Recent posts

#81

Virtual private networks / Validating the WireGuard VPN C...

Last post by marsk - September 23, 2026, 05:38:19 PM

Hi,

To better understand what I was actually configuring in the OPNsense web UI, I created a logical diagram to help me.
The diagram (Attached file) shows how traffic flows through OPNsense when using a WireGuard VPN.

However, I need help verifying that the diagram is correct. Could you please verify it for me?

//marsk

#82

Hardware and Performance / Re: 10G but reaching only 5-5....

Last post by ou1 - September 23, 2026, 05:19:02 PM

I'm curious to know if you ever end up getting better performance out of the DEC750. Here is my thread about the same topic.

https://forum.opnsense.org/index.php?topic=50846.0

And the only way I managed to max out my internet connection:

https://forum.opnsense.org/index.php?topic=50846.msg268263#msg268263

#83

Tutorials and FAQs / Re: OPNsense on Older Lenovo T...

Last post by nero355 - September 23, 2026, 04:15:30 PM

I have not seen ONE installer that cares about disk partition alignment, and they all tend to default to 8 byte alignment.

Parted for Linux should do it correctly from what I have heard ?!

What have you seen going wrong so far ?

#84

Hardware and Performance / Re: Upgrade from J6413 Questio...

Last post by nero355 - September 23, 2026, 04:09:13 PM

I found a mini pc from Beelink with an Intel Wildcat 304 on board and 2 LAN ports. One is a Realtek RTL8127 (10Gbe) and the other is the tried & true Intel I226-V (2.5Gbe).

but had some legitimate concerns regarding the Realtek NIC.

Please just don't buy that thing as long as it's going to run something FreeBSD based and especially something as important as your Router/Firewall on your network !!

I see soo many topics here with all sorts of issues with RealTek NICs that it's simply not worth the trouble it might give you in the future :(

Maybe shop around on the used market for something nice with 4 x Intel and something like the Intel N100 SoC for a good price ??
Or maybe something totally different that turns out to be a steal somehow ^_^

#85

26.7 Series / Re: Documentation about Firewa...

Last post by bamf - September 23, 2026, 03:57:36 PM

Sorry the normalization documentation was merged and updated a bit too early and reflects the upcoming version already.

Ah! :) Thanks for the clarification.

#86

Hardware and Performance / Re: Upgrade from J6413 Questio...

Last post by keeka - September 23, 2026, 03:52:51 PM

[...]adding IPS/IDS in the future when I start messing around with hosting my email server[...]

I do have some advice here: If you block traffic with the IPS, see if any of the matches affect your systems and watch for false positives. And performance, of course. I ran various IPSs for years (2004-2024); I stopped running one against my servers as I never saw matches that would affect my systems, but I did see false positives on mail messages. I don't bother with it at all these days (with OPNsense). As always, YMMV.

I think this is very good advice. For mailservers rely on RBL, postscreen (if using postfix) and fail2ban.

#87

26.7 Series / Re: Documentation about Firewa...

Last post by Monviech (Cedrik) - September 23, 2026, 03:51:21 PM

Sorry the normalization documentation was merged and updated a bit too early and reflects the upcoming version already. You can move before here in the git repository:

https://github.com/opnsense/docs/commit/79ca2c8b8d60fc82a5d9a76641d31dd836b08133

Since we don't have a versioned docs page, this can happen sometimes. The git repo can go back to earlier commits.

#88

Hardware and Performance / Re: Upgrade from J6413 Questio...

Last post by pfry - September 23, 2026, 03:29:45 PM

[...]adding IPS/IDS in the future when I start messing around with hosting my email server[...]

I do have some advice here: If you block traffic with the IPS, see if any of the matches affect your systems and watch for false positives. And performance, of course. I ran various IPSs for years (2004-2024); I stopped running one against my servers as I never saw matches that would affect my systems, but I did see false positives on mail messages. I don't bother with it at all these days (with OPNsense). As always, YMMV.

#89

26.7 Series / Documentation about Firewall N...

Last post by bamf - September 23, 2026, 03:14:01 PM

Hi,

I am reading https://docs.opnsense.org/manual/firewall_scrub.html

Firewall ‣ Settings ‣ Filter <- does not exist
Firewall ‣ Rules [new] <- does not exist
Select the Match action <- how and where? I do not see any field where I can select a Match action

Is this documentation for a previous version? Is there documentation for 26.7?

#90

26.7 Series / [CALL FOR TESTING] PPP(oE) pa...

Last post by franco - September 23, 2026, 03:00:07 PM

Hi all,

Since issues with pluggable VLAN devices popped up in 26.7.3 we have been working on making the boot sequence, mainly interfaces_configure() less prone to errors and also easier to debug in the future.  Before we can test this, however, there's a small alignment change I'd get feedback on for PPP(oE) setups, which applies cleanly to 26.7.4:

# opnsense-patch https://github.com/opnsense/core/commit/0b9283c77e

The patch has two goals: stop emitting serial devices that the interface code cannot operate anyway and reuse the existing interfaces_ppps_hardware() for parent resolving in interfaces_parent_devices().  Later on, we plan to add recursion to interfaces_parent_devices() so that longer device dependencies including LAGGs, VLANs, bridges, etc. know exactly which device needs to be set up first.

For now we are simply interested whether or not everything keeps working as usual during boot.  If not, please revert the patch and reboot again.  System should be right back.


Thanks in advance,
Franco