"Recent posts
#1
General Discussion / Re: internet speed
Last post by meyergru - Today at 12:19:47 PMDid you work through the network "hardware" section in the guide?
Does the USB network adapter show full link speed? 9 Mbit/s could either be 10 Mbit/s on the ethernet side or an inferior USB link, like with USB 1.1.
Does the USB network adapter show full link speed? 9 Mbit/s could either be 10 Mbit/s on the ethernet side or an inferior USB link, like with USB 1.1.
#2
Hardware and Performance / Re: AX88179B USB NIC: 57 -> 97...
Last post by lonew0265 - Today at 12:14:21 PMi am using a similar chipset usb to ethernet adapter.AX88179,after configuing it as the WAN i have a speed drop from isp provided speed of 250Mbps to 9Mbps.what can be done.instead of rewriting the kernel.
#3
General Discussion / Re: internet speed
Last post by lonew0265 - Today at 11:38:20 AMyes it is configured as virtio.
#4
26.7 Series / Re: Make my backup history saf...
Last post by dseven - Today at 11:19:34 AMThere would be a version controlled repository in /conf/backup/git if https://docs.opnsense.org/manual/git-backup.html was followed, though. As you suggested before, presumably the plugin is installed. I tend to agree with the OP that it's a bit too easy to shoot yourself in the foot with the enabled-by-default flush...
#5
General Discussion / Re: Asymmetric routing of mana...
Last post by userfw - Today at 11:17:26 AMThanks for replying, indeed the management traffic from outside was matched on a interface group, I had missed that note.
#6
26.7 Series / Re: Make my backup history saf...
Last post by Patrick M. Hausen - Today at 11:13:10 AMThe configuration history in OPNsense in the /conf/backup directory is not a version controlled repository. It's just a directory with files that have a timestamp in their names. If you delete any of those and you do not have a snapshot, it's gone.
#7
26.1, 26,4 Series / UI Bug 26.4.2 - igmp-proxy una...
Last post by ou1 - Today at 11:03:55 AMNot sure if this is the right place to report UI bugs - apologies if it's not the right place or if it's already been fixed in newer versions.
In opnsense business 26.4.2, when adding a new network in the igmp-proxy interface, you can't change the CIDR. The dropdown lets you choose a new value but always goes back to 24 regardless what you select. You have to leave it at the default 24, save changes, then you can update it and save changes again.
Not sure if this is a general bug that appears in other areas, of it's specific to the igmp-proxy.
In opnsense business 26.4.2, when adding a new network in the igmp-proxy interface, you can't change the CIDR. The dropdown lets you choose a new value but always goes back to 24 regardless what you select. You have to leave it at the default 24, save changes, then you can update it and save changes again.
Not sure if this is a general bug that appears in other areas, of it's specific to the igmp-proxy.
#8
26.7 Series / Re: Make my backup history saf...
Last post by dseven - Today at 11:02:10 AMHopefully there is an upstream git repo that can be cloned?
Otherwise (if it's a local-only repo), the symlink workaround seems like it should work (for future protection) - https://github.com/opnsense/core/blob/master/src/opnsense/scripts/system/flush_config_history would take out the symlink, but not the destination, so you'd just have to put the symlink back after the flush (I think). Whether or not that'd be considered a supported config, I'm not sure...
Otherwise (if it's a local-only repo), the symlink workaround seems like it should work (for future protection) - https://github.com/opnsense/core/blob/master/src/opnsense/scripts/system/flush_config_history would take out the symlink, but not the destination, so you'd just have to put the symlink back after the flush (I think). Whether or not that'd be considered a supported config, I'm not sure...
#9
Zenarmor (Sensei) / Re: Zenarmor/Eastpect continuo...
Last post by doug411 - Today at 10:43:44 AMalso... I am using NAT port-forward/DNAT rules to redirect client UDP/53 traffic to the local OPNsense DNS resolver. Could this contribute to the reported Eastpect state collisions by causing DNS queries originally destined for different resolvers to collapse onto the same translated 5-tuple when a client reuses a UDP source port? Is there a way to reduce the volume of the collisions?
#10
Zenarmor (Sensei) / Re: Zenarmor/Eastpect continuo...
Last post by doug411 - Today at 10:24:01 AMThanks, that explains the behavior. Is there any configurable UDP state timeout, flow-table setting, or other recommended mitigation to reduce these collisions, or is this expected behavior that can only be addressed in the Zenarmor engine? In my case the warnings occur continuously and can spike to 700–800 failed UDP flows in a minute during heavy DNS activity
