"Recent posts
#1
26.1, 26,4 Series / Re: 26.1 upgrade chaos, Realte...
Last post by drosophila - Today at 12:58:58 PMI seem to remember that both my NICs also are RE8111E, but I can't physically look at them ATM. Maybe you could do a "pciconf -lvvv" on the console and see what it says and compare it to mine:
As you can see from the revision, the re0 is quite ancient (compared to the re1 that also is over a decade old; the manual claims it is a RTL8111GR though, so not RTL8111E).
Quotere0@pci0:3:0:0: class=0x020000 rev=0x01 hdr=0x00 vendor=0x10ec device=0x8168 subvendor=0x10ec subdevice=0x8168
vendor = 'Realtek Semiconductor Co., Ltd.'
device = 'RTL8111/8168/8211/8411 PCI Express Gigabit Ethernet Controller'
class = network
subclass = ethernet
re1@pci0:4:0:0: class=0x020000 rev=0x11 hdr=0x00 vendor=0x10ec device=0x8168 subvendor=0x1849 subdevice=0x8168
vendor = 'Realtek Semiconductor Co., Ltd.'
device = 'RTL8111/8168/8211/8411 PCI Express Gigabit Ethernet Controller'
class = network
subclass = ethernet
As you can see from the revision, the re0 is quite ancient (compared to the re1 that also is over a decade old; the manual claims it is a RTL8111GR though, so not RTL8111E).
#2
Q-Feeds (Threat intelligence) / Meet a girl who wants you
Last post by Stefanpetrov - Today at 12:47:39 PMShe's ready to have a good time - No Selfie
https://fixdim.com
Real girls in your city are eager to meet
NEW GIRLS
Aspen Rae
Cindy Landolt
Sofia
Mikaila Murphy
Scarlett Jones
Amber
Jenny Ops
Vanessa
Chasity Marie
Jennifer White
Skye Blue
Sonya Kelsey
Kayden Kross
https://fixdim.com
Real girls in your city are eager to meet
NEW GIRLS
Aspen Rae
Cindy Landolt
Sofia
Mikaila Murphy
Scarlett Jones
Amber
Jenny Ops
Vanessa
Chasity Marie
Jennifer White
Skye Blue
Sonya Kelsey
Kayden Kross
#3
26.1, 26,4 Series / Re: With IPv6, how to get both...
Last post by dseven - Today at 12:18:34 PMI guess my comment was directed at the OP. Your (@drosophila) use case seems quite different.
#4
26.1, 26,4 Series / Re: With IPv6, how to get both...
Last post by drosophila - Today at 11:58:10 AMQuote from: dseven on July 25, 2026, 10:05:28 AM(again) ULA + NPTv6 seems like the obvious solution if you want to use ULAs internally with a dynamic GUA prefix for internet access. Have you even considered it? Hacks are likely to come back and bite you later...I'm using NAT66 so the dynamic prefix is no problem, neither are ULAs. This also is a supported configuration that works without hacks. The issue is that I want to get rid of the autogenerated Link-Locals (fe80) and replace them with manually assigned Link-locals (getting rid of them entirely should work if a ULA is statically assigned, but at least OpenBSD refuses to create NDP entries from anything that is not fe80:0:0:0::; Windows, Linux and FreeBSD don't seem to care).
The hack I'd like to preserve has nothing to do with this, it is for the enforcement of the use of the privacy addresses for NAT66, which relies on the ordering of the address assignemts, so a script runs via cron to reorder them as there is no way to reliably hook into actual change events.
I do not want two addresses, I only want one single address per interface. With IPv6, I cannot have that, so the addresses must at least be clearly coherent, which means that the LLA and ULA (and GUA, if used) must have the same suffix so logs will remain readable. But I cannot even do this, instead IPv6 insists on splattering and leaking the MACs all over the place. I'd even have run LLA-only if only NAT would be able to catch them before the kernel forcibly redirects them to localhost, nervermind the fact that NAT would take care of the scope violation (which it is all about, anyway).
It could have been so easy but instead it has to be overly complex to enforce (not just allow) the idealistic doctrine (feels more like dogma) of universal reachability, that you then have to take pains to restrict in any meaningful way. :(
Sorry for the rant. :)
#5
General Discussion / Re: [SOLVED] WAN Static IP Bre...
Last post by drosophila - Today at 11:22:00 AMIf your Archer device supports it, you can set a static route for the 192.168.10.1/24 LAN through the 192.168.2.2 Sensebox WAN interface. That way you can avoid double NAT. For IPv6 you could probably do prefix delegation or other fancy things to avoid NAT, there are pretty comprehensive How-Tos around here (which I cannot comment on since I intentionally NAT IPv6).
#6
Q-Feeds (Threat intelligence) / New Login Location Alert - Q-F...
Last post by vpx23 - Today at 11:21:02 AMIs it possible to turn off the "New Login Location Alerts" e-mail if the actual IP matches one of your own logged IPs that can be seen in Vulnerability Scanner?
I mean it warns me about a new login and shows the IP that is known to the TIP to be originating from the OPNsense.
Or make it more granular, like I don't want to be warned if the user agent matches the last 10 logins with "Mozilla/5.0 (Windows NT 10.0)" but I want to be warned if it comes from "Mozilla/5.0 (X11; Linux x86_64)".
The mail could still warn me if my whole network is compromised and the attacker is logging in to the TIP from within my network but then I'm already cooked. :)
I mean it warns me about a new login and shows the IP that is known to the TIP to be originating from the OPNsense.
Or make it more granular, like I don't want to be warned if the user agent matches the last 10 logins with "Mozilla/5.0 (Windows NT 10.0)" but I want to be warned if it comes from "Mozilla/5.0 (X11; Linux x86_64)".
The mail could still warn me if my whole network is compromised and the attacker is logging in to the TIP from within my network but then I'm already cooked. :)
#7
German - Deutsch / ACME Zertifikate Upload zu Tru...
Last post by defcon999 - Today at 11:06:42 AMMoin,
ich nutze das ACME-Plugin auf meiner aktuellen OPNSense (26.7) und habe heute meine Zertifikate erneuert. Leider schlägt der automatisierte Upload zu meinem TrueNAS Scale Server fehl, egal, welche der beiden verfügbaren Protokollversionen ich benutze. Das Log zeigt immer wieder diesen Fehler:
AcmeClient: AcmeClient: The shell command returned exit code '1': '/usr/local/sbin/acme.sh --deploy --syslog 6 --log-level 1 --server 'letsencrypt' --home '/var/etc/acme-client/home' --cert-home '/var/etc/acme-client/cert-home/6a06e07112d047.66690305' --certpath '/var/etc/acme-client/certs/6a06e07112d047.66690305/cert.pem' --keypath '/var/etc/acme-client/keys/6a06e07112d047.66690305/private.key' --capath '/var/etc/acme-client/certs/6a06e07112d047.66690305/chain.pem' --fullchainpath '/var/etc/acme-client/certs/6a06e07112d047.66690305/fullchain.pem' --domain '*.meinedomain.net' --deploy-hook truenas_ws --insecure'
Meine Fähigkeiten reichen bei Weitem nicht aus, mit dieser Fehlermeldung etwas anzufangen.
Ich habe das Zertikat nun händisch auf dem Server importiert, aber das ist nun mal nicht der Zweck einer Automation ;-)
Gibt's einen Workaround dafür oder ist der Fehler bekannt?
Beste Grüße - defcon999
ich nutze das ACME-Plugin auf meiner aktuellen OPNSense (26.7) und habe heute meine Zertifikate erneuert. Leider schlägt der automatisierte Upload zu meinem TrueNAS Scale Server fehl, egal, welche der beiden verfügbaren Protokollversionen ich benutze. Das Log zeigt immer wieder diesen Fehler:
AcmeClient: AcmeClient: The shell command returned exit code '1': '/usr/local/sbin/acme.sh --deploy --syslog 6 --log-level 1 --server 'letsencrypt' --home '/var/etc/acme-client/home' --cert-home '/var/etc/acme-client/cert-home/6a06e07112d047.66690305' --certpath '/var/etc/acme-client/certs/6a06e07112d047.66690305/cert.pem' --keypath '/var/etc/acme-client/keys/6a06e07112d047.66690305/private.key' --capath '/var/etc/acme-client/certs/6a06e07112d047.66690305/chain.pem' --fullchainpath '/var/etc/acme-client/certs/6a06e07112d047.66690305/fullchain.pem' --domain '*.meinedomain.net' --deploy-hook truenas_ws --insecure'
Meine Fähigkeiten reichen bei Weitem nicht aus, mit dieser Fehlermeldung etwas anzufangen.
Ich habe das Zertikat nun händisch auf dem Server importiert, aber das ist nun mal nicht der Zweck einer Automation ;-)
Gibt's einen Workaround dafür oder ist der Fehler bekannt?
Beste Grüße - defcon999
#8
26.7 Series / 26.7.1_1 update shows "Unknown...
Last post by xpking - Today at 08:48:45 AMMay I know what is this error? How can I fix it?
Thank you.
Thank you.
Code Select
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 26.7.1_1 (amd64) at Sun Jul 26 14:46:01 HKT 2026
Fetching changelog information, please wait... done
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 928 packages processed.
Updating SunnyValley repository catalogue...
pkg: An error occurred while fetching package: Unknown error
pkg: An error occurred while fetching package: Unknown error
Fetching data.tzst: ... done
Processing entries: .. done
SunnyValley repository update completed. 14 packages processed.
All repositories are up to date.
Checking for upgrades (0 candidates): . done
Processing candidates (0 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***
#9
26.1, 26,4 Series / Re: completely lost after swit...
Last post by sigma - Today at 08:36:12 AMI did what you said and those devices still connect to the internet.
ADDED: when I turned off then on the power(breaker in the panel) it worked. I guess the devices(A/C switches) has to be restarted for it to work. anyway it seems to be working now. thank you for your help. :)
ADDED: when I turned off then on the power(breaker in the panel) it worked. I guess the devices(A/C switches) has to be restarted for it to work. anyway it seems to be working now. thank you for your help. :)
#10
