Recent posts

#1
26.1, 26,4 Series / (os-sftp-backup) not working t...
Last post by SchengFui - Today at 01:24:02 PM
Hi there,

i'm struggeling with the OPNSense SFTP-Backup through an VPN-Tunnel (OpenVPN and Wireguard, IPSEC not testet).

I can Ping and Traceroute the SSH-Server from the OPNSense itself, however ich have to specify the Source IP (LAN Interface). Without this, both fails.

When testing the configuration-backup i can see Packets with a strange Source (10.22.101.0:26140) on the remote Firewall, this is the OpenVPN-Transit-Network for the VPN-Connection.

Is it possible to specify an outgoing IP-Address (or Interface) for the sftp-backup?

What else can i try?

Thank you!
#2
26.1, 26,4 Series / After setting Pipe under Traff...
Last post by ryp43 - Today at 01:10:39 PM
After setting Pipe under Traffic Shaper - Rules(news), the Packets or Bytes are not shown later under Shaper->Status.

After creating a dedicated rule under Shaper-Rules, Packets and Bytes are populated under Shaper->Status.
#3
Use

pkg info -l wifi-firmware-ath12k-kmod-wcn7820_hw20

to see where the files are installed, then try to "kldload" them manually. They probably just do not end up in /boot/modules but somewhere under /usr/local.
#4
But there is a periodic backup mechanism with various destination options in OPNsense, already. Standard, out of the box.
#5
Development and Code Review / Re: vibecoded plugin
Last post by Vectralis - Today at 12:14:28 PM
Thanks for taking the time to review my code.
You are right, a 250k file doesn't bother any SSD, so that's not the most important part.
You are right about the fact that the config stays the same for a long period of time, and that it isn't very important to have daily backups. but you never know, i have been a windows user for a long time and found out that backups are very important, but in the case of windows the software itself also isn't that stable. opnsense is indeed probably rock solid and can't break if you don't touch it. but it's just a habbit. if you keep a pc running windows on 24/7 without doing somethings, it can still break itself. the built-in solution you propose to backup my opnsense configuration is a working approach but it's manual work. i like automation and want everything from the router to be kind of centralised on the router. if i manually download it on my client pc. it can still get lost if i save it at a random place and never look back to it.
the readme.md summarizes very good what i want to achieve, but the most important thing i wanted to make sure is that the code was actually working. i litterally installed opnsense yesterday so i don't know a lot about it, so i am not very familiar with testing it on a platform which i have never used.
#6
26.1, 26,4 Series / Unable to make wifi working on...
Last post by sonofnet - Today at 12:05:26 PM
Hi, guys,
I'm trying to setup wifi on my hp260 g2. But I can't figure out how to do it.

I've bought a qualcomm qcncm865 wifi card.
The system recognizes it: pciconf -lv gives me none1@pci0:some numbers. And device name has "wcn" in the name.

I've installed the kernel module: pkg install wifi-firmware-ath12k-kmod-wcn7820_hw20-20260410.
But after install I can't see it in /boot/modules/
I've tried restarting the system. But after the reboot I'm still unable to see anything loaded in kldstat. I can see bluetooth as my adapter is a combination of bluetooth and wifi. But no wifi.

I've tried installing wifi-firmware-ath12k-kmod-qcn9274_hw20-20260410 but it didn't help either.

I'd appreciate your help. What do I do wrong?
#7
26.1, 26,4 Series / Re: With IPv6, how to get both...
Last post by meyergru - Today at 10:48:28 AM
Quote from: Bob.Dig on Today at 09:33:24 AMWhy not using good, old IPv4 for internal things?

I am also fond of that, see: https://forum.opnsense.org/index.php?topic=45822.0 for an in-depth discussion.
#8
26.1, 26,4 Series / Re: With IPv6, how to get both...
Last post by dseven - Today at 10:41:24 AM
A possible alternative would be to use ULA only for internal, and NPTv6 for internet...
#9
26.1, 26,4 Series / Re: Issues with OPNsense on VM...
Last post by kubatron - Today at 10:16:14 AM
Quote from: Kinerg on February 06, 2026, 03:50:28 PM
Quote from: kubatron on February 06, 2026, 08:57:46 AMI forgot mention that on the screeen from Proxmox -> pve -> Network , there is no setup any IP and gateway on the vmbr1 (VLANs_ETH0) - I setup IP and gateway for VLANs_ETH0 on the OPNsense and on WAN the same, so only is setup on the MAGMT_ETH1 setup 192.168.1.178/24.

This is confusing. You should only have IP and gateway on vmbr2 MAGMT (and not the same as LAN 192.168.1.1/24, as others have said), leave the other two blank.

It is also not clear how many DHCP servers you have on the network.

Is the TP Link SG108PE port towards Fujitsu S920 set up as trunk?

How are your interfaces set up in OPNsense?



The other two ports in Proxmox is blank, only a MGMT port is setup.

ISP Modem (WAN) is going cable to Fujitsu S920 to port vmbr0 (WAN - blank in Proxmox, setup in OPNsense)
From Fujitsu S920 via cable is going vmbr1 (LAN - blank in Proxmox, setup in OPNsense + DHCP server) to TP Link SG108PE
In TP Link SG108PE I have disabled all VLAN's option, I can enable VLAN and TAG/UNTAG specified port.

I try many things and now I am stuck...I don't know where is issue.
I disable in OPNsense (VM) firewall option, I try with NAT outbound and switch to hybrid, I try pfctl -d. I try allow any traffic rules in OPNsense firewall.

This is very weird, I watch many videos/read articles and...

auto lo
iface lo inet loopback

iface enp2s0 inet manual
#FUJITSU BUILD-IN-ETH

iface enp1s0f0 inet manual
#Intel [EXT-ETH0]

iface enp1s0f1 inet manual
#Intel [EXT-ETH1]

iface wlp3s0 inet manual

auto vmbr0
iface vmbr0 inet static
        address 192.168.1.200/24
        gateway 192.168.1.1
        bridge-ports enp2s0
        bridge-stp off
        bridge-fd 0
#[ETH0-F] MGMT

auto vmbr1
iface vmbr1 inet manual
        bridge-ports enp1s0f0
        bridge-stp off
        bridge-fd 0
#WAN

auto vmbr2
iface vmbr2 inet manual
        bridge-ports enp1s0f1
        bridge-stp off
        bridge-fd 0
        bridge-vlan-aware yes
        bridge-vids 2-4096
#LAN

source /etc/network/interfaces.d/*
ISP Modem -> Fujitsu S920 (Proxmox + OPNsense as a DHCP on vmbr1 (LAN) and vmbr0 (WAN - static IP from ISP (10.0.x.xxx/24, 10.0.x.1) ) -> vmbr1 (LAN) -> TP Link SG108PE port, and vmbr0 (WAN) is connected to Fujitsu S920
#10
26.1, 26,4 Series / Re: With IPv6, how to get both...
Last post by Bob.Dig - Today at 09:33:24 AM
Why not using good, old IPv4 for internal things?