Recent posts

#1

Virtual private networks / Interface for Tailscale shows ...

Last post by dwanecl - Today at 12:41:07 AM

Hello All,

Been working an issue with getting Tailscale up and running on my OPNsense router for days. I have installed the tailscale plugin through the GIU (tried through SSH and have the same results), fully configured, firewall rule has been created. shows up on the tailscale site as online. The issue I have is that the interface shows down and I cannot get the VPN working.

What I am trying to do is connect two networks through two OPNsense routers with tailscale.

Hoping someone knows how to correct this issue.

I have attached a screenshot of the down interface.

#2

German - Deutsch / Re: Wie diese Hosts in unbound...

Last post by Schnuffel2008 - September 25, 2026, 11:41:34 PM

Hi chrisfnf,

hatte jetzt schon länger nicht mehr nach diesem Beitrag geschaut, da sich irgendwie keiner dafür interessiert hat. Habe jetzt seit einiger Zeit mit Kea rumexperimentiert weil ich es einfach einmal ausprobieren wollte und weil ich versucht habe mich ein wenig mit DHCP6 zu beschäftigen. Musste aber feststellen, dass die Problematik, dass die IOS-Geräte den Drucker wieder nicht mehr erkennen. bin jetzt wieder zur alten Kombination Dnsmasq als DHCP-server und Unbound für DNS zurückgekehrt und habe es damit auch direkt wieder hinbekommen, dass der Drucker über Airprint erkannt wird. Ich will nicht sagen, dass es mit Kea nicht geht. Aber ich habe es nicht ausprobiert und kann es nicht sagen.
Falls Du es also mit Dnsmasq und Unbound hinbekommen willst, dann kann ich Dir vielleicht bei Fragen helfen. Ansonsten müsstest Du es irgendwie versuchen aus dieser Anleitung selbst abzuleiten.
Viel Erfolg

#3

Development and Code Review / Re: Blocky DNS (Alternate to A...

Last post by Greelan - September 25, 2026, 11:33:16 PM

I cant update to the latest release.

Have you resolved this now?

If not:

Code Select Expand

pkg clean -ay && pkg update -f

#4

26.7 Series / Re: os-upnp plugin not working...

Last post by nero355 - September 25, 2026, 10:56:40 PM

Have anyone actually verified that this solution works for multiple PC/Xbox clients connecting through UPnP at the same time.

Like I said before in this topic : Forget OPEN NAT and keep things simple at a nice and comfortable Moderate NAT level with STRICT-PORT Enabled for your Gaming Clients :)

#5

26.7 Series / Re: Some observations that may...

Last post by nero355 - September 25, 2026, 10:53:20 PM

By default when you instantiate a VM in a somewhat older Proxmox version, it will attach a x86_64 processor (depending on the underlying hardware). This will become incompatible with some of the later Python libraries such as NumPy which seem to require some fancy processor features that are exposed with newer processor architectures. Therefore when I changed the underlying virtual cpu to x86-64-v2 in Proxmox and rebooted the VM, that problem went away.

There are more of those : https://en.wikipedia.org/wiki/X86-64#Microarchitecture_levels

I suggest setting it as high as possible as long as the CPU of your Proxmox Server allows it :)

In the past I use to simply check for specific CPU features when dealing with this kind of stuff : AVX/AVX2/VT-D/AES-NI/etc.
But somewhere last year or so I discovered this whole v1/v2/v3/v4 stuff while reading something on the openSUSE websites about how their distro will become incompatible with certain older architectures starting with a specific release in the future.
So I started investigating what it's all about...

#LearnSomethingEveryDay!

#6

26.1, 26,4 Series / Re: Legacy FTP ON 26.X BE

Last post by meyergru - September 25, 2026, 10:53:04 PM

You only need that for active FTP, which I assumed why the question was asked. These days, most FTP servers can do passive FTP.

#7

Hardware and Performance / Re: DEC-850v1 serial console o...

Last post by Patrick M. Hausen - September 25, 2026, 10:47:08 PM

What kind of issues were you having ?

A serial console supports copy & paste. And it keeps all output. Clearly superior.

#8

26.7 Series / Re: Unbound Error

Last post by nero355 - September 25, 2026, 10:40:22 PM

Recent topic with something similar : https://forum.opnsense.org/index.php?topic=52221.msg271255#msg271255

Does that or the post above it help perhaps ?

#9

26.1, 26,4 Series / Re: Legacy FTP ON 26.X BE

Last post by nero355 - September 25, 2026, 10:35:53 PM

Is all of this seriously needed ?!

I have never had to do anything like that behind other NAT Routers to connect to Public FTP Servers or for example one temporarily hosted by a friend or me to transport some stuff between our networks.

The only thing that I can think of being different at the time compared to OPNsense now is the needed for STRICT-PORT NAT functionality being ENABLED for the specific Subnet(s) or Client(s) but that's about it...

Usually Passive FTP Mode was used behind NAT and nothing more than that was ever needed ?!

#10

26.1, 26,4 Series / Re: Unstable internet connecti...

Last post by nero355 - September 25, 2026, 10:23:42 PM

I'd really like to see multiple monitor targets per gateway, with some simple quorum/weighting logic, e.g. if one target stops answering but two others are healthy, don't declare the connection down. Those same few well-known targets could be reused across gateways while each gateway probes them through its own connection.

I suggest mentioning this @ https://github.com/opnsense/core/issues because it simply makes sense! :)

/Pun intended unintended... LOL!