"Recent posts
#1
26.1, 26,4 Series / Re: NAT Migration Tool
Last post by dseven - July 04, 2026, 11:27:08 PMQuote from: Burthouse4563 on July 04, 2026, 06:46:16 PMHere's an example rule directly from the export tool from the migration assistant, which throws the same error.
;1;0;0;101;wan;inet;any;lan;0;;any;0;;;;0;0;;;;"LAN to WAN"
What does the first line (the header line) of the CSV file look like? The only way I can see the failure occurring is if the header line is comma separated but the actual data is semicolon-separated, but I can't imagine how that would happen....
#2
Zenarmor (Sensei) / Re: Cancelling my subscription...
Last post by cookiemonster - July 04, 2026, 11:17:48 PMVery graceful Murat. I appreciate the offer. Although I have the time currently, I lack the funds to purchase a licence; despite the favourable conditions.
I hope I will be in a better position soon to take it up, should the offer still be open. Much obliged.
I hope I will be in a better position soon to take it up, should the offer still be open. Much obliged.
#3
26.1, 26,4 Series / Re: Outbound NAT - Source NAT ...
Last post by nero355 - July 04, 2026, 09:33:27 PMQuote from: flushell on July 04, 2026, 05:16:46 PMYes, I see now that if I change then old one to Automatic, the other is on Automatic too now.That's how it's designed to work : I asked about it earlier this week :)
IMHO you should keep things at Hybrid NAT Mode according to the Release Notes :
QuoteNote that this update brings the outbound to source NAT migration page, but itAnd from what I have read earlier in this topic : https://forum.opnsense.org/index.php?topic=52261.msg269516#msg269516
is only a formality as outbound NAT will stay in 26.7 although the legacy
firewall rules page will move to a plugin during the major upgrade. It is the
same process that was employed with ISC-DHCP. Due to this addition, however,
the source NAT rules entered in the system will no longer work unless the
mode is set to either "manual" or "hybrid".
#4
26.1, 26,4 Series / Re: os-zerotier package missin...
Last post by nero355 - July 04, 2026, 09:28:11 PMThere is a button called Community Packages or something like that : Is it Enabled in your case ?
I don't use that part of OPNsense much but you will figure it out once you see it :)
I don't use that part of OPNsense much but you will figure it out once you see it :)
#5
Zenarmor (Sensei) / Re: Cancelling my subscription...
Last post by mb - July 04, 2026, 09:04:20 PMHi Seimus,
Feedback, even if it hurts, but if delivered with class and grace like yours is exactly the kind we want more of. So, thanks for chiming in.
On communication: well noted and agreed. If direct questions to ZA went unanswered, that's a failure on our side, my apologies. I want to own that plainly. I'll investigate this internally.
On why you haven't heard of SASE Starter before now: it's not a secret, but it's just young. We started with a very small circle and have been expanding it gradually rather than announcing it all at once, so the lack of visibility so far is a stage we're in. This thread is, in a sense, turned out to be a part of that gradual expansion. We'll have more on this later this year.
On the mismatch: fair, and it doesn't change the situation. SASE Starter gives you the full platform, but you're at liberty to configure or use any of it. Leave TLS inspection, CASB, SWG, whatever off. The same goes for cloud. If you don't need centralized policy management, do not enable Zenconsole and you're good to go.
Given the troubleshooting time, the bug reports, and the attack-vector work you've put in with our engineers, the same applies to you as to dinguz and cookiemonster above: email support -at- zenarmor.com, mention this thread, we'll get you set up.
Feedback, even if it hurts, but if delivered with class and grace like yours is exactly the kind we want more of. So, thanks for chiming in.
On communication: well noted and agreed. If direct questions to ZA went unanswered, that's a failure on our side, my apologies. I want to own that plainly. I'll investigate this internally.
On why you haven't heard of SASE Starter before now: it's not a secret, but it's just young. We started with a very small circle and have been expanding it gradually rather than announcing it all at once, so the lack of visibility so far is a stage we're in. This thread is, in a sense, turned out to be a part of that gradual expansion. We'll have more on this later this year.
On the mismatch: fair, and it doesn't change the situation. SASE Starter gives you the full platform, but you're at liberty to configure or use any of it. Leave TLS inspection, CASB, SWG, whatever off. The same goes for cloud. If you don't need centralized policy management, do not enable Zenconsole and you're good to go.
Given the troubleshooting time, the bug reports, and the attack-vector work you've put in with our engineers, the same applies to you as to dinguz and cookiemonster above: email support -at- zenarmor.com, mention this thread, we'll get you set up.
#6
26.1, 26,4 Series / os-zerotier package missing
Last post by Bossybear - July 04, 2026, 08:22:24 PMIt has been a while since I tried to install Zerotier on my router but it was there at that time. I no longer see it listed in the packages.
v26.1.11_3-amd64
I don't see any mention here of this package causing a problem or being excluded.
Did I miss something?
Is there a solution (manual installation)?
v26.1.11_3-amd64
I don't see any mention here of this package causing a problem or being excluded.
Did I miss something?
Is there a solution (manual installation)?
#7
26.1, 26,4 Series / Re: NAT Migration Tool
Last post by Burthouse4563 - July 04, 2026, 06:49:55 PMQuote from: mschaeffler on July 04, 2026, 03:54:52 PMHi,
Is this only for the Outbound NAT?
What is with Destination NAT?
Thank you
Outbound is the old "legacy" style and is going to be changing to source / destination / one to one.
#8
26.1, 26,4 Series / Re: NAT Migration Tool
Last post by Burthouse4563 - July 04, 2026, 06:48:56 PMQuote from: meyergru on July 04, 2026, 04:06:42 PMWhere do you want to migrate the destination NAT rules to?
The only reason to migrate "Outbound NAT" to "SNAT" (aka "source NAT") was that this is the more common term. "Destination NAT" is already called correctly.
In the latests update the current NAT structure is changing based on the patch notes and eventually we'll have to migrate them like the old firewall rules. I'm attempting to use the migration to change from "legacy outbound NAT rules to the new Source NAT rules interface". But the original error is thrown when using the migration tool on all of my current NAT rules.
#9
26.1, 26,4 Series / Re: NAT Migration Tool
Last post by Burthouse4563 - July 04, 2026, 06:46:16 PMQuote from: dseven on July 04, 2026, 09:55:49 AMThe UUID can be empty (otherwise it must be a properly formatted one):
https://github.com/opnsense/core/blob/20070de6fca7fc83605c856bd0b84753a86fa7c2/src/opnsense/mvc/app/models/OPNsense/Base/FieldTypes/ArrayField.php#L334-L348
I wonder if your CSV file somehow got corrupted with unprintable characters, or something. Did you do anything with the file other than let your browser save it during export, then open it for import? Try a different browser maybe?
Edit: ... actually, looking at your error message again, it looks like it's considering the whole line to be the UUID, so parsing the CSV seems to have failed somehow. I still wonder if something happened to corrupt the file...
Edit 2: Oooh, I have a theory - do any of your rules have a comma (,) or semicolon (;) in their description?
Here's an example rule directly from the export tool from the migration assistant, which throws the same error.
;1;0;0;101;wan;inet;any;lan;0;;any;0;;;;0;0;;;;"LAN to WAN"
No commas or semicolons in descriptions. It all looks correct to me, though.
#10
26.1, 26,4 Series / Re: PPPoE Connection Issue
Last post by N00bOner - July 04, 2026, 06:07:36 PMI'd start from a simple setup.
Lenovo M720q with 1 i226v PCIe NIC - check if this config works correctly.
Interfaces: Overview - this section should be very clean with minimal setup, validate that you getting correct default gateway from the ISP.
Lenovo M720q with 1 i226v PCIe NIC - check if this config works correctly.
Interfaces: Overview - this section should be very clean with minimal setup, validate that you getting correct default gateway from the ISP.
