Recent posts

#1

26.7 Series / Re: Upgrade Candidate Discrepa...

Last post by pholt - Today at 04:45:31 PM

I ran this command from the shell:

opnsense-update -fp

That seemed to clear everything up. Both machines are current and now show zero candidates.

#2

26.7 Series / Upgrade Candidate Discrepancy

Last post by pholt - Today at 04:12:24 PM

On my network I have a live OPNsense machine and an identically configured backup. This is not HA. It's just a backup machine dangling on the network by its WAN port so I can keep it updated and swap it in if the main router fails. It doesn't route anything because the LAN port isn't connected. The setup has been fine for ages.

I noticed recently when I check for updates, the output doesn't look right. I have not changed anything in either configuration for a long time. I just apply updates as they become available. Does anyone have any theories?

MAIN MACHINE

***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 26.7.4_1 (amd64) at Fri Sep 25 09:59:47 EDT 2026
Fetching changelog information, please wait... done
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 931 packages processed.
All repositories are up to date.
Checking for upgrades (1 candidates): . done
Processing candidates (1 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***

BACKUP MACHINE
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 26.7.4_1 (amd64) at Fri Sep 25 10:00:22 EDT 2026
Fetching changelog information, please wait... done
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 931 packages processed.
All repositories are up to date.
Checking for upgrades (86 candidates): .......... done
Processing candidates (86 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***

#3

26.7 Series / Re: Action - Pass, Block, Reje...

Last post by Monviech (Cedrik) - Today at 02:10:07 PM

No, the documentation is too new. It doesnt exist yet. But we fix that soon. So long you can look at the direct branch here:

https://github.com/opnsense/docs/blob/master/source/manual/how-tos/wireguard-client.rst

#4

26.7 Series / Re: Action - Pass, Block, Reje...

Last post by Wrigleys - Today at 02:06:51 PM

Hi devl_ish

I assume you can use "pass" instead of "match" like documented under Rule normalization:

Select the Match action to apply normalization without deciding whether traffic is passed or blocked. A Pass rule can apply the same options while also allowing traffic. Match rules follow the normal firewall rule ordering; they are usually not quick so evaluation can continue after their options have been applied.

Stay safe,
Wrigleys

#5

26.7 Series / Re: Action - Pass, Block, Reje...

Last post by devl_ish - Today at 01:02:59 PM

Thanks, are you able to provide a lead (few sentences) on how to accomplish it in the interim, while formal docs are being updated?

#6

26.7 Series / Re: Action - Pass, Block, Reje...

Last post by franco - Today at 12:59:02 PM

The documentation was updated too early on that subject, maybe we should revert it for now.  Sorry about that.


Cheers,
Franco

#7

26.7 Series / Action - Pass, Block, Reject -...

Last post by devl_ish - Today at 12:53:06 PM

Hi all - I'm following https://docs.opnsense.org/manual/how-tos/wireguard-s2s.html and stuck on Step 4b.

This calls for a Match rule for fragmentation prevention, but under the [Action] dropdown I only have the usual Pass, Block and Reject, even when showing advanced options. I've probably overlooked something stupid, what would hide the "Match" option?

Have just done an upgrade chain from 25.7 all the way to most current as of today, 26.7.4_1.

#8

26.7 Series / Re: os-upnp plugin not working...

Last post by AlpAne - Today at 12:07:07 PM

Have anyone actually verified that this solution works for multiple PC/Xbox clients connecting through UPnP at the same time.

I have followed the steps described in this thread to get Xbox to show Open NAT and one PC running Call of Duty BO7/Warzone to show sometimes Moderate NAT and sometimes Open NAT but when second PC tries to connect it gets network error in Call of Duty, as soon as the first PC closes Call of Duty the second PC can connect.

#9

Development and Code Review / S3 backup plugin

Last post by Greelan - Today at 11:48:07 AM

I've created a plugin that adds S3-compatible object storage (AWS S3, Backblaze B2, Cloudflare R2, Wasabi, MinIO and others) as a backup destination option to System > Configuration > Backups.

See my website.

#10

Development and Code Review / Re: Notify plugin: send push n...

Last post by striker_PT - Today at 09:15:00 AM

I was waiting for something like this :) Gonna test it asap. Thanks