Download OPNsense 23.7.10

The OPNsense package is a firewall with extensive possibilities. It is based on the FreeBSD operating system and is originally a fork of m0n0wall and pfSense. The package can be set up entirely via a web interface and has support for mfa, openvpn, ipsec, carp and captive portal, among other things. In addition, it can apply packet filtering and has a traffic shaper. The developers have released OPNsense 23.7.10 and the release notes for that release can be found below.

OPNsense 23.7.10 released

A number of FreeBSD source code changes accumulated so it is better to have them delivered to your doorstep before the holidays are in full swing. Here are the full patch notes:

• system: improve config revision audit ability
• system: cleanse system_get_language_code() output
• system: safeguard /tmp/PHP_errors.log file before usage
• system: add an optional random delay before executing remote backups
• system: fix regression in log viewer level selector
• reporting: OpenVPN server instances were missing from respective health graph
• interfaces: move interface list widget link to assignments page
• interfaces: add new backend jobs and extend with optional parameter
• interfaces: add validation for proxy ARP strict subnet use
• firewall: improve alias write behavior by checking for changes beforehand
• firewall: fix preg_replace() to avoid truncated network display in rules listing
• firewall: add an ifconfig.debug file
• firmware: switch bogons/changelog set base URL to portable “opnsense-update -X” call
• ipsec: move save button on mobile page into its own container
• ipsec: add support for RADIUS class groups in instances
• unbound: use tls-system-cert instead of tls-cert-bundle
• web proxy: fix setting unknown language directory
• ui: upgrade jqTree to version 1.7.5
• plugins: os-ddclient 1.18
• plugins: os-dec-hw 1.0 is a Deciso hardware specific dashboard widget
• plugins: os-net-snmp fix for directory setup (contributed by doktornotor)
• plugins: os-telegraf 1.12.10
• plugins: os-upnp now reloads on newwanip event
• plugins: os-wireguard fix for missing firewall reload
• plugins: os-wireguard-go fix for device registration
• src: clang: sanitizer failure with ASLR enabled
• src: dhclient: do not add 0.0.0.0 interface alias
• src: ice: match irdma interface changes
• src: ixv: separate VFTA table for each interface
• src: libnetmap: better fix for port parsing failure
• src: pf: expose more syncookie state information to userspace
• src: pf: fix mem leaks upon vnet destroy
• src: pf: remove incorrect fragmentation check
• src: rc: fix restart _precmd issue with _setup
• src: re: add support for 8168FP HW rev
• src: zfs: check dnode and its data for dirtiness in dnode_is_dirty()
• ports: perl 5.36.3
• ports: php 8.2.13
• ports: phpseclib 3.0.34
• ports: squid update fixes parent proxy crash
• ports: strongswan 5.9.13