OPNsense 16.1.7 released

Hi guys,

Time for a quick update! We are still polishing our non-MVC GUI pages to match the modern style of the MVC equivalents and fix a few minor bugs along the way. In these matters, we ask for your participation in critically reviewing the changes below in order to catch remaining issues as soon as possible. We expect to finish our full code sweep next week. After that we’ll shift focus to work on new features.

The upgrades from 15.7.25 to 16.1.x briefly stalled with 16.1.6 due to a dormant incompatibility in the FreeBSD package management tool after flipping from 10.1 to 10.2, so we went ahead and made it all better. More precaution in our own update tools will hopefully prevent such unwanted breakage in the future, but we understand that these things can slip through. 🙂

New images are on the way shortly after 16.1.8. We are also introducing the new “opnsense-stable” firmware path and some cool upgrade features for our brave testers. More explanations will follow soon.

Here are the full patch notes:

  • ports: pecl-radius 1.3.0[1], bind 9.10.3-P4[2], bsnmp-ucd 0.4.2[3], openssh-portable 7.2p2[4], sqlite 3.11.1[5]
  • captive portal: add session timeout to status info
  • firewall: fix non-report of errors when filter reload errors couldn’t be parsed
  • pppoe server: make service control buttons work with multiple instances
  • wake on lan: reworked pages for a polished look and feel
  • load balancer: reworked pages for a polished look and feel
  • dashboard: better colouring for widget status bars
  • dns filter: reworked page for a polished look and feel
  • dns rfc2136: reworked pages for a polished look and feel
  • igmp proxy: reworked pages for a polished look and feel
  • system: routes diagnostics page ported to MVC
  • proxy: adjust category visibility as not all of them were shown before
  • firmware: fix an overzealous upgrade run when the package tool only changes options
  • firmware: fixed the binary upgrade patch from 15.7.x in FreeBSD’s package tool
  • network time: reworked pages for a polished look and feel
  • system: removed NTP settings from general settings
  • snmp: refactored page for a polished look and feel
  • access: let only root access status.php as it leaks too much info
  • development: remove the automount features
  • development: added in-place package upgrades using the upstream repository
  • development: addition of “opnsense-stable” package on our way to nightly builds
  • development: opnsense-update can now install locally available base and kernel sets

Stay safe,
Your OPNsense team

[1] https://pecl.php.net/package-changelog.php?package=radius
[2] https://kb.isc.org/article/AA-01363/81/BIND-9.10.3-P4-Release-Notes.html
[3] https://github.com/trociny/bsnmp-ucd/blob/master/CHANGELOG
[4] http://www.openssh.com/txt/release-7.2p2
[5] https://www.sqlite.org/releaselog/3_11_1.html