Current File : //backups/router/usr/local/opnsense/changelog/23.7.6.htm
<p>Hi,</p><p>This update is a maintenance release improving the DS-Lite use via separate GIF tunnels on top of IPv6-only connectivity. We are still continuing the efforts to provide better MVC integration for the gateways abstraction as well as working towards better MVC model consistency.</p><p>We would like to thank GitHub user Monviech for his special contributions in the documentation on the subject of reflection and hairpin NAT[<a target="_blank" href="https://docs.opnsense.org/manual/how-tos/nat_reflection.html">1</a>].</p><p>Here are the full patch notes:</p><p><ul><li>system: do not mark "defunct" gateway as "disabled" as well</li><li>system: skip all unusable gateways for monitoring</li><li>system: simplify the code in dpinger_status()</li><li>system: rewrite configuration history using MVC/API</li><li>interfaces: drop obsolete PPP default route handling</li><li>interfaces: change GRE/GIF to split reload per address family on dynamic connectivity</li><li>interfaces: prevent reading stale configuration data in interfaces_has_prefix_only()</li><li>interfaces: for consistency bootstrap the implicit 'none' value of the IP address modes</li><li>interfaces: prevent extended array data from being passed in interface_bring_down()</li><li>interfaces: fix warning due to use of an unassigned variable</li><li>firewall: quote "a/n" protocol in pf.conf to avoid a syntax error</li><li>firewall: fix wrong link to virtual IP page</li><li>firewall: add "Interface / Invert" rule toggle</li><li>firewall: fix help button in dialog for categories</li><li>firewall: update alias and shaper models</li><li>captive portal: update model</li><li>dhcp: fix "ends never" parsing in DHCPv6 lease page</li><li>dhcp: add scope to link-local DHCPv6 static mapping when creating route for delegated prefix (contributed by Maurice Walker)</li><li>dhcp: merge_ipv6_address() was too intrusive</li><li>intrusion detection: update model and persist values for transparency</li><li>intrusion detection: improve locking during sqlite database creation</li><li>ipsec: add IP4_DNS and IP6_DNS configuration payloads to connection pools (contributed by Monviech)</li><li>ipsec: require setting a connection pool name</li><li>ipsec: update models</li><li>monit: update model</li><li>openvpn: allow instances authentication without certificates when verify_client_cert is set to none</li><li>openvpn: add role to "proto" for TCP sessions as required for TAP type tunnels</li><li>openvpn: missing "selectpicker" class on VHID selector</li><li>openvpn: update model</li><li>backend: template reload wildcard was returning "OK" on partial failures</li><li>mvc: emit correct message on required validation in BaseField</li><li>mvc: throw on template reload issues in mutable service controller</li><li>mvc: inline one time use of $parentKey</li><li>mvc: set Required=Y for GroupNameField</li><li>mvc: remove special validation messages likely never seen</li><li>mvc: introduce isVolatile() for BaseModel</li><li>mvc: propagate isFieldChanged() from connected children in ArrayField</li><li>ui: remove the bootstrap-select version from the provided file in the default theme</li><li>plugins: remove the bootstrap-select version from the provided file in all themes</li><li>plugins: os-crowdsec 1.0.7[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/23.7/security/crowdsec/pkg-descr">2</a>]</li><li>plugins: os-smart reverts the use of smartctl to gather disks</li><li>plugins: os-telegraf 1.12.9[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/23.7/net-mgmt/telegraf/pkg-descr">3</a>]</li><li>plugins: os-theme-rebellion 1.8.9 fixes Unbound DNS reporting page</li><li>plugins: os-wireguard 2.3[<a target="_blank" href="https://github.com/opnsense/plugins/blob/stable/23.7/net/wireguard/pkg-descr">4</a>]</li><li>ports: php 8.2.11[<a target="_blank" href="https://www.php.net/ChangeLog-8.php#8.2.11">5</a>]</li><li>ports: syslog-ng 4.4.0[<a target="_blank" href="https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-4.4.0">6</a>]</li></ul></p><p><br>Stay safe,<br> Your OPNsense team</p>
Mini Shell