Software-update: pfSense CE 2.8.1

Versie 2.8.1 van de Community Edition van pfSense is uitgekomen. Dit pakket is gebaseerd op het besturingssysteem FreeBSD en richt zich op router- en firewalltaken. Het is verkrijgbaar in de gratis Community Edition en een betaalde Plus-uitvoering, die voorheen als Factory Edition werd aangeboden. Het is in 2004 begonnen als een afsplitsing van m0n0wall vanwege verschillende visies bij de ontwikkelaars en in de loop van de jaren uitgegroeid tot een router- en firewallpakket dat in zowel kleine als zeer grote omgevingen kan worden ingezet. Voor meer informatie verwijzen we naar deze pagina. In deze uitgave zijn de volgende veranderingen en verbeteringen aangebracht:

Auto Configuration Backup

Fixed: AutoConfigBackup entries show incorrect timestamps #16209

Fixed: AutoConfigBackup entries show incorrect timestamps #16209

Dynamic DNS

Fixed: Dynamic DNS fails to update AAAA record for Route53 and No-IP services #16249Changed: Update list of Dynamic DNS services that are only reachable over IPv4 for AAAA record updates #16251

Fixed: Dynamic DNS fails to update AAAA record for Route53 and No-IP services #16249

Changed: Update list of Dynamic DNS services that are only reachable over IPv4 for AAAA record updates #16251

Interfaces

Fixed: Using IPv4 VIPs on PPPoE interfaces with if_pppoe causes looping #16235Fixed: PPPoE IPv6 gateways are unavailable without Router Advertisements when using if_pppoe #16265

Fixed: Using IPv4 VIPs on PPPoE interfaces with if_pppoe causes looping #16235

Fixed: PPPoE IPv6 gateways are unavailable without Router Advertisements when using if_pppoe #16265

OpenVPN

Fixed: Kernel panic in OpenVPN if_ovpn due to use-after-free of mbuf #16319

Fixed: Kernel panic in OpenVPN if_ovpn due to use-after-free of mbuf #16319

Operating System

Fixed: Kernel Panic in if_qlnxe kernel module when loaded via kldload #16101Changed: Reduce writes to disk when using ZFS #16210Added: Allow custom ZFS pool names #16212Fixed: Panic in PF if the declared packet length is longer than the actual packet #16318Fixed: Multiple removable filesystem panics #16320Added: Support 2.5G SGMII (SFP GPON ONT) in bxe driver (QLogic NetXtreme II BCM57810) #16321

Fixed: Kernel Panic in if_qlnxe kernel module when loaded via kldload #16101

Changed: Reduce writes to disk when using ZFS #16210

Added: Allow custom ZFS pool names #16212

Fixed: Panic in PF if the declared packet length is longer than the actual packet #16318

Fixed: Multiple removable filesystem panics #16320

Added: Support 2.5G SGMII (SFP GPON ONT) in bxe driver (QLogic NetXtreme II BCM57810) #16321

Rules / NAT

Fixed: Firewall rules with an interface address for the NAT64 source always use the interface itself #16250Fixed: Firewall rules are not performing source tracking when Sticky Connections option is enabled #16282

Fixed: Firewall rules with an interface address for the NAT64 source always use the interface itself #16250

Fixed: Firewall rules are not performing source tracking when Sticky Connections option is enabled #16282

System Logs

Fixed: syslogd does not respect the configured IP address binding #16285

Fixed: syslogd does not respect the configured IP address binding #16285

UPnP IGD & PCP

Fixed: UPnP IGD & PCP status page does not show “disabled” message after the service has been enabled then disabled #16274

Fixed: UPnP IGD & PCP status page does not show “disabled” message after the service has been enabled then disabled #16274

Source: Tweakers.net