Recent posts

#1
26.1, 26,4 Series / Re: OPNsense 26.1.7-amd64 - Gu...
Last post by frade - Today at 01:21:15 PM
Thank you for your responses.


Version 26.1.7_2 is now available with the problem resolved.

system: fix missing base64_decode() in JsonField which prevented user settings from saving


Have a good week at work :)
#2
German - Deutsch / Re: Öffentlicher IPv6-Suffix ä...
Last post by mooh - Today at 01:05:28 PM
Ich bin mir nicht ganz sicher warum auf dem WAN Interface überhaupt eine GUA auftaucht. In der Konfiguration steht doch "nur Präfix anfordern".

Wenn sich die IPv6 ändert, brechen dann auch Verbindungen ab?
#3
Quote from: Seimus on Today at 11:00:59 AMI have from Qotom the Q11032H6, which is a N355 system, bough it during black Friday for a very good price.
https://www.qotom.com/products/show/Mini-PC-Q10900H6-S13-Series

Thats exactly the device i was talking about. They had issues where port numbers have been mixed up and they provided updated front panels with correct numbers. See attached.

#4
Login to your OPNsense via SSH.
Invoke "top".
Type 'o' followed by 'res' and ENTER.
Power on the device.
Check which process is using that memory.
#5
Quote from: Patrick M. Hausen on May 03, 2026, 10:57:30 PM0 to 450 is a significant increase but 450 is "nothing". Why would you worry about 450 sessions? Thousands of them is what I would consider normal even in a home network with one or two dozens of devices.

I was just following the suggestion from a post above.  to try to find why memory doubles in usage after a device turns on

I've had this same TV and DEC 740 router for months now.   the memory change didn't happen it seems until 26.4 I am guessing.  I am open to more suggestions on why this is happening.
#6
General Discussion / Re: Pls Help: I can access web...
Last post by glau - Today at 11:19:54 AM
Hello
thanks for your support. I am now in my job place, I can post the picture this evening.
Yes I saved and restarted the router as precaution before writing this post. The pictures have been taken after several restarts. I made several attemts to login with https and http, getting always the same behaviour as described below.
Basically what happens is that:
1) if I use https://router_ip then I get a message from the browser that the connection is not safe and, if I force to go on, I get in the address bar of the browser an https red with the "deleted" sign and then in the address bar appears http://router_ip with the router login page
2) if I type http://router_ip, I get the router login page
Thanks.
Regards,
GL
#7
Announcements / Re: OPNsense 26.1.7 released
Last post by franco - Today at 11:12:07 AM
A hotfix release was issued as 26.1.7_2:

o system: fix missing base64_decode() in JsonField which prevented user settings from saving
#8
Hardware and Performance / Re: Marvell/Aquantia AQ1 & AQ2...
Last post by Seimus - Today at 11:00:59 AM
Indeed there are nice options for Intel + AQ combinations.

I have from Qotom the Q11032H6, which is a N355 system, bough it during black Friday for a very good price.
https://www.qotom.com/products/show/Mini-PC-Q10900H6-S13-Series

This was originally bought to test the AQ Driver functionality on OPNsense, as I started to see my own need for 10G Networking. I didnt wanted to buy systems with very old Intel NICs. The driver itself was already existing and kinda working on OBSD but not on FBSD, yet missing a lot of features. As the luck strucked @albb0920 had the same NICs and needed the Drivers for FBSD. Which basically triggered the effort to port/finish the drivers for FBSD.

Regards,
S.
#9
26.1, 26,4 Series / Re: NetBird Interface breaks b...
Last post by franco - Today at 10:55:14 AM
I agree. I'll try to extract this from the original commit stream and directly commit it with the original authorship.

One of the many reasons why small PRs make more sense.


Cheers,
Franco
#10
26.1, 26,4 Series / Re: Business Edition pf CVE-20...
Last post by franco - Today at 10:52:08 AM
Thanks, I hope you had a nice one too.

> so as example on 25.10 , we can on the cli /shell opnsense-patch , as example the sctp cve ?

No, opnsense-patch can do core, plugins, update and installer hotfixing since these use scripting languages.

Ports and src need to be rebuilt, which takes a long time on top of managing historic branches, which is one of the reasons we're not attempting that.

In the average case you can get away with running a newer kernel from e.g. the 26.4 series in 25.10, but we tend not to recommend it for the off-chance that something is wrong since we don't have that in our test rotation. It's even possible to use community kernels in business versions as long as you make sure you're not loading a kernel that has less security issues patches than the business one.


Cheers,
Franco