Recent posts

#1

German - Deutsch / Firewallkonfiguration für Tuya...

Last post by andyknownasabu - Today at 04:31:57 PM

Hallo zusammen,

ich habe mehrere Tuya-Geräte in Benutzung. Diese bekommen IPs in einem eigenen Subnetz 192.168.3.x.

Kontrollieren/konfigurieren möchte ich die Geräte jedoch über die TuyaLocal Integration in HomeAssistant. Der HomeAssistant-Server ist im Subnetz 192.168.1.x

Ich habe OPNSense so konfiguriert, dass man vom 1er Netz zwar in das 3er Netz kommt, aber nicht umgekehrt. Freigegeben in die Richtung 3er-Netz -> 1-er Netz habe ich nur alle Ports, die Tuya laut Dokumentation benötigt (siehe Bild).

Trotzdem tut es nicht. Ich kann kein Tuya Gerät hinzufügen.

Hat jemand von euch ein ähnliches Setup erfolgreich am Laufen und kann mir hier weiterhelfen?

Besten Dank!

#2

26.1, 26,4 Series / Re: OPNSense not able to re-cl...

Last post by Afif - Today at 04:14:25 PM

Are you using file system defaults (ZFS, compression)? The compression works very well on log files. (To check, "df -hT" and if ZFS, "zpool get feature@lz4_compress,feature@zstd_compress".)

I'm not using ZFS on this system. Here is the output from the command.

root@OPNsense:/home/afif # df -hT
Filesystem  Type      Size    Used  Avail Capacity  Mounted on
/dev/da0p2  ufs        29G    6.4G    20G    24%    /
devfs      devfs      1.0K      0B    1.0K    0%    /dev
/dev/da0p1  msdosfs    256M    1.3M    255M    0%    /boot/efi
root@OPNsense:/home/afif #

[TIP :]

#3

General Discussion / Re: How does OPNsense remember...

Last post by JasMan - Today at 03:38:47 PM

It's not a cookie, it's localStorage.

https://github.com/opnsense/core/blob/bb78d31407a4f36e585d8872ed15969e09832e2f/src/opnsense/www/js/opnsense_bootgrid.js#L633

Perfect! Thank's a lot!

I'm asking because my modified views get very often lost. I can't determine a pattern.

TIP :

Use a seperate Profile for your browser for all your OPNsense activities and perhaps also other Network/Server stuff that you need to do from time to time.

Mozilla based browsers use something like this :

Windows :
firefox.exe -P <YourProfielNameHere>
librefox.exe -P <YourProfielNameHere>
Linux/*BSD :
firefox -P <YourProfileNameHere>
librefox -P <YourProfileNameHere>

For the shortcut that starts the browser.

You can create the Profiles by starting the browser without the <YourProfileNameHere> part and after a few clicks you will have a new one by using the menu that appears :)

Nice idea.
If I'm not able to find the reason why the local storage gets lost, this will be my plan B :)

#4

26.1, 26,4 Series / Re: FreeBSD 15.1 available

Last post by sopex - Today at 03:31:59 PM

And on July 29th its coming to OPNsense. If all goes well :)

#5

26.1, 26,4 Series / FreeBSD 15.1 available

Last post by Karla - Today at 03:16:24 PM

Greetings!

Freebsd 15.1 is available: https://download.freebsd.org/releases/amd64/amd64/ISO-IMAGES/15.1/

#6

26.1, 26,4 Series / Re: OPNSense not able to re-cl...

Last post by pfry - Today at 02:31:40 PM

[...]Currently, its already 5.8GB used of disk space at the time I posted.

Are you using file system defaults (ZFS, compression)? The compression works very well on log files. (To check, "df -hT" and if ZFS, "zpool get feature@lz4_compress,feature@zstd_compress".)

#7

26.1, 26,4 Series / Re: Network connections are di...

Last post by franco - Today at 01:51:48 PM

Hi Markus,

Cedrik may be more helpful with interpreting the output, but I can confidently say that nothing was changed in the IPsec code.


Cheers,
Franco

#8

26.1, 26,4 Series / Network connections are displa...

Last post by Lochkartenknipser - Today at 01:18:16 PM

Hi,

After updating from 26.1.8 to 26.1.9, 5 Phase 2 connections are displayed for a single IPSec connection.

You cannot view this attachment.

Settings from Phase 2:

You cannot view this attachment.

The same applies to the SA database.
The SP database is normal, with one relationship for each source and destination.

In version 26.1.8, the relationships were unique and not listed multiple times.
Has something changed in version 26.1.9?

Markus

#9

26.1, 26,4 Series / Re: ASN in alias.

Last post by Nullman - Today at 11:55:47 AM

ASN and GeoIP refresh intervals are hardwired to 24 hours.


Cheers,
Franco

Perfect. Thank you Franco. And i also must add. Whoever created this ASN in alias capability is absolute legend.

#10

26.1, 26,4 Series / Re: ASN in alias.

Last post by franco - Today at 11:29:27 AM

ASN and GeoIP refresh intervals are hardwired to 24 hours.


Cheers,
Franco