Software-update: OPNsense 25.1.9

Het pakket OPNsense is een firewall met uitgebreide mogelijkheden. Het is gebaseerd op het besturingssysteem FreeBSD en is oorspronkelijk een fork van m0n0wall en pfSense. Het pakket kan volledig via een webinterface worden ingesteld en heeft onder andere ondersteuning voor mfa, OpenVPN, IPsec, CARP en captive portal. Daarnaast kan het packetfiltering toepassen en beschikt het over een traffic shaper. De ontwikkelaars achter OPNsense hebben de negende update voor versie 25.1 uitgebracht en de releasenotes voor die uitgave kunnen hieronder worden gevonden.

OPNsense 25.1.9 released

This smallish update brings in more preparation for future features and reworks and fixes a couple of bugs reported over the last weeks. The patch size for 25.1.x will likely not increase in future updates as 25.7 is near: July 23. Save the date!

Here are the full patch notes:

system: add minimalistic interface to support SSO authenticationsystem: refactor a couple of existing empty() tests to isEmpty()system: refactor cache flush into system_cache_flush()system: add backend call for returning timezonessystem: fix "weight" default fallback causing non-string return in gateway statusinterfaces: refactor newwanip IPv4/v6 scripts to reduce differences between theminterfaces: do not call a description a "dmesg"interfaces: relax regex for dmesg probing to seamlessly support dmesg timestampsfirewall: improve address family validation for rule source and destinationfirewall: fix faulty ICMP type evaluation on NAT rulesdnsmasq: allow AliasesField values to be cleareddnsmasq: allow host wildcards in domain overrides againipsec: add aes256-sha1 ESP proposalui: backwards-compatible merge of Tabulator grid replacement changesplugins: os-haproxy 4.6ports: curl 8.14.1ports: nss 3.112ports: openldap 2.6.10ports: php 8.3.22ports: python 3.11.13

system: add minimalistic interface to support SSO authentication

system: refactor a couple of existing empty() tests to isEmpty()

system: refactor cache flush into system_cache_flush()

system: add backend call for returning timezones

system: fix "weight" default fallback causing non-string return in gateway status

interfaces: refactor newwanip IPv4/v6 scripts to reduce differences between them

interfaces: do not call a description a "dmesg"

interfaces: relax regex for dmesg probing to seamlessly support dmesg timestamps

firewall: improve address family validation for rule source and destination

firewall: fix faulty ICMP type evaluation on NAT rules

dnsmasq: allow AliasesField values to be cleared

dnsmasq: allow host wildcards in domain overrides again

ipsec: add aes256-sha1 ESP proposal

ui: backwards-compatible merge of Tabulator grid replacement changes

plugins: os-haproxy 4.6

ports: curl 8.14.1

ports: nss 3.112

ports: openldap 2.6.10

ports: php 8.3.22

ports: python 3.11.13

Source: Tweakers.net