"Recent posts
#1
Intrusion Detection and Prevention / Re: IPS/Suricata does not drop...
Last post by unholyeyebrows - Today at 10:44:53 AMThanks for confirming my understanding. Not sure why it doesn't appear to be working for me but I'm new to this so I'll do some more reading. If I work it out I'll post back the answer here.
#2
General Discussion / Re: troubleshoot potentially b...
Last post by franco - Today at 10:33:20 AMDmesg should show up/down and I'm supposing this is about igc?
# ifconfig igc1 | grep media
media: Ethernet autoselect (1000baseT <full-duplex>)
If it negotiates 2500 in auto mode this may be an issue. Check the right interface.
Cheers,
Franco
# ifconfig igc1 | grep media
media: Ethernet autoselect (1000baseT <full-duplex>)
If it negotiates 2500 in auto mode this may be an issue. Check the right interface.
Cheers,
Franco
#3
High availability / Re: Multi site HA - question ....
Last post by Ahnedqr - Today at 10:12:58 AMPlayRupees is a mobile gaming and earning platform that brings casino-style entertainment and interactive games together in one app. Users can explore PLAYRUPEES Game, try different casino earning games, and enjoy quick gameplay directly from an Android phone. The platform uses a simple interface that makes it easy to browse available games and account features.
#4
26.7 Series / Re: Fetching base-26.7.3-amd64...
Last post by sternchen45 - Today at 09:36:56 AMQuote from: franco on September 02, 2026, 02:41:34 PMDetails please :)upon checking today, there is nothing in the package version that looks suspicious. But i also saw the message that files were truncated and transfers timed out, so i must have been confused :)
#5
German - Deutsch / Re: SSD Killer gesucht
Last post by s.meier68 - Today at 09:18:30 AMQuote from: grefabu on August 31, 2026, 09:43:03 AMHabt Ihr eine Idee wie ich dem Problem weiter auf die Schliche kommen kann?
Du könntest mittels
Code Select
top -m io -o write mal schauen welche Prozesse aktuell viel schreiben. Das lässt sich leider nicht gut scripten, für Scripting solltest Du procstat oder dtrace verwendenich finde eine swap nutzung von 9% jetzt eigentlich recht viel. Gerade bei zfs hast Du durch die vielen Schreibvorgänge ja Probleme beim wearout. Du könntest bei genug RAM versuchen /tmp über die Weboberfläche auf eine RAM-Disk auszulagern...
....und netflow abschalten, falls aktiv wie schon geschrieben
#6
26.7 Series / Re: Problems with upgrade from...
Last post by ahro_john - Today at 08:45:04 AMDid you happen to create a ZFS/Proxmox snapshot before upgrading to 26.7.3? If you need internet up immediately, rolling back to your 26.1 snapshot will confirm if it's strictly a 26.7 regression.
If you stay on 26.7.3, revert the net.route.algo.inet.algo tunable back to default first so it doesn't mask the underlying gateway issue. Then check clog /var/log/system.log | grep routing from the shell to see the exact sequence when vtnet1 obtains its ip
If you stay on 26.7.3, revert the net.route.algo.inet.algo tunable back to default first so it doesn't mask the underlying gateway issue. Then check clog /var/log/system.log | grep routing from the shell to see the exact sequence when vtnet1 obtains its ip
#7
General Discussion / Re: How do you handle drive fa...
Last post by Mpegger - Today at 07:39:26 AMI think for the home, if you're not making constant changes and tend to just "set it and forget it", just having a backup of the configuration and a recent ISO of OPNsense is enough to mitigate any sudden drive loss. A 2 disk mirror is also an option if you can swap drives when one suddenly dies.
#8
General Discussion / Re: WAN out connection Issues
Last post by lmoore - Today at 06:09:22 AMTo be able to help you more details about your set up is required.
Is your aim to move your other devices currently connecting to the ISP Router to be behind OPNsense?
Please provide information for:
Modem:
- Does it have a management address?
- Are you able to access it to check the device configuration?
- Is the modem configured in Router or Bridge (Modem) mode?
- Is the modem applying settings such as a VLAN ID for the Internet connection?
- Other information about this devices configuration
ISP Router:
- Does it have a management address?
- Are you able to access it and check the device configuration?
- Is the router capable of being configured in Bridge (Modem) mode?
- Is there any other feature about the ISP router you will need to use after migrating devices to be behind OPNsense
Cisco Switch:
- Is the switch connected to OPNsense's LAN network configured to operate in layer-2 or layer-3?
OPNsense:
- routing table
- Source NAT settings and Rules
- LAN Rules (floating, group and interface)
This will permit only your router's IP address on the LAN and OPNsense to communicate in this network - have you considered how you will connect to OPNsense when the Cisco switch stops working?
How many VLAN's have you configured on your Cisco switch and be more specific about the gateway addresses in DHCP?
Is your aim to move your other devices currently connecting to the ISP Router to be behind OPNsense?
Please provide information for:
Modem:
- Does it have a management address?
- Are you able to access it to check the device configuration?
- Is the modem configured in Router or Bridge (Modem) mode?
- Is the modem applying settings such as a VLAN ID for the Internet connection?
- Other information about this devices configuration
ISP Router:
- Does it have a management address?
- Are you able to access it and check the device configuration?
- Is the router capable of being configured in Bridge (Modem) mode?
- Is there any other feature about the ISP router you will need to use after migrating devices to be behind OPNsense
Cisco Switch:
- Is the switch connected to OPNsense's LAN network configured to operate in layer-2 or layer-3?
OPNsense:
- routing table
- Source NAT settings and Rules
- LAN Rules (floating, group and interface)
Quote from: Tetra on Today at 12:48:27 AMI have also created the LAN point to be a routed interface with a /30 IP
This will permit only your router's IP address on the LAN and OPNsense to communicate in this network - have you considered how you will connect to OPNsense when the Cisco switch stops working?
Quote from: Tetra on Today at 12:48:27 AMOn that switch I have a DCHP service enabled and the pools give the gateway
How many VLAN's have you configured on your Cisco switch and be more specific about the gateway addresses in DHCP?
#9
26.7 Series / Problems with upgrade from 26....
Last post by Vulhunter25 - Today at 12:59:43 AMSo I upgrade from 26.1 latest to 26.7.3 today. All seemed to go well but after final reboot, internet connection is not working. Provider is xfinity/ Comcast. The wan interface seems to dhcp but the system log has the following messages:
Interfaces.php: ROUTING: refusing to set interface route on addresses wan(vtnet1)
Error opnsense/interfaces.php ROUTING: not a valid wan interface gateway address: 'missing'
In interfaces:overview the wan shows an ipv4 address and a gateway address.
I did see notes about routing issues and set the tunable net.route.algo.inet.algo to radix4 this had no effect on issue.
This is a virtualized firewall in proxmox that has worked fine for 5 years.
Advice on where to go from here?
Interfaces.php: ROUTING: refusing to set interface route on addresses wan(vtnet1)
Error opnsense/interfaces.php ROUTING: not a valid wan interface gateway address: 'missing'
In interfaces:overview the wan shows an ipv4 address and a gateway address.
I did see notes about routing issues and set the tunable net.route.algo.inet.algo to radix4 this had no effect on issue.
This is a virtualized firewall in proxmox that has worked fine for 5 years.
Advice on where to go from here?
#10
General Discussion / Re: WAN out connection Issues
Last post by Tetra - Today at 12:48:27 AMI have applied what you have suggested and sadly no improvements and no new ping/reachability changes. The only custom things I have done (outside of your suggestions) to OPNsense is set up DNS over TLS to cloudflare and a few other DNS servers with firewall rules. I have also created the LAN point to be a routed interface with a /30 IP. The routed interface is pointing to my cisco switch routed port. On that switch I have a DCHP service enabled and the pools give the gateway to the user their respective SVI on that switch. I don't use OPNsense for dhcp services and none of my vlans or dhcp pools are held/conflict with OPNsense. This set up is entirely physical. The WAN interface is getting a IP from the ISP router's DHCP. Both IPv4 and IPv6 gateways with proper addressing are active and online.
