Recent posts

[Unfortunately, I have to retract my statement regarding the monitor state conclusion.]

#1

26.7 Series / Re: Lenovo M720q randomly hang...

Last post by userunkn4wn - Today at 03:25:53 PM

Unfortunately, I have to retract my statement regarding the monitor state conclusion.

The system still occasionally hangs during boot. As I gathered from the boot logs in /var/log/system/, when the system hangs, it doesn't even write to these logs, meaning the kernel is not loaded yet. It must be a bootloader issue. Unfortunately, I don't know how to log bootloader output (or if that's even possible), so it's not really possible to determine the root cause of these hangs.

I just ordered a few HDMI dummy plugs to make the system more reliable, as I cannot afford to have it go down after a power outage.

However, I am still interested in solving this problem at a fundamental level rather than relying on this band-aid fix.

Any suggestions are much welcome!

#2

General Discussion / Re: how insecure is FreeBSD 14...

Last post by franco - Today at 03:19:18 PM

FYI https://forum.opnsense.org/index.php?topic=52714.msg273889#msg273889

#3

Announcements / Re: OPNsense 26.4.2 business e...

Last post by franco - Today at 03:15:34 PM

Here are the full patch notes for patch release 1:

o system: audit log injection via login username in auth_log()[22]
o system: offer post-quantum mldsa44-ed25519 OpenSSH server host key
o system: do not regenerate all OpenSSH key files when adding new key types
o system: use created user name for change event (contributed by Julian Pawlowski)
o system: fix server certificate purpose detection for EC
o system: approximate user being expired for the grid view icon
o firewall: remove 2a10::/12 from bogonsv6.sample (contributed by Belgarion)
o captive portal: exclude IPv4 from roaming logic[23]
o plugins: os-OPNWAF 2.4
o src: posixshm: fix a TOCTOU race in the FIOSSHMLPGCNF handler[24]
o src: tty: revalidate after dropping the tty lock in ioctl handlers[25]
o src: ppp: fix multiple vulnerabilities[26]
o src: openssl: fix multiple vulnerabilities[27]
o src: dsp: fix a potential use-after-free in dsp_oss_syncstart()[28]
o src: hwpmc: fix the execve handler[29]
o src: ucode: fix validation on Intel platforms[30]
o ports: openssh 10.5p1[31]
o ports: openssl 3.0.22[32]

--
[22] https://github.com/opnsense/core/security/advisories/GHSA-jjm2-jg4p-3v9q
[23] https://github.com/opnsense/core/security/advisories/GHSA-864r-q4j5-5mjq
[24] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:63.posixshm.asc
[25] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:62.tty.asc
[26] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:60.ppp.asc
[27] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:61.openssl.asc
[28] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:58.sound.asc
[29] https://www.freebsd.org/security/advisories/FreeBSD-SA-26:56.hwpmc.asc
[30] https://www.freebsd.org/security/advisories/FreeBSD-EN-26:20.microcode.asc
[31] https://www.openssh.com/txt/release-10.5
[32] https://github.com/openssl/openssl/blob/openssl-3.0/CHANGES.md

#4

Development and Code Review / Re: netflector available as pl...

Last post by franco - Today at 01:48:45 PM

Years can pass without rejection...  ;)

Can you create a PR for https://github.com/opnsense/ports preferably under opnsense/netreflector to avoid clashing with an eventual FreeBSD inclusion? The files can stay the same, but so we know it's out of tree.


Thanks,
Franco

#5

26.7 Series / Re: Confused by 26.7 upgrade

Last post by bamf - Today at 01:31:42 PM

Is there a recommended site to follow (like RSS) or something similar so I can keep up to date?

OPNSense will show a changelog on every update. Read it.

If you want to read release notes outside of the UI, there are these places:

https://forum.opnsense.org/index.php?board=11.0
https://opnsense.org/blog/

#6

26.1, 26,4 Series / Re: Cron scheduled missing?

Last post by DEC740airp414user - Today at 01:29:13 PM

i must be blind.  or i've broken my install from going back and forth to too many snapshots

thanks for the reply ill check my system when i get home tonight

#7

26.1, 26,4 Series / Re: Cron scheduled missing?

Last post by Patrick M. Hausen - Today at 01:19:29 PM

System > Settings > Cron

#8

Tutorials and FAQs / Re: new to OpenSense and like ...

Last post by utopianfish - Today at 01:02:34 PM

for what its worth i ran pfsense up until a few months and then bailed out..... and moved to Opnsense... it was much easier to start from scratch setup interfaces/vlans etc and then rebuild the firewall rules and vpn setup.. it took a few weeks to setup and test but its been working great and getting regular updates..

#9

26.1, 26,4 Series / Cron scheduled missing?

Last post by DEC740airp414user - Today at 12:40:39 PM

i went back 3 pages and didn't find any discussion on this:

in version 26.4.1 business edition, it appears alot of Cron works changes
 my scheduled tasks are gone Cron is completely missing under system in fact.

were these automagically imported and i am just missing it

#10

High availability / Re: HA Upgrade from 26.1.11_10...

Last post by relvy - Today at 12:14:51 PM

Well, I did the upgrade.

First I upgraded the secondary.
I uninstalled the Microcode, run the upgrade and run reinstalled the Microcode.
Then I upgraded the primary the same way.

I did not experience any issue with PFSync compatibility due kernel upgrade.