Dear all,

today we present you a quiet stable update with a hand full of assorted features, tweaks and bug fixes. Most notably, we’ve integrated DNS filtering via OpenDNS and tested / reworked the IPSec reporting.

As far as we know there have been no security-related fixes of bundled third-party software since 15.1.9.

Update through the GUI via “System: Firmware” or the root console option “12) Upgrade from console”. A reboot is not strictly required, but recommended to trigger the automatic enable of soft updates and TRIM (if applicable to your disk).

Here is the full change log of 15.1.9.1:

• firmware: show a warning on pending system updates that need to be executed from the console
• system: “General Setup” and “Advanced” items have been merged into “Settings”
• system: “Certificate Manager” is now known as “Certificates”, default tab changed as well
• services: introduce OpenDNS-based DNS filtering
• services: fixed start button layout when service is offline
• ports: fixed StrongSwan SMP socket bind on FreeBSD
• ipsec: brought back tunnel status reporting
• ipsec: fixed “Do not install LAN SPD” setting
• user manager: fixed group permission and privilege read bugs
• wake on lan: fixed “Cannot create references to/from string offsets nor overloaded objects” error
• openvpn: fixed server restart regression
• core: automatically enable TRIM on boot if available

The update is not available via install media, but you can just as well download 15.1.9 from a mirror and upgrade with a few simple clicks:

https://opnsense.org/download/

Stay safe out there,
Your OPNsense team