6 00:00:00 2025 +0000   config: add net/miniupnpd build options LEASEFILE UPNP_NOPPP
07f9ff3 Franco Fichtner Tue Dec 2 14:35:09 2025 +0100   config: add this security feature, makes no sense to use RACK without it
6dda03c Franco Fichtner Sat Nov 22 14:46:19 2025 +0100  config: add flexcolor theme
3bb730c Franco Fichtner Thu Nov 20 13:46:44 2025 -0500  config: this isn't ready for AC2 support
24ac68d Ad Schellevis   Wed Nov 19 22:22:16 2025 +0100  Revert "add textproc/pecl-yaml to the list"
9099a14 Franco Fichtner Wed Nov 19 12:04:34 2025 -0500  config: add net/aquantia-atlantic-kmod
687b315 Ad Schellevis   Wed Nov 19 16:51:57 2025 +0100  add textproc/pecl-yaml to the list
8722e90 Franco Fichtner Wed Nov 12 08:59:54 2025 +0100  config: not ready yet
02f9c13 Franco Fichtner Wed Nov 12 08:28:57 2025 +0100  config: introduce an override for CERTCTL_CMD
c2874b2 Franco Fichtner Tue Nov 11 17:13:37 2025 +0100  config: migrate to newer VBox version
01e1345 Franco Fichtner Mon Nov 10 15:25:52 2025 +0100  config: test drive Python 3.13 build in 25.7
219ce1c Franco Fichtner Mon Nov 10 08:16:20 2025 +0100  config: this appears to be needed
589b202 Franco Fichtner Fri Nov 7 09:32:38 2025 +0100   config: remove unused and workarounds from 25.7 ports
000a44d Franco Fichtner Mon Nov 3 14:04:19 2025 +0100   config: add ndp-proxy-go plugin
72b88f9 Franco Fichtner Thu Oct 30 07:59:26 2025 +0100  config: add ndp-proxy-go port
3b17ebf Self-Hosting-Group      Wed Oct 29 00:00:00 2025 +0000  config: add net/miniupnpd build option UPNP_IGDV2
91cace4 Franco Fichtner Wed Oct 29 11:19:55 2025 +0100  build/print: simplify if we don't use the result
4030bd6 Franco Fichtner Wed Oct 29 08:38:07 2025 +0100  build/print: env does not quote which PRODUCT_CORES does not like
d17c5c1 Franco Fichtner Wed Oct 29 08:09:15 2025 +0100  build/test: requires PHP directories
673e0a6 Franco Fichtner Tue Oct 28 14:55:16 2025 +0100  composite/factory: same same, not different
7efc9bc Franco Fichtner Tue Oct 28 14:48:06 2025 +0100  composite: add and use load_core_version
5f14858 Franco Fichtner Tue Oct 28 14:33:14 2025 +0100  composite: replace last raw "make print" uses
e2dfc43 Franco Fichtner Tue Oct 28 14:19:02 2025 +0100  composite/watch: either 2023 or 2025 but not 2024
32a0cd2 Franco Fichtner Tue Oct 28 14:15:14 2025 +0100  composite/nightly: use load_make_vars
f5e5566 Franco Fichtner Tue Oct 28 14:12:12 2025 +0100  composite/watch: use load_make_vars
43a519b Franco Fichtner Tue Oct 28 10:55:48 2025 +0100  composite: a little less of guessing
10d06be Franco Fichtner Tue Oct 28 10:34:34 2025 +0100  composite: utils bandaid for now
c37eb03 Franco Fichtner Tue Oct 28 10:32:42 2025 +0100  composite/distribution: shortest match instea


#7

General Discussion / Re: nut is still broken and th...

Last post by franco - Today at 07:15:19 PM

We didn't really get any new reports on 26.7 which means it was likely fixed with OpenSSL 3.5. If you are still seeing something: it may be a different issue that needs a qualified report.


Cheers,
Franco

#8

General Discussion / Re: Networking Question - Isol...

Last post by talespin - Today at 06:59:28 PM

Hi,

You are assuming that "hardware" must be faster than "software". That is not generally true.

If OPNsense itself runs as a VM on that host, the traffic has to pass through a VM anyway, so adding physical NICs and an external switch only adds another network path.

You are correct. If traffic is within server, virtual switch would be faster vs any hardware based approach for VM to VM traffic.

In my case client machines will be connecting to gaming VM over LAN, so traffic has to leave VM Host server.

Sorry I should have mentioned.
OPNSense router is a separate system(M720q) with a 4 port NIC.

In either case, I would start with virtio + a Linux bridge and only change that if measurements show an actual problem.

I'll definitely try this, right now I am gathering information and exploring my options so that I can compare what works best.

Thank you

#9

Tutorials and FAQs / Re: What to do and what to avo...

Last post by MBOPNSENSE - Today at 06:53:36 PM

Bit unsure if this is the right place to start. I've switched from PFSense to OPNSense (including hardware) and am trying to get all things back up and running. Where I miserably fail is at IPSEC to iOS. I've been trying to use this help: https://docs.opnsense.org/manual/how-tos/ipsec-rw-srv-mschapv2.html but it is unhelpful as none of the menus they refer to are there. I'm running OPNsense 26.4.2-amd64. Any ideas?

#10

Virtual private networks / Re: Wireguard and Documentatio...

Last post by Patrick M. Hausen - Today at 06:52:39 PM

Outbound is source NAT.