Why doesn't anyone answer?

[DarkCorner]

I understand and agree that in a Community Forum there is no obligation to respond, but I see that others also report problems and do not receive any response.
We are not talking about a marginal infrastructure, but a critical one and here we have been stuck for weeks on problems with a "basic" configuration and little more.
Where the configurations start to be complex I am the first to ask to activate licenses and commercial support, but here we are still at "Pass Any Any" rules.
Meanwhile, we already have a Zenarmor license that we haven't activated for MONTHS because we don't want to add any more complexities.
This is not encouraging.

[Isabella Borgward]

I agree that it would be great if questions got answers, but at the end of the day, if it's critical infrastructure then you should pay for support.

[Seimus]

If you really understand that this is a community forum, than you must understand forum works on a best effort practice.

You may not get an ASAP or an answer at all due to several reasons. If you have "critical infra" then you should get a proper support (as mentioned by the user above). Thats the reason they even provide it as a service.

Saying on a forum I have critical infra I need ASAP help has no weight, as its a forum. The ppl here on forum are very helpful, and try to help as much as possible (thats what I like). But getting to every topic to help is impossible.

Please consider to get a TAC labor support if you have a critical infra and do not know how to fix the issues you encouraged.

Regards,
S.

[DarkCorner]

Let's try to understand each other.
A Firewall is a critical system by its nature.
However, this does not mean that its configuration is critical at this moment.

I said, and I repeat, that the configuration is still at Basic level, with a single "Pass Any Any" rule.
Do I have to pay a license to understand why a rule like this doesn't work?
Please, let's not joke.

Others in this forum have reported the same problems; people who, like me, have reinstalled OPNSense from scratch several times always obtaining the same result.
Just scroll through the forum pages to find posts with zero replies or with only one reply, that of the person who posted the post itself.

In the meantime, I already have a paid license that I am not using, thus wasting two months in vain.

[franco]

One thing we've learned from the years of doing community and business support is that users demand free support of free software, business users want paid support for paid software. It's probably not going to change. Probably something about the psychology of "free" and "paid" and that causes an association in the brain...


Cheers,
Franco

[DarkCorner]

Franco, I find no reason to offend those who have already bought the licenses.

I have had three pfSense active 24 hours a day for over two years with multi wan and Squid working perfectly.

We have been planning the migration to OPNSense and have been unable to complete a basic installation since November; first because there were problems with Squid and now with multi wan.
I deactivated Squid and now I will also deactivate multi wan.

"Free" support in the forum is limited, that's a fact.
We will internally evaluate whether and when to move to paid support.
At the moment the results achieved are disheartening.

We will still keep the Zenarmor license in the drawer.

[Patrick M. Hausen]

If you already bought the business license, why don't you open a support ticket with Deciso?

[franco]

The license is not a support subscription.

Fair enough, I apologise if you really want to be offended by what I said.

The business license is somewhere in the middle. Think of it like paying for a guy to update your firewall better than you could. It doesn't mean it's perfect but better than you trying to chase each community update 10 minutes after it comes out.

The configuration part is a different beast. Books have been written about it. Software constantly changes, too. Questions often arise, 50% of those for how to fix OpenVPN/IPsec/WireGuard which is barely touching the code side of the software downloaded and/or bought.

I see each day a lot of people willing to help others. Usually being more assertive about demands makes them turn their head or the subject being asked has been beaten to death over the years (forum search) or is an overly complex business case they don't like to be involved at this point in time.

Fortunately the support subscriptions will not judge and you can spend your time like you want asking and receiving an appropriate reply.


Cheers,
Franco

[DarkCorner]

I also know that the license is different from the support, but having purchased it is already an important signal that I didn't just want to "eat for free".

I repeat again that this is a basic installation, redone from scratch I don't know how many times and kept basic precisely so as not to introduce any critical issues.
There are no active plugins or other services other than network ones.
There are no rules, except for the DNS one and the "all open" one.

VLANs work; the Multi WAN, on the other hand, hops like a kangaroo.
In my opinion there is a problem with DNS, but the problem is difficult to identify especially for those, like me, who come from another platform and still don't fully know the OPNSense GUI.

I don't think I wasn't assertive, but even if I was, there are many others who can't find an answer in the forum. I invite you to check it out.

I am also a person who does a lot of research on the Internet and who starts by first analyzing what I have done and only then asking if there is something that isn't working.

Honestly, I found several suggestions in the forum to search the pfSense documentation, which I find meaningless since we are talking about two different products.
If I need help with pfSense, then I stick with pfSense.

For me the discussion ends here.
I'll be back to complete the installation of the prototype. Only when it is fully functional can we talk about activating it in the company and only at this point can we talk about licenses and commercial support.

Thanks for the reply anyway.

[franco]

You keep saying pfSense, but nobody else does. Not sure why that is, but to be honest I didn't see your other post because I've been mostly doing 24.1 work in all of January.


Cheers,
Franco

[DarkCorner]

You keep saying pfSense, but nobody else does. Not sure why that is, but to be honest I didn't see your other post because I've been mostly doing 24.1 work in all of January.

I imagined that in this period you were very busy with the release of the new version.

About "pfsense", as I was saying, before posting my message I scroll through the forums a lot. I assure you that the invitation to consult the pfsense documentation is more than one; but it's not important.

My post is this, where perhaps I also understood the cause of the problems, although I didn't understand why.

[franco]

Thanks, I'll take a look.


Cheers,
Franco