Recent posts

#1

26.7 Series / Re: Uograde t 26.7 hangs after...

Last post by untel - Today at 08:46:47 PM

Thanks for the quick reply, it did the trick.

Code Select Expand

Versions
OPNsense 26.7-amd64
FreeBSD 15.1-RELEASE-p1
OpenSSL 3.5.7
Will have a look at the boot loader, but chances are that I will wait for 26.7.1

Best regards and thank you very much.

#2

26.7 Series / Re: [Solved by reboot] 26.7 Up...

Last post by Sport - Today at 08:32:36 PM

Looks good, but missing the packages:

# opnsense-update -upr 26.7 -a FreeBSD:15:amd64/26.7
(reboot)


Cheers,
Franco

Glad I found this post, as I was having the exact same issue following an upgrade attempt that hung, the above command was successful at finishing the upgrade to 26.7 and a clean health check following.

#3

26.7 Series / Re: Uograde t 26.7 hangs after...

Last post by Patrick M. Hausen - Today at 08:16:40 PM

- Remove the os-cpu-microcode-amd plugin.
- Perform the OPNsense upgrade.

Then either:

- Wait for 26.7.1 before reinstalling os-cpu-microcode-amd.
- Follow the steps I outlined here: https://forum.opnsense.org/index.php?topic=52441.0
- Upgrade your FreeBSD boot loader after upgrading to OPNsense 26.7.

HTH,
Patrick

#4

26.7 Series / Re: 26.7 upgrade failure - ope...

Last post by franco - Today at 08:06:25 PM

Looks like a partial upgrade with base/kernel on 26.7 and packages still at 26.1.

Since FreeBSD renamed repositories they will pop up until the 26.7 core is installed.


Cheers,
Franco

#5

Tutorials and FAQs / Re: [HOWTO]: Mullvad Selective...

Last post by DROOG - Today at 08:05:44 PM

Im not sure where else to post this but

Hey all does anyknow know of a guide that demonstrates how to have a wireguard road wiarrior (external -> home) route out over a von providers network via wiregaurd?

I have various vlans route over mullvad  vpn provider successfully with selective routing as instructed above. I also have a seperate wiregaurd instance that connects my devices back to my home. The problem is traffic is exposed to to my isp but i want it to route out through my mullvad vpn instance. Help or guide requested.

If I understand you correctly. You want to connect to home-wireguard-instance over WAN and then go out by the mullvad tunnel.
Should be enough to include the home-wireguard-interface in your selective route firewall rule. Then add the IPs of home-instance-peers to the selective route alias.

Awesome guide and thank you so much. This guide helped with my Mullvad set up and all is functioning well. I am also trying to set up a home-wireguard instance over WAN and then go out by the Mullvad tunnel but have not had any luck connecting. Not sure what exactly I am missing and I'm sure it is something simple. Any guidance would be greatly appreciated. Thank you!

#6

26.7 Series / [Solved] Upgrade to 26.7 hangs...

Last post by untel - Today at 07:58:49 PM

Hello,

The host is a PCengin APU (the one with the 2 SFP).

I have tried both from GUI and CLI, the upgrade to 26.7 hangs forever after first reboot.

Code Select Expand

The process will require 56 MiB more space.
[  1/297] Reinstalling cpu-microcode-rc-1.0_2...
[  1/297] Extracting cpu-microcode-rc-1.0_2: .... done
[  2/297] Reinstalling cpu-microcode-amd-20251202...
[  2/297] Extracting cpu-microcode-amd-20251202: .......... done
[  3/297] Reinstalling icu-76.1,1...
[  3/297] Extracting icu-76.1,1: .......... done
[  4/297] Reinstalling indexinfo-0.3.1_1...
[  4/297] Extracting indexinfo-0.3.1_1: .... done
[  5/297] Reinstalling gmp-6.3.0...
[  5/297] Extracting gmp-6.3.0: .......... done
[  6/297] Reinstalling libpfctl-0.17...
[  6/297] Extracting libpfctl-0.17: ...... done
[  7/297] Reinstalling libunistring-1.4.2...
[  7/297] Extracting libunistring-1.4.2: .......... done
[  8/297] Reinstalling os-sftp-backup-1.1_2...
[  8/297] Extracting os-sftp-backup-1.1_2: .... done
Reloading plugin configuration
Flushing all caches...done.
Configuring system logging...done.
[  9/297] Reinstalling pciids-20260624...
[  9/297] Extracting pciids-20260624: ..... done
[ 10/297] Reinstalling libpci-3.15.0...
[ 10/297] Extracting libpci-3.15.0: .......... done
[ 11/297] Reinstalling x86info-1.31.s03_1...
[ 11/297] Extracting x86info-1.31.s03_1: ....... done
[ 12/297] Reinstalling os-cpu-microcode-amd-1.1...
[ 12/297] Extracting os-cpu-microcode-amd-1.1: .. done
Reloading firmware configuration
failed waiting for configd (doesn't seem to be running)
failed waiting for configd (doesn't seem to be running)
failed waiting for configd (doesn't seem to be running)
failed waiting for configd (doesn't seem to be running)
After waiting a bit I have both interrupted the upgrade [CTR-C]
and simply powered off.

The system is now displaying :

Versions
OPNsense 26.1.11_10-amd64
FreeBSD 15.1-RELEASE-p1
OpenSSL 3.0.21

It look like it is running correctly but half upgraded.


From there the repo problem is fixed with pkg bootsrap -f
But if I rerun the opgrade it fails at the same package.

Best regards

#7

Zenarmor (Sensei) / OPNsense 26.7 Kernel Panic wit...

Last post by OPNDeciso - Today at 07:38:32 PM

Has anyone seen similar crashes on OPNsense 26.7, particularly when protecting a WireGuard interface with Zenarmor?

Dell OptiPlex 3010
Intel 82575EB NICs (igb)

OPNsense 26.7
FreeBSD 15.1
Zenarmor Engine 2.6.2
Suricata installed

Zenarmor configuration
Routed Mode (L3)
Emulated Netmap Driver
Protected interfaces: igb0 (LAN) and wg1 (WireGuard)

Panic consistently references:
generic_mbuf_dtor()
Fatal trap 12: page fault while in kernel mode

Prior to the panic I see:
generic_mbuf_dtor Error: no netmap adapter on device
generic_netmap_unregister Emulated adapter for igb0 deactivated
generic_netmap_dtor Emulated netmap adapter for igb0 destroyed

For additional testing I'll remove wg1 from Zenarmor protection.

#8

General Discussion / Re: Planning to migrate to the...

Last post by meyergru - Today at 07:11:48 PM

Yes, it is a strange thing that opening CSV files without the specific CSV dialogue in Excel shows each row as being one text column only. To fix this, you need to import the file properly. In the English version of Excel, use the following menu path: Data > From Text/CSV (located in the Get & Transform Data group)

#9

General Discussion / Re: Planning to migrate to the...

Last post by Bob.Dig - Today at 06:37:14 PM

So you never worked with a csv-file... Open it in Excel, LibreOffice or something similar. It is separated by ;. 

#10

26.7 Series / Re: [Solved] Attempt to Upgrad...

Last post by Patrick M. Hausen - Today at 06:30:03 PM

Yes, because there is a bug in the FreeBSD boot loader that might make the system hang with early loading of the ucode updates, regardless if the updates are ever successfully applied to the CPU ;-)