"Recent posts
#1
26.7 Series / Re: Feature Request : Firewall...
Last post by nero355 - Today at 02:12:24 PMQuote from: bigops on Today at 06:37:42 AMWhen I add the column Sort Order it perfectly matches with : https://docs.opnsense.org/manual/firewall.html#processing-orderQuote from: nero355 on July 18, 2026, 11:13:44 PMNot sure where you found that option. The only columns that I found was ID and sort order and sequence. Both are not really helpful. Is there something that I am missing?Quote from: bigops on July 18, 2026, 09:00:57 PMWhile troubleshooting I also felt that if we have a column which shows the rule number which lists the processing order it would be helpful especially when all the rules are now bunched together.I am pretty sure you can Enable that Column within the new Firewall Rules and also Disable exisiting ones : Click around a bit! ;)
A serial number of firewall rules would go a long way to quickly identify the position of the rule on the firewall table
Or are you looking for something else ?
#2
26.7 Series / opnsense.c0urier.net Fetching ...
Last post by wide - Today at 12:54:03 PMopnsense.c0urier.net mirror seems to have broken packages-26.7-amd64.tar for 26.7 upgrade. Tried multiple times but every time same failure.
Code Select
***GOT REQUEST TO UPGRADE***
Currently running OPNsense 26.1.11_10 (amd64) at Sun Jul 19 13:42:17 EEST 2026
Fetching packages-26.7-amd64.tar: ... failed, signature invalid
***DONE*** #3
26.7 Series / Re: 26.7 plug-in AdGuardhome n...
Last post by newsense - Today at 12:48:54 PMYour issue appears to be related to the intel microcode plugin. Not AdguardHome
#4
26.7 Series / Re: 26.7 upgrade failure - ope...
Last post by newsense - Today at 12:45:24 PMYou cannot upgrade with the FreeBSD repos active.
#5
26.7 Series / Weird thing when using NAT Des...
Last post by mrzaz - Today at 12:43:25 PMHello,
I am running latest 26.7 i stumbled on a thing that is a bit confusing.
In NAT you have 3 settings to use: Manual, Pass and Register rule.
- Manual = Choose this if you want to create your own Firewall ‣ Rules [new] manually. No linked filter rule is created.
- Pass = A filter rule will be automatically added and updated. This rule cannot be seen or edited in Firewall ‣ Rules [new].
- Register rule = Adds a linked filter rule in Firewall ‣ Rules [new] that is automatically updated when the NAT rule is updated. The created filter rule cannot be manually edited.
I created a brand new NAT rule called "TEST" with following:
- WAN, IPv4, TCP
- Source = Any
- Destination = WAN address, Single port or range, 1234
- Translation = 192.168.x.y, Single port, 1234
And then I selected "Register rule" (so I should see a linked rule in Rules even if not possible to modify.)
BUT, when I did that I still can't see the readonly rule in rules list. (Running the new rules engine.)
I then changed to a lighter skin and realized that the readonly NAT generated rules was hiding
under one more "Automatically generated rules" at the bottom that is named exactly as the one
at the top which is a bit misleading (even if it is correct).
Would it be possible to change the bottom "Automatically generated rules" to something more
explanatory like "Automatically generated NAT rules" or "NAT Automatically generated rules"
Dan Lundqvist
Stockholm, Sweden
I am running latest 26.7 i stumbled on a thing that is a bit confusing.
In NAT you have 3 settings to use: Manual, Pass and Register rule.
- Manual = Choose this if you want to create your own Firewall ‣ Rules [new] manually. No linked filter rule is created.
- Pass = A filter rule will be automatically added and updated. This rule cannot be seen or edited in Firewall ‣ Rules [new].
- Register rule = Adds a linked filter rule in Firewall ‣ Rules [new] that is automatically updated when the NAT rule is updated. The created filter rule cannot be manually edited.
I created a brand new NAT rule called "TEST" with following:
- WAN, IPv4, TCP
- Source = Any
- Destination = WAN address, Single port or range, 1234
- Translation = 192.168.x.y, Single port, 1234
And then I selected "Register rule" (so I should see a linked rule in Rules even if not possible to modify.)
BUT, when I did that I still can't see the readonly rule in rules list. (Running the new rules engine.)
I then changed to a lighter skin and realized that the readonly NAT generated rules was hiding
under one more "Automatically generated rules" at the bottom that is named exactly as the one
at the top which is a bit misleading (even if it is correct).
Would it be possible to change the bottom "Automatically generated rules" to something more
explanatory like "Automatically generated NAT rules" or "NAT Automatically generated rules"
Dan Lundqvist
Stockholm, Sweden
#6
26.7 Series / Re: os-upnp plugin not working...
Last post by Warbreaker - Today at 12:41:58 PMQuote from: poeBaer on July 18, 2026, 11:38:46 PMConfirming issues immediately after an upgrade to 26.7 as well
It seems to be partially working though, as some entries/mappings are being made. And now the "IP address" column is just showing "?" for all entries, instead of the local IP as in previous versions. Not sure if that could help point the finger at the actual issue
This is exactly what's happening to me, the IP address column is just ? and while it attempts to add entries to the firewall, uPnP is failing to do so.
I already had migrated my old firewall rules in 26.1 to the new rules set and all of my other rules are working as expected, the firewall seems fine, including my port 53 and 123 interception for the firewall own services.
So for now I just disabled the service until it is confirmed is fixed, but glad it wasn't just a me issue ;-)
#7
Hardware and Performance / Re: Several times a day intern...
Last post by cookiemonster - Today at 12:41:22 PMProblem here is that we can't guess your internal setup. You talk about routing but all "internal" traffic i.e. devices talking to each other in your "LAN", they don't go through your OPN router. They talk via a switch that you will have downstream of OPN and plugged into that LAN port.
That said, it could be routing if you have more than one network segment and traffic has to go through your OPN, but this is what we can't guess. You must give us all the details.
Finally if resetting that interface seems to make a difference, that suggests the router is involved somehow. Again tell us the setup.
And hello to you too.
That said, it could be routing if you have more than one network segment and traffic has to go through your OPN, but this is what we can't guess. You must give us all the details.
Finally if resetting that interface seems to make a difference, that suggests the router is involved somehow. Again tell us the setup.
And hello to you too.
#8
26.7 Series / Re: [Solved] Attempt to Upgrad...
Last post by wide - Today at 12:38:17 PMI have same issue right after os-cpu-microcode-intel-1.1 update
Opnsense is running on top of the latest Proxmox version 9.2.4, using SeaBIOS and UFS2 filesystem.
Code Select
Reinstalling os-cpu-microcode-intel-1.1...
[22/392] Extracting os-cpu-microcode-intel-1.1: .. done
Reloading firmware configuration
failed waiting for configd (doesn't seem to be running)
failed waiting for configd (doesn't seem to be running)
failed waiting for configd (doesn't seem to be running)
failed waiting for configd (doesn't seem to be running)Opnsense is running on top of the latest Proxmox version 9.2.4, using SeaBIOS and UFS2 filesystem.
#9
26.7 Series / Re: 26.7 plug-in AdGuardhome n...
Last post by Maurone - Today at 12:38:15 PMI also tried to comment url line in /usr/local/etc/pkg/repos/mimugmail-single.conf before update, but no success on update.
Maybe is useful the following screenshot I tok in serial connection when system has a problem updating.
There is a way to make working the update or is the best reinstall at new version and import the configuration?
Thank you for suggestions.
Maybe is useful the following screenshot I tok in serial connection when system has a problem updating.
There is a way to make working the update or is the best reinstall at new version and import the configuration?
Thank you for suggestions.
#10
Tutorials and FAQs / Re: OPNsense aarch64 firmware ...
Last post by durgesh - Today at 12:25:01 PMHi Maurice,
Thank you for your awesome work. I installed opnsense on my pi 5 8GB with incus and virtual 2 NICs WAN and LAN separated by VLAN ids. It was working fine for 26.1. When I tried to install latest version 26.7 on 15.1, it corrupted my freebsd completely when I executed below commands.
fetch https://raw.githubusercontent.com/opnsense/update/master/src/bootstrap/opnsense-bootstrap.sh.in
sh ./opnsense-bootstrap.sh.in -r 26.7 -A maurice-w -R opnsense-core
Is there any other thing needs to be done to make it work?
Thank you for generously building these images.
Thank you for your awesome work. I installed opnsense on my pi 5 8GB with incus and virtual 2 NICs WAN and LAN separated by VLAN ids. It was working fine for 26.1. When I tried to install latest version 26.7 on 15.1, it corrupted my freebsd completely when I executed below commands.
fetch https://raw.githubusercontent.com/opnsense/update/master/src/bootstrap/opnsense-bootstrap.sh.in
sh ./opnsense-bootstrap.sh.in -r 26.7 -A maurice-w -R opnsense-core
Is there any other thing needs to be done to make it work?
Thank you for generously building these images.
