today we present you a quiet stable update with a hand full of assorted features, tweaks and bug fixes. Most notably, we’ve integrated DNS filtering via OpenDNS and tested / reworked the IPSec reporting.
As far as we know there have been no security-related fixes of bundled third-party software since 15.1.9.
Update through the GUI via “System: Firmware” or the root console option “12) Upgrade from console”. A reboot is not strictly required, but recommended to trigger the automatic enable of soft updates and TRIM (if applicable to your disk).
Here is the full change log of 220.127.116.11:
- firmware: show a warning on pending system updates that need to be executed from the console
- system: “General Setup” and “Advanced” items have been merged into “Settings”
- system: “Certificate Manager” is now known as “Certificates”, default tab changed as well
- services: introduce OpenDNS-based DNS filtering
- services: fixed start button layout when service is offline
- ports: fixed StrongSwan SMP socket bind on FreeBSD
- ipsec: brought back tunnel status reporting
- ipsec: fixed “Do not install LAN SPD” setting
- user manager: fixed group permission and privilege read bugs
- wake on lan: fixed “Cannot create references to/from string offsets nor overloaded objects” error
- openvpn: fixed server restart regression
- core: automatically enable TRIM on boot if available
The update is not available via install media, but you can just as well download 15.1.9 from a mirror and upgrade with a few simple clicks:
Stay safe out there,
Your OPNsense team