Software-update: OPNsense 26.7.7

Het pakket OPNsense is een firewall met uitgebreide mogelijkheden. Het is gebaseerd op het besturingssysteem FreeBSD en is oorspronkelijk een fork van m0n0wall en pfSense. Het pakket kan volledig via een webinterface worden ingesteld en heeft onder andere ondersteuning voor mfa, OpenVPN, IPsec, CARP en captive portal. Daarnaast kan het packetfiltering toepassen en beschikt het over een traffic shaper. De ontwikkelaars achter OPNsense hebben de zevende update voor versie 26.7 uitgebracht en de releasenotes voor die uitgave kunnen hieronder worden gevonden.

OPNsense 26.7.7 released

Here we go again... This release is mainly for the brave Hyper-V users who fought kernel panics since 26.7, which got fixed in 26.7.6 only to cause segmentation faults for others. Thanks all for testing and correcting the problem in FreeBSD! The other reason are fixes in the new interfaces settings API so that it more closely matches the behaviour of the legacy page. Both the iPerf and the FRR plugin have been reworked substantially. In case of FRR please read the migration notes linked below before updating.

Here are the full patch notes:

interfaces: add missing validation for "configurable" and "spoofmac" in new settings APIinterfaces: only store "dhcp6_norequest_dns" in DHCPv6 mode in new settings APIinterfaces: only store "track6-interface" in ID association / Track interface modes in new settings APIinterfaces: do not render "none" to configuration in new settings APIinterfaces: move promiscuous mode to advanced in new settings APIinterfaces: fix index into $todo for proper flag check during apply in new settings APIinterfaces: provide better option group labels to DeviceFieldinterfaces: add proper local/remote IP support to PPPoE IPCPinterfaces: move legacy apply cache to /var/lib/php/tmpfirewall: destination NAT: fix typo in parseRdrRules() causing faulty rules not being disabledfirewall: aliases: validate that port aliases always have contentfirewall: revert a clone rule change so that cloned rules to appear adjacent to the original rule againmvc: UidField: add isolated updateValue() for installer userui: bootgrid: sync columnselect-input state with (un)setColumnsui: sync expanded state for selected submenusui: close mobile menu when a menu entry opens another tab of the current page (contributed by Greelan)plugins: os-ddclient 1.33plugins: os-frr 2.0plugins: os-iperf 2.0src: pf: send syncookies from the receiving threadsrc: hyperv: fix two regressions in previous upstream patchsrc: pcib: only apply ARI translation to the own secondary bus of a bridgesrc: ktls CBC decrypt: avoid creating zero length iovec entriessrc: route/fib_algo: respect immediate_sync in fd_ref_nhopsrc: route/fib_algo: fix FIB_ALGO without ROUTE_MPATH optionsrc: sysctl: retire SYSCTL_NODE_CHILDREN()

interfaces: add missing validation for "configurable" and "spoofmac" in new settings API

interfaces: only store "dhcp6_norequest_dns" in DHCPv6 mode in new settings API

interfaces: only store "track6-interface" in ID association / Track interface modes in new settings API

interfaces: do not render "none" to configuration in new settings API

interfaces: move promiscuous mode to advanced in new settings API

interfaces: fix index into $todo for proper flag check during apply in new settings API

interfaces: provide better option group labels to DeviceField

interfaces: add proper local/remote IP support to PPPoE IPCP

interfaces: move legacy apply cache to /var/lib/php/tmp

firewall: destination NAT: fix typo in parseRdrRules() causing faulty rules not being disabled

firewall: aliases: validate that port aliases always have content

firewall: revert a clone rule change so that cloned rules to appear adjacent to the original rule again

mvc: UidField: add isolated updateValue() for installer user

ui: bootgrid: sync columnselect-input state with (un)setColumns

ui: sync expanded state for selected submenus

ui: close mobile menu when a menu entry opens another tab of the current page (contributed by Greelan)

plugins: os-ddclient 1.33

plugins: os-frr 2.0

plugins: os-iperf 2.0

src: pf: send syncookies from the receiving thread

src: hyperv: fix two regressions in previous upstream patch

src: pcib: only apply ARI translation to the own secondary bus of a bridge

src: ktls CBC decrypt: avoid creating zero length iovec entries

src: route/fib_algo: respect immediate_sync in fd_ref_nhop

src: route/fib_algo: fix FIB_ALGO without ROUTE_MPATH option

src: sysctl: retire SYSCTL_NODE_CHILDREN()

Source: Tweakers.net