#opnsense — Public Fediverse posts

🚀 How to Deploy #OPNsense on a Rad Web Hosting #VPS

This guide demonstrates how to deploy OPNsense on a Rad Web Hosting VPS. This guide is tailored specifically for Rad Web Hosting VPS infrastructure, including /32 IP addressing, KVM virtualization, and ISO-based installs.
What is OPNsense?
OPNsense is a free, open-source firewall and routing platform designed for network security, traffic control, and perimeter ...
Continued 👉 https://blog.radwebhosting.com/deploy-opnsense-on-a-rad-web-hosting-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #opensource #selfhosted #selfhosting

🚀 How to Deploy #OPNsense on a Rad Web Hosting #VPS

This guide demonstrates how to deploy OPNsense on a Rad Web Hosting VPS. This guide is tailored specifically for Rad Web Hosting VPS infrastructure, including /32 IP addressing, KVM virtualization, and ISO-based installs.
What is OPNsense?
OPNsense is a free, open-source firewall and routing platform designed for network security, traffic control, and perimeter ...
Continued 👉 https://blog.radwebhosting.com/deploy-opnsense-on-a-rad-web-hosting-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #opensource #selfhosted #selfhosting

Dammit. As I prep for my new 5 gig fiber pipe, I've been upgrading some network things. Switches, NICs, etc.

When I built my OPNSense router a few months back, I put in a Intel X540-T2 NIC not knowing that it operates at either 1 gig or 10 gig; nothing in between !!! 🤦‍♀️🤦‍♀️🤦‍♀️

EDIT: Ordered some SFP+ 10G-RJ45 transceivers. Going to use those to chain my switches and the router at 10G. If I'm going to spend money, might as well aim high.

#networking #homelab #opnsense

Dammit. As I prep for my new 5 gig fiber pipe, I've been upgrading some network things. Switches, NICs, etc.

When I built my OPNSense router a few months back, I put in a Intel X540-T2 NIC not knowing that it operates at either 1 gig or 10 gig; nothing in between !!! 🤦‍♀️🤦‍♀️🤦‍♀️

EDIT: Ordered some SFP+ 10G-RJ45 transceivers. Going to use those to chain my switches and the router at 10G. If I'm going to spend money, might as well aim high.

#networking #homelab #opnsense

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟳/𝟮𝟳 (Valuable News - 2026/07/27) available.

https://vermaden.wordpress.com/2026/07/27/valuable-news-2026-07-27/

Past releases: https://vermaden.wordpress.com/news/

#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟳/𝟮𝟳 (Valuable News - 2026/07/27) available.

https://vermaden.wordpress.com/2026/07/27/valuable-news-2026-07-27/

Past releases: https://vermaden.wordpress.com/news/

#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

@Doveux #opnsense is great for router, firewall, lb and ad blocking. I then run two unifi APs with #openwrt. Pihole is nice, but since I had opnsense I just moved the same rule sets to unbound dns in opnsense to get rid of one extra service.

@Doveux #opnsense is great for router, firewall, lb and ad blocking. I then run two unifi APs with #openwrt. Pihole is nice, but since I had opnsense I just moved the same rule sets to unbound dns in opnsense to get rid of one extra service.

@thoralf

kann mich dem aber anschliessen. Wenn du ernsthaft an deinem Netzwerk pack-an willst, brauchst du was anderes als das AVM-Zeug.
Das geht bei VLANs los, mit mehreren NATs weiter, und bei den Preisen beschlägt mir ohnehin immer die Brille.

#opnsense FTW

@Dj4n90

@thoralf

kann mich dem aber anschliessen. Wenn du ernsthaft an deinem Netzwerk pack-an willst, brauchst du was anderes als das AVM-Zeug.
Das geht bei VLANs los, mit mehreren NATs weiter, und bei den Preisen beschlägt mir ohnehin immer die Brille.

#opnsense FTW

@Dj4n90

🚀 How to Deploy #OPNsense on a Rad Web Hosting #VPS

This guide demonstrates how to deploy OPNsense on a Rad Web Hosting VPS. This guide is tailored specifically for Rad Web Hosting VPS infrastructure, including /32 IP addressing, KVM ...
Continued 👉 #opensource #selfhosting #selfhosted

🚀 How to Deploy OPNsense on a ...

Locked out of your firewall at 2 AM? This pfSense vs OPNsense guide compares architecture, VPN, security, and real benchmarks so you choose right the first time. #pfSense #OPNsense #SelfHosting #Firewall

https://www.valtersit.com/guides/networking/pfsense-vs-opnsense-a-pragmatic-comparison-for-self-hosters/

Locked out of your firewall at 2 AM? This pfSense vs OPNsense guide compares architecture, VPN, security, and real benchmarks so you choose right the first time. #pfSense #OPNsense #SelfHosting #Firewall

https://www.valtersit.com/guides/networking/pfsense-vs-opnsense-a-pragmatic-comparison-for-self-hosters/

Habe ich was verpasst, aber seit wann kann man in den Widgets die CPU-Temp pro Kern anzeigen lassen. Vorher konnte ich nur Zone 0 auswählen, oder ich habe es einfach nicht gerafft.

#OPNsense #Firewall

A sad lesson from a few years of operating local #DNS resolvers in my infrastructure - #DNSSEC validation requires enormous resources to work reliably due to vast extra records it needs to pull from DNS for each validation and required computing power.

Forget about DNSSEC validation in systemd-resolved, dnsmasq or unbound on home routers, it will just cause periodic and apparently unexplained delays and choke overall DNS resolution.

On firewalls like #OPNsense it also would work only server-class devices, any of the desktop-class fanless hardware won’t work reliably for DNSSEC validation even if they can perfectly handle production-class proxy and firewall traffic.

Probably what only makes sense is a dedicated Unbound validation server, a separate container or jail but running within a proper hardware server with tons of memory and CPU. But then I found out that it’s much easier to use non-DNSSEC caching resolvers on perimeter devices that forward queries to Quad9 ECS resolvers[^1] which already do DNSSEC validation.

The only missing bit is that I think my local resolvers don’t forward the DO bit downstream, but that I need to still check.

[^1]: https://quad9.net/service/service-addresses-and-features/#ecssec

A sad lesson from a few years of operating local #DNS resolvers in my infrastructure - #DNSSEC validation requires enormous resources to work reliably due to vast extra records it needs to pull from DNS for each validation and required computing power.

Forget about DNSSEC validation in systemd-resolved, dnsmasq or unbound on home routers, it will just cause periodic and apparently unexplained delays and choke overall DNS resolution.

On firewalls like #OPNsense it also would work only server-class devices, any of the desktop-class fanless hardware won’t work reliably for DNSSEC validation even if they can perfectly handle production-class proxy and firewall traffic.

Probably what only makes sense is a dedicated Unbound validation server, a separate container or jail but running within a proper hardware server with tons of memory and CPU. But then I found out that it’s much easier to use non-DNSSEC caching resolvers on perimeter devices that forward queries to Quad9 ECS resolvers[^1] which already do DNSSEC validation.

The only missing bit is that I think my local resolvers don’t forward the DO bit downstream, but that I need to still check.

[^1]: https://quad9.net/service/service-addresses-and-features/#ecssec

Spent a day troubleshooting Client IPSec IKEv2 connections that kept failing. In the end it was… NOT DNS, but PKI.
Also, I suspect a weird edge-case bug in #OPNsense’s certificate handling…

Either way… it’s working again now… so I can finally begin looking into the things that I *actually* wanted to build. A way-too-familiar situation.

#SysAdminLife #HomeLab

Spent a day troubleshooting Client IPSec IKEv2 connections that kept failing. In the end it was… NOT DNS, but PKI.
Also, I suspect a weird edge-case bug in #OPNsense’s certificate handling…

Either way… it’s working again now… so I can finally begin looking into the things that I *actually* wanted to build. A way-too-familiar situation.

#SysAdminLife #HomeLab

Gerade habe ich das Upgrade auf #OPNsense 26.7 durchgeführt. Zu meiner Sicherheit habe ich zuvor das Plugin os-cpu-microcode-intel deinstalliert. Ob das auf das Update auf 26.7.1 noch erforderlich ist, kann ich nicht beurteilen und ich habe auch keine Lust, das extra zu testen. Das Upgrade soll möglichst stressfrei durchlaufen. Achja Backup und Snapshot vorher nicht vergessen!

#Firewall

Das 1. Mal seit der DSL-Einführung in meinem Heimartdorf ist unser Haushalt jetzt komplett frei von #avm bzw. #Fritz-Produkten. Das hat nichts mit dem Verkauf der Firma zu tun, aber meine persönlichen Anforderungen an die heimische Netzwerk-Infrastruktur waren die Produkte nicht mehr gewachsen. WLAN und Multi-SSID bieten die Produkte nicht an.

Das WLAN übernehmen jetzt zwei GWN7660, die vier AVM-Repeater ersetzen. Router macht aktuell noch ein ER605, aber der wird noch durch #opnsense ersetzt.

Das 1. Mal seit der DSL-Einführung in meinem Heimartdorf ist unser Haushalt jetzt komplett frei von #avm bzw. #Fritz-Produkten. Das hat nichts mit dem Verkauf der Firma zu tun, aber meine persönlichen Anforderungen an die heimische Netzwerk-Infrastruktur waren die Produkte nicht mehr gewachsen. WLAN und Multi-SSID bieten die Produkte nicht an.

Das WLAN übernehmen jetzt zwei GWN7660, die vier AVM-Repeater ersetzen. Router macht aktuell noch ein ER605, aber der wird noch durch #opnsense ersetzt.

Updated OPNsense to 26.7 today and everything went smoothly!

#opnsense #firewall

Updated OPNsense to 26.7 today and everything went smoothly!

#opnsense #firewall

Well that sucked! My Verizon-supplied router had a failure of its internet port. The other ports work fine and the wireless still works so I disabled DHCP on it and hooked it up directly to my home lab's switch. I needed everything to work so that when my wife got home, she could watch TV. Basically it went from a router to an access point. POS!

Now my OPNsense box is doing all the routing. Damn but I love OPNsense. It rescued me out of a problem.

#opnsense #freebsd #verizon #fios #craprouter

Well that sucked! My Verizon-supplied router had a failure of its internet port. The other ports work fine and the wireless still works so I disabled DHCP on it and hooked it up directly to my home lab's switch. I needed everything to work so that when my wife got home, she could watch TV. Basically it went from a router to an access point. POS!

Now my OPNsense box is doing all the routing. Damn but I love OPNsense. It rescued me out of a problem.

#opnsense #freebsd #verizon #fios #craprouter

It's taken me a week, but I finally abandoned my old Ubiquiti router for an #opnsense firewall. I only caused an outage for about an hour as I discovered some mistakes from my initial testing. Now to figure out NAT66 for #ipv6. Work provides me with a hotspot for travel that also gives me an ipv6 address. I want to ensure failover between providers.

I just finished my Catppuccin theme for OPNsense, a theme bringing all 4 Catppuccin flavors to your firewall UI.

Flavors: Mocha, Latte, Frappé, Macchiato

Features:

• 540+ color replacements using official Catppuccin palette
• CSS custom properties for easy flavor switching
• BSD-2-Clause licensed
• Based on the Cicada theme from opnsense/plugins

Install: Manual SCP (package coming if there's demand)

Known limitations: Graph axis labels retain OPNsense defaults (inline SVG, can't override via CSS).

Repo:
https://github.com/TerminalTilt/os-theme-catppuccin

Screenshots in the repo. Feedback/PRs welcome!

#Catppuccin #OPNsense #FOSS #SelfHosted #Linux #SysAdmin

I just finished my Catppuccin theme for OPNsense, a theme bringing all 4 Catppuccin flavors to your firewall UI.

Flavors: Mocha, Latte, Frappé, Macchiato

Features:

• 540+ color replacements using official Catppuccin palette
• CSS custom properties for easy flavor switching
• BSD-2-Clause licensed
• Based on the Cicada theme from opnsense/plugins

Install: Manual SCP (package coming if there's demand)

Known limitations: Graph axis labels retain OPNsense defaults (inline SVG, can't override via CSS).

Repo:
https://github.com/TerminalTilt/os-theme-catppuccin

Screenshots in the repo. Feedback/PRs welcome!

#Catppuccin #OPNsense #FOSS #SelfHosted #Linux #SysAdmin

Hallo liebes Fediverse,

Ich bräuchte eure Hilfe: Welche Hardware-Geräte eignen sich für eine OPNsense Firewall und einen OpenWrt Router dahinter mit vier Netzwerken (LAN, WLAN, Gast und SmartHome)?

Hat da wer Erfahrungen? 😇🤗

#opnsense #openwrt #followerpower

Hallo liebes Fediverse,

Ich bräuchte eure Hilfe: Welche Hardware-Geräte eignen sich für eine OPNsense Firewall und einen OpenWrt Router dahinter mit vier Netzwerken (LAN, WLAN, Gast und SmartHome)?

Hat da wer Erfahrungen? 😇🤗

#opnsense #openwrt #followerpower

#OPNsense 26.7.1 released. forum.opnsense.org/index.php?to...

#OPNsense 26.7.1 released. forum.opnsense.org/index.php?to...

To be a bit more specific: It was the unbound server that's serving as my recursor/cache for my network. It has a query forward configured to a Pi 4 which runs an authoritative DNS server for my domain, purely for internal use. So queries for mei-home.net go there internally, instead of Strato's DNS.

And for some reason, Unbound forgot that query forward this morning during the 6 AM automated reconnect. First time I ever saw that. Unbound restart fixed it.

1/2

#HomeLab #DNS #OPNsense

To be a bit more specific: It was the unbound server that's serving as my recursor/cache for my network. It has a query forward configured to a Pi 4 which runs an authoritative DNS server for my domain, purely for internal use. So queries for mei-home.net go there internally, instead of Strato's DNS.

And for some reason, Unbound forgot that query forward this morning during the 6 AM automated reconnect. First time I ever saw that. Unbound restart fixed it.

1/2

#HomeLab #DNS #OPNsense

@avatar oh noes! Das nächste Rabbithole :D
Ich sitze bissel dazwischen, habe zwar #adguard aber zumindest "etwas" echtes DNS auf meiner #opnsense . hatte wg. #Technitium schon mal überlegt.
Mal sehen wann ich dafür eigentlich keine Zeit habe.

@avatar oh noes! Das nächste Rabbithole :D
Ich sitze bissel dazwischen, habe zwar #adguard aber zumindest "etwas" echtes DNS auf meiner #opnsense . hatte wg. #Technitium schon mal überlegt.
Mal sehen wann ich dafür eigentlich keine Zeit habe.

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟳/𝟮𝟬 (Valuable News - 2026/07/20) available.

https://vermaden.wordpress.com/2026/07/20/valuable-news-2026-07-20/

Past releases: https://vermaden.wordpress.com/news/

#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟲/𝟬𝟳/𝟮𝟬 (Valuable News - 2026/07/20) available.

https://vermaden.wordpress.com/2026/07/20/valuable-news-2026-07-20/

Past releases: https://vermaden.wordpress.com/news/

#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday

#OPNsense github Seite. Update auf Version 26.7 jetzt oder warten auf das nächste Bugfix Update. Viele Probleme werden geschildert....

https://github.com/opnsense/src/issues

Frankreich oder Indien? Ich bin weitergekommen und zwar genau nachdem klar war, warum meine IP blockiert wurde. Mein #VPN gibt mir aktuell eine IP aus Frankreich🤦 Ich vermute, #Crowdsec hatte damit zeitweise Probleme. Um das zu testen, nahm ich die IP aus meiner Positivliste. Plötzlich funktionierte alles wieder. Seitdem scheint #Crowdsec keine Probleme mehr zu machen.

#OPNsense

ich Frage mich was #Crowdsec veranlasst hat plötzlich mein "out" Verkehr zu überwachen?! Meine FW Regel gilt nur für IN. Das verhalten ist nach ein #OPNsense Update aufgetreten. Interessanterweise Funktioniert das Routing nicht mehr weil Crowdsec es blockiert. Ich musste eine Allow Regel in Crowdsec anlegen, damit mein Zugriff auf Seiten wieder möglich ist.

Episode 26 of Dark Blue Weekly released

https://darkblueproject.com/sites/news/dbw-e26.php

#darkblueproject #darkblueweekly #linux #bsd #opnsense #freebsd #wayland #cosmicdesktop #system76 #freedesktop #linuxdesktop #opensource #freesoftware

Ein Upgrade ohne Herausforderungen inklusive 2 Reboots hatte ich auf die Version 26.7 von #opnsense

OPNsense 26.7-amd64
FreeBSD 15.1-RELEASE-p1
OpenSSL 3.5.7

#adminlife #security #opensource
https://forum.opnsense.org/index.php?topic=52375.msg270264#msg270264

Heute zum ersten Mal ein Update-Fail bei OPNsense gehabt. Nach dem Update wurde das Root-Filesystem nicht mehr gefunden - so etwas ist ganz übel.

Aber: OPNsense hat ein gutes Backup/Restore-Konzept, also OPNsense 26.7 vom USB-Stick neu installiert und während der Installation die vor dem Update-Versuch gesicherte Config mit installiert. Nach dem Reboot war die Firewall wieder voll funktionsfähig.

https://opnsense.org/
#OPNsense #FreeBSD #OpenSource

🚀 How to Deploy #OPNsense on a Rad Web Hosting #VPS

This guide demonstrates how to deploy OPNsense on a Rad Web Hosting VPS. This guide is tailored specifically for Rad Web Hosting VPS infrastructure, including /32 IP addressing, KVM virtualization, and ISO-based installs.
What is OPNsense?
OPNsense is a free, open-source firewall and routing platform designed for network security, traffic control, and perimeter ...
Continued 👉 https://blog.radwebhosting.com/deploy-opnsense-on-a-rad-web-hosting-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #selfhosting #opensource #selfhosted