"Recent posts
#1
26.7, 26.10 Series / Re: OpenVPN connection is rest...
Last post by mschaeffler - Today at 10:14:03 AMthe issue is solved: there was still a parallel VPN connection from another client to the same user.
#2
26.7, 26.10 Series / Re: OpenVPN connection is rest...
Last post by mschaeffler - Today at 09:58:59 AMit seems to happen every 90s
#3
Development and Code Review / Re: netflector available as pl...
Last post by UnicronHD - Today at 09:42:57 AMQuote from: vicking on <strong>Today</strong> at 09:19:08 AMOké, I replaced both the packages for netflector and everything is still working fine!
One thing I am not sure about is if I need the bidirectional flag for my situation
You almost never need it. If you have client devices (phone, laptop, etc.) in one VLAN and your target devices (TV, Chromecast, etc.) in another VLAN - you do not need it. You make source_if the VLAN with clients and target_if the VLAN with targets.
You will need bidirectional if you have TVs in both VLANs AND you have phones in both VLANs.
#4
Development and Code Review / Re: netflector available as pl...
Last post by vicking - Today at 09:19:08 AMOké, I replaced both the packages for netflector and everything is still working fine!
One thing I am not sure about is if I need the bidirectional flag for my situation
One thing I am not sure about is if I need the bidirectional flag for my situation
#5
High availability / Re: Multi site HA - question ....
Last post by MayaGriffiths - Today at 09:17:14 AMQuote from: Sandyman on February 25, 2026, 06:55:10 PMHelloThank you for taking the time to explain what you're trying to achieve. I ran into a similar setup when connecting two locations and found that separating the site-to-site VPN rules from the WAN failover configuration made troubleshooting much easier. OPNsense can handle both, but the exact approach depends on how your VPN and cellular connection are configured. A pointer to the right features would be much appreciated.
I look after two sites in a relatively remote area, they are about 1km apart. Both sites have relatively high speed FTTP links (c. 300Mbps). It is possible to install a wireless bridge between the sites. It would be beneficial to install a cellular WAN, because cars frequently take the telegraph poles out causing weeks of outage! However, only one site (site A) has cellular coverage.
Assuming that both site A and site B have OPNsense units, that a wireless bridge link (WBL Fnaf) is available, say using a TP-Link EAP215, and a cellular WAN at site A.
Is the following possible with OPNsense?
• Allowing the sub nets at site A and site B to communicate using the WBL
• Allowing site B to use the cellular WAN in case of FTTP failure at site B
If so, could you give me a pointer as to the features / configuration to explore?
Is there an easier way, perhaps I have missed something obvious?
Thank you in advance.
#6
26.7, 26.10 Series / [solved] OpenVPN connection is...
Last post by mschaeffler - Today at 09:10:43 AMI just upgraded from 27.7.8 to 26.7.9.
Before my OpenVPN connection was perfectly stable and now it is restarted every few minutes!
The OpenVPN logging shows this:
Before my OpenVPN connection was perfectly stable and now it is restarted every few minutes!
The OpenVPN logging shows this:
Code Select
tcp6-server:80.187.xx.xx:23679 validation failed on peer_info line received from clientThis happens with the client in company Wifi and also via mobile connection. #7
Russian - Русский / Re: os-xray — плагин Xray-core...
Last post by tyra - Today at 02:47:34 AMQuote from: Spylive on November 09, 2026, 10:45:57 AMQuote from: tyra on November 07, 2026, 02:23:01 PMQuote from: Spylive on November 07, 2026, 12:35:25 PMДа именно так. И тогда для любых проверок РКН Ваш внешний ip, который они заносят в блокировки, будет тот который и так уже не доступен из России. Дополнительно на своем локальном виртуальном сервере с белым IP поднял еще один 3x-ui и его использую с мобильным трафиком, а для обхода белых списков использую аренду CDN у яндекса за 150р в месяц.А VPS-заграница -> VPS-заграница уже заблокированный-- VPSЫ должны быть в одной стране и на одном сервере или это не обязательно? (Дополнительно на своем локальном виртуальном сервере с белым IP поднял еще один 3x-ui и его использую с мобильным трафиком) то есть если я правильно понимаю свой домашний белый IP используешь как VPN за которым opnsense c os-xray и опять идет в VPS-заграница -> VPS-заграница уже заблокированный;-то есть схема примерно как из видео https://youtu.be/ZSy1b3BeKzk?list=PLsU1-fn3_XD08m2L1zu8Yrj1WcCIkSihl ? Про CDN я слышал-смотрел но не пробывал. По поводу плагина os-xray, он поддерживает только два протокола VLESS и VLESS-xHTTP и причём одну страну Германию а на Эстонии и Финляндии не работает то есть в столбце Status все зелёное (xray: up tun: up) а в Test Result красное (Could not connect — xray-core may be stopped or port unreachable)? в приложении HAPP больше протоколов на всех нодах работают, это я к тому что они рабочие в одной сети с opnsense.
#8
General Discussion / Re: Plex Server Setup in 2024 ...
Last post by ats - Today at 01:22:29 AMNew version of OPNSense breaks up the NAT rules differently than pfsense and earlier opnsense versions.
You want to set up the "port forwarded rule" on the "Firewall: NAT: Destination NAT" -> that is the, destination nat rules.
Click the box/select the option to automatically create the firewall rules for you at the bottom.
Spent a few hours, twice already, relearning this a few months apart.
You're welcome my friends.
You want to set up the "port forwarded rule" on the "Firewall: NAT: Destination NAT" -> that is the, destination nat rules.
Click the box/select the option to automatically create the firewall rules for you at the bottom.
Spent a few hours, twice already, relearning this a few months apart.
You're welcome my friends.
#9
Zenarmor (Sensei) / Re: Am I missing something or ...
Last post by mb - Today at 01:17:22 AM@Greg_E, I checked and saw you're already working with our sales team, that's great!
We do understand the budget realities in education, and the same goes for NGOs and nonprofits. We have standing programs for exactly this. For EDU/NPO, discounts go as high as 50%. I see our team is already on it and applying what's needed to land the price within your budget.
And thanks for the feedback, very helpful.
We do understand the budget realities in education, and the same goes for NGOs and nonprofits. We have standing programs for exactly this. For EDU/NPO, discounts go as high as 50%. I see our team is already on it and applying what's needed to land the price within your budget.
And thanks for the feedback, very helpful.
#10
General Discussion / Re: CrowdSec integrated with L...
Last post by Amodin - November 11, 2026, 10:01:08 PMI've seen the same timeout issue with just the regular Crowdsec setup, and with my Zoraxy plug-in (bouncer) on my reverse proxy. The decisions didn't show and I just got the spinning wheel of death. I think I only had to refresh the view by clicking on something else, then going back to it in the GUI.
Now if I can just get it to stop punching itself in the face....
(Meaning, it tells me to update to 1.8.2, identifies itself as being at 1.8.1_2, and telling me everything is fine, even after reinstalling it all).
Now if I can just get it to stop punching itself in the face....
(Meaning, it tells me to update to 1.8.2, identifies itself as being at 1.8.1_2, and telling me everything is fine, even after reinstalling it all).
