Good morning everyone,

as things mature and confidence grows we are trying something new today: a lightweight and online-only stable update that addresses numerous GUI bugs uncovered by our users. We hope to continue this trend and thus keep asking for all kinds of feedback through the usual communication channels. Let’s build a better OPNsense together.

There are no security issues we are aware of. The LibreSSL version will likely be available tomorrow.

Here are the full patch notes:

• bsdinstaller: work towards embedded installations, e.g. Quick/Easy disk selection
• opnsense-update: added command line switches and a manual page for usability’s sake
• opnsense-update: will now remember that the base system is up to date
• ports: updated to LibreSSL 2.1.4 (for our experimental LibreSSL flavour only)
• directory layout: collapsed the /conf -> /cf/conf magic into a simple /conf directory (needs a reboot to take effect)
• certificates: consistently lowered the default lifetime to 1 year
• captive portal: fixed an issue that prevented traffic forwarding in some cases
• NAT: do not resolve aliases on display to stay consistent with rules page
• console menu: rebuilt the firmware upgrade option 12 to work on top of our new pkgng/opnsense-update system
• crash reporter: can now be found under Diagnostics and was extended to show all parsing errors. The send button is currently disabled but feel free to copy+paste the messages to push them through the usual channels.
• rc: fixed numerous parse errors in files previously missed by the regression test
• rc: DHCP lease and RRD graph persistency after reboot, halt and config import (reinstall)
• UPnP: the shortcuts menu has been reintroduced
• login: redirect after login now brings up the previously selected page
• dynamic DNS: fixed validation for custom entries that do not require a hostname
• dynamic DNS: added support for Duck DNS
• firewall log widget: fixed multiple bugs and updated style
• pptp: brought back missing PHP includes
• core: removed thousands of lines of unused code, style consolidation and path unwinding
• core: multiple image to glyphicon conversions
• development: moved pkgng config files out of the src/ directory to avoid tainting the system on core.git live mount
• development: steady progress on the first MVC framework implementation of the upcoming proxy support

If you are new to the show, you want to grab the latest image from Sourceforge and apply this update afterwards using the firmware update in the GUI:

https://sourceforge.net/projects/opnsense/

Stay safe,
The OPNsense team