Messages

1

19.7 Legacy Series / Re: Microcode update

« on: September 17, 2019, 09:29:01 pm »

Owww thanks, and sorry

2

19.7 Legacy Series / Microcode update

« on: September 17, 2019, 09:23:50 pm »

Trying to mitigate meltdown and spectre: followed this guide for update the microcode:

* CPU microcode is the latest known available version:  NO  (latest version is 0x7030106 dated 2018/02/09 according to builtin MCExtractor DB v112 - 2019/05/22)


# pkg install devcpu-data
# vi /boot/loader.conf
# cat /boot/loader.conf
cpu_microcode_load="YES"
cpu_microcode_name="/boot/firmware/intel-ucode.bin"
# reboot

but when I reboot the loader.conf is resetted by default, and microcode was not updated. Is there a way for disable the rewrite protection and then enable after update it?

3

19.7 Legacy Series / fix package vulnerability

« on: September 17, 2019, 06:16:10 pm »

Hello, today vulnerability test gave me this output. Tryied remove curl and expat with no luck.. How can I fix this? The OPNsense installed version is 19.7.4 and no update of any kind available..

***GOT REQUEST TO AUDIT SECURITY***
vulnxml file up-to-date
expat-2.2.6_1 is vulnerable:
expat2 -- Fix extraction of namespace prefixes from XML names
WWW: https://vuxml.FreeBSD.org/freebsd/c5bd8a25-99a6-11e9-a598-f079596b62f9.html

curl-7.65.3 is vulnerable:
curl -- multiple vulnerabilities
CVE: CVE-2019-5482
CVE: CVE-2019-5481
WWW: https://vuxml.FreeBSD.org/freebsd/9fb4e57b-d65a-11e9-8a5f-e5c82b486287.html

2 problem(s) in the installed packages found.
***DONE***

4

19.7 Legacy Series / Centralize External Access Points

« on: September 10, 2019, 03:04:12 pm »

Hello, I'm very new to OPNsense, and have the need to control external access points(x4)  traffic with OPNsense.

Is it possible?