Messages

We also have plans for integrating OpenDNS for a simple filtering. Cannot provide an ETA right now though as we don't want to push this to the old GUI pages anymore.

Yeah, it's a general layer. I don't think the API changes much, but if it does then the tools are updated too. Should always support all available versions.

Can you please confirm this is working now with 15.1.7.2? :)

That's totally weird. Can you try this with FreeBSD 10.1 and if that does not work with 11-stable? I know that's asking a lot, but the driver is there and active. It may not recognise your card/PCI ID. :/

Thanks, I fixed both issues: FDQN is now usable as well and the password error is gone.

https://github.com/opnsense/core/commit/01d78e2a685be51d9c4beb03204d95510c5a8d97

Perfect, thanks, that's something to work with. I'll ponder a bit about how I can wrap this up as an easy to install test package.

Small improvement: if you need /etc/inc make it a soft-link to /usr/local/etc/inc where the include files reside now.

# ln -s /usr/local/etc/inc /etc/inc

Hello again,

this week has been really quiet just like last week so we give you another tiny stable update in the style of "click-click-click-done". Most notably, we've tracked down two issues with the package database being unavailable, resulting in "no updates available" situations. Thanks again to everyone who helped to debug and test this with us!

We are not aware of any security issues at this point. Our LibreSSL efforts continue with 15.1.7.2-LibreSSL later today and it seems to be an extended work in progress as we uncover just how deep OpenSSL is tied into the FreeBSD ecosystem. Needless to say it shouldn't be this way, but we're getting there step by step.

For everybody running 15.1.7.1 that might be a good opportunity to try the root console menu option 12 to update in one single go (including available base updates). It can also be invoked via SSH if you are into that sort of headless/remote workflow.

Here is the full list of patch notes:

• bsdinstaller: fixed the package database wipe on custom install
• bsdinstaller: install progress bar is now more responsive with regard to individual directories in /usr
• firmware: removed obsoleted upgrade code and tools following our pkgng/opnsense-update approach
• miniupnpd: now properly links to the OpenSSL/LibreSSL port
• ipmitool: now properly links to the OpenSSL/LibreSSL port
• core: extensive cleanups for PHP shebang usage, wiped numerous unused scripts and unreachable web pages, removed PBI remnants, removed 'tmp_path' softcoding to improve readability and git-grep(1) experience, removed stale debug statement that were only marginally useful while bumping the statements to default that indicate real errors
• console: fixed halt script permissions and switched to synchronous mode
• sysctl: added net.inet6.ip6.rfc6204w3 to improve the DHCPv6 experience
• nat: remove target IP hardcoding in automatic rules (props to pfSense for pointing that out to us)
• rc: fixed missing package database when using the MFS option for /var
• configd: added a standard rc.d script for easy daemon control
• mvc: a lot of new code to support general infrastructure for upcoming porting of features, e.g. proxy feature
• help: adjusted links in the help menu to use HTTPS and improved targeting

If you are new to OPNsense, the 15.1.7 images can be found here and are easily updated through the GUI after installation:

https://sourceforge.net/projects/opnsense/files/15.1.7/


Stay safe,
The OPNsense team

The emails may be enabled but are eaten by spam protection?

Profile->Account setting, then Modify Profile->Notifications:

Turn notification on when you post or reply to a topic.

Please define "fixed in the next release". I am not sure how we can satisfy all hardware quirks in one installation without jeopardising the performance of *most* users. We can add a tweak to the installer, but it will still be a manual effort to trigger it.

An error description would be helpful. Ad found out that SD/CF cards may take a long time depending on where they are flashed due to FreeBSD mounting them synchronous as opposed to asynchronous. There's a lot of new things coming to the bsdinstaller, but it'll be two more weeks as this takes quite a bit of work to get right the first time. :)

https://github.com/opnsense/ports/issues/5

OPNsense refreshing Duck DNS IP as expected?

It would be nice to redesign the GUI to adapt to the service's terminology, but that is even more work than maintaining the update glue underneath that could use a serious facelift and testing. So this is back to normal now for you?

Nice work! If you let us know how you did it we may be able to preserve that functionality, although I was about to rip out the old package system so to clean up the code further. :)

Maybe we can split off ".duckdns.org" in case it was added. But then again, if people put in a typo it may not work again, yadda, yadda....

I did not get that timeout error and Duck DNS works as expected... Did you enter your hostname correctly?

http://i.imgur.com/UOqmHD1.png