Software Update: OPNsense 22.1.3

The package OPNsense is a firewall with extensive possibilities. It is based on the FreeBSD operating system and is originally a fork of m0n0wall and pfSense. The package can be set up completely via a web interface and has support for 2fa, openvpn, ipsec, carp and captive portal, among others. In addition, it can apply packet filtering and has a traffic shaper. The developers have released OPNsense 22.1.3 with the following announcement:

OPNsense 22.1.3 released

This update includes groundwork for interface handling improvements making the boot more flexible in complex interface assignment scenarios involving GIF, GRE and bridge devices.
Please note this update does not include the current OpenSSL security advisory due to overlapping time schedules. 22.1.4 will include these and will likely be released next week.

Here are the full patch notes:

• system: remove “all” group handling code forgotten in 2015
• interfaces: resolve device/interface interdependency on boot
• interfaces: do not update VIPs on dynamic address changes
• interfaces: remove unused reference and return value from interface_carp_configure()
• interfaces: remove unused reference from interface_ipalias_configure()
• interfaces: stop IPv6 from reacting to simple stop/detach/down events via rc.linkup
• interfaces: introduce ifctl helper for future use
• firewall: allow per-rule adaptive timeouts (contributed by kulikov-a)
• dhcp: stream-read log and leases files for “dhcpd update prefixes” action
• firmware: use opnsense-update for version info in update checks
• firmware: independently check for available upgrade sets
• firmware: separate the “needs_reboot” and “upgrade_needs_reboot” check flags
• firmware: add URL return feature to changelog script
• firmware: improve the connectivity audit
• ipsec: clean up stale CA certificates on reconfigure
• plugins: os-ddclient 1.3
• plugins: os-freeradius templating generation fix
• ports: dnspython 2.2.1
• ports: dpinger 3.2
• ports: expat 2.4.7
• ports: krb5 1.19.3
• ports: nss 3.76
• ports: openssh 8.9p1
• ports: sudo 1.9.10
• ports: syslog-ng 3.36.1