Recent posts

#1

General Discussion / Re: How do I know if a non-off...

Last post by franco - Today at 10:35:43 PM

> I asked a genuine question

Fair enough.  I gave a genuine answer and you scolded me for it.  ;)


Cheers,
Franco

#2

General Discussion / Re: How do I know if a non-off...

Last post by Greelan - Today at 10:20:29 PM

I get the impression that you're singling me out over frustrations with loosely related matters.

Your impression is wrong. I asked a genuine question in response to a categorical statement you made. As you can see, Cedrik then answered it and I moved on. I don't see how my question could reasonably be interpreted to be an attack on you. It's disappointing if you took it that way.

#3

26.7, 26.10 Series / Re: No health graphs since 26....

Last post by cookiemonster - Today at 09:34:22 PM

Health graphs working fine here on 26.7.8_2 with AMD-based machine. VM on proxmox, with CPU type set to "host".
Maybe you had to make a hardware change, different nic for instance?

#4

General Discussion / Re: Disable: "Default allow LA...

Last post by franco - Today at 09:24:35 PM

Sounds like a case of https://github.com/opnsense/changelog/blob/f0dfc461e2c50b4748ca2770a77da92540743803/community/26.7/26.7#L98


Cheers,
Franco

#5

General Discussion / Re: How do I know if a non-off...

Last post by franco - Today at 09:22:44 PM

I think you know that was not what I was asking - not least because I am one of the contributors to those issues and PRs. I don't think the passive-aggressiveness is warranted.

Your statement in the earlier post suggested the dev team would no longer accept new plugin submissions because you do not have capacity to review them. Is that the case or not?

I get the impression that you're singling me out over frustrations with loosely related matters. I'd appreciate it if we could avoid turning this thread into a discussion about disagreements that have already been adequately addressed by multiple people in their respective issues and PRs.


Cheers,
Franco

#6

German - Deutsch / Re: Heimnetzoptimierung

Last post by Patrick M. Hausen - Today at 09:07:24 PM

Die Fritzbox macht Static Port Outbound NAT nur für ihr eigenes Netz.

Mit der Betonung auf "static", oder? Generell NAT macht sie nämlich durchaus. Static brauche ich hier nur für die Fritzbox hinter der OPNsense für SIP. Das würde beim OP ja entfallen.

#7

Virtual private networks / Re: Noob trying to get Wiregua...

Last post by RoWAN Tree - Today at 09:05:14 PM

2nd Photo Batch

#8

Virtual private networks / Re: Noob trying to get Wiregua...

Last post by RoWAN Tree - Today at 09:03:36 PM

I've done the steps but I do t quite understand who's IP is what.. I'm seeing different things from the terminal IPS running nslookup example.com, dig example.com compared to dnsleaktest.com ( screen shots below)

It shows the server as 127.0.0.1 port 53, when it comes to DNS its confusing.

I've noticed as well that the proton gateway is not the deafualt and never says active beside it unless I unplug the WAN cable.(2nd batch photos⬇️)

I've made the rule for each vlans as well in the same order as personal. When I try the Xbox I can get online but the whole homepage is empty.

  I have gamepass but it says " Sorry we can't show Gamepass games right now" whereas on my phone hotspot via proton wireguard to Xbox shows everything I've set DNS on my phone to 1.1.1.1 though no issues, leads me to think⬇️

 I did check every single option in. Services>Unbound>Blocklists maybe that has to do with it 😅

I'm not exactly sure what's going on so far everything that's been troubleshooted now works, this has been a massive help I'd be eating dust if not for the forum, again its greatly appreciated 👍

#9

26.7, 26.10 Series / Re: Gradual Internet Performan...

Last post by tonys - Today at 09:02:58 PM

Which makes this bug even more critical to fix, don't you think? OPNSense 26.7 was announced on 7/15/2026. Here I am, after 4 months of grief, finally with a workaround but definitely not a proper solution.

My Apple devices are now "pausing" for a short period of time, I assume trying to reach an IPV6 address and finally realizing they can't so they fall back to IPV4 and complete the connection. SiriusXM takes about 10-15 seconds when I change channels (which is instantaneous when I use the external VPN which CAN reach IPV6) and even attempting to log into this forum paused for about 30 seconds before the login popup appeared. Sigh... I should have stayed on 26.1.x but the EOL warnings prompted me to upgrade.

Noteworthy - exactly one time after updating to 26.7.8_2 and during constant reboots and settings changes, I noticed I did get an IPV6 address for a short time and could even PING6 it. But, that IPV6 connection failed after a short time and never came back.

Also, these CVE's:

***GOT REQUEST TO AUDIT SECURITY***
Currently running OPNsense 26.7.8_2 (amd64) at Mon Nov  9 14:42:46 CST 2026
vulnxml file up-to-date
python313-3.13.16 is vulnerable:
  Python -- poplib module, when passed a user-controlled command, can have additional commands injected using newlines
  CVE: CVE-2025-15367
  WWW: https://vuxml.FreeBSD.org/freebsd/6d3488ae-2e0f-11f1-88c7-00a098b42aeb.html

sqlite3-3.53.4,1 is vulnerable:
  sqlite3 -- multiple vulnerabilities
  CVE: CVE-2026-119371
  CVE: CVE-2026-119372
  CVE: CVE-2026-119373
  CVE: CVE-2026-119374
  CVE: CVE-2026-119375
  CVE: CVE-2026-119376
  CVE: CVE-2026-119377
  CVE: CVE-2026-119378
  CVE: CVE-2026-119379
  CVE: CVE-2026-119591
  WWW: https://vuxml.FreeBSD.org/freebsd/84cd82e1-d49f-11f1-bae2-3497f65b111b.html

2 problem(s) in 2 package(s) found.
***DONE***

#10

German - Deutsch / Re: Heimnetzoptimierung

Last post by Bob.Dig - Today at 08:37:42 PM

M.E. gibt es keinen Grund, das NAT auf der OPNsense nicht zu deaktivieren und durch statische Routen auf den Fritzboxen zu ersetzen.

Die Fritzbox macht Static Port Outbound NAT nur für ihr eigenes Netz.