Software update: OPNsense 23.1.9

The OPNsense package is a firewall with extensive possibilities. It is based on the FreeBSD operating system and is originally a fork of m0n0wall and pfSense. The package can be set up entirely via a web interface and has support for 2fa, openvpn, ipsec, carp and captive portal, among other things. In addition, it can apply packet filtering and has a traffic shaper. The developers have released OPNsense 23.1.9 and the release notes for that release can be found below.

OPNsense 23.1.9 released

A small update to improve stability with multiple delegated prefixes from DHCPv6 connectivity as well as proper “no binding” handling in the DHCPv6 client itself. Internally, the backend service has been refactored to allow for future additions, but no visible functionality changes have been done.

Still pretty happy with the IPsec connections MVC pages introduced in 23.1 so we would like to apply the same approach to OpenVPN for 23.7 and it is going to land in the next development version most likely for a sneak preview.

Here are the full patch notes:

• system: fix MFC service page with ID-based reload like OpenVPN
• system: fix issue with route add command for far gateway static route (contributed by Daniel Mason)
• system: improve static routes error handling
• system: fix a typo and align “attribute” use in gateway edit page
• system: pluginctl: service mode can now batch-reload services when existing ID is omitted
• firewall: simplify rule edit layout slightly and fix unused element ID
• dhcp: remove ::/64 magic as it uses AdvRouterAddr yes
• interfaces: deal with RENEW and REBIND only reporting partial PDINFO
• ipsec: support the default selector ([dynamic]) when local_ts or remote_ts are left empty in connections
• backend: improved nested command support, reorganize action types, use ActionFactory to offer the requested type
• backend: add “getUtcTime” template helper function
• ports: curl 8.1.1
• ports: dhcp6c 20230530
• ports: lighttpd 1.4.71
• ports: openssh 9.3p1
• ports: sqlite 3.42.0
• ports: syslog-ng 4.2.0