← Feed

Posts

• Post #3302187

  @canartuc@mastodon.social I'd rather wait another month than to have a broken update :D

• Post #1879998

  Thanks to a lot of help from @Larvitz@burningboard.net I now have access to the DN42 network. :D

• Post #1349659

  @nuintari Also, don't use the same internet connection for both in-band and out-of-band management. 4G routers are very cheap today, so use one for your out-of-band management, unless you want to drive for hours on a Friday evening.

• Post #1349658

  @nuintari :D True, but I don't provide fiber or celluar, I only cosplay as a firewall admin. Still, being able to access your firewall over 4G if the DSL (we still use that here) breaks is a lot better than being offline.

• Post #1349657

  Yesterday I decided to move my test env at work from VMware ESXi 8.0 to Bhyve, so I exported all VMs, Installed FreeBSD 15.0 on a 2x SSD ZFS mirror, and set up the network (bridge / VLAN) today. Now I just need to converte the vmdk files and import them, let's see if it works. The host is an old Dell T330, and since it uses the PERC H330, I had to modify the FreeBSD installer again, so it uses the newer mrsas driver. It's Intel Xeon E3-1230 v6 and 32 GiB of RAM are still fast e...

• Post #717755

  @nuintari AFAIK it should not matter if you use SwitchOS or RouterOS as long as the switch chip is capable of offloading everything. Some cheaper devices used to (?) have most interfaces connected to a switch chip, and some to the CPU, which may have been the cause of the low performance. I've tried both the hAP ax LTE6 lite and the hEX refresh (E50UG) and I didn't notive anything, but alas they're routers, not switches. 🤷‍♂️

• Post #717754

  Well then, the first of my 2-node DIY Sophos Firewall HA cluster nodes is now shut down... Time to install OPNsense on it.

• Post #717753

  Just found out (after troubleshooting for 2+ hours) that the reason why one of our customers VoIP equipment can't reach their SIP registrar's servers IP, is because of peering issues. Funnily enough, it works fine when I route the SIP traffic over the backup 4G connection, whose ISP has direct peering with the SIP registrar. I fully expected the Sophos XGS Firewall to be the culprit, but of course, this time it worked perfectly. Times like these feel like Sophos is gaslighting...

• Post #717752

  Today I shut down another one of my Proxmox VE VMs, after migrating the last of it's jails (NSD, Unbound, AdGuard Home, and the 2nd HAProxy carp instance) to my HP t620 thin client. This little machine has been running my new Zabbix Server for the last 6 months. I've also set up automated ZFS replication on my main FreeBSD server to back up all the data on it every night, so I don't have to worry about the single SSD dying anymore. Now only NetBox (Ubuntu LXC) and the...

• Post #717751

  Just tried upgrading my OPNsense from 25.7 to 26.1 - but it failed (upgrade hang with the hostwatch plugin, then the UI died because of Zenarmor getting stuck). Luckily, I created a ZFS snapshot just before that, so a simple "zfs rollback snapshot@timestamp && reboot" and I'm back. Nothing beats the ability to "Ctrl + Z" at a filesystem level.

• Post #717750

  Today I've set up two OPNsense 26.1 Firewalls in a HA configuration on a single DSL internet connection. Failover is working, the backup OPNsense does connect the PPPoE session, and requests a IPv6 prefix via DHCPv6, but it doesn't disconnected the PPP session after the main OPNsense comes back online. Not sure why, I've set up CARP on the igb0_vlan interface, but it's not working. I probably forgot something, needs more troubleshooting. Still, pretty nice not...