New OPNsense Release

Hi everyone,

We bring to your attention this update with a batch of enhancements and the occasional bugfix intertwined. It is interesting to note that the enhancements vs. bugfix ratio is as high as 5:1. ­čÖé

Brand new is the general availability of the Italian translation thanks to the work of Antonio Prado. The work is still ongoing and all help is highly appreciated. Also, the web font has been updated to enhance display of Cyrillic letters. We just love fostering the translations!

Here are the full patch notes:

  • system: allow selection of secondary console
  • system: added EFI as a console option
  • system: fixed status display of tiered gateway groups
  • system: allow to configure sudo usage for administrators
  • system: package manager can no longer uninstall the GUI package (marked as “vital”)
  • system: also beep on factory reset
  • system: added opnsense-code command line utility
  • interfaces: do not store packet captures in /root
  • interfaces: sort interface listings by name only
  • interfaces: do not prevent configuring an IP used by the PPTP and L2TP plugins
  • firewall: add normalisation options for source port and direction
  • firewall: improved parsing of alias input
  • firewall: fixed nesting of aliases with underscores in their names
  • openvpn: fix script mismatch on export page
  • openvpn: added reneg-sec option to server to allow persistent TOTP sessions
  • openvpn: added option to prevent usage of username-as-common-name
  • services: fix WOL widget link
  • services: aligned backend calls of DNS and DHCP
  • services: fix writing of DNS resolver host entries
  • services: simplify configuring of DNS resolver listening addresses
  • services: allow proxy to match against SSL URLs only (contributed by Fabio Mello)
  • lang: updated Source Sans Pro font to improve the cyrillic experience
  • lang: Italian is now a release language (contributed by Antonio Prado)
  • lang: minor updates for Russian (contributed by Smart-Soft Ltd.)
  • lang: minor updates for German and French
  • ports: haproxy 1.6.8[1], php 5.6.25[2], sqlite 3.14.1[3]
  • ports: openvpn 2.3.12[4], libxml 2.9.4[5]

Stay safe,
Your OPNsense team


[1] http://www.haproxy.org/download/1.6/src/CHANGELOG
[2] http://php.net/ChangeLog-5.php#5.6.25
[3] https://www.sqlite.org/releaselog/3_14_1.html
[4] https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn23#OpenVPN2.3.12
[5] http://xmlsoft.org/news.html