Het pakket OPNsense is een firewall met uitgebreide mogelijkheden. Het is gebaseerd op het besturingssysteem FreeBSD en is oorspronkelijk een fork van m0n0wall en pfSense. Het pakket kan volledig via een webinterface worden ingesteld en heeft onder andere ondersteuning voor mfa, OpenVPN, IPsec, CARP en captive portal. Daarnaast kan het packetfiltering toepassen en beschikt het over een traffic shaper. De ontwikkelaars hebben OPNsense 24.7.7 uitgebracht en de releasenotes voor die uitgave kunnen hieronder worden gevonden.
OPNsense 24.7.7 releasedA small update to keep things moving forward while things are quietening down a little bit. Still working on improving the trust store integration and already tackling new MVC/API conversions on the development end. Here are the full patch notes:
- system: add OpenSSH "RekeyLimit" with a limited set of choices
- system: fix certificate condition in setCRL() (contributed by richierg)
- system: untrusted directory changed in FreeBSD 14
- system: remove obsolete banners from static pages
- system: address CRL/cert subject hash mismatch during trust store rehash
- reporting: refactor existing RRD backend code
- firewall: throttle live logging on dashboard widget
- interfaces: fix VXLAN interface being busy when vxlanlocal or vxlanremote is changed
- interfaces: 6RD/6to4 route creation should be limited to IPv6
- firmware: remove escaped slashes workaround on mirror/flavour write
- firmware: CRL checking for business update mirror
- firmware: introduce config.sh and use it in launcher.sh and connection.sh
- firmware: restart cron on updates
- intrusion detection: reorganise settings page with headers
- intrusion detection: support configuration of eve-log for HTTP and TLS (contributed by Toby Chen)
- ipsec: fix advanced option "max_ikev1_exchanges"
- backend: cache file cleanup when TTL is reached
- backend: correct template helper exists() return type (contributed by kumy)
- mvc: fix config.xml file open mode in overwrite()
- mvc: add missing request->hasQuery()
- mvc: add missing request->getScheme()
- mvc: add missing request->getURI()
- mvc: extend sanity checks in isIPInCIDR()
- ui: fix tree view style targeting elements outside this view
- plugins: enforce defaults on devices
- plugins: os-caddy 1.7.3
- plugins: os-ddclient 1.25
- plugins: os-freeradius 1.9.26
- plugins: os-frr 1.42
- plugins: os-lldpd 1.2
- plugins: os-net-snmp 1.6
- plugins: os-upnp 1.7
- plugins: os-wazuh-agent 1.1
- ports: monit 5.34.2
- ports: nss 3.105
- ports: openssh 9.9.p1
- ports: pkg fix for for embedded libfetch when doing CRL verification
- ports: py-duckdb 1.1.2
- ports: syslog-ng 4.8.1
- ports: unbound 1.22.0
:fill(white):strip_exif()/i/2007222016.jpeg?f=thumbmedium)
/u/328466/crop608efaceaf3bc_cropped.png?f=community){kind=small}
:strip_exif()/u/9179/crop586dff9d475a6_cropped.gif?f=community){kind=small}
:strip_icc():strip_exif()/u/219282/crop65bfaacd66e4c_cropped.jpg?f=community){kind=small}
:strip_exif()/u/8064/bang.gif?f=community){kind=small}
/u/217510/crop660db19c1cf7b_cropped.png?f=community){kind=small}
:strip_icc():strip_exif()/u/506130/keitjes.jpg?f=community){kind=small}
/u/254093/crop678fb402f18f5_cropped.png?f=community){kind=small}