Linux学习笔记
当前位置:Linux学习笔记 > Linux 新闻 > 正文

OPNsense 15.7.24/25 发布,防火墙和路由平台

bbs.yuanmawu.net.jpg

OPNsense 15.7.24 发布,此版本改进内容如下:

  • ports: suricata 2.0.11[2], dhcp6 20080615_5[3], lighttpd 1.4.39[4]

  • ports: syslogd 10.2, mpd 5.8[5], ca_root_nss 3.21, dnsmasq 2.75_1[6]

  • ports: ntp 4.2.8p5[7], php 5.6.17[8], python 2.7.11_1[9]

  • ports: miniupnpd 1.9.20151212, openvpn 2.3.10[10]

  • opnsense-update: add opnsense-verify and opnsense-sign

  • opnsense-update: improve verification of signatures of kernel and base upgrades

  • menu: bring back dashboard entry due to popular demand

  • menu: fix interface listing error when its description is empty

  • menu: moved license file to lobby section for visibility

  • menu: order VPN services for icon adjustment (contributed by Fabian Franz)

  • menu: renamed “config manager” to “configuration” and “certificate manager” to “trust”

  • language: multiple translation improvements (contributed by Fabian Franz and Andreas Martin)

  • language: fix behaviour of numerous apply buttons when using a non-English translation

  • dashboard: don’t display widget headers when the actual widgets are no longer installed

  • backend: fix issue when configd target pattern cannot be found

  • carp: fix support for OpenVPN clients

  • system: remove the old FTP proxy implementation (use proxy server service instead)

  • system: pin down listbox size to unhide the search field

  • health: tidy up the layout by removing visual blockers and general bumpiness

  • access: fix setting of default values for new users

  • access: fix padding on user listing page

  • access: adjusted file type of API credentials to fix Chrome’s download blues (contributed by Fabian Franz)

  • configuration: fix replay of configuration backups

  • interfaces: fix redirect after applying an interface’s configuration

  • trust: properly set certificate digest algorithm in form after creation error

  • gateways: bring back display of descriptions (contributed by Frank Wall)

  • load balancer: bring back display of descriptions (contributed by Frank Wall)

  • ipsec: fix RSA authentication method check

  • ipsec: finally brought back lease display in widgets and status page

  • proxy: add configurable cache_mem setting

  • unbound: honour the “register DHCP leases in DNS” option (contributed by Manuel Faux)

  • unbound: reorder advanced features inclusion

  • dynamic dns: allow custom entries to set hostname to be used in e.g. OpenVPN exports

  • dynamic dns: updated cloudflare service binding

  • firewall: fix saving of zero values on virtual IP page

  • firewall: fix label for option source/invert in rules edit page (contributed by Frank Wall)

  • firewall: show warning banner on related pages when firewall is globally disabled (contributed by Manuel Faux)

  • firewall: add interface groups to firewall rules and port forwarding

  • firewall: add matching behaviour indicator for floating rules (contributed by Fabian Franz)

  • firewall: make quick matching behaviour the default for floating rules

  • firewall: fix spurious error when migrating alias from one interface to the next

  • firewall: sort alias listing for better overview

  • firewall: fix header alignment for schedule repeat section

  • firmware: added display of major announcements on the firmware page

  • firmware: added reinstall / (un)lock buttons for installed packages

  • firmware: added plugin listing to page with install / remove buttons

  • firmware: restructured the backend and improved its resilience

  • firmware: show the download size of the pending update in the update check response

  • firmware: added update verification signature for the upcoming 16.1 release series

  • captive portal (devel): fix text of two help messages (contributed by Fabian Franz)

详细改进内容请看更新日志。

OPNsense 15.7.25 发布,此版本改进内容如下:

  • src: SCTP ICMPv6 error message vulnerability[1]

  • src: ntp panic threshold bypass vulnerability[2]

  • src: Linux compatibility layer incorrect futex handling[3]

  • src: Linux compatibility layer setgroups(2) system call vulnerability[4]

  • src: TCP MD5 signature denial of service[5]

  • src: Insecure default snmpd.config permissions[6]

  • src: OpenSSH client information leak[7]

  • src: Invalid TCP checksums with pf(4)[8]

  • src: YP/NIS client library critical bug[9]

  • ports: sqlite3 3.10.0[10], easy-rsa 3.0.1[11], openssh-portable 7.1p2[12]

  • traffic graphs: fix truncation of IP address to 14 characters

  • firmware: EOL announcement for 15.7 added, ready for upgrading to 16.1 on January 28

  • firmware: added mirror provided by RageNetwork (Munich, DE)

  • menu: fix navigation after editing IPsec mobile clients (contributed by Manuel Faux)

  • trust: properly reference CA in intermediate CAs (contributed by Manuel Faux)

详细改进内容请看更新日志。

OPNsense 是一个开源易用,而且易于构建的基于 FreeBSD 的防火墙和路由平台。包括大多数商业防火墙的特性。提供功能完整却易用的 GUI 管理界面。

最小硬件要求:

  • 1GHz dual core cpu

  • 1 GB RAM

  • 40GB SSD

  • Serial console or video

推荐配置:

  • 1.5GHz multi core cpu

  • 4 GB RAM

  • 120GB SSD

  • Serial console or video

未经允许不得转载:Linux学习笔记 » OPNsense 15.7.24/25 发布,防火墙和路由平台

赞 (0)
分享到:更多 ()