OPNsense 17.7.4 released

Dear all,

Another week, another update. Most notably, the Tor plugin has been officially released.

New images finally follow in 17.7.5 and we are happy to report that the shared forwarding additions are already up and running on the FreeBSD 11.1 kernel with two major improvements: IPv6 support and tryforward compatibility! That means 18.1-BETA and an associated public call for testing is not too far out at this point.

And here are the full patch notes:

system: remove revoked certificates from list of certificates to revoke
firewall: add advanced setting to disable interface gateway rules
firewall: ignore gateway weight of zero
firewall: add reply-to specific gateway in pluggable rules
firewall: support anchor quick keyword in pluggable rules
intrusion detection: do not allow interface group in selection
openvpn: ns-cert-type becomes remote-cert-tls in client export
web proxy: ICAP exclude list (contributed by Alexander Shursha)
mvc: support value attribute for model option data
installer: UEFI partition size increased to 200 MB
installer: always error on password mismatch
plugins: os-acme-client 1.11[1] (contributed by Frank Wall)
plugins: os-c-icap 1.1 logging and virus scan settings (contributed by Michael Muenz)
plugins: os-tor 1.0 (contributed by Fabian Franz)
plugins: os-zerotier 1.2.0 allows local.conf settings (contributed by David Harrigan)
ports: libnghttp2 1.26[2]
ports: unbound 1.6.6[3]
ports: hyperscan 4.5.2[4]
ports: py-openssl 17.3.0[5]
ports: py-cryptography 2.03[6]

Stay safe,
Your OPNsense team

—
[1] https://github.com/opnsense/plugins/pull/290
[2] https://github.com/nghttp2/nghttp2/releases/tag/v1.26.0
[3] http://www.unbound.net/download.html
[4] https://github.com/01org/hyperscan/releases
[5] https://pyopenssl.org/en/stable/changelog.html#id1
[6] https://cryptography.io/en/latest/changelog/#v2-0-3