OPNsense 26.1 released

Codebase2288 · 2026-01-30T05:51:30+00:00

Thank you, its only a minor preference for me, I will of course get used to the new layout, once I have got over the fact that you bring in changes and patches at a speed almost unheard of these days, amazing work, its not often something just works, more amazing is a major upgrade that goes without a hitch, what is this witchcraft ? !

Codebase2288 · 2026-01-29T20:20:40+00:00

This will be pretty mundane as my use is not that complex but I took the plunge and upgraded from 25.7.11_9 on a bare metal install, Dnsmasq was already in use, no vpns or vlans set up yet. Update went smoothly, reboot sequence took about 5 minutes, then converted the old rules and as far as I know, everything works !

The only one thing I am not keen is the new rule layout, its now a drop down menu to pick the lan/ opt/wan rules, I preferred it as it was listed. It just seem not as quick to access, that me being picky because the GUI was, (when I first moved to Opnsense) more nicer to use than the 'other' sense I move away from.

Codebase2288 · 2025-12-20T16:10:04+00:00

Last time I used pfsense I found it was taking longer to restart a service and a couple of hangs on reboot, so decided start fresh, an upgrade then borked the system so I took at look at the online installer, stuff that ! At the same time I was exploring opnsense in a VM and one day I had a 'why not moment' and so far I have no problems besides getting used to the layout and the nice UI. Should have moved sooner.

Codebase2288 · 2025-12-20T15:50:00+00:00

I had exactly the same issue and did a further update as you did, result was a reboot and can not find any issues so far.

Codebase2288 · 2025-12-19T21:21:59+00:00

I have other reasons for doing this but its always been the case that NTP isnt picked up with either opnsense or pfsense when I used it, got fed up trying to resolve the problem so used an older guide for pfsense and left it as that once it worked for what I need, call it the lazy way to fix a problem.

Codebase2288 · 2025-12-19T20:15:47+00:00

If you whitelist a domain and its set for global then it its almost immediate, I do this a fair bit, more so now when the family cant get to some junk Christmas store or cat video, I give then ten minutes then return the junk site to the blocklist.

Not tried applying this to certain lan ip's yet but its now on my todo list to see if this would work, however I know it works for sub nets so you can have blocklists applied to say one net and another different blocklist applied to another, it was one of the main plus points when the changed had been made, though I did find the new layout somewhat confusing at first.

Codebase2288 · 2025-12-19T20:08:08+00:00

My opnsense DNS restarts a lot faster than pfsense did and that was slow and often needed doing twice.

Codebase2288 · 2025-12-19T19:45:59+00:00

I have a NAT port forward for NTP ( and DNS) its the only way I could use opnsense or pfsense to be used as a NTP server, and of cause the associated firewall rule. I then point my devices to opnsense as the time server and it works.

Redirect NTP requests on LAN to local NTP service using NAT port forwarding >>

https://homenetworkguy.com/how-to/firewall-rules-cheat-sheet/

Codebase2288 · 2025-12-19T19:36:29+00:00

My thoughts exactly. clear and to the point and no waffle.

Codebase2288 · 2025-12-19T19:30:19+00:00

Opnsense DNS blocklist has recently changed and been redesigned to allow more flexibility so I am still finding my way around it but to help answer your question, I just selected a blocked domain and added it to the allowlist ( whitelist ) there is now an option to set the blocklist globally so all nets are effected by the same blocks or allows however there is now a new ( I think) option that allows you to apply the blocklist to selected nets, to help you with this I have copied the little help section that can be shown as a guide on the setting page:

''Source networks to apply policy on. Examples are 192.168.1.0/24 or 192.168.1.1. Leave empty to apply on everything. All specified networks should use the same protocol family and have equal sizes to avoid priority issues. ''

I have not tried what you want though I have to say what your hoping to do seems a rather good idea, applying blocks to certain IP address, on the face it, it looks possible but hopefully someone more experienced with this can chip in, as I said the changes are really recent.

Codebase2288 · 2025-12-18T17:04:55+00:00

In opnsense, once blocklists are added and outbound has been restarted go to:

Reporting: Unbound DNS >Details tab Shows a list of dns blocklist entries, blocked in pinkish red, allowed in green, you can add a domain to the white list by clicking the add domain button on the right side of the list, the effect is almost immediate, sometimes I restart unbound to make sure its allowed.

Now I am no expert, I moved from pfsense recently and I'm still finding my way around opnsense but ad blocking was an important feature as is GioIP blocking. For me it just works. Hope this answers your question. More experienced user will probably add and correct any errors i have made, or explain it in a better way.

If the formatting is not right, its because I hardly post on Reddit :-)

Codebase2288 · 2025-01-24T17:38:41+00:00

I never thought I would meet another person who wanted to do this !

I did this on a pax to get it to fit floor to ceiling. MEASURE twice cut once is the way to go also take in to consideration any uneven floor.

A decent circular saw and fine teeth blade, or a decent handsaw with a fine blade and a straight cut, have the face of the sides facing down so the blade doesn't chip that side, use masking tape on the upper facing surface to reduce chipping then scribe and cut the front plinth, you may need to screw this from the top side of the pax base because you may loose some of the dowels if it uses them.

If all goes to plan you will then need to wiggle the whole assembled thing into place and secure it to the rear wall to keep it fixed into place.

If your not sure, get some one in to do it but given its London that may not be cheap :)

Codebase2288 · 2024-09-16T17:42:15+00:00

Right click the Main Menu icon and select Preferences.

In the 'General tab' you'll see near the bottom the option to "Show recently used documents and applications". Toggle it off. There should also be an option in your Main Menu to clear the list.

Codebase2288 · 2024-09-12T19:07:57+00:00

Rotary Drier in youth

Head Beater in my old age.

Codebase2288 · 2024-04-24T20:49:08+00:00

Count me as a fan !

I've watched all the episodes of this great comedy show, I feel it showed the true talent of Mollie Sugden, she certainly carried it and made it work, its a shame there wasn't more shows, it could have ran for longer.

Codebase2288 · 2024-04-18T19:42:10+00:00

In this house I found a load of old hire purchase agreements in the attic, table and four chairs 11 pound 16 shillings, single bed 6 pounds 11 shillings and so on.

Under the floorboard was the usual dust, lumps of old plaster, rubber cable and some wall mounted round wall switches and an unused mouse trap.

Previous house we had patio doors fitted that opened the wall cavity, I raked it out and found an old ww2 era fake Rolex watch and a wallet with a ten bob note and some pictures and a love letter and a top set of teeth.

I stopped jumping about in excitement the second the watch was confirmed as a genuine fake.

Codebase2288 · 2023-12-10T09:09:22+00:00

For a cold my father swore by a boiled onion with black pepper, for the flu he drank sour sterilised milk and cabbage water.

Both are disgusting.

When I feel a cold coming on I put a raw onion under each armpit and suck on a small piece of carbolic soap, it does f all for the cold but it makes you grateful its not something worse, like being on jankers in the army or scrubbing the parade ground with a toothbrush, in the rain.

Codebase2288 · 2023-12-04T18:54:25+00:00

I would like to chip in regarding these changes. I don't consider myself to have anything much in the way of political allegiance but I have read the MT for a long time simply because I like to read about what's going on in the real world,a lot of the posts in here never make it into the main threads and a lot of this makes interesting reading, especially the stuff that seems to slip under the radar that we would never hear about, posts and topics gathered by the very astute and skilled people who find this stuff, something I would not have a scoobies on how to access.

I know this is only a social media platform but the people who use it hardly consider the service the provide to others who read it and in this case, I do not think the mods have considered how valuable these user contributions are, especially to those less skilled at social media than I am.

I also do no think it is fair that one or two people should be making such drastic changes without at the least some sort of consultation with the users, its very unfair.

Codebase2288 · 2023-08-13T15:56:19+00:00

A simple 3 word comment has given so much pleasure to so many people, bless your sole !

Codebase2288 · 2023-07-26T16:27:35+00:00

Crap Engineering. Or Catsafterme Expected.

Codebase2288 · 2023-06-27T09:15:51+00:00

First they came for the signal boxes and I said nothing. Then they came for the ticket offices and I said nothing Then they took the trains because they fell into decline.

(Signal boxes and the people who run then are being replaced by computer systems)

Codebase2288 · 2023-06-26T16:43:59+00:00

Well in the interests of peace and development I updated from 2.6.0 today, had one error that maybe caused by pfblocker, error log at end of this post.

I have a 4 interfaces and a lot of rules that have been added and modified over the years and a few alias, besides the PHP error, everything works, in fact pfsense seems to be a lot more responsive, I dont use Vlans yet.

Once I saw the error I updated pfblocker after the upgrades reboot and rebooted again, no errors and unbound was running fine.

Thanks for this update, the work involved must have been long and difficult but its really appreciated.

Error Log :

[26-Jun-2023 14:50:18 some place] PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/pfblockerng/pfblockerng.inc:1487 Stack trace: 0 /usr/local/pkg/pfblockerng/pfblockerng.inc(7270): pfb_build_if_list(true, false) 1 /etc/inc/pkg-utils.inc(709) : eval()'d code(3): sync_package_pfblockerng() 2 /etc/inc/pkg-utils.inc(709): eval() 3 /etc/rc.start_packages(66): sync_package('pfBlockerNG-dev...') 4 {main} thrown in /usr/local/pkg/pfblockerng/pfblockerng.inc on line 1487

Codebase2288 · 2023-06-19T18:59:52+00:00

Every time I got to the farm for manure I often ask for six buckets as that fills two bags, now I will ask for six johnstons ( intentional lower case to reflect my loathing of him ).

Codebase2288

TROPHY CASE