"Recent posts
#1
Web Proxy Filtering and Caching / Re: Allowing Steam through Fir...
Last post by Vilhonator - Today at 12:42:03 PMIssue is 100% Opnsenses WAN port being connected behind another router. It is best to connect opnsense directly to the internet, not other way around. It is best to call your ISP and ask for guidance.
Without being able to connect Opnsense directly to internet, you have to configure routes and NAT etc. on both, opnsense and your router, which is something,average home user doesn't have to do (nor even should).
Without being able to connect Opnsense directly to internet, you have to configure routes and NAT etc. on both, opnsense and your router, which is something,average home user doesn't have to do (nor even should).
#2
Zenarmor (Sensei) / Re: Web Server and Zenarmor
Last post by Vilhonator - Today at 11:28:37 AMI would suggest restarting ZA first if you haven't done that after you whitelisted IPs and such.
If that doesn't fix the issue, contact ZA customer support. Dead site issues can't be fixed by yourself (it is caused by low average visitor amounts), so you have to contact ZA if that is the case.
Now certificate issue is easy to fix if you are using Let's encrypt. Instead of running acme client on opnsense, change the public DNS records on the registrar (or whichever hosts them) and run Acme client on the server, where website is hosted on (Let's encrypt tool on opnsense can issue certificates only to domains, which are hosted on servers using same public IP as opnsense is. Let's encrypt uses acme and without manual input, acme client needs to be ran from server or any device using same Public IP. It checks the public DNS records, not local ones)
If that doesn't fix the issue, contact ZA customer support. Dead site issues can't be fixed by yourself (it is caused by low average visitor amounts), so you have to contact ZA if that is the case.
Now certificate issue is easy to fix if you are using Let's encrypt. Instead of running acme client on opnsense, change the public DNS records on the registrar (or whichever hosts them) and run Acme client on the server, where website is hosted on (Let's encrypt tool on opnsense can issue certificates only to domains, which are hosted on servers using same public IP as opnsense is. Let's encrypt uses acme and without manual input, acme client needs to be ran from server or any device using same Public IP. It checks the public DNS records, not local ones)
#3
German - Deutsch / Re: [Hardware] Temperaturen
Last post by Patrick M. Hausen - Today at 09:57:25 AMDu editierst den ersten Beitrag und schreibst "[Gelöst]" in den Betreff 😉
#4
German - Deutsch / Re: [Hardware] Temperaturen
Last post by HBerger - Today at 09:54:53 AMMist, wie setz ich ich hier einen Thread auf [Gelöst]?
#5
German - Deutsch / [Gelöst] Hardware - Temperatur...
Last post by HBerger - Today at 09:41:23 AMOk Zusammenfassung:
Ich hab die Power-States im Bios angepasst
C States in den tunebales angepasst,
powerd aktiviert
/var/log und /temp als memory filesystem eingeschalten
und was wirklich ne menge ausmacht
hint.ahcich.0.pm_level = 1 in die tunables
Temps pendelns sich auf 46° ein nu, mit einem passiven system kann man damit leben :-)
Ich hab die Power-States im Bios angepasst
C States in den tunebales angepasst,
powerd aktiviert
/var/log und /temp als memory filesystem eingeschalten
und was wirklich ne menge ausmacht
hint.ahcich.0.pm_level = 1 in die tunables
Quote"nvmecontrol power -l nvme0".@meyergru Danke für die Inspiration
Temps pendelns sich auf 46° ein nu, mit einem passiven system kann man damit leben :-)
#6
26.7 Series / Re: DNSmasq DNS & DHCP: Device...
Last post by meyergru - Today at 09:22:02 AMHow about the official documentation for a start?
#7
26.7 Series / Re: DNSmasq DNS & DHCP: Device...
Last post by ohlalayeah - Today at 06:42:42 AMhope there is an official tutorial for configuring and explain DNSmasq DHCP server, mapping and DUID stuffs.
#8
26.7 Series / Re: DNSmasq DNS & DHCP: Device...
Last post by ohlalayeah - Today at 06:38:11 AMQuote from: meyergru on October 08, 2026, 06:56:12 PMGenerally, there are usually one of these problems (not all with all DHCP servers, but hey):
1. With some servers (at least ISC), the creation of a static reservation does not get active unless the service is restarted.
2. Some servers (also ISC), you should not have static reservations within dynamic ranges.
3. When you let a client get a dynamic reservation and convert it to a static one, the dynamic reservation is not deleted, such that a reboot still gives the old IP. You have to manually clean the dynamic reservation from the lease file (and restart the service to recognize that fact).
4. With newer services, a DUID ist being used instead of a MAC (unless you change that setting) - which may give the impression that static reservations (for the MAC) do not work.
That being said, I know that is not an exact answer, just because I happen to use Kea and not DNSmasq.
right. the DUID seems to be confusing the handshaking between opnsense and some devices. Should I stop using DNSmasq and move to Kea?
#9
26.7 Series / Re: without skipping a beat 7....
Last post by vimage22 - Today at 12:28:12 AMRight, so i meant two things. Thanks for calling me out on this. One, a 'minor' upgrade went without one issue (26.7.5 to 26.7.6). Two, what I consider an major upgrade, from a much older version (from 24.x ?) on a different system, also was completed successfully. In either case, whether minor or major, just trying to confirm upgrade process is impressive.
#10
General Discussion / Virtual IP/NAT/Virtual Machine
Last post by dsnyc - Today at 12:20:29 AMI am running OPNsense on a physical appliance. My HYPER-V Server NIC connect to the OPNsense firewall. Running on HYPER-V is 1 virtual machine also running OPNSense. I need to assign a static WAN IP to the WAN interface of the OPNsense virtual machine. I cannot figure out how to get this working. I have setup Virtual IP and NAT and firewall rules, but cannot reach the WAN IP of the OPNsense virtual machine.
