Recent posts

Main Menu

Welcome to OPNsense Forum.
Log in
Sign up

OPNsense Forum
► Recent posts

Recent posts

Pages1 2 3 ... 10

General Discussion / Can I create locked down wirel...

Last post by jerrac - Today at 03:52:07 AM

(Feel free to move this elsewhere if there's a better category.)

Previous experience has shown than I tend to mess up when I try to experiment with my firewall and network, so I thought I'd ask if any of my ideas are possible first.

Goal:

I'm looking for a way to use an old android phone as a kiosk to an app hosted on my home server. Since it's so old, I don't want it to have any internet.

And then there's my smart tv. I want to put it on a network that can't talk to anything.

USB Dongle idea
If I attached a couple usb wireless cards to my OPNSense box, could I use them to create a wireless network that didn't allow any traffic except for my app?

Router Idea
If I linked a spare wireless router to the OPNSense box using one of the open ports, could I lock down everything attached to that port? (I'm 99% sure that is possible.)

Rules Per Device Idea
Could OPNSense make sure that all traffic from a specific device is only allowed for the app I want to expose? As in my old phone would connect to my wireless network, and then OPNSense would prevent any traffic from, or to, it except for the designated app. How would that work when the wireless router has to route the traffic?

Are there any other ways to implement my goals?

Any tips on what to search for? My searches so far haven't found anything good.

Thanks!

26.7 Series / Re: Failed 26.7 upgrade

Last post by gillbot - Today at 02:07:57 AM

I may have fixed it, after some reading I see there may be an issue with the cpu microcode.
I disabled that then from shell did the following:
# opnsense-update -up
(reboot)

Then ran updates again from the GUI.
now on the GUI I see
Versions
OPNsense 26.7.2_2-amd64
FreeBSD 15.1-RELEASE-p2
OpenSSL 3.5.7

Didn't realize the microcode would cause so many issues.

26.7 Series / Re: Failed 26.7 upgrade

Last post by gillbot - Today at 01:30:48 AM

rebooted, ran a health audit.

Quote***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 26.1.11_10 (amd64) at Mon Aug 17 19:28:09 EDT 2026
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 26.7 is incorrect, expected: 26.1.11
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 26.7 is incorrect, expected: 26.1.11
>>> Check for missing or altered base files
Error 2 occurred.
etc/ssl/certs/002c0b4f.0:
   type (file, link)
etc/ssl/certs/0179095f.0:
   type (file, link)
etc/ssl/certs/062cdee6.0:
   type (file, link)
etc/ssl/certs/064e0aa9.0:
   type (file, link)
etc/ssl/certs/06dc52d5.0:
   type (file, link)
etc/ssl/certs/09789157.0:
   type (file, link)
etc/ssl/certs/0a775a30.0:
   type (file, link)
etc/ssl/certs/0b1b94ef.0:
   type (file, link)
etc/ssl/certs/0b9bc432.0:
   type (file, link)
etc/ssl/certs/0bf05006.0:
   type (file, link)
etc/ssl/certs/0f5dc4f3.0:
   type (file, link)
etc/ssl/certs/0f6fa695.0:
   type (file, link)
etc/ssl/certs/1001acf7.0:
   type (file, link)
etc/ssl/certs/14bc7599.0:
   type (file, link)
etc/ssl/certs/1cef98f5.0:
   type (file, link)
etc/ssl/certs/1d3472b9.0:
   type (file, link)
etc/ssl/certs/1e08bfd1.0:
   type (file, link)
etc/ssl/certs/1e09d511.0:
   type (file, link)
etc/ssl/certs/2923b3f9.0:
   type (file, link)
etc/ssl/certs/2ae6433e.0:
   type (file, link)
etc/ssl/certs/2ccbdda3.0:
   type (file, link)
etc/ssl/certs/30e1580d.0:
   type (file, link)
etc/ssl/certs/32888f65.0:
   type (file, link)
etc/ssl/certs/3bde41ac.0:
   type (file, link)
etc/ssl/certs/3e359ba6.0:
   type (file, link)
etc/ssl/certs/3fb36b73.0:
   type (file, link)
etc/ssl/certs/40193066.0:
   type (file, link)
etc/ssl/certs/4042bcee.0:
   type (file, link)
etc/ssl/certs/406c9bb1.0:
   type (file, link)
etc/ssl/certs/48bec511.0:
   type (file, link)
etc/ssl/certs/4b718d9b.0:
   type (file, link)
etc/ssl/certs/4bfab552.0:
   type (file, link)
etc/ssl/certs/5443e9e3.0:
   type (file, link)
etc/ssl/certs/54657681.0:
   type (file, link)
etc/ssl/certs/5860aaa6.0:
   type (file, link)
etc/ssl/certs/5931b5bc.0:
   type (file, link)
etc/ssl/certs/5f15c80c.0:
   type (file, link)
etc/ssl/certs/5f618aec.0:
   type (file, link)
etc/ssl/certs/607986c7.0:
   type (file, link)
etc/ssl/certs/616816f6.0:
   type (file, link)
etc/ssl/certs/6805c744.0:
   type (file, link)
etc/ssl/certs/68dd7389.0:
   type (file, link)
etc/ssl/certs/6a9bdba3.0:
   type (file, link)
etc/ssl/certs/6d41d539.0:
   type (file, link)
etc/ssl/certs/6fa5da56.0:
   type (file, link)
etc/ssl/certs/749e9e03.0:
   type (file, link)
etc/ssl/certs/75d1b2ed.0:
   type (file, link)
etc/ssl/certs/7719f463.0:
   type (file, link)
etc/ssl/certs/773e07ad.0:
   type (file, link)
etc/ssl/certs/7a3adc42.0:
   type (file, link)
etc/ssl/certs/7a780d93.0:
   type (file, link)
etc/ssl/certs/7f3d5d1d.0:
   type (file, link)
etc/ssl/certs/7fa05551.0:
   type (file, link)
etc/ssl/certs/8160b96c.0:
   type (file, link)
etc/ssl/certs/8508e720.0:
   type (file, link)
etc/ssl/certs/865fbdf9.0:
   type (file, link)
etc/ssl/certs/878d9bca.0:
   type (file, link)
etc/ssl/certs/8cb5ee0f.0:
   type (file, link)
etc/ssl/certs/8d89cda1.0:
   type (file, link)
etc/ssl/certs/8f103249.0:
   type (file, link)
etc/ssl/certs/9046744a.0:
   type (file, link)
etc/ssl/certs/90c5a3c8.0:
   type (file, link)
etc/ssl/certs/930ac5d2.0:
   type (file, link)
etc/ssl/certs/9482e63a.0:
   type (file, link)
etc/ssl/certs/9846683b.0:
   type (file, link)
etc/ssl/certs/988a38cb.0:
   type (file, link)
etc/ssl/certs/9b46e03d.0:
   type (file, link)
etc/ssl/certs/9bf03295.0:
   type (file, link)
etc/ssl/certs/9d04f354.0:
   type (file, link)
etc/ssl/certs/9e654b62.0:
   type (file, link)
etc/ssl/certs/9ef4a08a.0:
   type (file, link)
etc/ssl/certs/9f727ac7.0:
   type (file, link)
etc/ssl/certs/a09a51ae.0:
   type (file, link)
etc/ssl/certs/a3418fda.0:
   type (file, link)
etc/ssl/certs/a89d74c2.0:
   type (file, link)
etc/ssl/certs/a94d09e5.0:
   type (file, link)
etc/ssl/certs/b0d5255e.0:
   type (file, link)
etc/ssl/certs/b0e59380.0:
   type (file, link)
etc/ssl/certs/b433981b.0:
   type (file, link)
etc/ssl/certs/b7a5b843.0:
   type (file, link)
etc/ssl/certs/b81b93f0.0:
   type (file, link)
etc/ssl/certs/b8d25de6.0:
   type (file, link)
etc/ssl/certs/bf53fb88.0:
   type (file, link)
etc/ssl/certs/c01eb047.0:
   type (file, link)
etc/ssl/certs/c28a8a30.0:
   type (file, link)
etc/ssl/certs/ca6e4ad9.0:
   type (file, link)
etc/ssl/certs/cbf06781.0:
   type (file, link)
etc/ssl/certs/cc450945.0:
   type (file, link)
etc/ssl/certs/cd58d51e.0:
   type (file, link)
etc/ssl/certs/cd8c0d63.0:
   type (file, link)
etc/ssl/certs/ce5e74ef.0:
   type (file, link)
etc/ssl/certs/d4dae3dd.0:
   type (file, link)
etc/ssl/certs/d52c538d.0:
   type (file, link)
etc/ssl/certs/d6325660.0:
   type (file, link)
etc/ssl/certs/da0cfd1d.0:
   type (file, link)
etc/ssl/certs/dc4d6a89.0:
   type (file, link)
etc/ssl/certs/dd8e9d41.0:
   type (file, link)
etc/ssl/certs/ddcda989.0:
   type (file, link)
etc/ssl/certs/de6d66f3.0:
   type (file, link)
etc/ssl/certs/e18bfb83.0:
   type (file, link)
etc/ssl/certs/e35234b1.0:
   type (file, link)
etc/ssl/certs/e36a6752.0:
   type (file, link)
etc/ssl/certs/e73d606e.0:
   type (file, link)
etc/ssl/certs/e868b802.0:
   type (file, link)
etc/ssl/certs/e8de2f56.0:
   type (file, link)
etc/ssl/certs/ecccd8db.0:
   type (file, link)
etc/ssl/certs/ed858448.0:
   type (file, link)
etc/ssl/certs/eed8c118.0:
   type (file, link)
etc/ssl/certs/ef954a4e.0:
   type (file, link)
etc/ssl/certs/f0c70a8d.0:
   type (file, link)
etc/ssl/certs/f30dd6ad.0:
   type (file, link)
etc/ssl/certs/f44703f1.0:
   type (file, link)
etc/ssl/certs/f51bb24c.0:
   type (file, link)
etc/ssl/certs/fb717492.0:
   type (file, link)
etc/ssl/certs/fc5a8f99.0:
   type (file, link)
etc/ssl/certs/fd64f3fc.0:
   type (file, link)
etc/ssl/certs/fe8a2cd8.0:
   type (file, link)
etc/ssl/certs/feffd413.0:
   type (file, link)
etc/ssl/certs/ff34af3f.0:
   type (file, link)
etc/ssl/certs/ffdd40f9.0:
   type (file, link)
etc/ssl/untrusted/02265526.0:
   type (file, link)
etc/ssl/untrusted/0b7c536a.0:
   type (file, link)
etc/ssl/untrusted/0d972af8.0:
   type (file, link)
etc/ssl/untrusted/106f3e4d.0:
   type (file, link)
etc/ssl/untrusted/1422d63c.0:
   type (file, link)
etc/ssl/untrusted/1766e401.0:
   type (file, link)
etc/ssl/untrusted/19dbc0dd.0:
   type (file, link)
etc/ssl/untrusted/244b5494.0:
   type (file, link)
etc/ssl/untrusted/2d803388.0:
   type (file, link)
etc/ssl/untrusted/2dab9e33.0:
   type (file, link)
etc/ssl/untrusted/3136ea36.0:
   type (file, link)
etc/ssl/untrusted/3323bb7e.0:
   type (file, link)
etc/ssl/untrusted/3513523f.0:
   type (file, link)
etc/ssl/untrusted/40547a79.0:
   type (file, link)
etc/ssl/untrusted/442adcac.0:
   type (file, link)
etc/ssl/untrusted/4632c230.0:
   type (file, link)
etc/ssl/untrusted/4c3cbf99.0:
   type (file, link)
etc/ssl/untrusted/4f316efb.0:
   type (file, link)
etc/ssl/untrusted/5a4d6896.0:
   type (file, link)
etc/ssl/untrusted/5ad8a5d6.0:
   type (file, link)
etc/ssl/untrusted/5c79eb85.0:
   type (file, link)
etc/ssl/untrusted/5e98733a.0:
   type (file, link)
etc/ssl/untrusted/626dceaf.0:
   type (file, link)
etc/ssl/untrusted/69cf9657.0:
   type (file, link)
etc/ssl/untrusted/6b99d060.0:
   type (file, link)
etc/ssl/untrusted/76faf6c0.0:
   type (file, link)
etc/ssl/untrusted/779a714a.0:
   type (file, link)
etc/ssl/untrusted/7ffa47b4.0:
   type (file, link)
etc/ssl/untrusted/896c8bb4.0:
   type (file, link)
etc/ssl/untrusted/981901c3.0:
   type (file, link)
etc/ssl/untrusted/ade2cc8c.0:
   type (file, link)
etc/ssl/untrusted/aee5f10d.0:
   type (file, link)
etc/ssl/untrusted/b1159c4c.0:
   type (file, link)
etc/ssl/untrusted/b1b8a7f3.0:
   type (file, link)
etc/ssl/untrusted/c9e4c02b.0:
   type (file, link)
etc/ssl/untrusted/cbd811bd.0:
   type (file, link)
etc/ssl/untrusted/d2be6420.0:
   type (file, link)
etc/ssl/untrusted/d7e8dc79.0:
   type (file, link)
etc/ssl/untrusted/e113c810.0:
   type (file, link)
etc/ssl/untrusted/e1e8b7dc.0:
   type (file, link)
etc/ssl/untrusted/e53e0c3b.0:
   type (file, link)
etc/ssl/untrusted/ee64a828.0:
   type (file, link)
etc/ssl/untrusted/f081611a.0:
   type (file, link)
etc/ssl/untrusted/f2d4863f.0:
   type (file, link)
etc/ssl/untrusted/f387163d.0:
   type (file, link)
etc/ssl/untrusted/f84fab51.0:
   type (file, link)
etc/ssl/untrusted/fd2eb50d.0:
   type (file, link)
>>> Check installed repositories
FreeBSD-ports (Priority: 0)
FreeBSD-ports-kmods (Priority: 0)
OPNsense (Priority: 11)
>>> Check installed plugins
os-cpu-microcode-intel 1.1_1
os-isc-dhcp 1.0_6
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" at 26.1.11_10 has 68 dependencies to check.
Checking packages: .............
hostapd-2.11_3 version mismatch, expected 2.12_2
Checking packages: .....
lighttpd-1.4.84 version mismatch, expected 1.4.85
Checking packages: ....
openssh-portable-10.3.p1,1 version mismatch, expected 10.4.p1,1
Checking packages: .
openvpn-2.7.5 version mismatch, expected 2.7.6
Checking packages: .
opnsense-26.1.11_10 version mismatch, expected 26.7.2_2
Checking packages: .
opnsense-installer-25.1_2 version mismatch, expected 26.7
Checking packages: ..
opnsense-update-26.1.11 version mismatch, expected 26.7.2
Checking packages: ...
php83-ctype-8.3.31 has no upstream equivalent
Checking packages: .
php83-curl-8.3.31 has no upstream equivalent
Checking packages: .
php83-dom-8.3.31 has no upstream equivalent
Checking packages: .
php83-filter-8.3.31 has no upstream equivalent
Checking packages: .
php83-gettext-8.3.31 has no upstream equivalent
Checking packages: .
php83-ldap-8.3.31 has no upstream equivalent
Checking packages: .
php83-pcntl-8.3.31 has no upstream equivalent
Checking packages: .
php83-pdo-8.3.31 has no upstream equivalent
Checking packages: .
php83-pear-Crypt_CHAP-1.5.0_1 has no upstream equivalent
Checking packages: .
php83-pecl-radius-1.4.0b1_4 has no upstream equivalent
Checking packages: .
php83-phalcon-5.16.0 has no upstream equivalent
Checking packages: .
php83-phpseclib-3.0.55 has no upstream equivalent
Checking packages: .
php83-session-8.3.31 has no upstream equivalent
Checking packages: .
php83-simplexml-8.3.31 has no upstream equivalent
Checking packages: .
php83-sockets-8.3.31 has no upstream equivalent
Checking packages: .
php83-sqlite3-8.3.31 has no upstream equivalent
Checking packages: .
php83-xml-8.3.31 has no upstream equivalent
Checking packages: .
php83-zlib-8.3.31 has no upstream equivalent
Checking packages: .
pkg-2.7.5 repository mismatch: unknown-repository
pkg-2.7.5 version mismatch, expected 2.3.1_1
Checking packages: ...
py313-duckdb-1.5.4 version mismatch, expected 1.5.5
Checking packages: ......
py313-sqlite3-3.13.14_10 version mismatch, expected 3.13.15_10
Checking packages: ..........
unbound-1.25.1_1 version mismatch, expected 1.26.0
Checking packages: .
wpa_supplicant-2.11_7 version mismatch, expected 2.12_1
Checking packages: . done
***DONE***

Hardware and Performance / Re: Warning about RealTek adap...

Last post by moonman - Today at 01:25:56 AM

I take it back about rtl8127. While it isn't giving me any issues, like you had with it per se. After I sent that message yesterday, I decided to compare CPU load on rtl8127. Copying single 50GB file from the unraid server (with AQC113 NIC) throughput was all over the place from 900 MB(yte)/s to 1.10GB/s with one core maxed out. I put the AQC113 NIC back in and got a stable smooth throughput at 1.09GB/s and none of the cores were maxed out. I did play with different settings including settings RSS queues from 8 to 4, but none helped. Is it a driver issue? maybe, but I think for now I'll stick to workarounds with AQC113 (i.e. disabling "Allow the computer to turn off this devices to save power" in Windows) instead of using rtl8127.

26.7 Series / Failed 26.7 upgrade

Last post by gillbot - Today at 01:18:01 AM

Tried an upgrade from the GUI, system hung so I power cycled. Tried to update again and now all I get is this error.

Quote***GOT REQUEST TO UPDATE***
Currently running OPNsense 26.1.11_10 (amd64) at Mon Aug 17 19:16:31 EDT 2026
Updating FreeBSD-ports repository catalogue...
FreeBSD-ports repository is up to date.
Updating FreeBSD-ports-kmods repository catalogue...
FreeBSD-ports-kmods repository is up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating FreeBSD-ports repository catalogue...
FreeBSD-ports repository is up to date.
Updating FreeBSD-ports-kmods repository catalogue...
FreeBSD-ports-kmods repository is up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (154 candidates): .......... done
Processing candidates (154 candidates): .......... done
Checking integrity... done (44 conflicting)
- php85-xml-8.5.9 [FreeBSD-ports] conflicts with php83-xml-8.3.31 [installed] on /usr/local/etc/php/ext-20-xml.ini.sample
- php85-xml-8.5.9 [FreeBSD-ports] conflicts with php83-xml-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-xml.ini.sample
- php85-curl-8.5.9 [FreeBSD-ports] conflicts with php83-curl-8.3.31 [installed] on /usr/local/etc/php/ext-20-curl.ini.sample
- php85-curl-8.5.9 [FreeBSD-ports] conflicts with php83-curl-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-curl.ini.sample
- php85-pear-1.10.18 [OPNsense] conflicts with php83-pear-1.10.18 [installed] on /usr/local/bin/pear
- php85-pear-1.10.18 [OPNsense] conflicts with php83-pear-1.10.18 [FreeBSD-ports] on /usr/local/bin/pear
- php85-dom-8.5.9 [FreeBSD-ports] conflicts with php83-dom-8.3.31 [installed] on /usr/local/etc/php/ext-20-dom.ini.sample
- php85-dom-8.5.9 [FreeBSD-ports] conflicts with php83-dom-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-dom.ini.sample
- php85-filter-8.5.9 [FreeBSD-ports] conflicts with php83-filter-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-filter.ini.sample
- php85-filter-8.5.9 [FreeBSD-ports] conflicts with php83-filter-8.3.31 [installed] on /usr/local/etc/php/ext-20-filter.ini.sample
- php85-simplexml-8.5.9 [FreeBSD-ports] conflicts with php83-simplexml-8.3.31 [installed] on /usr/local/etc/php/ext-20-simplexml.ini.sample
- php85-simplexml-8.5.9 [FreeBSD-ports] conflicts with php83-simplexml-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-simplexml.ini.sample
- php85-pdo-8.5.9 [FreeBSD-ports] conflicts with php83-pdo-8.3.31 [installed] on /usr/local/etc/php/ext-20-pdo.ini.sample
- php85-pdo-8.5.9 [FreeBSD-ports] conflicts with php83-pdo-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-pdo.ini.sample
- php85-pecl-mcrypt-1.0.9 [OPNsense] conflicts with php83-pecl-mcrypt-1.0.7 [installed] on /usr/local/etc/php/ext-20-mcrypt.ini.sample
- php85-pecl-mcrypt-1.0.9 [OPNsense] conflicts with php83-pecl-mcrypt-1.0.7 [FreeBSD-ports] on /usr/local/etc/php/ext-20-mcrypt.ini.sample
- php85-session-8.5.9 [FreeBSD-ports] conflicts with php83-session-8.3.31 [installed] on /usr/local/etc/php/ext-18-session.ini.sample
- php85-session-8.5.9 [FreeBSD-ports] conflicts with php83-session-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-18-session.ini.sample
- php85-8.5.9 [FreeBSD-ports] conflicts with php83-8.3.31 [installed] on /usr/local/bin/php
- php85-8.5.9 [FreeBSD-ports] conflicts with php83-8.3.33 [FreeBSD-ports] on /usr/local/bin/php
- php85-phalcon-5.18.2 [OPNsense] conflicts with php83-phalcon-5.16.0 [installed] on /usr/local/etc/php/ext-30-phalcon.ini.sample
- php85-phalcon-5.18.2 [OPNsense] conflicts with php83-phalcon-5.16.0 [FreeBSD-ports] on /usr/local/etc/php/ext-30-phalcon.ini.sample
- php85-sqlite3-8.5.9 [FreeBSD-ports] conflicts with php83-sqlite3-8.3.31 [installed] on /usr/local/etc/php/ext-20-sqlite3.ini.sample
- php85-sqlite3-8.5.9 [FreeBSD-ports] conflicts with php83-sqlite3-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-sqlite3.ini.sample
- php85-gettext-8.5.9 [FreeBSD-ports] conflicts with php83-gettext-8.3.31 [installed] on /usr/local/etc/php/ext-20-gettext.ini.sample
- php85-gettext-8.5.9 [FreeBSD-ports] conflicts with php83-gettext-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-gettext.ini.sample
- php85-pecl-radius-1.4.0b1_4 [OPNsense] conflicts with php83-pecl-radius-1.4.0b1_4 [installed] on /usr/local/etc/php/ext-20-radius.ini.sample
- php85-ldap-8.5.9 [FreeBSD-ports] conflicts with php83-ldap-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-ldap.ini.sample
- php85-ldap-8.5.9 [FreeBSD-ports] conflicts with php83-ldap-8.3.31 [installed] on /usr/local/etc/php/ext-20-ldap.ini.sample
- php85-pcntl-8.5.9 [FreeBSD-ports] conflicts with php83-pcntl-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-pcntl.ini.sample
- php85-pcntl-8.5.9 [FreeBSD-ports] conflicts with php83-pcntl-8.3.31 [installed] on /usr/local/etc/php/ext-20-pcntl.ini.sample
- php85-pear-Crypt_CHAP-1.5.0_1 [OPNsense] conflicts with php83-pear-Crypt_CHAP-1.5.0_1 [installed] on /usr/local/share/pear/Crypt/CHAP.php
- openssl35-3.5.7 [OPNsense] conflicts with openssl-3.0.21,1 [FreeBSD-ports] on /usr/local/bin/c_rehash
- openssl35-3.5.7 [OPNsense] conflicts with openssl-3.0.21,1 [installed] on /usr/local/bin/c_rehash
- openssl35-3.5.7 [FreeBSD-ports] conflicts with openssl-3.0.21,1 [FreeBSD-ports] on /usr/local/bin/c_rehash
- php85-zlib-8.5.9 [FreeBSD-ports] conflicts with php83-zlib-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-zlib.ini.sample
- php85-zlib-8.5.9 [FreeBSD-ports] conflicts with php83-zlib-8.3.31 [installed] on /usr/local/etc/php/ext-20-zlib.ini.sample
- php85-phpseclib-3.0.55 [OPNsense] conflicts with php83-phpseclib-3.0.55 [installed] on /usr/local/share/phpseclib/Common/Functions/Strings.php
- php85-sockets-8.5.9 [FreeBSD-ports] conflicts with php83-sockets-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-sockets.ini.sample
- php85-sockets-8.5.9 [FreeBSD-ports] conflicts with php83-sockets-8.3.31 [installed] on /usr/local/etc/php/ext-20-sockets.ini.sample
- php85-mbstring-8.5.9 [FreeBSD-ports] conflicts with php83-mbstring-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-mbstring.ini.sample
- php85-mbstring-8.5.9 [FreeBSD-ports] conflicts with php83-mbstring-8.3.31 [installed] on /usr/local/etc/php/ext-20-mbstring.ini.sample
- php85-ctype-8.5.9 [FreeBSD-ports] conflicts with php83-ctype-8.3.33 [FreeBSD-ports] on /usr/local/etc/php/ext-20-ctype.ini.sample
- php85-ctype-8.5.9 [FreeBSD-ports] conflicts with php83-ctype-8.3.31 [installed] on /usr/local/etc/php/ext-20-ctype.ini.sample
Cannot solve problem using SAT solver, trying another plan
Cannot solve problem using SAT solver, trying another plan
Checking integrity... done (0 conflicting)
The following 121 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
   dbus: 1.16.2_4,1 [OPNsense]
   fontconfig: 2.17.1,1 [OPNsense]
   freetype2: 2.14.3 [OPNsense]
   glib-bootstrap: 2.86.4,2 [OPNsense]
   openssl35: 3.5.7 [FreeBSD-ports]
   png: 1.6.58 [OPNsense]

Installed packages to be UPGRADED:
   hostapd: 2.11_3 -> 2.12_2 [OPNsense]
   libevent: 2.1.12 -> 2.1.13 [OPNsense]
   lighttpd: 1.4.84 -> 1.4.85 [OPNsense]
   nss: 3.124 -> 3.126 [OPNsense]
   openldap26-client: 2.6.13 -> 2.6.14 [OPNsense]
   openssh-portable: 10.3.p1,1 -> 10.4.p1,1 [OPNsense]
   openvpn: 2.7.5 -> 2.7.6 [OPNsense]
   opnsense-installer: 25.1_2 -> 26.7 [OPNsense]
   opnsense-update: 26.1.11 -> 26.7.2 [OPNsense]
   os-isc-dhcp: 1.0_6 -> 1.0_7 [OPNsense]
   php83: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-ctype: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-curl: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-dom: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-filter: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-gettext: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-ldap: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-mbstring: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-pcntl: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-pdo: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-session: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-simplexml: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-sockets: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-sqlite3: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-xml: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   php83-zlib: 8.3.31 -> 8.3.33 [FreeBSD-ports]
   py313-certifi: 2026.5.20 -> 2026.6.17 [OPNsense]
   py313-cryptography: 48.0.0_1,1 -> 48.0.1,1 [OPNsense]
   py313-duckdb: 1.5.4 -> 1.5.5 [OPNsense]
   py313-idna: 3.16 -> 3.18 [OPNsense]
   py313-sqlite3: 3.13.14_10 -> 3.13.15_10 [OPNsense]
   python313: 3.13.14 -> 3.13.15 [OPNsense]
   sqlite3: 3.53.1,1 -> 3.53.3,1 [OPNsense]
   unbound: 1.25.1_1 -> 1.26.0 [OPNsense]
   wpa_supplicant: 2.11_7 -> 2.12_1 [OPNsense]

Installed packages to be REINSTALLED:
   boost-libs-1.89.0_2 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   colordiff-1.0.22 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   cpdup-1.22_1 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   curl-8.21.0 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   cyrus-sasl-2.1.28_5 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   cyrus-sasl-gssapi-2.1.28 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   glib-2.86.4,2 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   isc-dhcp44-server-4.4.3P1_2 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   kea-3.0.3 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   krb5-1.22.2_2 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   ldns-1.9.2 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   libfido2-1.17.0 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   libinotify-20240724_3 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   libxml2-2.15.3 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   monit-5.35.2 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   ntp-4.2.8p18_5 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   opnsense-lang-26.1.7 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   pam_opnsense-24.1 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   pcre2-10.47_1 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   perl5-5.42.2 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   pftop-0.13 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   php83-pear-1.10.18 [FreeBSD-ports] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   php83-pecl-mcrypt-1.0.7 [FreeBSD-ports] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   php83-phalcon-5.16.0 [FreeBSD-ports] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   pkcs11-helper-1.31.0 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   py313-Babel-2.18.0 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-Jinja2-3.1.6 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-aioquic-1.3.0_1 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   py313-anyio-4.13.0 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-async_generator-1.10_1 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-attrs-26.1.0 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-bottleneck-1.6.0_2 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   py313-cffi-2.0.0 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   py313-charset-normalizer-3.4.7 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-dnspython-2.8.0_1,1 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-h11-0.16.0 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-h2-4.3.0 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-hpack-4.1.0 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-httpcore-1.0.9 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-httpx-0.28.1_2 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-hyperframe-6.1.0 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-jq-1.11.0 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   py313-ldap3-2.9.1_1 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-markupsafe-3.0.3 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   py313-numexpr-2.14.1_2 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   py313-numpy-2.4.6_1,1 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   py313-outcome-1.3.0_2 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-packaging-26.2 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-pandas-2.3.3_3,1 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   py313-pyasn1-0.6.0 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-pyasn1-modules-0.4.1 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-pycparser-2.23 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-pylsqpack-0.3.24 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   py313-pyopenssl-26.2.0,1 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-pysocks-1.7.1_1 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-python-dateutil-2.9.0 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-pytz-2026.2,1 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-pyyaml-6.0.3 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   py313-requests-2.34.2 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-service-identity-24.2.0 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-six-1.17.0 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-sniffio-1.3.1 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-socksio-1.0.0_1 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-sortedcontainers-2.4.0_1 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-trio-0.33.0 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-truststore-0.10.4 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-tzdata-2026.2 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-ujson-5.12.1 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   py313-urllib3-2.7.0,1 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   py313-vici-6.0.3 [OPNsense] (ABI changed: 'FreeBSD:14:*' -> 'FreeBSD:15:*')
   radvd-2.20 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   readline-8.3.3 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   rrdtool-1.9.0_1 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   samplicator-1.3.8.r1_1 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   strongswan-6.0.7 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   sudo-1.9.17p2_2 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   suricata-8.0.6 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   syslog-ng-4.12.0 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   zip-3.0_5 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')
   zstd-1.5.7_2 [OPNsense] (ABI changed: 'FreeBSD:14:amd64' -> 'FreeBSD:15:amd64')

Number of packages to be installed: 6
Number of packages to be upgraded: 35
Number of packages to be reinstalled: 80

The process will require 69 MiB more space.
[ 1/121] Installing openssl35-3.5.7...
pkg-static: openssl35-3.5.7 conflicts with openssl-3.0.21,1 (installs files into the same place). Problematic file: /usr/local/bin/c_rehash
Flushing temporary package files... done
Starting web GUI...done.
Partial update failure detected: report this error log to OPNsense.
No further actions will be taken. Please restart the update now.
***DONE***

German - Deutsch / Re: Eingehende WAN-Anfragen: R...

Last post by mooh - August 17, 2026, 11:19:54 PM

... was mich zu meinem Steckenpferd bringt: "Disable force gateway" sollte auch als Voreinstellung "aus" sein. Macht auch nur Sinn bei mehreren Gateways. Ich wünsche mir, dass als Voreinstellung das normale Routing greift, nicht der Hack, aber der Hack ist der Normalfall...

Virtual private networks / Re: AWS Site-to-Site VPN Confi...

Last post by cknight725 - August 17, 2026, 11:17:33 PM

Quote from: userfw on August 12, 2026, 09:41:39 AMHey cknight725, thanks for the detailed guide.
The docs about VTI IPSEC mention to explicitly associate the reqid of the VTI to the Phase 2 children[1][2], is it necessary in your experience?

Honestly this is part of the frustration with the old documentation -- its not up to date at all. the tooltip for ReqID on the Child today says it pretty clearly "This might be helpful in some scenarios, like route based tunnels (VTI), but works only if each CHILD_SA configuration is instantiated not more than once. The default uses dynamic reqids, allocated incrementally". Basically -- not important. In my case the reqIds are 1 and 2.

26.7 Series / Re: Interfaces: Virtual IPs: S...

Last post by MK4L - August 17, 2026, 11:15:05 PM

And, yes: Please bring back VIP Mode=Other to the UI.

26.7 Series / Re: Interfaces: Virtual IPs: S...

Last post by MK4L - August 17, 2026, 11:12:45 PM

Quote from: Patrick M. Hausen on August 17, 2026, 09:06:49 PMThe official documentation for a transparent filtering bridge is here: https://docs.opnsense.org/manual/how-tos/transparent_bridge.html

Oh yes :D Tis I, once again!

After staring at that page for so long I discovered this:
- This page is a Deja-Vu!
- I followed these steps to the character and ended up with toast routing.
- The steps, now, are outdated and do not represent current UI design/pages.
- Specifically, and since 2017 when I first read it, the system tunable instructions actually block routing (because there is no such thing as a Bridge interface to use in Firewall/Rules)

..which makes my setup unique and superior ;P

#10

Development and Code Review / Re: netflector available as pl...

Last post by UnicronHD - August 17, 2026, 11:10:22 PM

Quote from: Seimus on August 17, 2026, 09:39:47 AMLooking forward for this plugin.

I have exactly the same problem/use case as you described + as well a problem with Steam play between PC and TV.
This plugin looks like exactly what I would need.

Fingers crossed it will be adopted by FBSD sooner than later!

Regards,
S.

You can try it now, before it becomes official (see instructions in the first post). If you do - let me know if works well for you.

Pages1 2 3 ... 10