Recent posts

#81

Hardware and Performance / Re: Dec740 connected to a USW-...

Last post by meyergru - November 22, 2025, 07:36:32 PM

I have never encountered any compatibility problems with 10G DAC cables.

#82

German - Deutsch / Re: Kann curl nicht auf die im...

Last post by meyergru - November 22, 2025, 07:34:30 PM

Ah, verstehe. Du verwendest gar nicht die OpnSense CA. Normalerweise sollte curl alle Zertifikate, die in System: Trust: Authorities eingetragen sind, akzeptieren. Bei mir tut es das, ich verwende auch eine eigene, externe CA.

#83

German - Deutsch / Re: Kann curl nicht auf die im...

Last post by u.n.known - November 22, 2025, 07:15:14 PM

Okay... Ich hab hier einen Vault, das ist ein Server, der Vault von Hashicorp laufen hat. Dies beinhaltet den ACME Endpunkt, den ich von der OpnSense mit dem ACME-Plugin erreichen will. Dieser Vault hat ein Zertifikat von einer Kompletten CA, die in OpnSense verfügbar ist, also im Trust gespeichert.
Wenn ich das ACME-Plugin daraufhin konfiguriere, von diesem Vault-Server (NICHT von der opnsense) zu holen, dann fliegt er auf die Nase, weil CURL das Zertifikat nicht validieren kann. Auf dem Vault-Server ist ein valides Zertifikat hinterlegt (Name, Gültigkeit etc). Die dazugehörige CA im OpnSense unter trust. Gibt es also in der OpnSense eine möglichkeit dem curl noch zusätzlich ein Zertifikat hinzuzufügen, damit er kein Problem mit dem Endpunkt hat?

#84

German - Deutsch / Re: Routing-Performance

Last post by meyergru - November 22, 2025, 06:33:24 PM

Ich denke, es ist Zenarmor - auch ohne Blocking. Die Hardware sollte locker 1 GBit/s schaffen, siehe meine Signatur.

#85

Hardware and Performance / Re: Dec740 connected to a USW-...

Last post by pfry - November 22, 2025, 06:33:06 PM

what in addition to [...]

For connecting the firewall to the switch, nothing at all. I wasn't critiquing your choice of cable - I was just attempting to avoid endorsing a particular length, as the only critical element is "long enough", and that's your choice.

Heh. Someone here must have an identical setup to your planned one. Just for the paranoia endorsement.

My own is random PC with Intel x710, with random TAA DACs to two servers, also with x710s. My (Netgear) switch uplink is fiber, as it's in another room - a bit far for a DAC. I had to get an Intel ID'd optic (I got genuine Intel, surplus) for the uplink; the DACs don't require any branding with the Intel cards. Not a concern with your setup as described.

#86

German - Deutsch / Re: Problem mit sftp Backup üb...

Last post by viragomann - November 22, 2025, 06:24:21 PM

Ich vermisse da die Gateways. Eine Route auf einem Interface reicht nicht fürs Routing, es braucht eine konkrete Ziel-IP innerhalb des Interface-Subnetzes.
Bist du dir sicher, dass du die Gateways und Routen korrekt gesetzt hast?

Bezügliche Wireguard, bedenke auch, dass Server IP in den erlaubten IPs auf OPNsense2 enthalten sein muss, wenn nicht genattet.

#87

25.7, 25.10 Series / Re: Adding a VLAN takes 26 cli...

Last post by pfry - November 22, 2025, 06:11:02 PM

What is the correct way for OPNsense customers to give feedback? [...]

Personally, I think the forum is the place to start. Naturally, in an ideal world everyone would research their issue and incorporate prior discussion and work, but this isn't always realistic, for a number of reasons. For myself, I like to throw stuff out and get feedback, and then perhaps open an issue on github if I think it actually has merit. I try to see the legacy and direction of the project, but I don't always succeed, of course.

As far as your suggestions, they don't strike me as significant. That is, filling in some default values would make no difference to me, just as a lots of clicking and typing to set up a VLAN doesn't bother me. Oh, and I care little for/about wizards, and I'm not likely to use the API. My $.02, and worth every penny.

[...] I don't enjoy starting at the "but what if we just did it this way". [...]

Understandable. All I can say is "Y'all keep up the good work", because occasionally I'm going to have this great idea that I can't believe y'all haven't considered...

#88

25.7, 25.10 Series / Re: Adding a VLAN takes 26 cli...

Last post by Monviech (Cedrik) - November 22, 2025, 05:44:02 PM

You dont have to input anything into the vlan field, the name gets auto generated if you leave it empty.

#89

German - Deutsch / Re: Opnsense DNS Warum funktio...

Last post by Monviech (Cedrik) - November 22, 2025, 05:32:01 PM

FYI: https://github.com/opnsense/core/pull/9409

Kommt bald.

#90

25.7, 25.10 Series / Re: [Solved] Monitoring gatewa...

Last post by julsssark - November 22, 2025, 05:31:58 PM

Notifications using HomeAssistant to Amazon Echo is genius! Thank you for sharing. I'm going to add that.

I'm really impressed with Uptime Kuma's abilities and UX for up/down monitoring in my homelab. I am using Uptime Kuma to monitor opnsense gateway and opnsense services (api/core/service/search Query:$exists(rows[running=0]) Expected Value:false). I looked at Zabbix for the "fun" of it, but I really don't "need" to monitor with that level of granularity.

I am using Graylog/Grafana for log monitoring, but I am nearly done switching over to Alloy/Loki/Grafana.