Software-update: OPNsense 23.7.10

Het pakket OPNsense is een firewall met uitgebreide mogelijkheden. Het is gebaseerd op het besturingssysteem FreeBSD en is oorspronkelijk een fork van m0n0wall en pfSense. Het pakket kan volledig via een webinterface worden ingesteld en heeft onder andere ondersteuning voor mfa, openvpn, ipsec, carp en captive portal. Daarnaast kan het packetfiltering toepassen en beschikt het over een traffic shaper. De ontwikkelaars hebben OPNsense 23.7.109 uitgebracht en de releasenotes voor die uitgave kunnen hieronder worden gevonden.

OPNsense 23.7.10 released

A number of FreeBSD source code changes accumulated so it is better to have them delivered to your doorstep before the holidays are in full swing. Here are the full patch notes:

system: improve config revision audit abilitysystem: cleanse system_get_language_code() outputsystem: safeguard /tmp/PHP_errors.log file before usagesystem: add an optional random delay before executing remote backupssystem: fix regression in log viewer level selectorreporting: OpenVPN server instances were missing from respective health graphinterfaces: move interface list widget link to assignments pageinterfaces: add new backend jobs and extend with optional parameterinterfaces: add validation for proxy ARP strict subnet usefirewall: improve alias write behaviour by checking for changes beforehandfirewall: fix preg_replace() to avoid truncated network display in rules listingfirewall: add an ifconfig.debug filefirmware: switch bogons/changelog set base URL to portable "opnsense-update -X" callipsec: move save button on mobile page into its own containeripsec: add support for RADIUS class groups in instancesunbound: use tls-system-cert instead of tls-cert-bundleweb proxy: fix setting unknown language directoryui: upgrade jqTree to version 1.7.5plugins: os-ddclient 1.18plugins: os-dec-hw 1.0 is a Deciso hardware specific dashboard widgetplugins: os-net-snmp fix for directory setup (contributed by doktornotor)plugins: os-telegraf 1.12.10plugins: os-upnp now reloads on newwanip eventplugins: os-wireguard fix for missing firewall reloadplugins: os-wireguard-go fix for device registrationsrc: clang: sanitizer failure with ASLR enabledsrc: dhclient: do not add 0.0.0.0 interface aliassrc: ice: match irdma interface changessrc: ixv: separate VFTA table for each interfacesrc: libnetmap: better fix for port parsing failuresrc: pf: expose more syncookie state information to userspacesrc: pf: fix mem leaks upon vnet destroysrc: pf: remove incorrect fragmentation checksrc: rc: fix restart _precmd issue with _setupsrc: re: add support for 8168FP HW revsrc: zfs: check dnode and its data for dirtiness in dnode_is_dirty()ports: perl 5.36.3ports: php 8.2.13ports: phpseclib 3.0.34ports: squid update fixes parent proxy crashports: strongswan 5.9.13

system: improve config revision audit ability

system: cleanse system_get_language_code() output

system: safeguard /tmp/PHP_errors.log file before usage

system: add an optional random delay before executing remote backups

system: fix regression in log viewer level selector

reporting: OpenVPN server instances were missing from respective health graph

interfaces: move interface list widget link to assignments page

interfaces: add new backend jobs and extend with optional parameter

interfaces: add validation for proxy ARP strict subnet use

firewall: improve alias write behaviour by checking for changes beforehand

firewall: fix preg_replace() to avoid truncated network display in rules listing

firewall: add an ifconfig.debug file

firmware: switch bogons/changelog set base URL to portable "opnsense-update -X" call

ipsec: move save button on mobile page into its own container

ipsec: add support for RADIUS class groups in instances

unbound: use tls-system-cert instead of tls-cert-bundle

web proxy: fix setting unknown language directory

ui: upgrade jqTree to version 1.7.5

plugins: os-ddclient 1.18

plugins: os-dec-hw 1.0 is a Deciso hardware specific dashboard widget

plugins: os-net-snmp fix for directory setup (contributed by doktornotor)

plugins: os-telegraf 1.12.10

plugins: os-upnp now reloads on newwanip event

plugins: os-wireguard fix for missing firewall reload

plugins: os-wireguard-go fix for device registration

src: clang: sanitizer failure with ASLR enabled

src: dhclient: do not add 0.0.0.0 interface alias

src: ice: match irdma interface changes

src: ixv: separate VFTA table for each interface

src: libnetmap: better fix for port parsing failure

src: pf: expose more syncookie state information to userspace

src: pf: fix mem leaks upon vnet destroy

src: pf: remove incorrect fragmentation check

src: rc: fix restart _precmd issue with _setup

src: re: add support for 8168FP HW rev

src: zfs: check dnode and its data for dirtiness in dnode_is_dirty()

ports: perl 5.36.3

ports: php 8.2.13

ports: phpseclib 3.0.34

ports: squid update fixes parent proxy crash

ports: strongswan 5.9.13

Source: Tweakers.net