Recent posts

#1

26.7 Series / Re: SSD drive died - I disable...

Last post by oc - Today at 01:57:26 AM

Patrick: na endlich hat es geklappt - danke :)

The disk is filled by zenarmor/elastic. I'll have to further tweak logging. I definitely want the ZA "protection", and would like to be able to take a look at what's happening, but ideally it would store the fresh logs in RAM before flushing them (and I've bumped up space in Reporting Data/Memory Disk Size to 500MB, the maximum permitted).

Update: I have also temporarily stopped ntopng - that one also appears to fill the disk with the timeseries...

#2

26.7 Series / Re: SSD drive died - I disable...

Last post by Patrick M. Hausen - Today at 12:28:35 AM

Wie ich geschrieben hatte ...

Code Select Expand

cd usr
du ... # wieder von vorne
So findest du, was deine SSD füllt.

#3

26.7 Series / Re: SSD drive died - I disable...

Last post by oc - Today at 12:20:48 AM

@oc Du hast das

Code Select Expand

cd /

vorher vergessen. Nach deinem Prompt zu urteilen bist du immer noch im Home-Directory /root.

Danke Patrick!

root@OC-OPNsense01:/ # du -sk * | sort -rn | head
2866972 usr
1231306 var
174862  boot
11405   tmp
10852   lib
5799    conf
3372    sbin
2489    etc
929     bin
146     libexec

#4

26.7 Series / Re: DNS over TLS

Last post by tangofan - October 17, 2026, 11:07:57 PM

I also disabled the DNS server options.

In addition to what @meyergru said, I also suggest to be a bit more specific about the statement above, that is where did you change what exactly?

#5

26.7 Series / Re: DNS over TLS

Last post by meyergru - October 17, 2026, 10:21:56 PM

Your question is waaaay too unspecific. It still goes over port 53 - "it" meaning what, exactly?

What type of DNS service do your clients use? Unbound, DNSmasq, OpenDNS, Bind or something else? How do you know that they do not use something else despite you sending them OpnSense's IP via DHCP, like 8.8.8.8?

Aside from your clients, does your OpnSense itself use upstream or configured servers?

You know, DNS is not as easy as it used to be these days.

#6

26.7 Series / DNS over TLS

Last post by mika - October 17, 2026, 09:56:10 PM

Hello there,

actually till now I didn't pay much attention to the security of DNS, as FF is securing it through HTTPS already. But I wanted to configure Opnsense, so that it would work as a Resolver but also look up at specific DNS over TLS for unknown addresses, but it kinda still goes over Port 53 and is not using the specified DNS's. I don't know why, as I also disabled the DNS server options.

#7

26.7 Series / Re: os-upnp plugin not working...

Last post by fornax - October 17, 2026, 09:39:04 PM

Can you please post a screenshot of your "Firewall: NAT: Source NAT" rules?

Thanks in advance!

Sorry, just saw this. Looks like you already got it sorted, but for anyone who happens on this thread later I posted the setup on my previous thread:

https://forum.opnsense.org/index.php?topic=51973.msg273529#msg273529

#8

26.7 Series / Re: SSD drive died - I disable...

Last post by Patrick M. Hausen - October 17, 2026, 09:31:17 PM

@oc Du hast das

Code Select Expand

cd /

vorher vergessen. Nach deinem Prompt zu urteilen bist du immer noch im Home-Directory /root.

#9

26.7 Series / Re: SSD drive died - I disable...

Last post by Monviech (Cedrik) - October 17, 2026, 09:23:20 PM

ncdu

thats my tool of choice for finding large folders.

#10

Intrusion Detection and Prevention / Re: Suricata Issue - 26.7.7

Last post by spetrillo - October 17, 2026, 08:55:44 PM

Are you configured for the actual network device name or the interface name?

I found nothing in my logs either.