JARVIS
Die Open-Source Firewall OPNsense erhielt in der Community Edition das Maintenance Release 23.7.6. Das Update verbessert das DS-Lite welches in separaten GIF Tunneln oben auf IPv6-only Verbindungen genutzt wird.
OPNsense 23.7.6 Release Notes
- system: do not mark “defunct” gateway as “disabled” as well
- system: skip all unusable gateways for monitoring
- system: simplify the code in dpinger_status()
- system: rewrite configuration history using MVC/API
- interfaces: drop obsolete PPP default route handling
- interfaces: change GRE/GIF to split reload per address family on dynamic connectivity
- interfaces: prevent reading stale configuration data in interfaces_has_prefix_only()
- interfaces: for consistency bootstrap the implicit ‘none’ value of the IP address modes
- interfaces: prevent extended array data from being passed in interface_bring_down()
- interfaces: fix warning due to use of an unassigned variable
- firewall: quote “a/n” protocol in pf.conf to avoid a syntax error
- firewall: fix wrong link to virtual IP page
- firewall: add “Interface / Invert” rule toggle
- firewall: fix help button in dialog for categories
- firewall: update alias and shaper models
- captive portal: update model
- dhcp: fix “ends never” parsing in DHCPv6 lease page
- dhcp: add scope to link-local DHCPv6 static mapping when creating route for delegated prefix (contributed by Maurice Walker)
- dhcp: merge_ipv6_address() was too intrusive
- intrusion detection: update model and persist values for transparency
- intrusion detection: improve locking during sqlite database creation
- ipsec: add IP4_DNS and IP6_DNS configuration payloads to connection pools (contributed by Monviech)
- ipsec: require setting a connection pool name
- ipsec: update models
- monit: update model
- openvpn: allow instances authentication without certificates when verify_client_cert is set to none
- openvpn: add role to “proto” for TCP sessions as required for TAP type tunnels
- openvpn: missing “selectpicker” class on VHID selector
- openvpn: update model
- backend: template reload wildcard was returning “OK” on partial failures
- mvc: emit correct message on required validation in BaseField
- mvc: throw on template reload issues in mutable service controller
- mvc: inline one time use of $parentKey
- mvc: set Required=Y for GroupNameField
- mvc: remove special validation messages likely never seen
- mvc: introduce isVolatile() for BaseModel
- mvc: propagate isFieldChanged() from connected children in ArrayField
- ui: remove the bootstrap-select version from the provided file in the default theme
- plugins: remove the bootstrap-select version from the provided file in all themes
- plugins: os-crowdsec 1.0.7[2]
- plugins: os-smart reverts the use of smartctl to gather disks
- plugins: os-telegraf 1.12.9[3]
- plugins: os-theme-rebellion 1.8.9 fixes Unbound DNS reporting page
- plugins: os-wireguard 2.3[4]
- ports: php 8.2.11[5]
- ports: syslog-ng 4.4.0[6]
Interessiert in verschiedenste IT Themen, schreibe ich in diesem Blog über Software, Hardware, Smart Home, Games und vieles mehr. Ich berichte z.B. über die Installation und Konfiguration von Software als auch von Problemen mit dieser. News sind ebenso spannend, sodass ich auch über Updates, Releases und Neuigkeiten aus der IT berichte. Letztendlich nutze ich Taste-of-IT als eigene Dokumentation und Anlaufstelle bei wiederkehrenden Themen. Ich hoffe ich kann dich ebenso informieren und bei Problemen eine schnelle Lösung anbieten. Wer meinen Aufwand unterstützen möchte, kann gerne eine Tasse oder Pod Kaffe per PayPal spenden – vielen Dank.