Het pakket OPNsense is een firewall met uitgebreide mogelijkheden. Het is gebaseerd op het besturingssysteem FreeBSD en is oorspronkelijk een fork van m0n0wall en pfSense. Het pakket kan volledig via een webinterface worden ingesteld en heeft onder andere ondersteuning voor 2fa, openvpn, ipsec, carp en captive portal. Daarnaast kan het packetfiltering toepassen en beschikt het over een traffic shaper. De ontwikkelaars hebben OPNsense 23.7.3 uitgebracht en de releasenotes voor die uitgave kunnen hieronder worden gevonden.
OPNsense 23.7.3 releasedRecently we improved the workflow for bringing language updates to the release so here we are with an updated translation package including added support for Korean. Thanks a lot to all contributors for keeping this going strong! If you would like to help with translations you can sign up via this link.
Of note is also the largely rewritten backend for the WireGuard kernel module plugin which offers separate services for each instance much like OpenVPN offers it. The requirement of the wireguard-tools and bash packages were removed. This also means the plugin will be moved to the core for 24.1 along with Wireguard go plugin being removed completely since on FreeBSD 13.2 no external package is needed to enjoy WireGuard and the permanent existence of a kernel module renders the Go fallback defunct through wireguard-tools/wg-quick implementation quirks.
Here are the full patch notes:
- system: fix missing config save when RRD data is supplied during backup import
- system: defer config reload to SIGHUP in gateway watcher
- system: handle "force_down" state correctly in gateway watcher
- system: make Gateways class argument optional
- interfaces: tweak UX of interface settings page
- interfaces: further improve PPP MTU handling
- interfaces: remove workaround to re-reload the routing during bootup for edge case that no longer exist
- firewall: fix group priority handling regression
- firewall: improve filter functionality to combine multiple network clauses in states page
- dhcp: map interfaces to interface names instead of devices
- dhcp: fix iaid_duid parsing in IPv6 lease page
- intrusion detection: support "bypass" keyword in user-defined rules (contributed by Monviech)
- openvpn: fix mismatch issue when pinning a CSO to a specific instance
- openvpn: add advanced option for optional CA selection
- unbound: fix concurrent session closing the handle while still writing data in Python module
- web proxy: remove long deprecated "dns_v4_first" setting from GUI
- mvc: extend PortField to optionally allow port type aliases
- lang: update all languages and add Korean
- plugins: os-firewall 1.4 adds port alias support
- plugins: os-frr 1.35
- plugins: os-wireguard 2.0
- ports: filterlog fix to prevent crash on default rule number -1
:fill(white):strip_exif()/i/2007222016.jpeg?f=thumbmedium)
:strip_icc():strip_exif()/u/359539/crop576a4dfa59ce7_cropped.jpeg?f=community){kind=small}
:strip_exif()/u/54579/Static.gif?f=community){kind=small}
:no_upscale():strip_icc():fill(white):strip_exif()/f/image/OpPuNfKHLol2V5ypsQjdiGYJ.jpg?f=user_large){kind=link}