"Recent posts
#1
General Discussion / Re: Block Local Network Connec...
Last post by connervt - Today at 02:17:39 AMQuote from: pfry on September 07, 2026, 04:02:32 PMQuote from: connervt on September 07, 2026, 02:26:05 PM[...]Instead, I have an AppleTV4K and a Chromecast
[...]
I have zero trust in any of the smart TV's native operating systems nor the apps that run on them.
Heh. The lesser of two evils? (I imagine your practical choices are limited; I don't pay attention to that class of devices.)
Instead of "Lesser of two evils" I think of it more as a decision made after performing a risk assessment.
Apple has shown to have set a higher bar for security, and Chromecast devices are basically dumb where the casting device is likely a bigger risk.
WebOS used by LG (and who knows what by budget TV brands) are certainly more suspect, and the preloaded apps that come on your smart TV are a revenue source for the TV makers, not unlike the bloat of software that came on your Packard Bell PC bought in the 1990's.
#2
26.7 Series / Re: Unbound Not Actually Block...
Last post by ticker - Today at 02:16:02 AMQuote from: DEC740airp414user on September 11, 2026, 10:39:35 PMReporting - unbound dns. Is that giving you stats of anything being blocked?No, it remains at 0.
I even tried resetting the stats in there.
It shows domains are resolving. But 0 is blocked.
In the Reporting > Unbound page, I actually also tried clicking the GUI button for a domain that's allowed, to blocklist it.
The button DOES change the little block button-from "block" to "allow", however it does not add to the "Blocked" counter, nor does it show blocked in the list, nor in details.. and I can still resolve it from my machine. All even after restarting the Unbound service.
#3
General Discussion / Re: Allow Public Internet IPv4...
Last post by wiring8228 - Today at 12:33:34 AMHey everyone!
First of all, thanks for the reply, @viragomann. I'll try to put your advice into practice as soon as I have some free time.
I'd like to clarify that my posts are not LLM-generated content. I wrote the text myself, though it took a little less effort as I'd already asked a similar question before. Writing such long texts is not really fun, especially since it takes a tremendous amount of effort 😐
In my first forum post, I added the following comment. I don't think an LLM would ask about more efficient formatting methods though 😆:
I adopted this writing style when I became active on the Ubuntu Community Hub, where a similar format was specified.
In my view, this style has the advantage of providing the full range of information right away, reducing the need for follow-up questions. In addition, this makes it easier for other people who might come across this post in the future to understand the circumstances under which this question arose.
Before posting texts like this, I consult LLMs, but at the time of writing, they were unable to provide a reliable answer. As I couldn't find any similar questions on the forum either, I decided to post this one. I prefer to exchange ideas with people rather than LLMs, which can only draw on existing knowledge and may generate corresponding hallucinations.
Greetings
A human living on planet Earth 🙃
First of all, thanks for the reply, @viragomann. I'll try to put your advice into practice as soon as I have some free time.
I'd like to clarify that my posts are not LLM-generated content. I wrote the text myself, though it took a little less effort as I'd already asked a similar question before. Writing such long texts is not really fun, especially since it takes a tremendous amount of effort 😐
In my first forum post, I added the following comment. I don't think an LLM would ask about more efficient formatting methods though 😆:
QuoteOff-topic: Manually converting this text, which was originally written in Markdown, was quite a hassle. Are there any better tools I could use for this?
I adopted this writing style when I became active on the Ubuntu Community Hub, where a similar format was specified.
In my view, this style has the advantage of providing the full range of information right away, reducing the need for follow-up questions. In addition, this makes it easier for other people who might come across this post in the future to understand the circumstances under which this question arose.
Before posting texts like this, I consult LLMs, but at the time of writing, they were unable to provide a reliable answer. As I couldn't find any similar questions on the forum either, I decided to post this one. I prefer to exchange ideas with people rather than LLMs, which can only draw on existing knowledge and may generate corresponding hallucinations.
Greetings
A human living on planet Earth 🙃
#4
Tutorials and FAQs / [How-To] DynDNS with IONOS and...
Last post by Lowrider614 - September 11, 2026, 11:05:58 PMTo update DynDNS upon IP change IONOS has an API that you can use for that. https://developer.hosting.ionos.de/docs/dns
When you run through their workflow you are prompted with an update URL like this. Calling this will update the A Record of the domains you provided during the beforementioned workflow.
To update the AAAA record (IPv6) as well, you need to add a parameter to this update URL.
add &ipv6=__MYIP__ to retreive a URL like this one.
Now set up OPNsense like stated below. One account for IPv4 and another one for IPv6 in the DynDNS plugin.
IONOS DynDNS IPv4 mit OPNsense (Native Backend)
config:
Service: Custom
Protocol: Custom GET
Check IP Method: freedns
Interface to monitor: WAN
Server URL:
IONOS DynDNS IPv6 mit OPNsense (Native Backend)
config:
Service: Custom
Protocol: Custom GET
Check IP Method: Interface [IPv6]
Interface to monitor: WAN
Server URL:
After years I finally found this solution thanks to Copilot and wanted to give a little bit of what I got from this forum already back to you.
When you run through their workflow you are prompted with an update URL like this. Calling this will update the A Record of the domains you provided during the beforementioned workflow.
Code Select
https://ipv4.api.hosting.ionos.com/dns/v1/dyndns?<TOKEN>To update the AAAA record (IPv6) as well, you need to add a parameter to this update URL.
add &ipv6=__MYIP__ to retreive a URL like this one.
Code Select
https://ipv4.api.hosting.ionos.com/dns/v1/dyndns?<TOKEN>&ipv6=__MYIP__Now set up OPNsense like stated below. One account for IPv4 and another one for IPv6 in the DynDNS plugin.
IONOS DynDNS IPv4 mit OPNsense (Native Backend)
config:
Service: Custom
Protocol: Custom GET
Check IP Method: freedns
Interface to monitor: WAN
Server URL:
Code Select
https://ipv4.api.hosting.ionos.com/dns/v1/dyndns?q=<TOKEN>IONOS DynDNS IPv6 mit OPNsense (Native Backend)
config:
Service: Custom
Protocol: Custom GET
Check IP Method: Interface [IPv6]
Interface to monitor: WAN
Server URL:
Code Select
https://ipv4.api.hosting.ionos.com/dns/v1/dyndns?q=<TOKEN>&ipv6=__MYIP__After years I finally found this solution thanks to Copilot and wanted to give a little bit of what I got from this forum already back to you.
#5
26.7 Series / Re: Unbound Not Actually Block...
Last post by DEC740airp414user - September 11, 2026, 10:39:35 PMReporting - unbound dns. Is that giving you stats of anything being blocked?
I recently turned off reporting but I always have data there
I recently turned off reporting but I always have data there
#6
German - Deutsch / Re: [Hardware] Temperaturen
Last post by viragomann - September 11, 2026, 09:15:48 PMQuote from: HBerger on September 11, 2026, 10:57:29 AMWieviel RAM hasst du da der opnsense gegeben ?2 GB.
Ich weiß, heute werden 4 empfohlen. Allerdings muss man überlegen, wofür. Und meine alte Kiste hat insgesamt nur 8. Mehr kann die CPU nicht.
Bei menem Eisatz ist meist noch knapp 1 GB frei. Und für den Notfall gibt rs noch Swap.
Quotehasst du die NICs reingereicht(PCI passThrough)Auch das kann die CPU nicht.
Also Linux Bridges und virtIO NICs. Funktioniert wunderbar. Auch mit PPPoE WAN.
QuoteIrgend welche Auswirkungen (Höhere Latenz z.b.)?Ich habe in diesem Fall nicht nachgemessen, aber erfahrungsgemäß ist die Auswirkung vernachlässigbar.
Meine CPU (Mobil-Harfware) ist aber ohnehin nicht auf Top-Lazenz ausgelegt.
QuoteVielleicht sollt ich auch mal versuchen, das ding zu virtualisierenDas war nicht als dringende Empfehlung gemeint. Es musste nur an diser Stelle erwähnt werden.
Ich habe OPNsense (zuvor pfSense) daheim virtualisiert, um Hardeare, Strom und Kabelsalat zu sparen.
Ich betreibe aber auch für meinen Arbeitgeber OPNsense virtualisiert, ebenfalls auf KVM. Hier, weil das gesamte Netzwerk in einer Cloud läuft. Kann von da her auch keine Probleme melden
Ob Linux das Power Management besser macht, kann ich nicht sagen. Meine Hardware daheim ist vom Konzept her ganz anders (Mobil). Deine ist Server-Hardware. Daher vielleicht nicht zu vergleichen. Aber Temperaturen über 60° beim Nichtstun scheinen mir in jedem Fall zu hoch, auch ohne Lüfter.
#7
Zenarmor (Sensei) / Re: Cancelling my subscription...
Last post by abenaou - September 11, 2026, 07:07:54 PMQuote from: Patrick M. Hausen on September 09, 2026, 08:42:04 AMOut of curiosity: can't you use an off device Elastic installation? E.g I run Elastic as an "app" on TrueNAS for my FreeBSD jail based Nextcloud to use.I did use an elasticsearch container running docker/portainer but I just feel it is an overkill for a home lab or even an SMB, sqlite being transactional nothing would stop mysql from replacing it and having far more benefits, as I said before I don't know if there are architectural limitations or roadblocks for the devs, but from my perspective I think it is far better to have a mysql/mariadb back end for performance and redundancy, homelabbers like me would choose mysql/mariadb for its "simplicity" and bigger players could use elasticsearch for their bigger databases.
I used to run a master/slave mariadb cluster years ago, and it was one of the ways to minimize the load on my production server, I can't see that happening with SQLite that lives in the same nvme as opnsense (I know I can always use a mount), or using elasticsearch for that purpose, it just gives me less possibilities overall.
#8
German - Deutsch / Re: KI oder AI
Last post by bamf - September 11, 2026, 06:20:11 PMBlocklist für was? Eingehenden Traffic? Ausgehenden Traffic? Was willst du erreichen?
#9
26.1, 26,4 Series / Re: samplicate pegging cpu
Last post by franco - September 11, 2026, 05:45:03 PMA stuck template perhaps, but clearing the settings would disable it in that case. There's no reason it wouldn't. The stack trace at hand is also unknown, which could confirm the issue or point elsewhere.
What's in /etc/rc.conf.d/netflow ? Removing the file would also cause it not to start although in practice the reboot rebuilds the file so whatever the config mandates is going to steer the YES/No decision.
Cheers,
Franco
What's in /etc/rc.conf.d/netflow ? Removing the file would also cause it not to start although in practice the reboot rebuilds the file so whatever the config mandates is going to steer the YES/No decision.
Cheers,
Franco
#10
Q-Feeds (Threat intelligence) / [Feature Request] DNSBL in Wil...
Last post by Wrigleys - September 11, 2026, 05:43:32 PMHi all
I would like to ask, if your malware_domain feed is planned to support other formats like Domain Wildcard (Asterisk)?
In OPNsense Unbound, this malware_domain feed isn't parsing in the wildcard format and therefore only exact matches will gets blocked.
Export from Log File:
Thanks for your awesome service.
Take care and all the best,
Wrigleys
I would like to ask, if your malware_domain feed is planned to support other formats like Domain Wildcard (Asterisk)?
In OPNsense Unbound, this malware_domain feed isn't parsing in the wildcard format and therefore only exact matches will gets blocked.
Export from Log File:
Code Select
blocklist: https://api.qfeeds.com/api?feed_type=malware_domains&api_token=xxxxxxx (block: 121164 wildcard: 0)Thanks for your awesome service.
Take care and all the best,
Wrigleys
