Die beliebte Open-Source Firewall, OPNsense, erhielt das Update in Version 22.1.2. Dieses fügt der WebGUI Support für Intel QuickAssist Technology (QAT) und per FreeeBSD 13 Betriebsystem SYNC Cookies.
OPNsense 22.1.2 Release Notes
- system: Intel QuickAssist Technology (QAT) crypto module selection and support multiple selection
- system: AESNI crypto module is a kernel-builtin since 22.1 and no longer needs to be selected to work
- system: enable library support of PCRE JIT included since 21.1.1
- system: limit rowCount in log viewer (contributed by kulikov-a)
- system: unify system tunables handling and tweak UX of the respective GUI page
- system: no longer default to hw.uart.console use in factory configuration
- system: remove console mute use from boot sequence
- reporting: fill missing insight data with zeros
- interfaces: assignments should take OpenVPN into account
- interfaces: only ever store nobind for ipalias/carp
- interfaces: align IPv4 address statistics read with IPv6
- interfaces: simplify device destroy code
- interfaces: avoid use legacy_get_interface_addresses() in MAC address read
- interfaces: remove unused opportunistic interface address functions
- firewall: exclude localhost stateless traffic from default logging (contributed by kulikov-a)
- firewall: using port type aliases the „enable“ flag was ignored when not enabled
- firewall: add support for SYN cookies
- firmware: opnsense-code: support „-z“ snapshot mode
- firmware: opnsense-revert: support „-z“ snapshot mode
- firmware: opnsense-update: support version print for sets
- firmware: check repository and plugin state in health audit
- ipsec: pass protocol when resolving via ipsec_resolve() (contributed by FloMeyer)
- ipsec: fix mobile property passing when creating a new phase 2 entry
- ipsec: rename „My Certificate Authority“ to „Remote Certificate Authority“ to avoid ambiguity
- openvpn: avoid use of find_interface_network() et al
- openvpn: stop removing name server-related files never written
- openvpn: improve gateway detection in topology mode
- ipsec: avoid use of find_interface_network() et al
- dhcp: avoid use of find_interface_network() et al
- console: move console mite calls into port setting function
- ui: sidebar 2nd submenu view fix (contributed by Team Rebellion)
- mvc: refactor and extend HostnameField to add options to validate partial hostnames and root zones
- plugins: os-bind 1.22[1]
- plugins: os-ddclient 1.2[2]
- plugins: os-freeradius 1.9.19[3]
- plugins: os-stunnel 1.0.4 fix connect format for IPv6 (contributed by Johnny S. Lee)
- src: stand: add EFI support for MMIO serial consoles
- src: apei: make sure event data fit into the buffer
- ports: php 7.4.28[4]
- ports: unbound 1.15.0[5]
OPNsense Hotfix 22.1.2_1 Release Notes
- ipsec: fix mobile switch logic
- ports: cyrus-sasl 2.1.28
Interessiert in verschiedenste IT Themen, schreibe ich in diesem Blog über Software, Hardware, Smart Home, Games und vieles mehr. Ich berichte z.B. über die Installation und Konfiguration von Software als auch von Problemen mit dieser. News sind ebenso spannend, sodass ich auch über Updates, Releases und Neuigkeiten aus der IT berichte. Letztendlich nutze ich Taste-of-IT als eigene Dokumentation und Anlaufstelle bei wiederkehrenden Themen. Ich hoffe ich kann dich ebenso informieren und bei Problemen eine schnelle Lösung anbieten. Wer meinen Aufwand unterstützen möchte, kann gerne eine Tasse oder Pod Kaffe per PayPal spenden – vielen Dank.