Recent posts

#1

26.7 Series / Re: Monit RootFS broken for ZF...

Last post by tracerrx - October 14, 2026, 11:18:33 PM

I actually followed the directions on This Post to create a ZFS specific script.

#2

26.7 Series / Re: missing wireguard automati...

Last post by Bob.Dig - October 14, 2026, 10:09:56 PM

I made a new WG-instance, still no problem here. So something messed up your OPNsense, it looks like.

#3

German - Deutsch / Re: ICMP-Block auf Gateway und...

Last post by Patrick M. Hausen - October 14, 2026, 10:04:53 PM

Solange du nicht deine vollständige Konfiguration postest, wird das eine ziemliche Glaskugelei. Und meine Glaskugel ist grad in der Inspektion 😉

#4

26.7 Series / Re: missing wireguard automati...

Last post by Bob.Dig - October 14, 2026, 10:01:10 PM

Even if I Disable routes, I still have the WG-instance. So it looks like you have a problem indeed. 

#5

26.7 Series / Re: missing wireguard automati...

Last post by Bob.Dig - October 14, 2026, 09:18:50 PM

Otherwise it is missing.

Show your instance config in detail. It looks like you Disabled routes.

Looking at my own screenshot, I thought: I can do better.
And I did.

#6

26.7 Series / Re: missing wireguard automati...

Last post by freejack - October 14, 2026, 09:13:35 PM

wg instance has route. But only when route is replicated on interface assignment it is actually created. And wg peers can access.

Otherwise it is missing. And wg peers cannot reach other segments.

#7

German - Deutsch / ICMP-Block auf Gateway und DNS

Last post by AWilan - October 14, 2026, 09:07:29 PM

Hallo liebes OPNsense-Forum,

ich habe aktuell ein Problem. Ich habe auf meiner OPNsense Firewall zum WAN acht zusätzliche Netze eingerichtet. Acht VLANS ebenso. Sieben von den Netzen funktionieren einwandfrei, ein Netz sperrt mir aber die ICMP-Protokolle zum Gateway (nnn.nnn.nnn.1) und zum DNS (8.8.8.8).
Ich kann aber nicht rausfinden warum?

Kennt jemand dazu eine passende Lösung?

Besten Dank,

Gruß Anton

#8

26.7 Series / Re: missing wireguard automati...

Last post by Bob.Dig - October 14, 2026, 08:06:24 PM

That's leading to missing route.

Show some screenshots of your WG config and the routes. I bet, it is there.

 Don't Disable routes on the instance.

Here is how it looks:

#9

26.7 Series / Wireguard packet loss

Last post by hysteriward - October 14, 2026, 07:23:43 PM

I'm trying to connect a VPS to a mail sever on my private network. The VPS is Rocky9 using nftables for a firewall. I set up a wireguard tunnel between the VPS and OPNsense 26.7 and the tunnel works. On the VPS email ports are DNATed to the local address of the mail server. I set up an interface to use as a gateway for wg0 and use policy routing to capture traffic from the mail server and send it to the wireguard tunnel. the mss is clamped to 1380. I can surf the internet from the mail server and send mail through the tunnel. I can connect to the mail server from the VPS using telnet. When I try to connect to the server using the VPS wan address from a computer outside of the OPNsesne network, the first syn packet is routed to the mail server but outgoing traffic dies before it gets to the wireguard tunnel. Also any retries from the originating computer die when they exit the tunnel. There is no SNAT on the mail traffic to retain the sender's ip. Without it DMARK would fail. I use the same routing minus the wireguard tunnel to connect the mail server to OPNsense's wan.

Any help would be appreciated.

Thanks

#10

26.7 Series / Re: Gradual Internet Performan...

Last post by harshw - October 14, 2026, 07:13:12 PM

Maybe try for a time without any Quad9 DNS ? I saw some weirdness in OPNsense, put ControlD/Cloudflare instead of Quad9 servers and it's been fine since

Also, what are your CPU temps ?