"Recent posts
#31
Development and Code Review / Re: netflector available as pl...
Last post by vicking - November 12, 2026, 11:08:04 AMQuote from: UnicronHD on November 12, 2026, 09:42:57 AMQuote from: vicking on November 12, 2026, 09:19:08 AMOké, I replaced both the packages for netflector and everything is still working fine!
One thing I am not sure about is if I need the bidirectional flag for my situation
You almost never need it. If you have client devices (phone, laptop, etc.) in one VLAN and your target devices (TV, Chromecast, etc.) in another VLAN - you do not need it. You make source_if the VLAN with clients and target_if the VLAN with targets.
You will need bidirectional if you have TVs in both VLANs AND you have phones in both VLANs.
Thanks! Thats indeed what I thought!
What about the firewall config for DIAL? :)
#32
26.7, 26.10 Series / Double NTP problems?
Last post by Timeraider - November 12, 2026, 10:52:43 AMWhen I restart my opnsense or internet goes down on an interface for a short period, network time starts up a second time..
This causes constant conflict between the 2 processes.
bind(23) AF_INET INTERFACEIP:123 flags 0x19 failed: Address already in use
And when I then check CLI, I can see:
39161 1 Wed Nov 11 17:33:14 2026 /usr/local/sbin/ntpd -g -c /var/etc/ntpd.co nf
85635 1 Wed Nov 11 17:33:24 2026 /usr/local/sbin/ntpd -g -c /var/etc/ntpd.co nf
So it is started twice.
AI basically says:
At boot and on a WAN/IPv6 change, the boot sequence and rc.newwanip(v6) run the ntpd restart at nearly the same time.
Both kill whatever ntpd exists, then both start a new one. You end up with two.
Its btw an recurring issue, even if I kill one of the processes it will eventually spawn a new one.
This causes constant conflict between the 2 processes.
bind(23) AF_INET INTERFACEIP:123 flags 0x19 failed: Address already in use
And when I then check CLI, I can see:
39161 1 Wed Nov 11 17:33:14 2026 /usr/local/sbin/ntpd -g -c /var/etc/ntpd.co nf
85635 1 Wed Nov 11 17:33:24 2026 /usr/local/sbin/ntpd -g -c /var/etc/ntpd.co nf
So it is started twice.
AI basically says:
At boot and on a WAN/IPv6 change, the boot sequence and rc.newwanip(v6) run the ntpd restart at nearly the same time.
Both kill whatever ntpd exists, then both start a new one. You end up with two.
Its btw an recurring issue, even if I kill one of the processes it will eventually spawn a new one.
#33
General Discussion / Re: Has anyone heard of / trie...
Last post by julian_bldt - November 12, 2026, 10:36:54 AMHi, and thanks to dev for mentioning it. I'm the maintainer of OPNexus, so take this with the usual grain of salt.
Both concerns are fair. It's a one-person project and it's young, I won't argue with that. What I can say is that it only talks to the firewalls through the regular OPNsense API, so if I disappear tomorrow your firewalls keep running exactly as they are. The config lives on the firewalls, not in OPNexus.
The source is public, so checking whether it's malicious is easy and I'd encourage that. It's not meant to face the internet, it comes with HTTPS and 2FA, and the images are signed. Trying it on a test box first is the sensible way anyway.
Small correction: the licence is PolyForm Shield, so source-available, not open source.
Happy to answer questions or take bug reports.
Both concerns are fair. It's a one-person project and it's young, I won't argue with that. What I can say is that it only talks to the firewalls through the regular OPNsense API, so if I disappear tomorrow your firewalls keep running exactly as they are. The config lives on the firewalls, not in OPNexus.
The source is public, so checking whether it's malicious is easy and I'd encourage that. It's not meant to face the internet, it comes with HTTPS and 2FA, and the images are signed. Trying it on a test box first is the sensible way anyway.
Small correction: the licence is PolyForm Shield, so source-available, not open source.
Happy to answer questions or take bug reports.
#34
26.7, 26.10 Series / Re: OpenVPN connection is rest...
Last post by mschaeffler - November 12, 2026, 10:14:03 AMthe issue is solved: there was still a parallel VPN connection from another client to the same user.
#35
26.7, 26.10 Series / Re: OpenVPN connection is rest...
Last post by mschaeffler - November 12, 2026, 09:58:59 AMit seems to happen every 90s
#36
Development and Code Review / Re: netflector available as pl...
Last post by UnicronHD - November 12, 2026, 09:42:57 AMQuote from: vicking on November 12, 2026, 09:19:08 AMOké, I replaced both the packages for netflector and everything is still working fine!
One thing I am not sure about is if I need the bidirectional flag for my situation
You almost never need it. If you have client devices (phone, laptop, etc.) in one VLAN and your target devices (TV, Chromecast, etc.) in another VLAN - you do not need it. You make source_if the VLAN with clients and target_if the VLAN with targets.
You will need bidirectional if you have TVs in both VLANs AND you have phones in both VLANs.
#37
Development and Code Review / Re: netflector available as pl...
Last post by vicking - November 12, 2026, 09:19:08 AMOké, I replaced both the packages for netflector and everything is still working fine!
One thing I am not sure about is if I need the bidirectional flag for my situation
One thing I am not sure about is if I need the bidirectional flag for my situation
#38
26.7, 26.10 Series / [solved] OpenVPN connection is...
Last post by mschaeffler - November 12, 2026, 09:10:43 AMI just upgraded from 27.7.8 to 26.7.9.
Before my OpenVPN connection was perfectly stable and now it is restarted every few minutes!
The OpenVPN logging shows this:
Before my OpenVPN connection was perfectly stable and now it is restarted every few minutes!
The OpenVPN logging shows this:
Code Select
tcp6-server:80.187.xx.xx:23679 validation failed on peer_info line received from clientThis happens with the client in company Wifi and also via mobile connection. #39
Russian - Русский / Re: os-xray — плагин Xray-core...
Last post by tyra - November 12, 2026, 02:47:34 AMQuote from: Spylive on November 09, 2026, 10:45:57 AMQuote from: tyra on November 07, 2026, 02:23:01 PMQuote from: Spylive on November 07, 2026, 12:35:25 PMДа именно так. И тогда для любых проверок РКН Ваш внешний ip, который они заносят в блокировки, будет тот который и так уже не доступен из России. Дополнительно на своем локальном виртуальном сервере с белым IP поднял еще один 3x-ui и его использую с мобильным трафиком, а для обхода белых списков использую аренду CDN у яндекса за 150р в месяц.А VPS-заграница -> VPS-заграница уже заблокированный-- VPSЫ должны быть в одной стране и на одном сервере или это не обязательно? (Дополнительно на своем локальном виртуальном сервере с белым IP поднял еще один 3x-ui и его использую с мобильным трафиком) то есть если я правильно понимаю свой домашний белый IP используешь как VPN за которым opnsense c os-xray и опять идет в VPS-заграница -> VPS-заграница уже заблокированный;-то есть схема примерно как из видео https://youtu.be/ZSy1b3BeKzk?list=PLsU1-fn3_XD08m2L1zu8Yrj1WcCIkSihl ? Про CDN я слышал-смотрел но не пробывал. По поводу плагина os-xray, он поддерживает только два протокола VLESS и VLESS-xHTTP и причём одну страну Германию а на Эстонии и Финляндии не работает то есть в столбце Status все зелёное (xray: up tun: up) а в Test Result красное (Could not connect — xray-core may be stopped or port unreachable)? в приложении HAPP больше протоколов на всех нодах работают, это я к тому что они рабочие в одной сети с opnsense.
#40
General Discussion / Re: Plex Server Setup in 2024 ...
Last post by ats - November 12, 2026, 01:22:29 AMNew version of OPNSense breaks up the NAT rules differently than pfsense and earlier opnsense versions.
You want to set up the "port forwarded rule" on the "Firewall: NAT: Destination NAT" -> that is the, destination nat rules.
Click the box/select the option to automatically create the firewall rules for you at the bottom.
Spent a few hours, twice already, relearning this a few months apart.
You're welcome my friends.
You want to set up the "port forwarded rule" on the "Firewall: NAT: Destination NAT" -> that is the, destination nat rules.
Click the box/select the option to automatically create the firewall rules for you at the bottom.
Spent a few hours, twice already, relearning this a few months apart.
You're welcome my friends.
