Recent posts

#21

25.7, 25.10 Series / Re: GeoIP with ipinfo stopped ...

Last post by Netlearn - Today at 04:42:34 AM

In five different OPNsense, all of them on 25.7.9:

You cannot view this attachment.

You cannot view this attachment.

You cannot view this attachment.

You cannot view this attachment.

#22

Q-Feeds (Threat intelligence) / Re: Traffic from unassigned su...

Last post by Seimus - Today at 02:01:42 AM

Hi, thanks for the information. Does that mean that all TOR nodes (exists and relays) are on the list?

One those that are flagged for suspicious activity. This applies to any "IoC", that's why ppl often have VPNs blocked.

Regards,
S.

#23

Hardware and Performance / Re: Suggestion for Bufferbloat...

Last post by Seimus - Today at 01:55:02 AM

It should be set based on the Interface you apply the Shaping on (defined by the rule). Also for the standard MTU size ~1500B you can let Quantum on default. As the default covers the 1500B + 14B of the hardware header.

Very rarely there is a need to change the Quantum. Most use cases when Quantum is needed to be changed are sub 100Mbit speeds or when using Jumbo frames.

Regards,
S.

#24

General Discussion / No NUT UPS Status

Last post by kiekar - Today at 01:41:20 AM

Hello,

I'm trying to get NUT setup with no luck. My goal is to setup NUT as Master in OPNsense and have my Unraid Server setup in client mode. After entering the information in the Nut: configuration and rebooting I have nothing showing in the UPS status tab.

Configuration setup:

Enable Nut: selected
Service Mode: Standalone
Name: APC
Listen Address: 127.0.0.1

UPS Type:

USBHID-Driver which I selected

I ran a couple commands in the shell with outputs below.

nut-scanner -U
Scanning USB bus.
[nutdev-usb1]
        driver = "usbhid-ups"
        port = "auto"
        vendorid = "051D"
        productid = "0002"
        product = "Back-UPS XS 1300G FW:864.L8 .D USB FW:L8"
        serial = "************"
        vendor = "American Power Conversion"
        # bus = "000"
        # device = "002"
        # busport = "004"

upsdrvctl start

Network UPS Tools - UPS driver controller 2.8.2
Network UPS Tools - apcupsd network client UPS driver 0.72 (2.8.2)
Error: UPS [APC] is for driver usbhid-ups, but I'm apcupsd-ups!

upsnotify: failed to notify about state 4: no notification tech defined, will not spam more about it
Driver failed to start (exit status=1).

It may look like i have an issue with the driver but I'm not certain. I did have apcupsd plugin installed but it has been removed.

How can I get working. Your help would be much appreciated.

Thanks

#25

General Discussion / Re: UPNP Broken

Last post by lmnsour - Today at 01:39:50 AM

Will do, thanks!

#26

Q-Feeds (Threat intelligence) / Re: Traffic from unassigned su...

Last post by Q-Feeds - Today at 12:38:48 AM

No not all in particular.

#27

25.7, 25.10 Series / Re: os-OPNWAF / Exchange 2019 ...

Last post by humnab - Today at 12:30:11 AM

Hello,

sure, I did it as described in https://docs.opnsense.org/vendor/deciso/opnwaf.html#exchange-server
I set up the mail and the autodiscover virtual server as described and I also played with the authentication settings in the exchange virtual directories, no change. The same exchnage server works with the Caddy Plugin and the Sophos UTM WAF, any ideas?

#28

General Discussion / Re: Micron exits consumer mark...

Last post by OPNenthu - December 05, 2025, 10:56:04 PM

Say it louder, please.  Some CEOs are acting deaf.

#29

Hardware and Performance / Re: Suggestion for Bufferbloat...

Last post by Kets_One - December 05, 2025, 10:34:31 PM

What ive always wondered is what MTU to set the Quantum to, since i have three different interfaces which have different MTU settings:
Physical WAN: 1512
VLAN WAN: 1508
PPPOE WAN: 1500

Documentation doesnt appear to show this case.

#30

General Discussion / Re: TUI for viewing and analys...

Last post by allddd - December 05, 2025, 10:24:05 PM

And the filter expression can be modified.

I finally replaced my input field implementation with the one provided by the TUI library I use, it now supports all standard key bindings. Tbh, I should've done that from the beginning...

The filtering is remarkable fast.

Should be even faster now with v0.4.0. I've optimized both the filter and streamer code and removed some redundant stuff left over from when I first started writing this.

The filter file from yesterday has around 102'000 entries.

Shouldn't be an issue. I'm mainly testing on a few busy OPNsense instances I run, where even on quiet days, the filter log has a few million entries.

It takes around 7 seconds to start up with the filter file and filtering for 'ip 4' which results in 87'000 items is instant, execellent.

Edit: it takes around 7 seconds if started from the VM console. Running it from a SSH session, it only takes about 1.5 to 3 seconds to start.

Yeah it's not bad, but I'm still trying to figure out how to make it better. Right now, the loading screen remains visible until the file is indexed because some functions (e.g. filtering) don't work without the index.

One way to improve it could be to skip the loading screen and go straight to the TUI, with indexing happening in the background. The advantage of this would be that the TUI opens instantly, and while some features might not be available right away, most users probably wouldn't even notice this since indexing is quick.

Another option, at least in theory, would be to skip building the index altogether and just process everything on the fly. We could cache the lines we've already interacted with to avoid doing the same thing over and over again. However, I'm not sure how well this would perform on low spec devices.