Het pakket OPNsense is een firewall met uitgebreide mogelijkheden. Het is gebaseerd op het besturingssysteem FreeBSD en is oorspronkelijk een fork van m0n0wall en pfSense. Het pakket kan volledig via een webinterface worden ingesteld en heeft onder andere ondersteuning voor 2fa, openvpn, ipsec, carp en captive portal. Daarnaast kan het packetfiltering toepassen en beschikt het over een traffic shaper. De ontwikkelaars hebben OPNsense 22.1.8 uitgebracht met de volgende aankondiging:
OPNsense 22.1.8 releasedSmall reliability update which also includes a rework for firewall alias handling and preformance. Later today we will also publish a call for testing for the upcoming 22.7 operating system base using FreeBSD 13.1. It is going to be compatible with this 22.1.x series and existing feedback about it is promising so far.
Here are the full patch notes:
- system: only restore missing or zero size ACL files
- system: support plugin device reconfiguration in pluginctl utility
- system: prevent gateway monitoring from entering a "filter reload" loop
- system: use password_verify() in authenticators (contributed by oittaa)
- system: hide password from command line during config encryption
- interfaces: add technical interface ID display to assignments page
- firewall: various usability and visibility improvements for aliases
- firewall: performance improvement for large numbers of port type aliases
- firewall: simplify sort and add natural sorting in alias diagnostics
- captive portal: add extendedPreAuthData for MAC address retrieval during authentication
- dhcp: refactor IPv4 lease removal and purge static leases before starting service
- dhcp: allow custom configuration from directories
- firmware: bypass cache with timestamp in "upgradestatus" call (contributed by gibwar)
- firmware: lowercase search in plugins/packages
- intrusion detection: fix log file ACL mismatch
- ipsec: squelch spurious errors on stderr for backend status action
- unbound: add custom "destination address" as advanced option for blocklists
- mvc: distinct between HTTP errors 401 and 403 during authentication
- mvc: call microtime(true) only once during config save (contributed by csbyte)
- plugins: os-acme-client 3.11
- plugins: os-nginx 1.27
- plugins: os-postfix 1.22
- src: tcp: rewind erroneous RTO only while performing RTO retransmissions
- src: bnxt: Allow bnxt interfaces to use VLANs
- src: rc: use _pidcmd to determine pid for protect
- ports: curl 7.83.1
- ports: sqlite 3.38.2
- ports: strongswan 5.9.6
:fill(white):strip_exif()/i/2007222016.jpeg?f=thumbmedium)
/u/865285/crop5c5f2ea786267_cropped.png?f=community){kind=small}
/u/399550/crop66d8d9239df36_cropped.png?f=community){kind=small}
:strip_icc():strip_exif()/u/457808/crop5686a95ab9c87_cropped.jpeg?f=community){kind=small}