Recent posts

#1

General Discussion / Re: Roku DNS storm is impactin...

Last post by DEC740airp414user - Today at 10:27:31 AM

I unhooked my Samsung tv (from iot vlan) and moved to a Apple TV because of this noise

Still has some noise but not as much as a tizen os

Appreciate the reminder on why I'll never own a Roku

#2

26.7 Series / Re: VLAN devices are on LAN IP...

Last post by viragomann - Today at 10:08:45 AM

I went back to my original configuration as posted in the beginning of this thread (listed from the SSH login to OPNSense)

So I could repeat my first post as well. ;-)

From one of my LAN devices (192.168.1.63), I attempted pings to the Guest (192.168.20.1) and IoT (192.168.40.1) vlans and there is no connectivity as expected. This means there are no leaks that could lead to bleeding FROM the LAN TO the Guest or IoT networks.

No. This just means, that there is no layer 3 leak, but VLANs must separate network segments at layer 2.

Explanation: When the (LAN) device tries to access an IP in another network segment it doesn't do ARP resolution, but sends to packets directly to the gateway, which is the firewall. If access to the other subnet isn't permitted here, the access fails of course.

Unfortunately, I still have no devices connecting on either vlan

However, to get an IP from a DHCP server, a device sends the request to the broadcast. But since it doesn't have a network setting at this point, it sends the request to the overall broadcast address,  which is 255.255.255.255, and this goes across layer 3 boundaries. So it also reaches a DHCP in the obviously other subnet.

So your network setup might leak at layer 2.

#3

26.7 Series / after SNAT Migration: PHP Fata...

Last post by c-mu - Today at 10:04:15 AM

Hi,
I just updated to the latest OPNsense 26.7.1_1-amd64 and migrated my firewall and NAT Rules.

I didn't get any errors while the migration process, but after the old rules were deleted i noticed two errors:

first: i cant choose the NAT Mode any more. It's empty and "nothing selected". See attached screenshot.

seconed: when I open the SNAT Page, an Crash Report error Log is generated:

PHP Errors:

[06-Aug-2026 09:56:50 Europe/Berlin] PHP Fatal error:  Allowed memory size of 1073741824 bytes exhausted (tried to allocate 20480 bytes) in /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseListField.php on line 157
Stack trace:
#0 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseListField.php(170): OPNsense\Base\FieldTypes\BaseListField->getNodeOptions()
#1 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php(739): OPNsense\Base\FieldTypes\BaseListField->getNodeData()
#2 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php(737): OPNsense\Base\FieldTypes\BaseField->getNodes()
#3 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php(737): OPNsense\Base\FieldTypes\BaseField->getNodes()
#4 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php(737): OPNsense\Base\FieldTypes\BaseField->getNodes()
#5 /usr/local/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php(551): OPNsense\Base\FieldTypes\BaseField->getNodes()
#6 /usr/local/opnsense/mvc/app/controllers/OPNsense/Base/ApiMutableModelControllerBase.php(220): OPNsense\Base\BaseModel->getNodes()
#7 /usr/local/opnsense/mvc/app/controllers/OPNsense/Base/ApiMutableModelControllerBase.php(208): OPNsense\Base\ApiMutableModelControllerBase->getModelNodes()
#8 /usr/local/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/SourceNatController.php(57): OPNsense\Base\ApiMutableModelControllerBase->getAction()
#9 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Dispatcher.php(166): OPNsense\Firewall\Api\SourceNatController->getAction()
#10 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Router.php(156): OPNsense\Mvc\Dispatcher->dispatch(Object(OPNsense\Mvc\Request), Object(OPNsense\Mvc\Response), Object(OPNsense\Mvc\Session))
#11 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Router.php(139): OPNsense\Mvc\Router->performRequest(Object(OPNsense\Mvc\Dispatcher))
#12 /usr/local/opnsense/www/api.php(38): OPNsense\Mvc\Router->routeRequest('/api/firewall/s...', Array)
#13 {main}
[06-Aug-2026 09:56:56 Europe/Berlin] PHP Fatal error:  Allowed memory size of 1073741824 bytes exhausted (tried to allocate 20480 bytes) in /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseListField.php on line 157
Stack trace:
#0 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseListField.php(170): OPNsense\Base\FieldTypes\BaseListField->getNodeOptions()
#1 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/ModelRelationField.php(209): OPNsense\Base\FieldTypes\BaseListField->getNodeData()
#2 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php(739): OPNsense\Base\FieldTypes\ModelRelationField->getNodeData()
#3 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php(737): OPNsense\Base\FieldTypes\BaseField->getNodes()
#4 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php(737): OPNsense\Base\FieldTypes\BaseField->getNodes()
#5 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php(737): OPNsense\Base\FieldTypes\BaseField->getNodes()
#6 /usr/local/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php(551): OPNsense\Base\FieldTypes\BaseField->getNodes()
#7 /usr/local/opnsense/mvc/app/controllers/OPNsense/Base/ApiMutableModelControllerBase.php(220): OPNsense\Base\BaseModel->getNodes()
#8 /usr/local/opnsense/mvc/app/controllers/OPNsense/Base/ApiMutableModelControllerBase.php(208): OPNsense\Base\ApiMutableModelControllerBase->getModelNodes()
#9 /usr/local/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/SourceNatController.php(57): OPNsense\Base\ApiMutableModelControllerBase->getAction()
#10 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Dispatcher.php(166): OPNsense\Firewall\Api\SourceNatController->getAction()
#11 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Router.php(156): OPNsense\Mvc\Dispatcher->dispatch(Object(OPNsense\Mvc\Request), Object(OPNsense\Mvc\Response), Object(OPNsense\Mvc\Session))
#12 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Router.php(139): OPNsense\Mvc\Router->performRequest(Object(OPNsense\Mvc\Dispatcher))
#13 /usr/local/opnsense/www/api.php(38): OPNsense\Mvc\Router->routeRequest('/api/firewall/s...', Array)
#14 {main}
[06-Aug-2026 10:00:01 Europe/Berlin] PHP Fatal error:  Allowed memory size of 1073741824 bytes exhausted (tried to allocate 20480 bytes) in /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseListField.php on line 159
Stack trace:
#0 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseListField.php(170): OPNsense\Base\FieldTypes\BaseListField->getNodeOptions()
#1 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php(739): OPNsense\Base\FieldTypes\BaseListField->getNodeData()
#2 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php(737): OPNsense\Base\FieldTypes\BaseField->getNodes()
#3 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php(737): OPNsense\Base\FieldTypes\BaseField->getNodes()
#4 /usr/local/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/BaseField.php(737): OPNsense\Base\FieldTypes\BaseField->getNodes()
#5 /usr/local/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php(551): OPNsense\Base\FieldTypes\BaseField->getNodes()
#6 /usr/local/opnsense/mvc/app/controllers/OPNsense/Base/ApiMutableModelControllerBase.php(220): OPNsense\Base\BaseModel->getNodes()
#7 /usr/local/opnsense/mvc/app/controllers/OPNsense/Base/ApiMutableModelControllerBase.php(208): OPNsense\Base\ApiMutableModelControllerBase->getModelNodes()
#8 /usr/local/opnsense/mvc/app/controllers/OPNsense/Firewall/Api/SourceNatController.php(57): OPNsense\Base\ApiMutableModelControllerBase->getAction()
#9 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Dispatcher.php(166): OPNsense\Firewall\Api\SourceNatController->getAction()
#10 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Router.php(156): OPNsense\Mvc\Dispatcher->dispatch(Object(OPNsense\Mvc\Request), Object(OPNsense\Mvc\Response), Object(OPNsense\Mvc\Session))
#11 /usr/local/opnsense/mvc/app/library/OPNsense/Mvc/Router.php(139): OPNsense\Mvc\Router->performRequest(Object(OPNsense\Mvc\Dispatcher))
#12 /usr/local/opnsense/www/api.php(38): OPNsense\Mvc\Router->routeRequest('/api/firewall/s...', Array)
#13 {main}

I asked the AI and there seems to be a relation between the empty NAT Mode and the php error.

Any Idea to solve this?

#4

26.7 Series / Re: VLAN devices are on LAN IP...

Last post by dseven - Today at 09:50:21 AM

At the start, you had a bridge. Is that bridge now completely gone? Updated ifconfig output might be helpful.

Otherwise I'd tend to suspect that your WiFi is misconfigured...

#5

26.7 Series / Re: Call for testers - new CPU...

Last post by meyergru - Today at 09:45:22 AM

Again: See post #37 or use the forum search.

#6

26.7 Series / Re: No Web_GUI if LAN is DHCP ...

Last post by meyergru - Today at 09:36:25 AM

By courtesy of Patrick, who more than once explained this (not his exact words):

To answer the "why" (not to bind a service to a specific interface):

When you do that, the interface must be configured before the service is started. Often times, that is beyond your control, so it won't always work - and if it fails, you wonder why, just like in this thread.
If instead you leave that out, the service will bind to "any", which includes interfaces that pop up later.

You should restrict access via firewall rules instead.

This now made it to here, point 32.

#7

German - Deutsch / Re: Generelle Frage zum Regelw...

Last post by osmom - Today at 09:34:37 AM

Schau dir in der Online-Dokumentation die Regelbearbeitung an und du wirst feststellen daß im Normalfall immer die erste passende Regel genutzt wird. Alles, was dahinterkommt, ist irrelevant.

#8

26.7 Series / Re: Call for testers - new CPU...

Last post by mic - Today at 09:34:37 AM

Hello,

just to recap, these are the steps in the correct order:

• uninstall os-cpu-microcode-* plugin
• upgrade to 26.7.1
• update your boot loader
• install 26.7.1, os-cpu-microcode-* plugin

My OPNsense version is: 26.1.11_10 and bootloader is:
DFreeBSD/amd64 EFI loader, Revision 3.0

Now the question is: what are the exact steps to update the bootloader?

Thank you

#9

German - Deutsch / Re: Update auf 26.7 wird nicht...

Last post by osmom - Today at 09:30:58 AM

Wechsle mal deinen Quellserver für den Download und lass neu suchen.

#10

German - Deutsch / Re: Zentrale Verwaltung mehrer...

Last post by osmom - Today at 09:29:34 AM

Ich würde nochmals über den Namen nachdenken. Den ich hatte gleich eine Verbindung zu senil.
Hast du überhaupt die Ressourcen, um das Projekt in den Kindergarten zu bringen?