Download OPNsense 24.1.3

The OPNsense package is a firewall with extensive possibilities. It is based on the FreeBSD operating system and is originally a fork of m0n0wall and pfSense. The package can be set up entirely via a web interface and has support for mfa, OpenVPN, IPsec, CARP and captive portal, among other things. In addition, it can apply packet filtering and has a traffic shaper. The developers have released OPNsense 24.1.3 and the release notes for that release can be found below.

OPNsense 24.1.3 released

This update fixes minor issues in the software and adds a CSV import/export to the Kea DHCP reservations to make bulk edits much easier. It also fixes defaults in Suricata 7 that would negatively impact the IPS mode usage and updates the curl package to its current latest version. Here are the full patch notes:

• system: prevent gateway removal when it is currently bound to an interface
• system: fix assorted PHP deprecation warnings
• firewall: add optional advanced property “State policy” to influence state creation on a per rule base
• firewall: fix floating rule display (contributed by lin-xianming)
• firewall: fix display of ICMP tooltip (contributed by lin-xianming)
• firmware: fix missing space in audit message
• kea-dhcp: add import/export as CSV on reservations
• intrusion detection: set exception-policy and app-layer.error-policy to their advertised defaults
• unbound: make atomic copies of root.hints file to hopefully appease Unbound startup problems
• unbound: fix missing /lib nullfs mount in chroot
• unbound: add aggressive-nsec option toggle (contributed by kulikov-a)
• wireguard: remove duplicate “pubkey” field, remove required tag and validate on Base64 in model
• wireguard: address assorted interface configuration inconsistencies during configuration
• mvc: fix model cloning when array items contain nested containers
• ui: fix epoch support as number in bootgrid
• ui: replace all > and < occurrences in treeview (contributed by lin-xianming)
• wizard: reorder storage sequence to fix hostname/domain change bug
• plugins: os-theme-cicada 1.35 (contributed by Team Rebellion)
• plugins: os-theme-rebellion 1.8.10 (contributed by Team Rebellion)
• ports: curl 8.6.0
• ports: dnspython 2.6.1
• ports: expat 2.6.0
• ports: libpfctl 0.9
• ports: libxml 2.11.7
• ports: lighttpd 1.4.74
• ports: pcre2 10.43
• ports: php 8.2.16