Ad Schellevis

well, if the behavior is different with pf disabled, you might try to create a very simple ruleset (pass all) to see if there's something in our default ruleset (although...

just to be sure, I mean a pf.conf file with only `pass all` in it to exclude any defaults from our end (loaded via `pfctl -f /path/to/my/file`)

@kumy did a very quick review and left some remarks/tips.

@kumy ok, maybe the better question is then if there's anything in `/usr/local/www/xymon/` that should be accessible (without any constraints) via http[s]. If that's not the case, we can try...

Patching in ports should work similar to the change already in the Makefile (https://github.com/opnsense/ports/blob/3c574e41e4e45df72cbb64c060a5637dd1d64f29/net-mgmt/xymon-client/files/patch-Makefile). If I'm not mistaken (@fichtner usually handles these), you can drop a file there and build...

We likely shouldn’t merge this, using the ndp command for host discovery will be quite slow and inefficient as we’ve also seen while looking at captive portal on ipv6. As...

for some reason ifconfig doesn't accept changes here, example output when changing 128 to 120 (or anything else): ``` # /sbin/ifconfig vtnet2 inet6 'ffff:ffff:fffff::4f31' prefixlen '120' alias vhid '3' ifconfig:...

The peer generator is intended to generate new peers, even if you would be able to select an existing peer, it wouldn't help a migration as the private keys are...

We're probably not talking the same language here, the gui should offer anything you need, which is the same as available via the api (even more if you count the...

I understand your point, the problem is that peers should not contain the data needed to create the client config for security reasons.