Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    A hardy "Welcome!" to OPNsense!

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    108 Posts 25 Posters 65.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Supermule Banned
      last edited by

      Really weird.

      1 Reply Last reply Reply Quote 0
      • B
        bennyc
        last edited by

        @athurdent:

        Can't find the thread Derelict refers to, but I'm also wondering why gonzopancho switched to guest status recently.

        the thread -> https://forum.pfsense.org/index.php?topic=88244.msg518420#msg518420

        4x XG-7100 (2xHA), 1x SG-4860, 1x SG-2100
        1x PC Engines APU2C4, 1x PC Engines APU1C4

        1 Reply Last reply Reply Quote 0
        • jdillardJ
          jdillard
          last edited by

          @athurdent:

          I'm also wondering why gonzopancho switched to guest status recently.

          He closed his forum account recently, that's just how SMF represents it now.

          1 Reply Last reply Reply Quote 0
          • M
            magnifico
            last edited by

            What are differences between pfsense and opensense? How about bugs? Do opensense have the same bugs as pfsense?

            1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate
              last edited by

              It's not a bug.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 0
              • M
                magnifico
                last edited by

                @Derelict:

                It's not a bug.

                What is not a bug? Do you want to say that pfsense dont have any bug? I wasnt seen such software before, without any bug. If you say that pfsense dont have any bugs and even dont interested to find out this and you are developer, then this makes pfsense just "unknown and not trustable software"…..All developers are interested about possible bugs to find out, to fix them before someone other user installs software.

                1 Reply Last reply Reply Quote 0
                • C
                  cmb
                  last edited by

                  @magnifico:

                  Do opensense have the same bugs as pfsense?

                  Mostly yes, plus more as they broke things that worked, and haven't kept up to date on things we've fixed, even just the short list of security fixes. Even when I was kind enough to tell them about a serious file corruption bug that we fixed, they "fixed" it in a way that doesn't actually fix the problem.

                  1 Reply Last reply Reply Quote 0
                  • C
                    cmb
                    last edited by

                    @magnifico:

                    @Derelict:

                    It's not a bug.

                    What is not a bug? Do you want to say that pfsense dont have any bug? I wasnt seen such software before, without any bug. If you say that pfsense dont have any bugs and even dont interested to find out this and you are developer, then this makes pfsense just "unknown and not trustable software"…..All developers are interested about possible bugs to find out, to fix them before someone other user installs software.

                    Of course we are. Derelict isn't a developer, and I think his reply was in jest.

                    1 Reply Last reply Reply Quote 0
                    • S
                      Supermule Banned
                      last edited by

                      http://forum.opnsense.org

                      Enroll and ask the same there. Great bunch of guys and extremely helpful!

                      1 Reply Last reply Reply Quote 0
                      • jdillardJ
                        jdillard
                        last edited by

                        @cmb:

                        @magnifico:

                        @Derelict:

                        It's not a bug.

                        What is not a bug? Do you want to say that pfsense dont have any bug? I wasnt seen such software before, without any bug. If you say that pfsense dont have any bugs and even dont interested to find out this and you are developer, then this makes pfsense just "unknown and not trustable software"…..All developers are interested about possible bugs to find out, to fix them before someone other user installs software.

                        Of course we are. Derelict isn't a developer, and I think his reply was in jest.

                        It was in reference to this thread: https://forum.pfsense.org/index.php?topic=95969.msg534018#msg534018

                        1 Reply Last reply Reply Quote 0
                        • M
                          magnifico
                          last edited by

                          @cmb:

                          @magnifico:

                          Do opensense have the same bugs as pfsense?

                          Mostly yes, plus more as they broke things that worked, and haven't kept up to date on things we've fixed, even just the short list of security fixes. Even when I was kind enough to tell them about a serious file corruption bug that we fixed, they "fixed" it in a way that doesn't actually fix the problem.

                          Ok, I believe the same. I was always thinked that never make software that copies other software functionality, make instead new soft. In their website I read that they just know better how to make firewall but still dont put out no any comparison. No any original idea…Ok, I give up testing it.

                          1 Reply Last reply Reply Quote 0
                          • C
                            cmb
                            last edited by

                            @Supermule:

                            http://forum.opnsense.org

                            Enroll and ask the same there. Great bunch of guys and extremely helpful!

                            Hah. For some definition of "great" that you won't find in a dictionary, where great == pathological liars who are in way over their heads.

                            @jdillard:

                            It was in reference to this thread: https://forum.pfsense.org/index.php?topic=95969.msg534018#msg534018

                            Ah yes. Indeed there aren't any bugs involved there.

                            1 Reply Last reply Reply Quote 0
                            • S
                              Supermule Banned
                              last edited by

                              That is wrong. Totally wrong.

                              You couldnt be more wrong even if you tried.

                              1 Reply Last reply Reply Quote 0
                              • D
                                doktornotor Banned
                                last edited by

                                1 Reply Last reply Reply Quote 0
                                • M
                                  Mr. Jingles
                                  last edited by

                                  @doktornotor:

                                  ;D ;D ;D

                                  6 and a half billion people know that they are stupid, agressive, lower life forms.

                                  1 Reply Last reply Reply Quote 0
                                  • K
                                    kejianshi
                                    last edited by

                                    I'm sensing tension…

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      Supermule Banned
                                      last edited by

                                      To be honest…

                                      I see code posted on github by opnsense dev's and copied into pfsense few days later ... A lot of the code and the way it works is WAY different than pfsense.

                                      What they need is a better GUI and packages to be available to opnsense. The devs are very friendly, openminded and listen to the small but devoted community.

                                      Whats really the issue here, is pfsense is opensource and it has been forked. Result is that pfsense is nothing but a trademark and a name. Its not a product since you can get similar performance and you dont have to sign over your grandchildren to some weirdo to get access to dev tools.

                                      Pfsense is nothing without the people that use their sparetime to develop and maintain packages for this OS project and we can all see that many of the original "nice" guys have gone and is never heard of again in here.

                                      Opnsense will succeed in what they want to achieve. Despite the badmouthing in here. Because of the shear friendlyness and the flow of information going on the forum from the dev's.

                                      Lots of updates all the time and very short time to implement latest security patches.

                                      And its bloody simple to update since it has been stripped of all the weird things that breaks things all the time in pfsense.

                                      When the bacis packages are available then its goodbye to pfsense. Not because I dont like it, but because of the hostility of ESF. Its not a friendly place to be anymore.

                                      Simples.

                                      1 Reply Last reply Reply Quote 0
                                      • K
                                        kejianshi
                                        last edited by

                                        I don't know guy.  To me it seems like you have been out on a mission to find fault with pfsense.

                                        I mean, if you don't like pfsense just switch.

                                        The rants are getting ridiculous already.

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          Mr. Jingles
                                          last edited by

                                          @kejianshi:

                                          if you don't like pfsense just switch.

                                          This, plus: I've been taught to be grateful for what you get for free.

                                          Staff over here has been rude from time to time, yes, but: they by no means have the monopoly on that (…). Everybody has his bad days from time to time, and some are better in hiding that than others. Soit (that's French  ;D ).

                                          In the end what counts is: we get this for free, and should be grateful for that. I know I am. Perhaps I'm old species, being loyal and stuff  :P

                                          6 and a half billion people know that they are stupid, agressive, lower life forms.

                                          1 Reply Last reply Reply Quote 0
                                          • C
                                            cmb
                                            last edited by

                                            @Supermule:

                                            I see code posted on github by opnsense dev's and copied into pfsense few days later …

                                            That's the point of open source where they're actually doing worthwhile things. That's only been a handful of commits. If they kept up with our commits, they'd be in a whole lot better shape. They're still missing security fixes we made months ago that are published here:
                                            https://www.pfsense.org/security/advisories/

                                            and no doubt a significant number of bug fixes (they forked from 2.2 beta, and didn't keep up from beta to release, much less since). The security update list is small and easy to keep up with if you're paying attention. The bug fixes, much harder to deal with since it's a long list.

                                            @Supermule:

                                            Whats really the issue here, is pfsense is opensource and it has been forked. Result is that pfsense is nothing but a trademark and a name. Its not a product since you can get similar performance

                                            Similar performance is definitely not true. With the "stable" releases they've put out that completely broke very widely-used features (VLANs, others), we'd have pages and pages of threads of broken things within hours.

                                            No one's perfect there, but we do vast amounts of release testing, and we add more and more testing with every release. We have a significant IPsec test environment already, but I'm working this week and weekend on expanding that out, fully automated, to check all possible combinations of options. They don't have the kind of infrastructure or man power to come close to us in release testing.

                                            @Supermule:

                                            Pfsense is nothing without the people that use their sparetime to develop and maintain packages for this OS project and we can all see that many of the original "nice" guys have gone and is never heard of again in here.

                                            You really haven't followed commit logs in a very long time. There are still several active package maintainers, and no recent losses I can think of. Many submit pull requests across all the repos. Outside contributors come and go all the time.  It's how open source works with community contributors. Name one significant package contributor that's been active in the past 3 years who isn't currently active.

                                            Around 90% of the total commits to our code base all time come from people we employ or employed at the time. The first ~3 years this was just a collection of volunteer efforts (and things were much simpler and less featureful). The past 8 years, the significant majority of the work has come from people on our payroll.

                                            Getting stuck with PBIs for longer than we'd like (and the associated issues with FreeBSD 10.x) has discouraged some of the package maintainers. In 2.3, we'll be back to a sane state there, and I expect some of them who went inactive because of those issues will return.

                                            @Supermule:

                                            Opnsense will succeed in what they want to achieve.

                                            They don't have the resources. Franco spouts big words and things that might sound smart if you don't understand them in adequate depth, but it's enough to make us shake our heads at times. He's a capable developer in some regards for sure, but…

                                            I go out of my way to try to be nice, pointing out the root of their file corruption problem which we're triple digit man hours into across a handful of people. They went off and implemented an awful hack, to copy new files into place if the old ones are corrupt, and threw in a "sync;sync;sync;" which has no impact on the root problem if you're testing for it correctly. Within just a few hours of him posting to their forum that the issue is "not fixable", one of our developers committed the fix for said "not fixable" issue to FreeBSD, after verifying across hundreds of power cycles in a circumstance that wouldn't last 5 without sync before that fix, with sign-off from every big name developer in that area of FreeBSD.
                                            https://blog.pfsense.org/?p=1815

                                            They might succeed to some degree, if they can keep up with what we're doing (all the heavy lifting). But even when we go tell them the problem, they don't actually fix it.

                                            That ^ is a good example of what I mean by in over their heads. One more here. https://blog.pfsense.org/?p=1773

                                            @Supermule:

                                            And its bloody simple to update since it has been stripped of all the weird things that breaks things all the time in pfsense.

                                            I don't see any technical validity to that claim. What "weird things", outside of PBIs which we've ditched already in 2.3 (and they haven't replaced), have they removed? I've seen a lot of what they've removed. A majority of that is NIH syndrome, and wasted effort on what is ultimately a dead end code base (all the PHP needs to die). A lot of their changes were wasted effort in reinventing the wheel on a dead-end code base.

                                            @Supermule:

                                            When the bacis packages are available then its goodbye to pfsense. Not because I dont like it, but because of the hostility of ESF. Its not a friendly place to be anymore.

                                            I'd never exhibited any hostility towards you until you started acting like an ass. At some point you reap what you sow, and my interactions with you end up being mostly defending us from you screaming the sky is falling and everything is shit when there is no actual problem. You're kissing their asses over there, should get a good reception. AFAIK you've never had anything but a good reception here until you started making wild, defamatory false or misleading statements. And I still reply back helpfully to other threads of yours.

                                            I can't think of any instance where we've exhibited any hostility towards anyone who didn't bring it upon themselves, and even that is unusual.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.