"Recent posts
#1
Russian - Русский / Re: os-xray — плагин Xray-core...
Last post by tyra - Today at 02:47:34 AMQuote from: Spylive on November 09, 2026, 10:45:57 AMQuote from: tyra on November 07, 2026, 02:23:01 PMQuote from: Spylive on November 07, 2026, 12:35:25 PMДа именно так. И тогда для любых проверок РКН Ваш внешний ip, который они заносят в блокировки, будет тот который и так уже не доступен из России. Дополнительно на своем локальном виртуальном сервере с белым IP поднял еще один 3x-ui и его использую с мобильным трафиком, а для обхода белых списков использую аренду CDN у яндекса за 150р в месяц.А VPS-заграница -> VPS-заграница уже заблокированный-- VPSЫ должны быть в одной стране и на одном сервере или это не обязательно? (Дополнительно на своем локальном виртуальном сервере с белым IP поднял еще один 3x-ui и его использую с мобильным трафиком) то есть если я правильно понимаю свой домашний белый IP используешь как VPN за которым opnsense c os-xray и опять идет в VPS-заграница -> VPS-заграница уже заблокированный;-то есть схема примерно как из видео https://youtu.be/ZSy1b3BeKzk?list=PLsU1-fn3_XD08m2L1zu8Yrj1WcCIkSihl ? Про CDN я слышал-смотрел но не пробывал. По поводу плагина os-xray, он поддерживает только два протокола VLESS и VLESS-xHTTP и причём одну страну Германию а на Эстонии и Финляндии не работает то есть в столбце Status все зелёное (xray: up tun: up) а в Test Result красное (Could not connect — xray-core may be stopped or port unreachable)? в приложении HAPP больше протоколов на всех нодах работают, это я к тому что они рабочие в одной сети с opnsense.
#2
General Discussion / Re: Plex Server Setup in 2024 ...
Last post by ats - Today at 01:22:29 AMNew version of OPNSense breaks up the NAT rules differently than pfsense and earlier opnsense versions.
You want to set up the "port forwarded rule" on the "Firewall: NAT: Destination NAT" -> that is the, destination nat rules.
Click the box/select the option to automatically create the firewall rules for you at the bottom.
Spent a few hours, twice already, relearning this a few months apart.
You're welcome my friends.
You want to set up the "port forwarded rule" on the "Firewall: NAT: Destination NAT" -> that is the, destination nat rules.
Click the box/select the option to automatically create the firewall rules for you at the bottom.
Spent a few hours, twice already, relearning this a few months apart.
You're welcome my friends.
#3
Zenarmor (Sensei) / Re: Am I missing something or ...
Last post by mb - Today at 01:17:22 AM@Greg_E, I checked and saw you're already working with our sales team, that's great!
We do understand the budget realities in education, and the same goes for NGOs and nonprofits. We have standing programs for exactly this. For EDU/NPO, discounts go as high as 50%. I see our team is already on it and applying what's needed to land the price within your budget.
And thanks for the feedback, very helpful.
We do understand the budget realities in education, and the same goes for NGOs and nonprofits. We have standing programs for exactly this. For EDU/NPO, discounts go as high as 50%. I see our team is already on it and applying what's needed to land the price within your budget.
And thanks for the feedback, very helpful.
#4
General Discussion / Re: CrowdSec integrated with L...
Last post by Amodin - November 11, 2026, 10:01:08 PMI've seen the same timeout issue with just the regular Crowdsec setup, and with my Zoraxy plug-in (bouncer) on my reverse proxy. The decisions didn't show and I just got the spinning wheel of death. I think I only had to refresh the view by clicking on something else, then going back to it in the GUI.
Now if I can just get it to stop punching itself in the face....
(Meaning, it tells me to update to 1.8.2, identifies itself as being at 1.8.1_2, and telling me everything is fine, even after reinstalling it all).
Now if I can just get it to stop punching itself in the face....
(Meaning, it tells me to update to 1.8.2, identifies itself as being at 1.8.1_2, and telling me everything is fine, even after reinstalling it all).
#5
26.7, 26.10 Series / monit is running a service whi...
Last post by viragomann - November 11, 2026, 09:40:03 PMThe missing service in settings is obviously working well. But it isn't shown on the services settings page, hence I'm not able to edit it.
On the settings page a blue banner is displaced with "The configuration contains manual overwrites, these may interfere with the settings configured here."
I didn't make any changes aside form the GUI though. Possibly something went wrong during an update?
I tried to export the config.xml and searched for the named service, but nothing. I re-imported the config and rebooted the system, but the service is still shown up in monit status.
Neither I can find the service in /usr/local/etc/monitrc.
So I'm wondering, how I can get rid of the orphaned service now. Any other place, where I can look for this setting?
On the settings page a blue banner is displaced with "The configuration contains manual overwrites, these may interfere with the settings configured here."
I didn't make any changes aside form the GUI though. Possibly something went wrong during an update?
I tried to export the config.xml and searched for the named service, but nothing. I re-imported the config and rebooted the system, but the service is still shown up in monit status.
Neither I can find the service in /usr/local/etc/monitrc.
So I'm wondering, how I can get rid of the orphaned service now. Any other place, where I can look for this setting?
#6
26.7, 26.10 Series / Re: PPPoE over an unassigned V...
Last post by franco - November 11, 2026, 09:31:44 PMHi fanski,
Yes this was expected. Now we can try this:
# opnsense-patch https://github.com/opnsense/core/commit/39cca4ca785
Instead of trying to debug the down state we can try shift the timing to a more favourable point. This would have several benefits if it works well enough.
Cheers,
Franco
Yes this was expected. Now we can try this:
# opnsense-patch https://github.com/opnsense/core/commit/39cca4ca785
Instead of trying to debug the down state we can try shift the timing to a more favourable point. This would have several benefits if it works well enough.
Cheers,
Franco
#7
Hardware and Performance / Re: OPNsense on Sophos XGS: dr...
Last post by zz00mm - November 11, 2026, 09:14:35 PMI uploaded a fan control issue for a 136. I purchased 2 units off ebay to try this out.
Unit #1, is 136-XN01 and it's working, I connected a AP to see if it received power and it did, the AP is broken so all I expected to see was it power on.
Unit #1, is not allowing fan control, I submitted a fan-ctrl ticket for this.
Unit #2, is 136-XN02 and it works 98%, something was moving around in the unit when I unboxed it.
The following message repeats on the console every xxx seconds
uart2: <16x50 with 256 byte FIFO> iomem 0xfedc9000-0xfedc9fff,0xfedc7000-0xfedc7fff irq 3 on acpi0 and it doesn't look like PoE works because of this.
Unit #1, is 136-XN01 and it's working, I connected a AP to see if it received power and it did, the AP is broken so all I expected to see was it power on.
Unit #1, is not allowing fan control, I submitted a fan-ctrl ticket for this.
Unit #2, is 136-XN02 and it works 98%, something was moving around in the unit when I unboxed it.
The following message repeats on the console every xxx seconds
uart2: <16x50 with 256 byte FIFO> iomem 0xfedc9000-0xfedc9fff,0xfedc7000-0xfedc7fff irq 3 on acpi0 and it doesn't look like PoE works because of this.
#8
26.7, 26.10 Series / Re: PPPoE over an unassigned V...
Last post by fanski - November 11, 2026, 08:47:44 PMHi Franco,
I tested it with 26.7.9 and it still has the same behavior. So if I can help with testing just give me a hint what to do :)
Many thanks,
Fanski
I tested it with 26.7.9 and it still has the same behavior. So if I can help with testing just give me a hint what to do :)
Many thanks,
Fanski
#9
Hardware and Performance / Re: OPNsense on Sophos XGS: dr...
Last post by abdelmonem - November 11, 2026, 08:09:19 PMQuote from: oldRaven on November 08, 2026, 02:37:26 PMI will be installing OPNsense on the XGS 126 in the next two weeks. I will give you feedback soon. Looking forward to testing.
Sounds good, looking forward to hearing how it goes.
One owner already runs a 126 with it, and that report covers every front port, flows in hardware and updates from the XGS menu (XGS 126 page). What no 126 owner has confirmed yet is F1 and F2 (SFP ports), PoE on ports 11 and 12, and fans. If you get to any of those, that's most useful feedback you could give.
Ready images, or your own build, are on build page, and install guide walks through it.
Once it's running, appliance form puts your 126 on the list. If anything goes wrong, post here or open a problem report.
#10
26.7, 26.10 Series / Re: issue with legacy firewall...
Last post by nero355 - November 11, 2026, 08:09:06 PMQuote from: thebraz on November 11, 2026, 12:07:06 PMSo, it's better to migrate the rules before doing the .8 upgrade?When 26.7.5 was released you should have migrated your Outbound NAT Rules to the new Source NAT Rules before updating to it : https://forum.opnsense.org/index.php?topic=53062.0
And the migration from Firewall Rules (Legacy) to Firewall Rules [New] was something that you should have done before upgrading from 26.1.x to 26.7.x but luckily both the Firewall Rules and NAT Rules stuff can still be done even though both have been moved to a plug-in by now... ;)
Quote from: Monviech (Cedrik) on November 11, 2026, 03:25:59 PMTo be specific, it does not show up if there are no legacy firewall or NAT rules remaining.NICE! :)
So it doesnt track if a migration has been done or not with some kind of flag, it just reads remaining rules and decides on that to show or not.
