Dear all,

today we present you a quiet stable update with a hand full of assorted features, tweaks and bug fixes. Most notably, we’ve integrated DNS filtering via OpenDNS and tested / reworked the IPSec reporting.

As far as we know there have been no security-related fixes of bundled third-party software since 15.1.9.

Update through the GUI via “System: Firmware” or the root console option “12) Upgrade from console”. A reboot is not strictly required, but recommended to trigger the automatic enable of soft updates and TRIM (if applicable to your disk).

Here is the full change log of

  • firmware: show a warning on pending system updates that need to be executed from the console
  • system: “General Setup” and “Advanced” items have been merged into “Settings”
  • system: “Certificate Manager” is now known as “Certificates”, default tab changed as well
  • services: introduce OpenDNS-based DNS filtering
  • services: fixed start button layout when service is offline
  • ports: fixed StrongSwan SMP socket bind on FreeBSD
  • ipsec: brought back tunnel status reporting
  • ipsec: fixed “Do not install LAN SPD” setting
  • user manager: fixed group permission and privilege read bugs
  • wake on lan: fixed “Cannot create references to/from string offsets nor overloaded objects” error
  • openvpn: fixed server restart regression
  • core: automatically enable TRIM on boot if available

The update is not available via install media, but you can just as well download 15.1.9 from a mirror and upgrade with a few simple clicks:

Stay safe out there,
Your OPNsense team