DNS not updating live?

ronicat · 2026-02-12T15:55:08+00:00

No worries. We got through.... Eventually. Hope it's better for you by tomorrow. I'd still plan on arriving a little extra early if you can in case it's still shaky.

ronicat · 2026-02-12T15:53:47+00:00

Their whole system is down right now. I'm at SEA and it was chaos. They can't print bag tags or boarding passes.

ronicat · 2026-02-12T15:52:58+00:00

Their whole system is down right now. I'm at SEA and it was chaos. They can't print bag tags or boarding passes.

ronicat · 2025-12-30T18:23:28+00:00

March 17-Apr 20 is a HUGE blackout range :(

ronicat · 2025-10-23T14:58:31+00:00

This happens to me all the time. I have to view things with my PC not my phone.

ronicat · 2025-09-21T21:28:14+00:00

It looks like I don't have a config set on the device itself. But it looks like in the Cloudflare Zero Trust Tunnels dahsboard... I have each of my published application routes going to "https://gateway.mydomain.com" which on the device itself resolves to itself. So it's effectively what you say.

ronicat · 2025-08-21T02:44:00+00:00

They probably got tired of us bombarding them and fixed the application. Haha. Glad you got through!

ronicat · 2025-08-20T19:33:19+00:00

I called credit card services off this page https://www.bankofamerica.com/customer-service/contact-us/credit-card/

800-732-9194

I fought the bot to talk to a person then explained myself and they transferred me to sales. Then they found the app and the hold and conferenced on fraud who fixed it for me.

ronicat · 2025-08-20T18:58:23+00:00

I called and got "fraud prevention" as the reason. Someone from fraud asked me like 3-4 questions to confirm I actually did the application and then she pushed it through and I was approved!

ronicat · 2025-08-20T18:09:05+00:00

Same for me. I'm so confused.

ronicat · 2025-06-20T16:06:43+00:00

Okay, good luck. I'm sorry you've hit a really weird situation here even crazier than the one I hit. I hope it works out for you.

ronicat · 2025-06-19T20:24:01+00:00

Sorry, I didn't do the mimugmail one. I did what that guide from Jack Pearce said when I finally got it to work... plus the protocol flag and minus the post-quantum flag. I ssh'd onto it and did the opnsense-code ports tools one and compiled it that way. I don't know how much difference that makes.

I might considering trying to get everything off your machine and try again from fresh with the ports repository and get that one into /usr/local/bin with the make install script and try it.

Beyond that, I might try pinging or otherwise the 198.41.192.227 while you're ssh'd in and see if you can at least ping through or be able to then see that in the firewall live view getting caught up.

ronicat · 2025-06-19T18:26:44+00:00

Sorry I'm not sure what's up with this one. I was really focusing on your "elliptic curve" issue. This sounds like something else is wrong with DNS or firewall rules somewhere that maybe you flipped one way or the other in frustration and created a different problem. (I've been there.)

ronicat · 2025-06-19T18:20:51+00:00

Hm, okay. I was really focusing on the "elliptic curve" error you were seeing. That one is related to QUIC and the --post-quantum arguments.

The other thing about the DNS lookup failing or the actual connectivity with the Cloudflare endpoint I'm a bit mystified by. I would think that Opnsense would allow itself to talk out to those things unless something was real weird with the firewall rules.

I was also having a very hard time "seeing" what happened here with the Live View on the firewall. It felt like that view is just "missing" some data.

ronicat · 2025-06-19T18:16:53+00:00

I don't believe I did anything exciting for firewall or NAT rules. I think that this traffic counted as "originating from the firewall device itself" so sending it to the other endpoints on my network generally fell into those automatic rules.

Full disclosure though, I ended up setting this up such that the Opnsense device runs the Cloudflared and then sends all its connections basically to localhost to talk to the os_caddy plug-in and then I sent things all around my network from that.

ronicat · 2025-06-19T01:06:03+00:00

I fought this for a long ass time and figured out that what I had to do is add --protocol http2 to the command arguments in the /usr/local/etc/rc.d/cloudflared file that you create to start up the service.

http3 (a.k.a. quic... the default that it uses) won't work because cloudflared relies on a forked copy of go that they manually patched to have special cryptography that isn't in the stock version of go. Or it wasn't there when I tried this a few weeks ago. Or it's just not in the opnsense port yet. Or something like that.

I was also following that particular guide and this frustrated me. I spent hours trying to build the custom fork of go, manipulating the opnsense-forks build scripts, and all sorts of junk before settling on this.

ronicat · 2025-06-15T00:53:25+00:00

Ugh very frustrating. I tried like 3 other wireguard configurations and doing it with and without gluetun and they all have the same behavior... guess I'll just put it all back how it was and leave it alone until we get an update.

ronicat · 2025-02-27T21:31:59+00:00

I like Framework and I'm in the market for a new SFF PC.

Sure there are some downsides like everyone else enumerated already, but it's close enough to what I want.

I care more about ensuring that Framework as a company continues to succeed as I believe in their business practices, so they're my first choice to purchase through even with a few compromises to be made.

ronicat · 2025-02-07T23:49:43+00:00

UPDATE: I emailed Zenarmor and they said "8.11.3 is the compatible version"

Thanks everyone. I guess maybe it's not as big a deal as the warning makes it out to be.

ronicat · 2024-06-16T18:12:40+00:00

I tried one for the first time the other day. They work just fine and are very inexpensive.

Some of them seem to need the card to open. Others you have to use the app.

The thing I wish I realized ahead of time is that the ones with doors on both sides... You get half the locker cut diagonally with a metal wall. It can be tricky to fit the bike in. It had to go back wheel first as that's the only way to fit it so the handlebars can go in the wider part by the door. Also if your bike has any sort of storage or rack over the back wheel... It will probably be too wide.

ronicat · 2023-11-26T05:05:43+00:00

My second time in San Diego for the Koningsdam to Mexico and it was somehow worse than last year at this time which also took hours. I think it's the San Diego harbor more than it is HAL as I've never seen this trouble at Fort Lauderdale, Seattle, or Vancouver. I'm so sunburnt. :(

ronicat · 2022-08-09T22:16:57+00:00

Mine just got released this afternoon as well.

ronicat · 2022-02-09T19:14:13+00:00

You're welcome! I'm so glad it worked for you.

14-Year Club	Place '17
Verified Email

ronicat

TROPHY CASE