OPNsense 24.1.9_1 Released: June 19th 2024

OPNsense Firewall Update 24.1.9_1 was released on June 19th 2024.

System improvements include preventing the creation of interface routes without an address, adding -x and -X modes for XMLRPC options in pluginctl, and using random_int() in the remote backup script for better randomness.

The firewall has seen a migration of one-to-one NAT functionality to MVC/API, enhancing its capabilitie and the "natreflection" rule attribute missed in MVC/API migration hotfix applied..

For interfaces, several changes were made: a SLAAC flush feature has been introduced, accepting own radvd configurations during SLAAC tracking has been prevented, and SLAAC tunables have been moved to system requirements. Additionally, IPv6 interface modes are now disabled when IPv6 is globally disabled, and pluginctl will no longer provide IPv4 information for non-interfaces.

In DHCP relay, logging has been separated into its own space for better clarity.

Firmware changes include a default changelog fetch time adjustment to 30 seconds and dumping TLS information for firmware servers in use.

DHCP client updates feature the allowance of root domain input as . in ISC-DHCP, support for static DNS mappings in Kea-DHCP, and additions to DHCP6C including WAN tracking and interface ID specification.

The MVC framework has been improved by refactoring checkAndThrowSafeDelete() to checkAndThrowValueInUse().

UI enhancements prevent word breaks for top-level menu items, ensuring a cleaner display.

Finally, several plugins and dependencies have been updated: os-caddy to version 1.5.7, curl to 8.8.0, dhcp6c to v20240607, nss to 3.100, openldap to 2.6.8, openssl to 3.0.14, php to 8.2.20, py-duckdb to 1.0.0, py-netaddr to 1.3.0, and sqlite to 3.46.0.