Recent posts

Pages1 2 3 ... 10
#1
Virtual private networks / Re: WireGuard help to access I...
Last post by danman - Today at 01:12:25 PM
Ok AdGuardHome is solved as well so far. It might needs to be changed again once VLANs are created etc. but the solution here was to change the config file of AdGuardHome

Code Select
/usr/local/AdGuardHome/AdGuardHome.yaml
Code Select
dns:
  bind_hosts:
    - 192.168.101.1
I had before every interface 0.0.0.0.
#2
General Discussion / Re: Planning to migrate to the...
Last post by hushcoden - Today at 11:40:18 AM
Decided today to migrate the rules, but if I click on Rules [new] that's already populated with floating rules and interface rules: does it mean OPNsense migrated the rules already?

I also noticed that a bunch of legacy rules were disabled and those were not migrated, but not a big deal.

So, can I simply now remove the legacy rules?

Tia.
#3
Zenarmor (Sensei) / Re: Important Announcement for...
Last post by Taunt9930 - Today at 11:30:28 AM
Quote from: Lukas L. on July 24, 2026, 06:09:33 PMThere seems to be some cloudflare wrong-doings. Either i'm told I've been limited or
Code Select
Error 1000 Ray ID: a20430019928d268 • 2026-07-24 16:09:08 UTC
DNS points to prohibited IP
Code Select
Error 1015 Ray ID: a204460fdb0cd268 • 2026-07-24 16:24:11 UTC
You are being rate limited

Yes, there was an issue yesterday that was quickly resolved after I submitted a ticket. All OK now for the Cloudflare issue.
#4
26.7 Series / Upgrade 26.7.1 to 26.7.1_1 Al...
Last post by trdeal - Today at 11:29:29 AM
After upgrading to 26.7.1 none of the Aliases defined are working correctly in the Firewall rules eg

Internal_DNS_servers alias defined with multiple IPv4 and IPv6 addresses

Rule allows Internal_DNS_servers to make any DNS connection UDP/TCP

Later I have another rule which blocks non DNS servers from making external DNS queries

Rule blocks !Internal_DNS_servers to make any DNS connection UDP/TCP

My internal DNS servers are being blocked on the second rule

Tried upgrading to 26.7.1_1 no change in operation
#5
26.7 Series / Re: Upgrade 26.1 -> 26.7 faile...
Last post by carepack - Today at 11:03:02 AM
Same problem also with uninstalled intel cpu microcode plugin. treid multiple times. also treid to uninstall the realteck vendor driver but fails still. any ideas? Reinstall 26.7 and import config I want to avoid.

Thx for further hints.

I observed the upgrade via console. base package got installed and then reboot. dcuring the package download and install it stops with the same message: ailed waiting for configd (doesn't seem to be running)

wqith ctrl-c the upgrade moves on but end in an unconsistent state. most of the time it stops at the vendor realtag package. but if I uninstall it I casn't donwload anymore. Durin another try the packagese where it stops was php 8.X

Thanks to snapshots it was easy to went back on functional state.
#6
Virtual private networks / Re: WireGuard help to access I...
Last post by danman - Today at 11:00:20 AM
Ok internet works ... kind of.

If you are looking for the same issue, here is just the set up if you use straight unbound:

Code Select
Firewall -> Rules -> Add

 Description = WireGuard internet access
 Interface = HomeWireGuard
 Action = Pass
 Direction = Both
 Version = IPv4
 Protocol = Any
 Source = Single host or Network (10.10.10.0/24)
 Source Port = Any
 Destination = Any
 Destination Port = Any


I'm using AdGuardHome on OPNsense.

Code Select
AdGuardHome (port 53) -> Upstream DNS servers 192.168.101.1:5353 (Unbound Port changed to 5353)
I have the following issue that for some reason when AdGuard is involved that my VPN clients request and the following reply includes also the wireguard interface IP. As seen in the following through Unbound everything works fine.

Unbound only:
Code Select
16:32:01.282074 IP 10.10.10.2.59972 > 192.168.101.1.53: 50781+ [1au] A? google.com. (51)
16:32:01.282137 IP 192.168.101.1.53 > 10.10.10.2.59972: 50781 1/0/1 A 142.250.195.110 (55)
with adguardhome:
Code Select
16:33:36.498148 IP 10.10.10.2.41034 > 192.168.101.1.53: 58975+ [1au] A? google.com. (51)
16:33:37.045166 IP 10.10.10.1.53 > 10.10.10.2.41034: 58975 1/0/1 A 142.250.195.110 (55)

Why is it not passing it directly as well (192.168.101.1.53 > 10.10.10.2).
#7
26.1, 26,4 Series / Re: Cosmetic issue with Tailsc...
Last post by dseven - Today at 10:45:52 AM
JFYI, https://forum.opnsense.org/index.php?board=52.0 would be the place for 26.7 issues...
#8
26.7 Series / Re: No link with Intel E810 on...
Last post by bugacha - Today at 10:06:38 AM
I filed bug with FreeBSD 15.3

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296989

It will take a while until this is fixed tho

#9
26.1, 26,4 Series / Re: With IPv6, how to get both...
Last post by dseven - Today at 10:05:28 AM
(again) ULA + NPTv6 seems like the obvious solution if you want to use ULAs internally with a dynamic GUA prefix for internet access. Have you even considered it? Hacks are likely to come back and bite you later...
#10
26.1, 26,4 Series / Re: Cosmetic issue with Tailsc...
Last post by Nullman - Today at 09:01:12 AM
A screenshot would be nice.
Pages1 2 3 ... 10