Die beliebte Open-Source Firewall, OPNsense, erhielt das Update in Version 22.1.2. Dieses fügt der WebGUI Support für Intel QuickAssist Technology (QAT) und per FreeeBSD 13 Betriebsystem SYNC Cookies.
OPNsense 22.1.2 Release Notes
- system: Intel QuickAssist Technology (QAT) crypto module selection and support multiple selection
- system: AESNI crypto module is a kernel-builtin since 22.1 and no longer needs to be selected to work
- system: enable library support of PCRE JIT included since 21.1.1
- system: limit rowCount in log viewer (contributed by kulikov-a)
- system: unify system tunables handling and tweak UX of the respective GUI page
- system: no longer default to hw.uart.console use in factory configuration
- system: remove console mute use from boot sequence
- reporting: fill missing insight data with zeros
- interfaces: assignments should take OpenVPN into account
- interfaces: only ever store nobind for ipalias/carp
- interfaces: align IPv4 address statistics read with IPv6
- interfaces: simplify device destroy code
- interfaces: avoid use legacy_get_interface_addresses() in MAC address read
- interfaces: remove unused opportunistic interface address functions
- firewall: exclude localhost stateless traffic from default logging (contributed by kulikov-a)
- firewall: using port type aliases the “enable” flag was ignored when not enabled
- firewall: add support for SYN cookies
- firmware: opnsense-code: support “-z” snapshot mode
- firmware: opnsense-revert: support “-z” snapshot mode
- firmware: opnsense-update: support version print for sets
- firmware: check repository and plugin state in health audit
- ipsec: pass protocol when resolving via ipsec_resolve() (contributed by FloMeyer)
- ipsec: fix mobile property passing when creating a new phase 2 entry
- ipsec: rename “My Certificate Authority” to “Remote Certificate Authority” to avoid ambiguity
- openvpn: avoid use of find_interface_network() et al
- openvpn: stop removing name server-related files never written
- openvpn: improve gateway detection in topology mode
- ipsec: avoid use of find_interface_network() et al
- dhcp: avoid use of find_interface_network() et al
- console: move console mite calls into port setting function
- ui: sidebar 2nd submenu view fix (contributed by Team Rebellion)
- mvc: refactor and extend HostnameField to add options to validate partial hostnames and root zones
- plugins: os-bind 1.22[1]
- plugins: os-ddclient 1.2[2]
- plugins: os-freeradius 1.9.19[3]
- plugins: os-stunnel 1.0.4 fix connect format for IPv6 (contributed by Johnny S. Lee)
- src: stand: add EFI support for MMIO serial consoles
- src: apei: make sure event data fit into the buffer
- ports: php 7.4.28[4]
- ports: unbound 1.15.0[5]
OPNsense Hotfix 22.1.2_1 Release Notes
- ipsec: fix mobile switch logic
- ports: cyrus-sasl 2.1.28