Recent posts

#1

Development and Code Review / Re: os-dynamic-homenet: Surica...

Last post by Monviech (Cedrik) - Today at 07:45:17 PM

But why arent you just inspecting on the internal interfaces which always have the invariants for the existing home net implementation.

Inspecting WAN and then building around that because it doesnt work in your environment sounds counter intuitive.

I can still understand it for v6, but not for v4.

The current (HOME_NET) implementations invariant is "There are no dynamic public addresses on internal interfaces"

#2

26.7, 26.10 Series / Re: Upgrade from 26.7.7 to 26...

Last post by BillM - Today at 07:44:47 PM

The Mirror is set to (default).
Type is Community.

Should I select a specific mirror?
I am in Los Angeles.

#3

Tutorials and FAQs / Noob trying to get Wireguard o...

Last post by RoWAN Tree - Today at 07:42:04 PM

Hi I'm a noob trying this for the first time. I have been trying to get wireguard to work on a diy mini pc for over a month, I pay for internet but don't want to use the router they sent me so I bought the mini PC and installed opnsense.. I bought a TpLink TLSG108E managed switch and that been setup as well, my issue is that I can't connect to wireguard I put all the information in and try the DNS settings but I get lost because I don't understand everything, it locks me out then I have to reinstall and do everything again. Chatgpt sucks because it keeps freezing in the middle of setting up. I am having burnout with this and I haven't even got a working connection to the internet yet.. As a noob please add an update to your documentation tutorials because you update the software but then the tutorials become obselete.. If someone can help me figure this out would be cool. this is my last attempt at trying to solve this before abandoning the idea of having a private network, thanks for anyone's time!

#4

26.7, 26.10 Series / Re: [Solved by reboot] 26.7 Up...

Last post by danmac - Today at 07:39:33 PM

Quote from: franco on <strong>Today</strong> at 07:33:08 PMPS: Given that it's not truncated at 0/xxx it's not a DNS timeout indeed. Knowing is better than guessing. ;)

haha mmmm :P

i added -a to the fetch args in opnsense-prefetch and ran it again:

# opnsense-prefetch -r 26.7.8 kernel base
Downloading kernel-26.7.8-amd64.txz.sig with remote size 1332:
kernel-26.7.8-amd64.txz.sig 1332 B 8393 kBps 00s
Downloading kernel-26.7.8-amd64.txz with remote size 33253768:
kernel-26.7.8-amd64.txz 88% of 31 MB 691 kBps 05s
fetch: kernel-26.7.8-amd64.txz appears to be truncated: 29328007/33253768 bytes
kernel-26.7.8-amd64.txz 31 MB 634 kBps 06s
Verifying signature with trusted certificate pkg.opnsense.org.20260608... done
Downloading base-26.7.8-amd64.txz.sig with remote size 1332:
base-26.7.8-amd64.txz.sig 1332 B 12 MBps 00s
Downloading base-26.7.8-amd64.txz with remote size 97564524:
base-26.7.8-amd64.txz 96% of 93 MB 691 kBps 04s
fetch: base-26.7.8-amd64.txz appears to be truncated: 94224007/97564524 bytes
base-26.7.8-amd64.txz 93 MB 896 kBps 03s
Verifying signature with trusted certificate pkg.opnsense.org.20260608... done

#5

26.7, 26.10 Series / Re: [Solved by reboot] 26.7 Up...

Last post by franco - Today at 07:36:16 PM

Okay they both fail. Interesting. I'm not sure how to help. :/

Cheers,
Franco

#6

26.7, 26.10 Series / Re: [Solved by reboot] 26.7 Up...

Last post by danmac - Today at 07:34:47 PM

haha i was already trying it :D

# opnsense-prefetch -c -r 26.7.8 kernel base
Downloading kernel-26.7.8-amd64.txz.sig with remote size 1332:
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 1332 100 1332 0 0 1127 0 00:01 00:01 0
Downloading kernel-26.7.8-amd64.txz with remote size 33253768:
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
80 31.71M 80 25.67M 0 0 429.1k 0 01:15 01:01 00:14 588.1k
curl: (56) OpenSSL SSL_read: OpenSSL/3.5.9: error:0A000126:SSL routines::unexpected eof while reading, errno 0

#7

26.7, 26.10 Series / Re: [Solved by reboot] 26.7 Up...

Last post by franco - Today at 07:33:08 PM

PS: Given that it's not truncated at 0/xxx it's not a DNS timeout indeed. Knowing is better than guessing. ;)

#8

26.7, 26.10 Series / Re: [Solved by reboot] 26.7 Up...

Last post by franco - Today at 07:31:21 PM

opnsense-prefetch doesn't use -T so this means the connection may be terminated by the ISP or fetch mishandles the stream. One last thing to try is

# opnsense-prefetch -cr 26.7.8 kernel base

This uses curl instead of fetch so any TLS error handling that fetch may still have might not occur there. Otherwise it's likely your ISP terminating large downloads.

Thanks,
Franco

#9

26.7, 26.10 Series / Re: [Solved by reboot] 26.7 Up...

Last post by danmac - Today at 07:26:54 PM

Yes Sir, here it is:

# opnsense-prefetch -r 26.7.8 kernel base
Downloading kernel-26.7.8-amd64.txz.sig with remote size 1332:
kernel-26.7.8-amd64.txz.sig 1332 B 7433 kBps 00s
Downloading kernel-26.7.8-amd64.txz with remote size 33253768:
kernel-26.7.8-amd64.txz 81% of 31 MB 919 kBps 06s
fetch: kernel-26.7.8-amd64.txz appears to be truncated: 27232007/33253768 bytes

I saw something over the weekend that implied SSL was encountering an EOF

it doesn't stall tho it just pops an error right in the middle of receiving, usually towards the end

assuming the prefetch command respects my config this will be the Kent mirror btw

and yes I made sure to clarify the point of -T before I made the changes as the transfer always seemed to fail after a certain amount of time which gave me pause to wonder ... I just threw the 120 in there because I was already right there and I could, honestly

thx o7

#10

26.7, 26.10 Series / Re: [Solved by reboot] 26.7 Up...

Last post by franco - Today at 07:16:01 PM

Ok, can you at least run

# opnsense-prefetch -r 26.7.8 kernel base

and post the complete output?

-T does not impose a 30-second limit on the download. It specifies the idle timeout for fetch, i.e. how long the transfer can stall before timing out.

Cheers,
Franco