OPNsense 23.7.6 Maintenance Release

Die Open-Source Firewall OPNsense erhielt in der Community Edition das Maintenance Release 23.7.6. Das Update verbessert das DS-Lite welches in separaten GIF Tunneln oben auf IPv6-only Verbindungen genutzt wird.

OPNsense 23.7.6 Release Notes

• system: do not mark „defunct“ gateway as „disabled“ as well
• system: skip all unusable gateways for monitoring
• system: simplify the code in dpinger_status()
• system: rewrite configuration history using MVC/API
• interfaces: drop obsolete PPP default route handling
• interfaces: change GRE/GIF to split reload per address family on dynamic connectivity
• interfaces: prevent reading stale configuration data in interfaces_has_prefix_only()
• interfaces: for consistency bootstrap the implicit ’none‘ value of the IP address modes
• interfaces: prevent extended array data from being passed in interface_bring_down()
• interfaces: fix warning due to use of an unassigned variable
• firewall: quote „a/n“ protocol in pf.conf to avoid a syntax error
• firewall: fix wrong link to virtual IP page
• firewall: add „Interface / Invert“ rule toggle
• firewall: fix help button in dialog for categories
• firewall: update alias and shaper models
• captive portal: update model
• dhcp: fix „ends never“ parsing in DHCPv6 lease page
• dhcp: add scope to link-local DHCPv6 static mapping when creating route for delegated prefix (contributed by Maurice Walker)
• dhcp: merge_ipv6_address() was too intrusive
• intrusion detection: update model and persist values for transparency
• intrusion detection: improve locking during sqlite database creation
• ipsec: add IP4_DNS and IP6_DNS configuration payloads to connection pools (contributed by Monviech)
• ipsec: require setting a connection pool name
• ipsec: update models
• monit: update model
• openvpn: allow instances authentication without certificates when verify_client_cert is set to none
• openvpn: add role to „proto“ for TCP sessions as required for TAP type tunnels
• openvpn: missing „selectpicker“ class on VHID selector
• openvpn: update model
• backend: template reload wildcard was returning „OK“ on partial failures
• mvc: emit correct message on required validation in BaseField
• mvc: throw on template reload issues in mutable service controller
• mvc: inline one time use of $parentKey
• mvc: set Required=Y for GroupNameField
• mvc: remove special validation messages likely never seen
• mvc: introduce isVolatile() for BaseModel
• mvc: propagate isFieldChanged() from connected children in ArrayField
• ui: remove the bootstrap-select version from the provided file in the default theme
• plugins: remove the bootstrap-select version from the provided file in all themes
• plugins: os-crowdsec 1.0.7[2]
• plugins: os-smart reverts the use of smartctl to gather disks
• plugins: os-telegraf 1.12.9[3]
• plugins: os-theme-rebellion 1.8.9 fixes Unbound DNS reporting page
• plugins: os-wireguard 2.3[4]
• ports: php 8.2.11[5]
• ports: syslog-ng 4.4.0[6]