Тег: pfsense

pfSense 2.7.1

This version uses the FreeBSD's 14-CURRENT branch as its base. "Netgate is pleased to announce the release of pfSense Community Edition (CE) software version 2.7.1. Major changes and features: OpenSSL upgraded to 3.0.12 - this change was essential because OpenSSL 1.1.1 has reached end of life (EOL) and will no longer receive security patches for vulnerabilities; the Kea DHCP server is available as an opt-in feature, basic functionality is present in version 2.7.1, but it is not feature-complete; support for SCTP has been improved in PF for firewall rules, NAT and logging, and rules can now act on SCTP packets by port number; IPv6 Router Advertisement configuration has been relocated to Services, Router Advertisement as a part of the ongoing Kea DHCP server integration; PHP upgraded to 8.2.11; the base operating system upgraded to a more recent point of FreeBSD 14-CURRENT...."

Софт

pfSense 2.7.0

pfSense is a free, open source customized distribution of FreeBSD specifically tailored for use as a firewall and router that is entirely managed via web interface. pfSense 2.7.0 ships with improvements to firewall performance, fixes some uPnP issues related to running multiple gaming systems on the same network, and upgrades OpenVPN. "Captive portal and limiters moved from ipfw to pf: pf is the default packet filter in pfSense software. These changes leverage L2 features previously added to pf and upstreamed to FreeBSD, and improve performance and stability of the captive portal by eliminating the need for packets to traverse both pf and ipfw. UPnP and multiple game systems: A fix has been added to address an issue with UPnP and multiple game systems. This resolves the problems some game systems experienced connecting to the internet when UPnP was enabled and multiple consoles are in use. New gateway state killing options: These options give the user more flexibility in how the firewall decides to kill states automatically during failover events and also adds several new manual ways to selectively remove states. Improved Firewall/NAT rule usability: The Firewall/NAT rule interface has been improved to make it easier to create and manage rules. This includes new buttons to toggle multiple rules and copy rules to other interfaces."

Софт

pfSense is a free, open source customized distribution of FreeBSD specifically tailored for use as a firewall and router that is entirely managed via web interface. The project's latest release, pfSense 2.5.0, is based on FreeBSD 12.2. The release announcement highlights changes in the new version: "Base OS upgraded to FreeBSD 12.2-STABLE, OpenSSL upgraded to 1.1.1, pPerformance improvements. Kernel WireGuard implementation, as mentioned in a previous WireGuard blog post. WireGuard is a new VPN Layer 3 protocol designed for speed and simplicity. The pfSense documentation site includes information on how to configure WireGuard as well as example configuration recipes. IPsec enhancements: Configuration for the strongSwan IPsec backend was changed from the deprecated ipsec.conf/stroke format to the new swanctl/VICI format. Various improvements to tunnel configuration, including better options for lifetime and rekey to avoid duplicate security associations."

Софт

Софт

The new release of the pfSense operating system for routers and firewalls is based on FreeBSD 11.2 and offers several new features: "2.4.4 includes a number of significant new features: OS Upgrade - base Operating System upgraded to FreeBSD 11.2-RELEASE-p3. As a part of moving to FreeBSD 11.2, support is included for C3000-based hardware. PHP 7.2 - PHP upgraded to version 7.2, which required numerous changes to syntax throughout the source code and packages. Routed IPsec (VTI) - routed IPsec is now possible using using FreeBSD if_ipsec(4) Virtual Tunnel Interfaces (VTI). IPsec Speed Improvements - the new Asynchronous Cryptography option under the IPsec Advanced Settings tab can dramatically improve IPsec performance on multi-core hardware. Default Gateway Group - the default gateway may now be configured using a Gateway Group setup for failover, which replaces Default Gateway Switching. Limiter AQM/Queue Schedulers - limiters now include support for several Active Queue Management (AQM) methods and Queue Scheduler configurations such as FQ_CODEL."

Софт