I think I’ve adjusted it to be as permissible as possible. There are some auto-generated rules that populate above it that, when expanded, look like maybe they would interfere? But I thought the manual rules should override anything in there. I can’t think of anything else.
I don’t see myself needing more advanced functions, and at this point I’d be happy to get the basic ones working, haha.
I understand the concept of a trunk port, but I don’t know how to translate that into some other terminology that my manual uses instead, or if there’s some other paradigm. To the best of my knowledge, it’s the difference between a tagged port and an untagged port, which I think I have configured correctly. I must be at least in the ballpark if I can hit the gateway and nothing else.
The screenshot in the original post is the only firewall rule on 10. This is the equivalent rule on 1 that will look very familiar.
And this is the IPv6 rule on 1. Both of these screenshots were from rules set up by default.
From the mini PC on VLAN 10, the output is:
inet 192.168.10.157/24 brd 192.168.10.255 scope global dynamic noprefixroute
Thanks! I appreciate step by step guides with explanations, but as we’ve both covered, the guides I followed have now fallen way out of date. Has OPNsense always moved this fast with ripping out components and paradigms and replacing them with others? Do you have an up to date video guide that you could refer me to so that I get more "how"s and "why"s along with each setting to help understand it better?
Unlike some other settings in OPNsense, there’s nothing like “Legacy” or “Deprecated” to indicate that Dnsmasque is being phased out, and when I see “new Rules”, I suspect that it’s so hot off the presses that it may not be fully working yet. Their replacements are both ready for prime time? Blocking ads by DNS wasn’t a goal I had in mind for this project of mine, but I can’t say I haven’t been tempted to increase scope to cover it.
My switches are both GS305E Netgear switches, and the word “trunk” doesn’t show up anywhere in the manual. What I do have are VLAN 10 ports tagged when they face the firewall or another managed switch; and untagged when they face the end device; as per Home Network Guy. That was what got me far enough along that I was able to ping the gateway. Before that, my pings went completely unanswered.
Unfortunately, most of my networking experiments end up sectioned off to the weekend, because I try to minimize any damage I might do to my home network during the work week (I work from home) and disruption for my wife trying to enjoy the internet herself. All that to say that I might be back here again asking for help, but it will be on a hell of a lag. You definitely gave me some homework to do, too.
A ping against that address works on the VLAN 1 desktop. It returns “Network is unreachable” on VLAN 10. I’m not quite sure what you mean by DNS settings on the host. I’m using DHCP, and DNS appears to be automatic as well. I’m on Debian KDE, for what that’s worth, and historically in my life, I haven’t touched DNS settings basically anywhere; maybe I could count how many times I did on my fingers, but it definitely wasn’t recently for this project. Presumably the problem isn’t only DNS, because these two computers on different VLANs can’t ping each other by IPv4.
Looking at the live view, a ping against Google shows both my and Google’s IPv6 addresses when done from my desktop on VLAN 1, but the logs show nothing of the sort when done from my mini PC on VLAN 10, which isn’t surprising, since the error returned from the terminal is “Temporary failure in name resolution”, meaning the error is before it even knows what Google’s IP address is. I don’t know what step I might have missed for that to be the case.
If you look at my screenshot, those are the settings of my VLAN’s firewall rule, and if there’s a difference between that and the one on the LAN interface, other than the field labeled Interface Name, I don’t know what it is. The LAN interface has a firewall rule for IPv6 as well, but the Home Network Guy tutorial skipped that one, and it still reached the internet. His tutorial was for allowing internet access without reaching the other private networks, but I believe I understand the Invert setting that he checked, and I did the opposite of that specifically for this test.
Part of the reason it has to be this way is the layout of my apartment. The modem and firewall are in the bedroom, where there is no desk. It then takes a long walk to my living room, where it hits the first switch, and then a short walk from there to my office, where it hits the second switch and all of the computers that need this configuration.
Thanks!
4, but only 2 are enabled. WAN and LAN. The LAN connection is only split by the managed switches.
Not for this project, you don’t.
If you want the game to last forever, it assumes you’ve already got it sourced from somewhere DRM-free, where you can continually copy it to other healthy media. Nothing lasts forever, but this is meant to replicate a lot of the strengths of old consoles, fortunately without some of their own pitfalls like save batteries.
Our own friendly neighborhood Perfect Dark did a write-up on a project called Kazeta a while back that seemed pretty cool.
Hoping to get what I paid for it now that hardware prices are through the roof.
I’ve got a number of friends that have even made a profit off of their used systems. Not because it was their first choice to do so, but because that’s what the market rate is now.
From Mat PIscatella of Circana (tracking US sales data, Piscatella specializes in video games) on Bluesky:
Through May 2026, over 25% of PS5 hardware units sold in the US life-to-date are digital systems.
The life-to-date US attach rate of the add-on Disc Drive to those digital systems is over 5%.
Old data points keep getting thrown around, unfortunately.
Is what it is. Both the pro disc and pro digital camps on this are using whatever numbers best fit the arguments, as one would expect.
Can you take the financial reporting 85%ish digital split as the true split for games with both physical and digital editions? No.
But are the splits better reflected from 5 year old numbers obtained from a leak? Also, no.
Anyways, the numbers aren’t even the point at the moment, are they.
Again, the path of least resistance is to just use Proton, so I’m fine sitting tight for a while. And I remember seeing a post a while back about GOG looking to fill Linux dev positions. If this is something you think you could contribute, feel free to tell them on their career page. I don’t see an active listing there, but that doesn’t mean it can’t happen.
I don’t think it’s a Wayland bug, because I’m on X11 (Kubuntu 24.04; plus I just checked). The game I ran into it one of those issues was, if I’m not mistaken, the first Pillars of Eternity game. I do always run in borderless fullscreen when it’s an option. In any case, if it’s so labor-intensive of a project that you’re not willing to do it, I think you found your answer for why it isn’t done.
You outlined a lot of very good reasons as to why this hasn’t happened already. Is this something you could build as an automated tool to pay it forward, particularly for outside of Steam?
Also, your posts seemed to point mostly to games that won’t launch. I haven’t had that problem. What I have had are issues where the game window behaves in strange ways such that it breaks Alt+Tab; or that it reads my mouse coordinates in incorrect locations in a multi-monitor setup; things like that. Do you expect the updated libraries to solve issues like those as well? Or, in your personal experience, have they?
We can actually put a number on the value of GOG since its recent acquisition, and it’s about $25 million, not billion, which is a pretty stark difference. I get where you’re coming from, but this is something I would have had no idea how to do, and how frequently should those libraries be checked? They probably don’t become outdated all at once. Even with you spelling it out for me, I’m still more likely to just use Proton.
I’ve been daily driving Linux for 9 years, and I didn’t know any of this either. I wouldn’t recommend yelling at developers to update old games, because basically none of them ever have it in their development budget to go back and do so, if the studio even survived to this day. If this is something that routinely happens with old Linux native games, then we need a better solution. I’ve run into misbehaving old Linux native games and also just defaulted to using Proton instead. That’s way easier than diagnosing which libraries I need, which I never thought to do and still don’t know how.
That’s what I’m saying though. I believe I tried a few configurations of both 4 and 6 now, in the time since you asked. At first it was only 4, because a tutorial said I didn’t need to bother. I added one for 6. I tried setting the source to “any” instead of just the VLAN network. I tried a handful of permutations of those things, disconnecting and reconnecting the wired connection to release/renew between each one. It doesn’t seem to have changed.