"Recent posts
#1
26.7 Series / Re: PPPoE over an unassigned V...
Last post by franco - Today at 11:48:51 AMOkay I think I know what's going on... can you try to set "VLAN Hardware Filtering" on Interfaces: Settings to "Leave default" and reboot.
The down/up for igb0 and igb1 are in your .1 log as well, just not as annoying to the boot sequence as on .5. So we're looking for kernel behaviour instead of anything we've done directly.
Cheers,
Franco
The down/up for igb0 and igb1 are in your .1 log as well, just not as annoying to the boot sequence as on .5. So we're looking for kernel behaviour instead of anything we've done directly.
Cheers,
Franco
#2
German - Deutsch / Re: 1&1 Glasfaser - richtiger ...
Last post by NDregger - Today at 11:40:46 AMUpdate: Anders als bei DSL ist Glasfaser von 1&1 - zumindest in unserem Fall (Telekom Anschluss) wirklich der native Benutzername mit 1und1/.... und es muss nichts vorgestellt werden. Grund für die Probleme beim ersten Anlauf war DSLite, jetzt wo der Anschluss im Fullstack läuft ist alles schick :-)
Over and Out
Norbert
Over and Out
Norbert
#3
26.7 Series / Re: PPPoE over an unassigned V...
Last post by franco - Today at 11:39:11 AMCould actually be a driver bug similar to https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=240818
Because when the VLAN is added it takes down the parent interface, which makes mpd5 dail in vain and then apparently needs a kick to proceed.
<13>1 2026-10-03T10:42:50+02:00 fw-KG.XYZ kernel - - [meta sequenceId="226"] <6>[26] igb0: link state changed to DOWN
<13>1 2026-10-03T10:42:50+02:00 fw-KG.XYZ kernel - - [meta sequenceId="227"] <6>[26] vlan7: changing name to 'vlan0.35'
It's not very easy to work around this in userspace.
Cheers,
Franco
Because when the VLAN is added it takes down the parent interface, which makes mpd5 dail in vain and then apparently needs a kick to proceed.
<13>1 2026-10-03T10:42:50+02:00 fw-KG.XYZ kernel - - [meta sequenceId="226"] <6>[26] igb0: link state changed to DOWN
<13>1 2026-10-03T10:42:50+02:00 fw-KG.XYZ kernel - - [meta sequenceId="227"] <6>[26] vlan7: changing name to 'vlan0.35'
It's not very easy to work around this in userspace.
Cheers,
Franco
#4
26.7 Series / Re: PPPoE over an unassigned V...
Last post by franco - Today at 11:15:17 AMHmm, I'm assuming your WAN sits on top of igb0? As far as timings go it seems to be down/up during the course of the initial WAN configuration which is suboptimal for PPPoE.
Can you try to add igb0 to a new interface and simply enable it without doing any other settings? Then try a reboot and see if the problem persists.
Cheers,
Franco
Can you try to add igb0 to a new interface and simply enable it without doing any other settings? Then try a reboot and see if the problem persists.
Cheers,
Franco
#5
Announcements / Re: OPNsense 26.4.2 business e...
Last post by franco - Today at 11:01:02 AMHere are the full patch notes for patch release 3:
o system: clear password change session flag only after password was changed[37] (reported by Wu Wenhao)
o system: use correct type for IP when killing active states in "lockout_handler" (reported by Omar Habra of Apex Security Research)
o system: fix HA service restart with "id" parameter set
o interfaces: dhclient handles keywords case-insensitive so properly match all "media" invokes (reported by Alice-Sabrina-Ivy)
o interfaces: stricter archive command in backend for packet capture download
o firewall: fix expiry cron job default when alias TTL is smaller than 1 hour
o plugins: os-OPNBEcore 1.9
o plugins: os-OPNWAF 2.5
o src: sysvsem: heap out-of-bounds access in semop(2)[38]
o src: ktls: remote DoS via receive-side kernel TLS[39]
o src: udp: IPv6 UDP sendto(2) bypasses jail loopback restriction[40]
o src: vfs: multiple jail filesystem root escapes[41]
o src: openssl: out-of-bounds read in OpenSSL DTLS retransmission[42]
o ports: expat 2.8.5[43]
--
[37] https://github.com/opnsense/core/security/advisories/GHSA-x3q7-cc7h-gj3v
[38] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:64.sysvsem.asc
[39] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:67.ktls.asc
[40] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:69.udp.asc
[41] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:66.jail.asc
[42] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:68.openssl.asc
[43] https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/Changes
o system: clear password change session flag only after password was changed[37] (reported by Wu Wenhao)
o system: use correct type for IP when killing active states in "lockout_handler" (reported by Omar Habra of Apex Security Research)
o system: fix HA service restart with "id" parameter set
o interfaces: dhclient handles keywords case-insensitive so properly match all "media" invokes (reported by Alice-Sabrina-Ivy)
o interfaces: stricter archive command in backend for packet capture download
o firewall: fix expiry cron job default when alias TTL is smaller than 1 hour
o plugins: os-OPNBEcore 1.9
o plugins: os-OPNWAF 2.5
o src: sysvsem: heap out-of-bounds access in semop(2)[38]
o src: ktls: remote DoS via receive-side kernel TLS[39]
o src: udp: IPv6 UDP sendto(2) bypasses jail loopback restriction[40]
o src: vfs: multiple jail filesystem root escapes[41]
o src: openssl: out-of-bounds read in OpenSSL DTLS retransmission[42]
o ports: expat 2.8.5[43]
--
[37] https://github.com/opnsense/core/security/advisories/GHSA-x3q7-cc7h-gj3v
[38] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:64.sysvsem.asc
[39] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:67.ktls.asc
[40] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:69.udp.asc
[41] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:66.jail.asc
[42] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:68.openssl.asc
[43] https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/Changes
#6
26.7 Series / Re: PPPOE Connection Keep drop...
Last post by Patrick M. Hausen - Today at 10:51:03 AMYou wrote you had it up and running? Now you say it's been down since day one? What is it?
#7
German - Deutsch / Re: 1&1 Glasfaser - richtiger ...
Last post by NDregger - Today at 10:16:27 AMRein mit dem wie es im Kundenportal steht kommen wir eben nicht online - daher ja meine Frage...
#8
German - Deutsch / Re: 1&1 Glasfaser - richtiger ...
Last post by Bob.Dig - Today at 10:09:28 AM1u1 teilt dir deine Zugangskennung nebst Passwort ebenfalls per Brief und im Kundenportal mit.
#9
26.7 Series / Re: PPPOE Connection Keep drop...
Last post by nicholaswkc - Today at 10:06:04 AMIT has been since day one. Hopefully can resolve this.
#10
German - Deutsch / Re: 1&1 Glasfaser - richtiger ...
Last post by NDregger - Today at 09:59:42 AMEben nicht, die Hotline ist ein Alptraum.... Da kommt die alte Aussage wir supporten nur unsere Fritz!Box mit Startcode...
