Messages

Owww thanks, and sorry

Trying to mitigate meltdown and spectre: followed this guide for update the microcode:

* CPU microcode is the latest known available version:  NO  (latest version is 0x7030106 dated 2018/02/09 according to builtin MCExtractor DB v112 - 2019/05/22)


# pkg install devcpu-data
# vi /boot/loader.conf
# cat /boot/loader.conf
cpu_microcode_load="YES"
cpu_microcode_name="/boot/firmware/intel-ucode.bin"
# reboot

but when I reboot the loader.conf is resetted by default, and microcode was not updated. Is there a way for disable the rewrite protection and then enable after update it?

Hello, today vulnerability test gave me this output. Tryied remove curl and expat with no luck.. How can I fix this? The OPNsense installed version is 19.7.4 and no update of any kind available..

***GOT REQUEST TO AUDIT SECURITY***
vulnxml file up-to-date
expat-2.2.6_1 is vulnerable:
expat2 -- Fix extraction of namespace prefixes from XML names
WWW: https://vuxml.freebsd.org/freebsd/c5bd8a25-99a6-11e9-a598-f079596b62f9.html

curl-7.65.3 is vulnerable:
curl -- multiple vulnerabilities
CVE: CVE-2019-5482
CVE: CVE-2019-5481
WWW: https://vuxml.freebsd.org/freebsd/9fb4e57b-d65a-11e9-8a5f-e5c82b486287.html

2 problem(s) in the installed packages found.
***DONE***

Hello, I'm very new to OPNsense, and have the need to control external access points(x4)  traffic with OPNsense.

Is it possible?