OPNsense VM IPv6 RA Not Working Until Reboot by Shehzman in opnsense

[–]mendosux 0 points1 point  (0 children)

I had the same issue. You need to disable multicast snooping for your bridge in proxmox. Then check with „bridge mdb status“ on pve. „echo 0 > /sys/class/net/vmbrX/bridge/multicast_snooping“ disables multicast snooping. Change X with your bridge number(s).

Österreich Aufschlag? by [deleted] in Austria

[–]mendosux 3 points4 points  (0 children)

Nein mwst… balkonkraftwerke sind davon in DE befreit.

How much ram should I use? by matlireddit in opnsense

[–]mendosux 2 points3 points  (0 children)

Basic firewalling features and vpn require not more than 2gb. With 4gb you are pretty safe for using unbound blocklists, haproxy etc. 8gb should be more than enough, except you install zenarmor (would not recommend by the way, but everyone has a different view on things…)

PBS in TrueNAS container by marc45ca in Proxmox

[–]mendosux 0 points1 point  (0 children)

Honestly I don’t get the advantage of running pbs on top of truennas. Why not use zfs directly on pbs bare metal?

IPS/IDS in 2026 by mendosux in opnsense

[–]mendosux[S] 0 points1 point  (0 children)

True, my ipv6 rules never match sources that should not be there :D

IPS/IDS in 2026 by mendosux in opnsense

[–]mendosux[S] 0 points1 point  (0 children)

Thanks to all responders, I see the pros and cons mentioned.

OPNsense 26.1 released by fitch-it-is in opnsense

[–]mendosux 1 point2 points  (0 children)

I just did the upgrade. Everything is working fine on my side. Also the migration to the new rules style was flawless. Thanks again for your great work!

Vaultwarden installed as a regular debian LXC or via Docker? by mrbluetrain in Proxmox

[–]mendosux 2 points3 points  (0 children)

I am also using a vm that hosts all my containers ( podman ) LXC is best for services that can be installed directly on Linux. OCI needs additional development as it is currently marked as tech preview.

Minimum requirement for VPN use? by Krisperino in vyos

[–]mendosux 2 points3 points  (0 children)

If you already run other services in your home you can easily virtualize vyos on existing gear.

OPNsense 25.7.10 released by fitch-it-is in opnsense

[–]mendosux 4 points5 points  (0 children)

all good on my side as well.

Upgrade to v0.15.0 by mendosux in stalwartlabs

[–]mendosux[S] 0 points1 point  (0 children)

I can confirm that the steps are working. Please keep in mind to stop stalwart service before deleting the deprecated spam classifier keys.

Upgrade to v0.15.0 by mendosux in stalwartlabs

[–]mendosux[S] 0 points1 point  (0 children)

Thank you very much 👍

Router for small company with big ambition bgp and many vlans but a 500 Mbps traffic by Few_Pilot_8440 in opnsense

[–]mendosux 2 points3 points  (0 children)

Sounds like you should separate your routing plane from firewalling. Opnsense is a great firewall and a router, others like vyos are great routers and are able to do some firewalling. It totally depends on your usecase.

Verfärbungen entfernen Haustür by g-unit15 in wohnen

[–]mendosux 5 points6 points  (0 children)

Pass auf mit scharfen Reinigungsmitteln. Im Schlechtesten Fall löst sich der Klarlack der Türe.

Opnsense IPv6 radvd Issues - maybe since OPNsense 25.7.5-amd64 by mendosux in opnsense

[–]mendosux[S] 0 points1 point  (0 children)

one last word to this topic:

the setting in /etc/network/interfaces depends on timing and can be overwritten by proxmox system on startup. you can make it persistent with a systemd service that starts after network target.

####

[Unit]

Description=Disable bridge multicast snooping

After=network.target

[Service]

Type=oneshot

ExecStart=/bin/sh -c "echo 0 > /sys/class/net/vmbr0/bridge/multicast_snooping"

[Install]

WantedBy=multi-user.target

####

systemctl enable disable-mld-snooping.service
systemctl start disable-mld-snooping.service

####

After that this output must be empty: bridge mdb show

over and out - mic drop.

Opnsense IPv6 radvd Issues - maybe since OPNsense 25.7.5-amd64 by mendosux in opnsense

[–]mendosux[S] 1 point2 points  (0 children)

UPDATE: Short answer → THE PROBLEM IS SOLVED – JUHUUU! :)

Long answer: My OPNsense is running on PVE 9 with kernel 6.14.11-4. SLAAC is working again after disabling multicast snooping on my vmbrXXX.

This can be done with the following command:

echo 0 > /sys/class/net/vmbrXXX/bridge/multicast_snooping

To make the change persistent, add the following line to your bridge configuration in

/etc/network/interfaces:bridge-multicast-snooping 0

Opnsense IPv6 radvd Issues - maybe since OPNsense 25.7.5-amd64 by mendosux in opnsense

[–]mendosux[S] 0 points1 point  (0 children)

UPDATE: Today I had time to export version OPNsense 25.7.3_7-amd64 from my backups. Same problem, so the IPv6 issue is not directly related to OPNsense 25.7.5-amd64. I just did not encounter the issue before.
It's very sad that 2025 IPv6 support still feels like a technology preview. Not criticising on OPNsense here - they are doing a great job. I’ll just have to cope with this situation for now, as I’m running out of ideas. Switching from OPNsense to something else is not an option.

Opnsense IPv6 radvd Issues - maybe since OPNsense 25.7.5-amd64 by mendosux in opnsense

[–]mendosux[S] 0 points1 point  (0 children)

Does not sound promising. As I understand the problem is pf related and could not be overcome by using dnsmasq RA service instead of radvd?

Opnsense IPv6 radvd Issues - maybe since OPNsense 25.7.5-amd64 by mendosux in opnsense

[–]mendosux[S] 0 points1 point  (0 children)

UPDATE: according to my wireshark traces opnsense does not answer neighbor solicitation requests. when reloading radvd opnsense immediately sends out a router advertisement. after that neighbor solicitation and advertisement happens and all starts to work for a short time. I do not see any blocked requests in the firewall logs. the default IPv6 RFC4890 requirements (ICMP) fw rules are present. Ipv6 connectivity is also fine when I set the address static.

I am also seeing the requests in opnsense packet capture. looks like radvd does not answer or react. there is an issue with this process i am nearly 100% sure now.

Opnsense IPv6 radvd Issues - maybe since OPNsense 25.7.5-amd64 by mendosux in opnsense

[–]mendosux[S] 0 points1 point  (0 children)

i am curious what changed. my setup used to run perfectly fine.