Software-update: OPNsense 26.1.5
Het pakket OPNsense is een firewall met uitgebreide mogelijkheden. Het is gebaseerd op het besturingssysteem FreeBSD en is oorspronkelijk een fork van m0n0wall en pfSense. Het pakket kan volledig via een webinterface worden ingesteld en heeft onder andere ondersteuning voor mfa, OpenVPN, IPsec, CARP en captive portal. Daarnaast kan het packetfiltering toepassen en beschikt het over een traffic shaper. De ontwikkelaars achter OPNsense hebben de vijde update voor versie 26.1 uitgebrachten de releasenotes voor die uitgave kunnen hieronder worden gevonden.
OPNsense 26.1.5 releasedThis updates ships a few third party updates, assorted core fixes and improvements of which Kea DDNS and options support may be the most sought-after. The captive portal IPv6 changes are ready for wider testing on the development version and over there the grids will now auto-resize as the limits of the Tabulator UI are pushed farther and further. ;)
Here are the full patch notes:system: cleanup and simplify certificate deployment and remove legacy config importsystem: validate monitor uniqueness based on the host route presencesystem: simplify user/group sync scripts using config_read_array()interfaces: clean up overview UI code and fix CARP badge alignmentinterfaces: fix static neighbor apply button (contributed by Konstantinos Spartalis)interfaces: simplify CARP scripts using config_read_array()interfaces: automatic dhclient recoveryinterfaces: settings page use cases for config_read_array()firewall: fix regression in alias summary not shown in new rules GUIfirewall: invalidate database when last updated time is in the futurefirewall: add missing "static port" option in source NATfirewall: add semantic groups coloring option in dashboard widget (contributed by Gunnar Lieb)firewall: one-to-one NAT rendered rule missed "log" statementfirewall: add missing alias rename rule targetsfirewall: add alias GeoIP database update button and move bogons one to the same tabfirewall: fix port handling in registered NAT rulefirewall: fix MVC code vs. legacy rules display issuesfirewall: outbound NAT page use case for config_read_array()captive portal: cleanup and simplify certificate deployment and remove legacy config importcaptive portal: enforce POST-only on logoffAction() (contributed by Oliver Jueguen)dnsmasq: add "no-ping" option (contributed by Konstantinos Spartalis)dnsmasq: remove a too-strict validation for suffix IPv6 addresses without constructor usednsmasq: ensure the lease view handles client-id correctlyipsec: fix delete selected for SPD and SADkea: add DDNS and DHCP option supportnetwork time: add pool property for time servers (contributed by Konstantinos Spartalis)network time: remove stale symlink when PPS is disabledunbound: only emit warning when "addptr" was requestedunbound: use expand formatter for blocklist URLs and DNSBL typesunbound: include blocklist length in state change logicbackend: more fixes for re-bound SyntaxWarning throws in Python 3.13backend: use config_read_array() non-insert mode mode iteration of virtual IPsmvc: BaseListField: merge remaining use of shared implementation of static optionsmvc: File: add file_update_contents() helpermvc: Shell: rewrite exec_safe() to avoid vsprintf() complicationsrc: speed up maintenance file deletesui: bootgrid: require selection to be enabled for delete-selectedui: bootgrid: introduce 'expand' formatter to cap lists of dataplugins: os-frr 1.51plugins: os-tayga 1.5ports: openldap 2.6.13ports: perl 5.42.1ports: phpseclib 3.0.50ports: py-duckdb 1.5.0ports: suricata 8.0.4
system: cleanup and simplify certificate deployment and remove legacy config importsystem: validate monitor uniqueness based on the host route presencesystem: simplify user/group sync scripts using config_read_array()interfaces: clean up overview UI code and fix CARP badge alignmentinterfaces: fix static neighbor apply button (contributed by Konstantinos Spartalis)interfaces: simplify CARP scripts using config_read_array()interfaces: automatic dhclient recoveryinterfaces: settings page use cases for config_read_array()firewall: fix regression in alias summary not shown in new rules GUIfirewall: invalidate database when last updated time is in the futurefirewall: add missing "static port" option in source NATfirewall: add semantic groups coloring option in dashboard widget (contributed by Gunnar Lieb)firewall: one-to-one NAT rendered rule missed "log" statementfirewall: add missing alias rename rule targetsfirewall: add alias GeoIP database update button and move bogons one to the same tabfirewall: fix port handling in registered NAT rulefirewall: fix MVC code vs. legacy rules display issuesfirewall: outbound NAT page use case for config_read_array()captive portal: cleanup and simplify certificate deployment and remove legacy config importcaptive portal: enforce POST-only on logoffAction() (contributed by Oliver Jueguen)dnsmasq: add "no-ping" option (contributed by Konstantinos Spartalis)dnsmasq: remove a too-strict validation for suffix IPv6 addresses without constructor usednsmasq: ensure the lease view handles client-id correctlyipsec: fix delete selected for SPD and SADkea: add DDNS and DHCP option supportnetwork time: add pool property for time servers (contributed by Konstantinos Spartalis)network time: remove stale symlink when PPS is disabledunbound: only emit warning when "addptr" was requestedunbound: use expand formatter for blocklist URLs and DNSBL typesunbound: include blocklist length in state change logicbackend: more fixes for re-bound SyntaxWarning throws in Python 3.13backend: use config_read_array() non-insert mode mode iteration of virtual IPsmvc: BaseListField: merge remaining use of shared implementation of static optionsmvc: File: add file_update_contents() helpermvc: Shell: rewrite exec_safe() to avoid vsprintf() complicationsrc: speed up maintenance file deletesui: bootgrid: require selection to be enabled for delete-selectedui: bootgrid: introduce 'expand' formatter to cap lists of dataplugins: os-frr 1.51plugins: os-tayga 1.5ports: openldap 2.6.13ports: perl 5.42.1ports: phpseclib 3.0.50ports: py-duckdb 1.5.0ports: suricata 8.0.4
Source:
Tweakers.net