Тег: opnsense

OPNsense is a HardenedBSD-based specialist operating system (and a fork of pfSense) designed for firewalls and routers. The project's latest release, OPNsense 21.7, will be the last version based on HardenedBSD and introduces a new installer with ZFS support. "21.7, nicknamed "Noble Nightingale", is one of the largest iterations of code changes in our recent history. It will also be the last release on HardenedBSD 12.1. We are planning to start the work on FreeBSD 13 as soon as next week for the 22.1 series. The installer was replaced to offer native ZFS installations and prevent glitches in virtual machines using UEFI. Firmware updates were partially redesigned and the UI layout consolidated between static and MVC pages. The live log now contains the actual rule ID to avoid mismatches after adjusting your ruleset and the firewall aliases now also support wildcard netmasks."

Софт

BSD Release: OPNsense 20.7
This version is based on HardenedBSD 12.1 and it ads several interesting enhancements to its web-based user interface: "For five and a half years, OPNsense has been driving innovation through modularising and hardening the open source firewall, with simple and reliable firmware upgrades, multi-language support, HardenedBSD security, fast adoption of upstream software updates as well as clear and stable 2-Clause BSD licensing. 20.7, nicknamed 'Legendary Lion', is a major operating system jump forward on a sustainable firewall experience. This release adds DHCPv6 multi-WAN, custom error pages for the web proxy, Suricata 5, HardenedBSD 12.1, netstat tree view, basic firewall API support (via plugin) and extended live log filtering, amongst other new features. Here are the full patch notes against version 20.7-RC1: system - syslog-ng RFC5424 on FreeBSD 12 needs flags (syslog-protocol); installer - welcome users as genuine 20.7 installer...."

Софт

We humbly present to you the sum of another major iteration of the OPNsense firewall. Over the second half of 2017 well over 500 changes have made it into this first release candidate. Most notably, the firewall NAT rules have been reworked to be more flexible and usable via plugins, which is going to pave the way for subsequent API works on the core firewall functionality. For more details please find the attached list of changes below. Meltdown and Spectre patches are currently being worked on in FreeBSD, but there is no reliable timeline. We will keep you up to date through the usual channels as more news become available. Here is the full list of changes against version 17.7.11: disabled AHCI MSI to prevent early mount failures with removable media; use correct crypto library to gather GUI SSL ciphers; added 'save and go back' button to user edit page....

Софт

The project has released a new stable version of the OPNsense operating system, version 17.1. "The OPNsense team is proud to announce the final availability of version 17.1, nicknamed Eclectic Eagle. This major release features FreeBSD 11.0, the SSH remote installer, new languages Italian / Czech / Portuguese, state-of-the-art HardenedBSD security features, PHP 7.0, new plugins for FTP Proxy / Tinc VPN / Let's Encrypt, native PAM authentication against e.g. 2FA (TOTP), as well a rewritten Nano-style card images that adapt to media size to name only a few. We would like to encourage everyone to supervise this major upgrade physically. As such, it cannot be performed from the GUI. Instead, go to the root console menu, choose option 12 and type '17.1' at the prompt. The process will download a full set of updates and reboot multiple. All operating system files and packages will be re-installed as a consequence."

Софт

It is time for the next major iteration in open-source security. After 6 months and 20 minor releases we hereby declare the general availability of OPNsense 16.7, nick-named 'Dancing Dolphin'. The highlights of this major release include: Suricata 3.1.1 with Intel Hyperscan support; NetFlow-based reporting and export; traffic shaping using CoDel / FQ-CoDel; two-factor authentication based on RFC 6238 (TOTP); HTTPS and ICAP support in the proxy server; FreeBSD 10.3 with full integration of HardenedBSD ASLR; UEFI boot and installation modes; substantial updates to our language packs: Japanese, Russian, German, French, Chinese. Attention: an incompatibility in Chrome may prevent the firmware update from running. Try a different browser to upgrade to 16.7 where a workaround has been added to avoid the problem in the future.

Софт