Recent posts

#91
25.7, 25.10 Series / Re: Urgent – no PPPOE connecti...
Last post by TheBob - November 26, 2025, 07:48:46 PM

Please mark this topic as solved.
I finally got word from my ISP: wrong pppoe login credentials.
Somehow the reboot of my opnsense messed up my pppoe user login, password.
Maybe this is helpful for someone else in the future.

Best regards

#92
25.7, 25.10 Series / Re: Firewall: Log Files: Live ...
Last post by pfry - November 26, 2025, 07:31:42 PM
I missed that. Confirmed, columns seem fixed. I didn't think "firewall: live log: make this grid static and slightly adjust info column width" meant that. Static columns seems an odd choice, if it was deliberate.

Nitpick: It'd be nice if the line shade was consistent - not by position (as it is now), but by element (so the text shade remains the same as it scrolls). I find the changing light/dark shading makes it harder to follow a particular entry.
#93
German - Deutsch / Re: Verstädnisfrage Wireguard ...
Last post by meyergru - November 26, 2025, 07:27:55 PM
Ich lege unter Firewall: Groups eine Interface Gruppe an, die alle lokalen VLAN-Interfaces enthält und nenne sie LOCAL. Die verwende ich dann als Interface in "Firewall: Rules: Floating". Wenn ich später weitere VLANs anlege, muss ich die nur der Gruppe hinzufügen und nicht jeder einzelnen Regel.


#94
25.7, 25.10 Series / Re: service adguardhome not st...
Last post by Patrick M. Hausen - November 26, 2025, 07:24:39 PM
Uninstall & reinstall via System > Firmware > Plugins?
#95
Hardware and Performance / Re: N150 / N355 good fits?
Last post by pfry - November 26, 2025, 07:22:32 PM
Quote from: Billy2010 on November 26, 2025, 04:46:06 PMI went with minisforum but, the one I have does draw 100TDP (I have metered it) whilst far from max load.[...]

Interesting. I don't know what BIOS settings are available for the Minisforum, but the AMD processors are highly configurable. 100W from a 16 core device isn't surprising, even with the 55W/75W "TDP". With a bit of tuning you could get maximum single-core clock with a reasonable power limit. I don't see high CPU utilization from my firewall (7700X, X710-DA4, X550-T1; it normally runs idle, at around 40W), but my Internet link is much slower than yours (500Mb) and I do not use an IPS. At any rate, to paraphrase Brandywine, buy once, cry once, and you won't regret getting a solution that's too small for the job. In most areas of the U.S. the price of your Internet link would make the firewall seem like small change.
#96
25.7, 25.10 Series / service adguardhome not starti...
Last post by neek - November 26, 2025, 07:13:51 PM
I've installed the adguardhome plugin from mimugmail. It was all working well. Some time ago, I think maybe when I upgraded from 25.1 -> 25.7, the plugin stopped loading at boot time. Every time after a reboot, I now need to ssh into the box and manually start it with 'service adguardhome start'. After that, it stays running and all is well. Is there some magic I need to do to force it to always run at boot? I learned recently that opnsense uses a mechanism other than /etc/rc.d to start its services. Any suggestions?
#97
25.7, 25.10 Series / Firewall: Log Files: Live View...
Last post by SenseX - November 26, 2025, 07:08:14 PM
Hi,

After updating to 25.7.8 I can't change the tabs size the Firewall: Log Files: Live View.

Thanks in advanced
#98
25.7, 25.10 Series / Re: Using Adguard Home and DNS...
Last post by Patrick M. Hausen - November 26, 2025, 06:52:53 PM
If AGH forwards to your local Unbound and that is run in plain recursive mode without any upstream, then to lookup e.g. forum.opnsense.org:

- a random root server will see a request for the NS records of .org
- a random server from that list will see a request for the NS records of opnsense.org
- a random server from that list will see a request for the A and AAAA records of forum.opnsense.org

No single entity will see all your DNS requests.

That's why I never use public recursive servers.

BTW: Cloudflare is not authoritative for e.g. opnsense.org. Authoritative means "the server with full control of the particular zone".
#99
25.7, 25.10 Series / Re: Using Adguard Home and DNS...
Last post by JMini - November 26, 2025, 06:45:46 PM
Oh. Right. Once it hits the DNS provider it's decrypted. But, Cloudflare IS an authoritative DNS provider.
AdGuard forwards requests to whatever DNS server I set.
I've since set google DNS DOH as a fallback server. I like Google less than CloudFlare. Google is a data mining company.
I'm comfortable with Adguard sending my DNS requests to Cloudflare and falling back to Google as necessary.
#100
25.7, 25.10 Series / Re: Unable to boot after updat...
Last post by Patrick M. Hausen - November 26, 2025, 06:41:25 PM
That plugin is useless inside a VM, anyway. Any microcode updates for your CPU need to be done on the hypervisor host.