Recent posts

#21

General Discussion / Can not log in to nas on igc2

Last post by Brooksy - Today at 02:08:57 PM

Hello all

I'm new to opnsense so im still learning everything....

My question is how can i log in to my backup server from a different port in opnsense??

So my setup is a quad 2.5Gb nic

igc0 = wan
igc1 = lan 1
igc2 = lan 2
igc3 = lan 3

I have a unmanaged 2.5Gb switch from igc1 (Lan 1) to everything around the house... pc's, backup server, access points so therefore id like to use igc 2 and igc3 for more devises, now i have bridged igc1,igc2,igc3 how ever when i connect my pc to igc2 i can not log in to my backup sever thats on igc1 to switch using 10.0.0.209 address.

#22

German - Deutsch / Re: Eigener DNS bei einer IPv6...

Last post by Patrick M. Hausen - Today at 02:05:59 PM

Wenn deine Clients dual stack sind, können sie AdGuard über IPv4 nutzen. Sind sie IPv6 only, dann brauchen sie natürlich einen IPv6-DNS-Server.

#23

25.7, 25.10 Series / Re: Dnsmasq stops occasionaly

Last post by ligand - Today at 02:05:45 PM

this morning I found the pid changed... so I updated the monitor loop to pick up the new PID if it changes again...

sh -c 'while true; do ps -o pid,rss,command -p `cat /var/run/dnsmasq.pid`; date; sleep 3600; done' >> dns_mem_usage.out &

#24

German - Deutsch / Re: Eigener DNS bei einer IPv6...

Last post by n3 - Today at 01:55:13 PM

Hängt davon ab wie die IPv6 Adresse des Admin Netz Interfaces der Opnsense vergeben wurde... Manuell oder per Track Interface... eine feste IP kannst Du bei adguard aber nur über das darunter liegende System vergeben

Das ADMIN Netz hat nur IPv4. Sprich mein gesamtes Netzwerk ist eigentlich IPv4 via DHCP und die Clients aus dem LAN-Netz habe ich auf IPv6 umgestellt. Ich würde entsprechend dem AdGuard Server manuell eine IPv6 Adresse vergeben. Diese könnte ich dann im RA als DNS Server angeben und das ganze als "Assisted", richtig?

1. Nicht alle Geräte akzeptieren die Angabe des DNS-Servers per SLAAC, manche brauchen DHCPv6 dazu. Das ist der Grund, weshalb der RA-Mode "Assisted" existiert - dabei wird die IPv6 per SLAAC und nur der DNS-Server per DHCPv6 übergeben.

Danke für den Hinweis. Was spricht gegen dieses Vorgehen?

2. Eigentlich braucht es bei Dual-Stack den IPv6-DNS-Server nicht - es ist sogar eher schädlich, denn jeder DNS-Server kann auch IPv6 auflösen (also reicht der IPv4-Server) und welcher priorisiert wird, falls beide angegeben wurden, ist nicht definiert.

Ergo: In meinem Guide empfehle ich deshalb, gar keinen DNS-Server per IPv6 zu verteilen, also RA-Mode "Unmanaged" (oder wie auch immer das beim verwendeten RA-Daemon heißt) siehe: https://forum.opnsense.org/index.php?topic=45822.0, Note 6.

Gilt das auch für AdGuard? Ich möchte das meine Clients alle über AdGuard laufen und aktuell verteile ich keinen DNS-Server über IPv6 und daher greift mein AdGuard nicht.

#25

General Discussion / Re: Any plans for business-lit...

Last post by Monviech (Cedrik) - Today at 01:14:46 PM

If you search the forum there have been other discussions in the past but as it looks like there won't likely be a license type between the business and community release.

#26

General Discussion / Re: Any plans for business-lit...

Last post by fabianodelg - Today at 12:48:02 PM

+1. I would love a 'Home' or 'Home pro' license to be on a more stable branch but the current price is off the scale for homelab use. I wonder if this will be considered from Deciso, at some point.

#27

Development and Code Review / Re: Where to PR a small NVMe t...

Last post by Patrick M. Hausen - Today at 11:15:00 AM

Open an issue at bugs.freebsd.org.

#28

German - Deutsch / Re: LDAP gegen eDir

Last post by Patrick M. Hausen - Today at 11:14:12 AM

Dann setz doch Authentication containers auf die Base DN und filter nur mit dem Extended query nach der Gruppe.

#29

25.7, 25.10 Series / New OPNSense setup suffering f...

Last post by ck555 - Today at 10:08:19 AM

Hi all,

Sorry for the long email. Just hoping to give more details to assist with the troubleshooting.

I just build a new VM (VMware) running OPNsense as a new L3 firewall/router which internally works great connecting to all my VLANs (for the moment it is the gateway for all vLANs until I create a transit vLAN on the switch). I am pretty new to OPNSense so not sure if there is something I can check.

As part of my troubleshooting I changed the NIC driver and also rebuild OPNSense not enabling anything i.e. Zenarmor or any services to see if that was interfering. None seem to cause the issue. I even disabled the Wireguard firewall also but that didn't help.

The only issue I have is I am having WAN connection issues. It seems to be fine for around a day once it is rebooted but then starts to lose connectivity. Seems to stem from the DHCP request (my ISP in Australia renews every 30 minutes with a static IP).

I previously used Untangle (linux based) which didn't have any issues but seems to be an issue with possibly BSD since this also seems to happen with PFSense which I tried as part of my troubleshooting.

Topology is the following

LAN -> WAN connected directly to the ISP NTD device gets a public IP address via DHCP. DHCP IPv4 seems to lose connectivity but IPv6 doesn't according to the Gateway monitor which monitors google (8.8.8.8)

Looking at the log file under general.

-----------------
2026-01-11T19:41:13Errordhclientsend_packet: Host is down
2026-01-11T19:39:51Noticedhcp6cdhcp6c_script: RENEW on vmx1 executing
2026-01-11T19:39:51Noticedhcp6cdhcp6c_script: RENEW on vmx1 executing
2026-01-11T19:38:53Errordhclientsend_packet: Host is down
2026-01-11T19:37:45Errordhclientsend_packet: Host is down
2026-01-11T19:37:22Errordhclientsend_packet: Host is down
2026-01-11T19:22:22Noticedhclientdhclient-script: Creating resolv.conf
2026-01-11T19:22:22Noticedhclientdhclient-script: New Hostname (vmx1): hostname
2026-01-11T19:22:22Noticedhclientdhclient-script: Reason RENEW on vmx1 executing
2026-01-11T19:09:51Noticedhcp6cdhcp6c_script: RENEW on vmx1 executing
2026-01-11T19:09:51Noticedhcp6cdhcp6c_script: RENEW on vmx1 executing
2026-01-11T19:07:22Noticedhclientdhclient-script: Creating resolv.conf
2026-01-11T19:07:22Noticedhclientdhclient-script: New Hostname (vmx1): hostname
2026-01-11T19:07:22Noticedhclientdhclient-script: Reason RENEW on vmx1 executing
2026-01-11T18:52:22Noticedhclientdhclient-script: Creating resolv.conf
2026-01-11T18:52:22Noticedhclientdhclient-script: New Hostname (vmx1): hostname
2026-01-11T18:52:22Noticedhclientdhclient-script: Reason RENEW on vmx1 executing
2026-01-11T18:39:51Noticedhcp6cdhcp6c_script: RENEW on vmx1 executing
2026-01-11T18:39:51Noticedhcp6cdhcp6c_script: RENEW on vmx1 executing
2026-01-11T18:37:22Noticedhclientdhclient-script: Creating resolv.conf
2026-01-11T18:37:22Noticedhclientdhclient-script: New Hostname (vmx1): hostname
2026-01-11T18:37:22Noticedhclientdhclient-script: Reason RENEW on vmx1 executing
2026-01-11T18:22:22Noticedhclientdhclient-script: Creating resolv.conf
2026-01-11T18:22:22Noticedhclientdhclient-script: New Hostname (vmx1): hostname
2026-01-11T18:22:22Noticedhclientdhclient-script: Reason RENEW on vmx1 executing
2026-01-11T18:18:17Errordhclientsend_packet: Host is down
2026-01-11T18:15:06Errordhclientsend_packet: Host is down
2026-01-11T18:13:42Errordhclientsend_packet: Host is down
2026-01-11T18:11:19Errordhclientsend_packet: Host is down
2026-01-11T18:10:17Errordhclientsend_packet: Host is down
2026-01-11T18:09:51Noticedhcp6cdhcp6c_script: RENEW on vmx1 executing
------------------

Thanks in advance.

#30

Hardware and Performance / Re: Internet speeds reduced se...

Last post by meyergru - Today at 09:30:42 AM

Did you try RSS?