"Recent posts
#1
26.7 Series / Re: kea gives out wrong namese...
Last post by defaultuserfoo - Today at 06:05:38 PMQuote from: Monviech (Cedrik) on Today at 05:46:48 PMThe right address is the interface address as Unbound is the default DNS server.
What you configure in the general settings is DNS servers the firewall uses for its own DNS queries, not what clients should use.
Most get confused because the firewall is a dns client, and also a dns server.
In 'System: Settings: General' is the option 'Do not use the local DNS service as a nameserver for this system', which I have enabled. Since the local DNS service is not to be used, giving out the interface address as name server address is wrong. Sure you can point out that the option says 'for this system' and argue that this doesn't mean systems connected to the network(s) 'this systems' serves. But the IP addresses given out are IP address of 'this system', and the option would obviously mean 'it is not to be used.' I'd call that splitting hairs.
Unbound is also disabled, so obviously giving out the interface address as name server address is wrong. That's kinda difficult to split hairs about.
So just do what the user expects. Maybe clear up the wording.
Improve the help texts: What happens when the autocollect option is disabled and some of the fields aren't filled in? For example, I still expect that the domain name configured in 'System: Settings: General' is given out to the DHCP clients unless I put something else in.
IIRC kea has a different behaviour than DHCP, and that isn't good. It's help text says "Leave blank to use the system default DNS servers: This interface IP address if a DNS service is enabled or the configured global DNS servers."
I expect the same behaviour, or at least better help texts. Be more user friendly and don't leave the users to guessing.
#2
General Discussion / Re: 1x NIC + 1x TP‑Link TL‑SG1...
Last post by nero355 - Today at 06:01:23 PMQuote from: z0rk on Today at 12:29:27 AMI am using Xfinity as my ISP.Do you know THE CORRECT settings for that ISP ?!
Are you using a Bridged Cable Modem or Glassfiber ONT ?
Or NAT behind NAT perhaps ?
QuoteTL-SG108E configuration.Title says TL-SG105E ?!
I am confused by this :
Quote1️⃣ VLAN 10 (WAN/Modem Port)What makes the attached screenshot different compared to all that data ?!
VLAN ID: 10
Ports:Port 1 → Untagged
Port 5 → Tagged
Ports 2–4 → Not Member
2️⃣ VLAN 20 (LAN‑A, 192.x)
VLAN ID: 20
Ports:Port 2 → Untagged
Port 5 → Tagged
Ports 1, 3, 4 → Not Member
3️⃣ VLAN 30 (LAN‑B, 172.x)
VLAN ID: 30
Ports:Port 3 → Untagged
Port 5 → Tagged
Ports 1, 2, 4 → Not Member
4️⃣ VLAN 40 (LAN‑C, 10.x)
VLAN ID: 40
Ports:Port 4 → Untagged
Port 5 → Tagged
Ports 1–3 → Not Member
5️⃣ PVIDs (Port VLAN IDs)
(see attached)
Reason I am asking :
Your attached screenshot suggests Port 5 only has VLAN 1 TAGGED ?!
QuoteThe modem connects to port 1.Client PC or OPNsense Router PC ?!
Port 5 connects to PC.
QuoteI can ping all subnets. I can access the GUI and SSH. WAN doesn't get an IP address assigned.Please post your network setup and how you have connected everything.
WAN is set up to use DHCP for both v4 and v6. All other settings are default.
QuoteInitially I left the MAC address blank.As you should unless you need to Clone the MAC Address of the Router provided by your ISP.
QuoteRebooted the modem/OPNsense in between each setting change as well just for good measure.And the Switch ?
There are known old Revision+Firmware combinations that had issues applying the configuration correctly so if yours is very old that might be a possible issue...
#3
German - Deutsch / Re: [Gelöst] Unbound-DNS Erw...
Last post by Patrick M. Hausen - Today at 05:53:57 PMHast du im Unbound noch irgendwas definiert, evtl. AGH als Upstream?
#4
26.7 Series / Re: 26.7 plug-in AdGuardhome n...
Last post by Patrick M. Hausen - Today at 05:53:08 PMWas ist das für eine Anleitung? Tu das nicht. Das ist kompletter Mist.
Um AdGuard Home zu installieren, fügst du das Community Repository von Michael Münz hinzu und installierst das Plugin ganz normal über das UI. Danach aktivieren unter Services wie bei jedem Dienst.
https://www.routerperformance.net/opnsense-repo/
Weiter unten unter "Installation (just AdGuard)".
Um AdGuard Home zu installieren, fügst du das Community Repository von Michael Münz hinzu und installierst das Plugin ganz normal über das UI. Danach aktivieren unter Services wie bei jedem Dienst.
https://www.routerperformance.net/opnsense-repo/
Weiter unten unter "Installation (just AdGuard)".
#5
26.7 Series / Re: kea gives out wrong namese...
Last post by Monviech (Cedrik) - Today at 05:46:48 PMThe right address is the interface address as Unbound is the default DNS server.
What you configure in the general settings is DNS servers the firewall uses for its own DNS queries, not what clients should use.
Most get confused because the firewall is a dns client, and also a dns server.
What you configure in the general settings is DNS servers the firewall uses for its own DNS queries, not what clients should use.
Most get confused because the firewall is a dns client, and also a dns server.
#6
26.7 Series / Re: 26.7 plug-in AdGuardhome n...
Last post by Mondmann - Today at 05:39:10 PMBitte freundlichst um Hilfestellung für AdGuardHome
Ausgangssituation:
2026 AdGuard Home Version v1.0.0-b.1
OPNsense 26.7.6_3-amd64
FreeBSD 15.1-RELEASE-p4
OpenSSL 3.5.9
Installation und Einrichtung AdGuard: alle OK
aber kein Autostart mehr möglich!
Meine benutzte Anleitung:
10. Lege eine neue Datei in /etc/rc.d/ an und bennene sie z.B. adguardhome:
____________________________________________
#!/bin/sh
. /etc/rc.subr
name="adguardhome"
rcvar="adguardhome_enable"
adguardhome_user="root"
adguardhome_command="/opt/AdGuardHome/AdGuardHome"
pidfile="/var/run/${name}.pid"
command="/usr/sbin/daemon"
command_args="-P ${pidfile} -r -f ${adguardhome_command}"
load_rc_config $name
: ${adguardhome_enable:=no}
run_rc_command "$1"
zum Schluss: Speichere die Datei ab und schließe sie. (STRG + X, mit Y bestätigen und Enter drücken)
11. Nun müssen wir noch die Datei ausführbar machen und den Autostart aktivieren:
chmod +x /etc/rc.d/adguardhome && sysrc adguardhome_enable="YES"
-------------------------------------------------------------------------------------
Fehlermeldung OPNSense Monit:
'AdGuardHome' failed to start (exit status 0) -- '/usr/local/sbin/configctl adguardhome start': Action not allowed or missing
Vielen Dank für eure Hilfe
Ausgangssituation:
2026 AdGuard Home Version v1.0.0-b.1
OPNsense 26.7.6_3-amd64
FreeBSD 15.1-RELEASE-p4
OpenSSL 3.5.9
Installation und Einrichtung AdGuard: alle OK
aber kein Autostart mehr möglich!
Meine benutzte Anleitung:
10. Lege eine neue Datei in /etc/rc.d/ an und bennene sie z.B. adguardhome:
____________________________________________
#!/bin/sh
. /etc/rc.subr
name="adguardhome"
rcvar="adguardhome_enable"
adguardhome_user="root"
adguardhome_command="/opt/AdGuardHome/AdGuardHome"
pidfile="/var/run/${name}.pid"
command="/usr/sbin/daemon"
command_args="-P ${pidfile} -r -f ${adguardhome_command}"
load_rc_config $name
: ${adguardhome_enable:=no}
run_rc_command "$1"
zum Schluss: Speichere die Datei ab und schließe sie. (STRG + X, mit Y bestätigen und Enter drücken)
11. Nun müssen wir noch die Datei ausführbar machen und den Autostart aktivieren:
chmod +x /etc/rc.d/adguardhome && sysrc adguardhome_enable="YES"
-------------------------------------------------------------------------------------
Fehlermeldung OPNSense Monit:
'AdGuardHome' failed to start (exit status 0) -- '/usr/local/sbin/configctl adguardhome start': Action not allowed or missing
Vielen Dank für eure Hilfe
#7
German - Deutsch / Re: [Gelöst] Unbound-DNS Erw...
Last post by k0ns0l3 - Today at 05:34:47 PMDurchschnittliche Upstream-Antwortzeit ist zu hoch.
#8
German - Deutsch / Re: [Gelöst] Unbound-DNS Erw...
Last post by k0ns0l3 - Today at 05:29:53 PMWer einen Fehler gemacht hat und ihn nicht korrigiert, begeht einen Zweiten.Upstream mitgeteilt und jetzt lauft alles :))
Thanks for the tip ;))
lg k0ns0l3
Thanks for the tip ;))
lg k0ns0l3
#9
26.7 Series / Re: kea gives out wrong namese...
Last post by defaultuserfoo - Today at 05:27:24 PMQuote from: Patrick M. Hausen on Today at 05:16:19 PMDeselect "autofill properties" or similar in the subnet and you can configure your own gateway, DNS server, etc.
Cool, thanks!
Why isn't it automatically filled with the right (i. e. configured) name server addresse(s)?
#10
General Discussion / Re: opnsense wont boot on APU2...
Last post by Patrick M. Hausen - Today at 05:17:30 PMMost probably no. Backups need to be made before the storage fails.
