Download OPNsense 23.1.10

The OPNsense package is a firewall with extensive possibilities. It is based on the FreeBSD operating system and is originally a fork of m0n0wall and pfSense. The package can be set up entirely via a web interface and has support for 2fa, openvpn, ipsec, carp and captive portal, among other things. In addition, it can apply packet filtering and has a traffic shaper. The developers have released OPNsense 23.1.10 and the release notes for that release can be found below.

OPNsense 23.1.10 released

As summer is approaching we release this minor update in preparation for the upcoming 23.7 series. We are planning the upgrade to FreeBSD 13.2 as well as offering an MVC variant of the OpenVPN integration among many other improvements some of which already shipped in previous 23.1.x releases. There may be another kernel update before the final 23.7 arrives but that is for next week to decide. For now enjoy the sun and stay hydrated!

Here are the full patch notes:

• system: do not delete dpinger PID file
• system: improve RRD collector PID/service handling
• system: do not touch /var/run/booting if it exists (contributed by William Desportes)
• system: do a full transition on gateway group apply
• system: automatically create core dump with installed debug kernel
• interfaces: minor fixes in IP address status read
• interfaces: additions for legacy_interface_stats()
• interfaces: use interfaces_primary_address() during IPv4 renewal
• firewall: remove duplicate table definitions
• firewall: prevent VIP address adding /32 on IPv6 rule selection
• firmware: opnsense update: move -K option to -x
• firmware: opnsense update: support deferred kernel set install
• firmware: opnsense-update: use -w option with -a option in fetch(1)
• firmware: opnsense-update: ensure kernel directory consistency
• firmware: shift subscription key extract to “-x” option
• firmware: use post-upgrade hook and stage kernel as well for clean abort
• firmware: sort plugins before store
• dhcp: fix IPv6 lease page undefined vars and other issues
• dhcp: share DUID parsing code via dhcpd_parse_duid()
• dhcp: revamp the prefix route handling also adding support for statically mapped downstream routers
• monit: fix “not on” validation
• openvpn: fix typo in widget for client timestamp display
• web proxy: syslog parsing cleanup
• ui: remove noodp and noydir from HTML meta robots tag (contributed by William Desportes)
• plugins: os-crowdsec 1.0.6
• plugins: os-nginx 1.32.1
• plugins: os-zabbix-proxy plugin variant for Zabbix 6.4
• ports: curl 8.1.2
• ports: krb5 1.21
• ports: nss 3.90
• ports: ntp 4.2.8p17
• ports: openssl 1.1.1u
• ports: openvpn 2.6.5
• ports: php 8.1.20
• ports: phalcon 5.2.2
• ports: python 3.9.17
• ports: squid 5.9
• ports: strongswan upstream fix for VICI stalls
• ports: suricata 6.0.13