Recent posts

#1
26.1, 26,4 Series / Re: samplicate pegging cpu
Last post by nero355 - Today at 03:09:09 PM
Quote from: ubu on Today at 11:57:25 AMi don't want to do a fresh install because of the many firewall rules and all the other stuff I have configured would be a pain to have to redo.
For what's it worth :

A lot of stuff can be Exported into .CSV files and Imported in a new install again like :
- The Firewall Rules in the [New] webGUI.
- NAT Rules too.
- Static DHCP IP Address Mappings based on the MAC Address for ISC/KEA/DNSmasqd.
Also exchangeable between those three!

And probably a lot of other stuff too that I don't use :)
#2
Quote from: N0b0dy1985 on July 31, 2026, 10:18:34 PMEdit, got it thanks anyway!
LOL! :)

You could post the info for other people that might need it in the future you know...
#3
December I upgraded to a DEC740 with 2 of the opnsense store modules labeled DECSFPP10GETH

on my UI switch I just changed it to 1Gb and the light went off the switch and I lost network activity.   had to fix that, power cycling all equipment after this changed did not fix this issue.

under opnsense > interfaces > SPF1lan (what its named) speed and duplex is set to (default)auto.  which I thought would have worked?
1gb lists
SX
LX
CX
KX

to go to 1gb.   what would you do/ choose?
#4
German - Deutsch / Re: Hilfe zu VPN Client in OPN...
Last post by diabolo511 - Today at 02:16:41 PM
ja das verstehe ich.

Jetzt muss ich nur schauen warum ich keine DNS Auflösung habe :D
Hab mir auch mal nebenher die Dokumentation angeschaut, aber die wirft grade mehr Fragezeichen auf.
#5
Die Regeln werden, wenn sie "quick" sind, der Reihe nach abgearbeitet und nach dem ersten Match werden keine weiteren Regeln mehr betrachtet.

Deshalb immer Spezielles vor Allgemeinem.
#6
26.7 Series / Re: mDNS forwarding between tw...
Last post by sjjh - Today at 01:56:20 PM
Thanks for all the support. Adding a multicast specific firewall rule above the allow internet rule seems to work, at least avahi-browse now return some result. I'll let it test by the users next week.
 
Quote from: viragomann on July 31, 2026, 08:37:22 PMShould work. So why not?
I just don't know if you really need to allow mDNS on multiple Interfaces.
Indeed only one interface would be enough. But then the rule is not within the global scope, but only comes later in the interface scope, resulting in not working.
#7
German - Deutsch / Re: Hilfe zu VPN Client in OPN...
Last post by diabolo511 - Today at 01:55:29 PM
Ne, die stand vorher ganz unten.
Hab sie grade mal einen weiter nach oben geholt. Zumindest kann der Client jetzt keine Domains mehr auflösen.
Zur Info: das ist einfach ne Test VM in Proxmox inkl. GUI damit man damit mal ein wenig spielen kann.
Ping auf 1.1.1.1 klappt, ping auf google.com ergibt nichts, ebenso wie curl google.com.

Interessant das das nicht funktioniert, weil ich den Mullvad DNS im Tunnel mit angegeben habe und "disable routes".
#8
26.7 Series / Multiple VLANs - sometimes 60,...
Last post by danman - Today at 01:48:57 PM
Hi

I'm new with VLANs on OPNsense.

I created a bunch of VLANS and I'm trying to trunk them to an openwrt AP device - mainly VLAN IDs 50, 55, 60 and 80

It's OPNsense -> TP-LINK TL-SG105E -> OpenWrt
OPNsense:
I've 12 VLANs on port 1 (igc1).
All DHCP set and all interfaces up and running.

Switch:
Should receive 20, 25, 50, 55, 60 and 80.
I've configured port 5 as a VLAN trunk.
The PVID on port 5 is 25 but it gets 60.
It also had 80 some reboots.

OpenWrt:
All set up.
When I connect to wifi I currently connect to VLAN 60 even the VLAN device/ID on that wifi is 55.

So the whole AP idea some kind of works, I can see the device on OPNsense but it's just the wrong VLAN ID.

I'm a bit confused. I'm still trying to figure it out how I can set the main IP for igc1 (switch) which should be 25 and of course that the wifi/AP connects to the right VLAN IDs.

Hope someone has a bit time to help me here. Thanks!
#9
Und diese Regel steht über der generellen Allow-Regel für alle Clients, die nicht über den Tunnel gehen sollen?
#10
German - Deutsch / Re: Hilfe zu VPN Client in OPN...
Last post by diabolo511 - Today at 01:47:40 PM
ich hab eine allow Regel im LAN, als source hab ich nen Alias angelegt wo ich dann alle IP Adressen mit rein werfen kann, auf das entsprechende Gateway.

Hab die Regel aus dem LAN mal angehangen