Software update: OPNsense 18.7.3




OPNsense package is a firewall with extensive possibilities. It is based on the FreeBSD operating system and is originally a fork of m0n0wall and pfSense. The package can be set up completely via a web interface and includes support for 2fa, openvpn, ipsec, carp and captive portal. In addition, it can apply packet filtering and it has a traffic shaper . The developers have released OPNsen 18.7.3 with the following announcement:

OPNsense 18.7.3 released

Hi there,
Long-term IPv6 efforts in the form of further 6RD feature comfort and a few edge-case fixes in IPv6 interface selection. Please note that a reboot is necessary due to a security advisory amendment and errata patch.
Progress was made on the importer, which was further prevented in ZFS installation originally planned for 18.7. You can now list available ZFS pool and import from any of those if you so wish. Props to Smart-Soft for the contribution.
On the plugin side development for the upcoming WireGuard VPN, ntopng and vnStat plugins continues. Check the forum for further updates.

Here are the full patch notes:
system: gateways widget show / hide feature (contributed by Team Rebellion)
system: select correct IPv6 default route when underlying IPv6 interface differs
system: extended meta-matching for special characters in ACL patterns
system: show last diff by default in configuration history page
system: refactor password logic in user manager for clarity
system: link-local listen IPv6 requires reading underlying IPv6 interface
interfaces: avoid boot mismatch on several virtual plug-in devices
interfaces: list widget show / hide feature (contributed by Team Rebellion)
interfaces: stats widget show / hide feature (contributed by Team Rebellion)
interfaces: stop wireless software before bringing down the interfaces
interfaces: fix selection issue for DHCPv6 PD “none” value
interfaces: make “64” the page default for DHCPv6 PD
interfaces: allow IPv4 address override in 6RD
interfaces: fix 18.7.2 gateway read regression in 6RD
interfaces: give each 6RD tracker a different IPv6 address
dhcp: add DHCP Dynamic DNS key algorithm selection (contributed by Ingo Theiss)
dhcp: correctly load DHCPv6 settings in manual tracking (contributed by Team Rebellion)
dhcp: do not show lease actions if interface can not be found
dhcp: unhide DHCPv6 service when not using automatic PD
dnsmasq: annotate that “all” is the recommended interface binding option
importer: list all available ZFS pools (contributed by Smart-Soft)
importer: do not try to unload ZFS on ZFS boot, sanely rejected anyway 😉
importer: ZFS pools are now addressed as eg “zfs / zroot”
importer: always loop until exit or successful import
intrusion detection: source, destination, pass support in user rules (contributed by Michael Muenz)
ipsec: change hash checkboxes in phase 2 to selectpicker
openssh: change interface bind logic to only bind to present available addresses
openvpn: align status columns for client and P2P case (contributed by Andy Binder)
shell: change banner and setaddr interface iteration
unbound: swap stub-zone for forward-zone in overrides (contributed by John Keates)
static: interface iteration conversions in system, firewall and interfaces pages
ui: fix firmware-product file access when using ui_devtools
plugins: os-bind 1.2 log file viewer and oversized list removal (contributed by Michael Muenz)
plugins: os-c-icap 1.6 (contributed by Michael Muenz)
plugins: os-dyndns 1.9 allow plus sign in username (by Charles Ulrich)
plugins: os-haproxy 2.9 backend HTTP reuse option (contributed by andrewheberle)
plugins: os-net-snmp 1.1 IPv6 compatibility (contributed by MrXermon)
plugins: os-rfc2136 1.4 widget style tweaks
plugins: os-theme-rebellion 1.5 style update (contributed by Team Rebellion)
plugins: os-tinc 1.4 log facility fix
src: fix print or stf (4) interface information
src: fix regression in Lazy FPU remediation
src: fix improper ELF header parsing
ports: curl 7.61.1
ports: lighttpd 1.4.50
ports: sudo 1.8.25p1
Stay safe,
Your OPNsense team
Version number 18.7.3
Release status Final
Operating systems BSD


License type Conditions (GNU / BSD / etc.)


In: A Technology & Gadgets Asked By: [23633 Red Star Level]

Answer this Question

You must be Logged In to post an Answer.

Not a member yet? Sign Up Now »