BUSINESS V25.10.1_2 to Version 25.10.2 some of rules and aliases are lost!

Started by Wuensch-AG-Adm, February 19, 2026, 03:27:13 PM

Previous topic - Next topic
Dear Opnsense community,

This morning we performed our monthly maintenance and we are certain that we lost some rules and objects during the upgrade.
We noticed this because our AMS group created a ticket for some rules that had already been created for a customer project, and we couldn't find any of these rules or categories after the upgrade.
The upgrade went strangely: Without warning, we were downgraded from version 25.10.1_2 to version 25.10, and after that we had to upgrade again to get version 25.10.2. Is this a mistake on the part of the OPNsense team? Has anyone ever heard of anything like this before?
We did not attempt to uninstall anything. The device did this on its own.

It's quite disturbing as a customer.

2026-02-19T08:16:56
Notice
pkg-static
opnsense-business-25.10.2 installed
2026-02-19T08:15:52
Notice
pkg-static
opnsense-business-25.10 deinstalled
2026-01-22T06:18:23
Notice
pkg-static
opnsense-business-25.10.1_2 installed

Regards

Joel.

Please let me know if I've done something wrong this time. I already mentioned that this is a business device, not a VM for the firewall at home.

Sorry, never seen somethibg like this. Since this is the community forum very few people even run the business edition. I'd contact Deciso and buy a support package for a mission critical device in your case.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

Well, you can audit System: Configuration: History for where these disappeared (and restore them if they were lost then I suppose).

That also goes for opening a business support case as a starting point to investigate.

Without support hours posting here is as good as it gets.


Cheers,
Franco

Quote from: franco on February 19, 2026, 07:56:26 PMWell, you can audit System: Configuration: History for where these disappeared (and restore them if they were lost then I suppose).

That also goes for opening a business support case as a starting point to investigate.

Without support hours posting here is as good as it gets.


Cheers,
Franco

Dear Franco and Patrick,
I get your point, but I don't understand the business model of why we should pay for troubleshooting the Deciso Business Appliance (which we purchased with a license). I understand that I need to purchase support if I need something that is beyond my expertise or if information is missing from the documentation because we need something more specific. But in my opinion, this is simply an automated update from the Deciso server that is faulty.
I'm will auditing the system the next monthly maintenance (I've already done a part of it, when I've found that some rules are missing), thank you for your advice.
Best regards,
Joel.

If you have evidence that an update really caused the loss of firewall rules, you can still open an issue on Github to reach the developers. My main point is that this is the community forum and although I run a handful of systems with the business edition I do not have the expertise to help you. Also I never experienced anything like that myself.

Side note - why do you need a maintenance window to run an audit?
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

> But in my opinion, this is simply an automated update from the Deciso server that is faulty.

Sure, all I asked for is dependable information on the case.


Cheers,
Franco

Quote from: Patrick M. Hausen on February 20, 2026, 08:55:06 AMIf you have evidence that an update really caused the loss of firewall rules, you can still open an issue on Github to reach the developers. My main point is that this is the community forum and although I run a handful of systems with the business edition I do not have the expertise to help you. Also I never experienced anything like that myself.

Side note - why do you need a maintenance window to run an audit?

That's the only time I can devote to it. I take care of many other networks and application infrastructures, and since the problem didn't block the system's communication (I've simply re-create the 4/5 missing rules), I'll take care of it next time.
It's not about the OPNSense-Firewalls, It's about the workflow in the company.

Cheers,
Joel.

had someone previously been changing snapshot settings?

being honest i did something similar, it ended up being i did not understand how snapshots worked. and i rebooted to a previous snapshot without current settings
Business user licensed for the past 3 years, not that it matters
DEC740 > USW-Pro-8-PoE> U6-Enterprise
Dec670. Retired / backup device

I took a snapshot before every major upgrade and only used the function once to reboot on the last knows good version because of an error, but I'll check out your tip. 

Regards,

Joel