Recent posts

#91
26.1 Series / Re: Log to remote logserver us...
Last post by Monviech (Cedrik) - Today at 02:15:05 PM
Oh yeah if its multiple issuers in a chain that's needed for trust.

https://docs.opnsense.org/manual/how-tos/self-signed-chain.html
#92
26.1 Series / Re: Log to remote logserver us...
Last post by sensuary - Today at 02:12:28 PM
Ah, the certificate that I upload into Trust's CA needs to contain the intermediate certificate also.
#93
26.1 Series / Re: Log to remote logserver us...
Last post by Monviech (Cedrik) - Today at 02:11:28 PM
You can upload the CA to "System - Trust - Authorities", just paste the certificate in, leave the key empty.

EDIT: Oops you already did that. But that should work since syslog-ng uses the system trust store.
#94
26.1 Series / Re: ISC-DHCP not starting afte...
Last post by towa - Today at 02:10:21 PM
confirm
After a second restart of OPNsense 26.1 the service is up again.
#95
26.1 Series / Don't touch a running system 🤔...
Last post by rfox - Today at 02:09:39 PM
Happy belated New Year - and Happy Friday on top!  Firstly, congrats on 26.1 !  Looking good . . .

Question about upgrading from OPNsense 25.7.11_9-amd64 - I have a virtual instance running under Proxmox - quite smoothly I might add for some time.  Took me a while to configure multiple VLANs, Zenarmor, Unbound, Netbird and ISC DHCP that everything works, but once all set up - has been very stable (even after multiple upgrades over the last 16 months)

I'm a bit nervous about the ISC DHCP changeover to DNSMasq - not just because of many static leases (saw Network Guy article which I've tested on a test instance - worked well)

My question is, for a relatively small HomeLab environment - Should I just upgrade to 26.1 and keep ISC DHCP as a plugin??  Any downsides to keeping ISC moving forward?

If I do choose to change to DNSMasq, should I do it BEFORE or AFTER the 26.1 upgrade ?!?

The old saying of "Don't touch a running system" always comes to mind in this scenario :-)

Thanks in advance and once again, Congrats on the new release!

#96
26.1 Series / Re: hostwatch db grows rapidly
Last post by franco - Today at 02:05:43 PM
With the help of your feedback we decided to hotfix the .11 as well in 2-3 hours.


Cheers,
Franco
#97
26.1 Series / Re: hostwatch db grows rapidly
Last post by astrandb - Today at 02:04:20 PM
Quote from: franco on Today at 10:55:03 AMYou can also try the latest test version as we already found the auto-vacuum doesn't always trigger:

# opnsense-revert -z hostwatch
# service hostwatch restart


Cheers,
Franco

Thank you. The test version worked fine. Same sizes as avove.
#98
German - Deutsch / Re: Intel i226-V + OPNsense: W...
Last post by Hessebossy - Today at 02:00:17 PM
Hi, hat sich das Problem mittlerweile aufgelöst? Denn ich wollte nun auch mit meiner opnsense von Supermicro Xeon D-1518 umsteigen auf N150 und genau das Teil was du von MNBOXCONET hast. Ist irgendwie die einzige, die einigermaßen bezahlbar ist. Ist schon traurig, was mittlerweile für RAM hingeblättert werden muss.
#99
25.1, 25.4 Series / Business GEOIP Data
Last post by wirehire - Today at 01:59:15 PM

 I have used the maxmind on the community . After upgrade to business license, i thought , the geoip database come frome desico/ifconfig. And we must clear the url string.
But now its loaded nothing.

What must in the geoip url field , with a business license ?
#100
26.1 Series / Re: udpbroadcastrelay do not s...
Last post by mnaim - Today at 01:51:13 PM
works for me in 26.1, service running and devices are discovered