Recent posts

#1

25.7, 25.10 Series / Re: OpenVPN connection causes ...

Last post by adv - February 04, 2026, 11:35:53 PM

Again, not sure what this really means for me.

I would say you have no DNS Server on the OpenVPN connection ?

It has been a while for me that I have done anything with OpenVPN so I can't help you that much, but in general for any VPN there is for example the option to have so called 'Split-Horizon' connections via a tunnel.

You can then decide :
- If there should be a Internet Connection via the Tunnel.
It will then replace your Local Internet Connection.
- If there should be a DNS Server available inside the Tunnel.
If not, then the Client uses it's Local DNS Server.

When you use the OpenVPN connection just like a shortcut to the Remote Desktop and for nothing else then both sides are connected as 'Split-Horizon' and not a so called 'Full Tunnel' :)

Basically check your Routing & DNS Options you have applied to the OpenVPN connection and make sure they do exactly what you want them to do !!

Right, my research turned up mentions of "Split-Horizon" and I think that is what I want.  I don't want all Internet coming through the tunnel.  I want the client to still use its own Internet connection.  The problem is that I can't find info on how to do that.  I found some mention of the "Redirect gateway" setting but I cannot find any info on what each of those settings does and they are not intuitive (and other posters found the same problem).  So, I just don't know how to set all that up and can't find a good how-to.

#2

26.1 Series / Re: Pointers on how to manuall...

Last post by flushell - February 04, 2026, 11:21:11 PM

If you really want to, just do  "rmuser dhcpd" as root in a ssh session. It will remove the user and group. I did it, worke fine, no issues.

[Interfaces > Devices > VLAN]

#3

Spanish - Español / Re: Voip Movistar. Configurar ...

Last post by Kaekh - February 04, 2026, 10:47:25 PM

Hola,

Por si alguien sigue necesitando cómo configurar la VOIP de movistar/o2 yo lo hice de la siguiente forma:

Hay que configurar las VLAN de movistar

Interfaces > Devices > VLAN

Creamos la VLAN para internet

VLAN tag: 6
VLAN priority: 1

Para seguir con la configuración de internet OPNsense - ppoe setup

Creamos la VLAN para VOIP

VLAN tag: 3
VLAN priority: 5

Vamos a Interfaces > Assignments

• Asignamos a una interfaz nuestra vlan3 (VOIP) y guardamos
• Pulsamos sobre el nombre para ir a editar
• Habilitamos la interfaz (Enable interface)
• IPv4 Configuration Type: DHCP
• Guardamos

Esto creará otra Gateway con el nombre de la interfaz anterior.

Si vamos a System > Gateways > Configuration deberían aparecer la puerta de salida para internet (WAN) y la nueva que hemos creado para VOIP. Para evitar quedarnos sin internet debemos editar la gateway de internet y ponerle un número de prioridad inferior a la de VOIP. Esto hace que por defecto el tráfico salga por la gateway con más prioridad, pero si queremos configurarlo de una forma más correcta debemos seguir los pasos:

System > Gateways > Group
Crear un grupo para que salga por la WAN

• Group name: WAN_ONLY (ejemplo)
• Gateway priority: seleccionamos la gateway de internet como tier1 y la de voip como never

Crear un grupo para que salga por VOIP

• Group name: VOIP_ONLY (ejemplo)
• Gateway priority: seleccionamos la gateway de VOIP como tier1 y la de internet never

Ahora debemos de conectar y configurar un adaptador ATA SIP (en mi caso  yo tengo el GrandStream 710) y configurarlo.

Es importante que conectemos el adaptador ATA SIP a una VLAN o red independiente ya que todo el tráfico de esa red saldra por la nueva gateway que hemos creado y no tendra acceso a internet.

Por último deberemos de indicar qué gateway debe de tener cada interfaz. Para ello Firewall > Rules
Para la interfaz donde tengamos conectado el ATA-SIP debermos poner como Gateway VOIP o si lo hemos creado el grupo (VOIP_ONLY). Para las demás redes que salgan a internet deberemos de poner como Gateway internet o si creamos el grupo (WAN_ONLY)

En caso de no haber creado grupos podemos dejar en todos sitios como Gateway default y solo modificar la red donde conectemos el ATA-SIP con la gateway VOIP


Espero que pueda servirle a alguien que quiera configurar el teléfono en opnsense

Un saludo

#4

German - Deutsch / Re: NVM subsystem reliability ...

Last post by Patrick M. Hausen - February 04, 2026, 10:34:53 PM

Warum klonen, wenn die vorhandene sicher Probleme hat? Neu installieren, Config zurückspielen, fertig. Solltest du bisher nicht mit ZFS installiert haben, solltest du das diesmal tun.

#5

German - Deutsch / Re: NVM subsystem reliability ...

Last post by cottec - February 04, 2026, 10:24:26 PM

kriegst du die terrybytes written heraus?
wäre ja interessant zu wissen, ob das ding totgeschrieben wurde und man da vielleicht die ursache finden muss

#6

26.1 Series / Re: DNAT auto firewall [Regist...

Last post by Patrick M. Hausen - February 04, 2026, 09:45:22 PM

Ad asked for specific detailed information that any one experiencing the problem could easily add to the ticket. I for one cannot, because I do not have dual WAN anywhere.

#7

Tutorials and FAQs / Re: [HOWTO] Reach your ONT or ...

Last post by OPNenthu - February 04, 2026, 09:43:38 PM

Never noticed it before but yep, it's there.  I get a dynamic PD /60 and link#5 indeed is my loopback device.

You cannot view this attachment.

#8

26.1 Series / Re: Firewall log live view - o...

Last post by julsssark - February 04, 2026, 09:34:54 PM

I created a new criteria using Safari and it worked correctly. I am running 26.1.1. Maybe a browser issue? Is auto-refresh enabled?

#9

26.1 Series / Re: DNAT auto firewall [Regist...

Last post by TheSHAD0W - February 04, 2026, 09:34:18 PM

Looks like it's been flagged as support, or in other words, "the user is doing something wrong, it's not a bug". Don't expect a fix any time soon. :(

#10

26.1 Series / Firewall log live view - older...

Last post by pseudonym3k - February 04, 2026, 09:24:56 PM

Minor bug?

Firewall -> Logs - > Live View -> Templates. I have a few templates saved from prior versions (25.7 and prior) and these work fine.

After upgrading to 26.1, I entered criteria for a template and got my expected result list. I saved it as a new template.

The saved template does not bring up any result. If I reenter criteria and apply it to the log, I get a result.

Sample criteria:

Change "action" in dropdown to "address"
Change "contains" in dropdown to "is"
Enter some address in search box that has log entries - I entered 192.168.1.9

Applying the above criteria brings up several records. I save it as a template, leave the firewall log and display some other page like the Dashboard. Then I come back to the firewall log and choose the new template. Nothing is displayed.