Het pakket OPNsense is een firewall met uitgebreide mogelijkheden. Het is gebaseerd op het besturingssysteem FreeBSD en is oorspronkelijk een fork van m0n0wall en pfSense. Het pakket kan volledig via een webinterface worden ingesteld en heeft onder andere ondersteuning voor 2fa, openvpn, ipsec, carp en captive portal. Daarnaast kan het packetfiltering toepassen en beschikt het over een traffic shaper. De ontwikkelaars hebben OPNsense 22.1.1 uitgebracht met de volgende aankondiging:
OPNsense 22.1.1 releasedThe first stable release brings in minor fixes from FreeBSD and instant log file visibility for files without severity written which can happen for individual plugins. We have also gone ahead to restructure the interface code further to resolve dependencies between configured devices and interfaces automatically and the bundled development version is worth a try for everyone having issues with GIF/GRE not coming up after boot.
Here are the full patch notes:
- system: changing interface gateway was ignored during route reconfiguration
- system: allow to configure SSH setting PubkeyAcceptedAlgorithms (contributed by Manuel Faux)
- system: add backward compatibility for reading logs without severity by default (contributed by kulikov-a)
- system: fix typo causing PHP warning on IPv6 login (contributed by ppascher)
- system: cron command drop down size was extending below screen
- system: add a sysctl cache to improve tuneable overview load time
- system: replace obsolete find_interface_network*() use in GUI
- system: allow severity levels in PHP log messages and mark authentication success messages as notice
- interfaces: fix default handling for VIP nobind option
- interfaces: allow VIP nobind feature on CARP addresses
- interfaces: stop mpd5 daemon before starting
- interfaces: always show interface in GIF and GRE overview even on VIP use
- interfaces: fix GIF and GRE VIP use loading order in IP alias cases
- interfaces: remove device creation side effect from bridge, LAGG, GIF, GRE and VLAN GUI pages
- interfaces: prevent DHCP from installing name servers when not allowed
- interfaces: get_interface_list() must exclude OpenVPN
- interfaces: replace obsolete find_interface_network*() use in GUI
- firewall: remove ruleset optimization support which did not work since rule labels are mandatory for live log
- firewall: exclude external alias for nesting
- firewall: encode rules names in aliases (contributed by kulikov-a)
- firewall: check state before selecting categories (contributed by kulikov-a)
- firewall: synchronise "disabled" flag on linked firewall rule of port forward
- firewall: local file corruption might prevent alias to be loaded
- firewall: default pass all loopback without state tracking
- dhcp: change prefix watcher to work without circular logging now that it is gone
- dhcp: replace obsolete find_interface_network*() use in GUI
- dhcp: fix implode() call (contributed by Clement Moulin)
- ipsec: replace obsolete find_interface_network*() use in GUI
- firmware: opnsense-version: support reading lock files operated by opnsense-update
- firmware: patch version / date header in consistently for backend scripts
- mvc: overload __isset() magic method
- plugins: os-bind 1.21
- plugins: os-ddclient 1.1
- plugins: os-dnscrypt-proxy 1.11
- plugins: os-dyndns menu compatibility with os-ddclient
- plugins: os-frr 1.27
- plugins: os-mdns-repeater 1.1
- plugins: os-rspamd 1.12
- plugins: os-zabbix-agent 1.11
- src: pf: set_prio was not set after nvlist conversion
- src: if_vtnet: Restore the ability to set promisc mode
- src: hn: disable Hyper-V vSwitch RSC support
- ports: curl 7.81.0
- ports: expat 2.4.4
- ports: lighttpd 1.4.64
- ports: monit 5.30.0
- ports: nss 3.75
- ports: pcre / pcre2 enable JIT support
- ports: phpseclib 2.0.36
- ports: strongswan 5.9.5
- ports: sudo 1.9.9
:fill(white):strip_exif()/i/2007222016.jpeg?f=thumbmedium)
:strip_icc():strip_exif()/u/26075/crop645a133d5627c_cropped.jpg?f=community){kind=small}
/u/26886/ijsbeer.png?f=community){kind=small}
:strip_exif()/u/30785/gryffindor.gif?f=community){kind=small}
/u/402424/crop6213aeb569b17.png?f=community){kind=small}
