OPNSENSE 23.7, a distribution for the creation of inter-sews, has been released. This distribution is a branch from the PFSENSE project and aims to provide a completely open solution for deploying intersete screens and network gateways. Unlike PFSENSE, OPNSENSE is a community-driven project with transparent development and the ability to use its components in third-party products, including commercial ones. The distribution components and assembly tools are distributed under the BSD license. The distribution is available in the form of a LiveCD and a systemic image for recording on Flash-boaters.
OPNSENSE is based on the FreeBSD code and offers a range of capabilities, including completely open assembly tools, installation on top of FreeBSD, load balancing, a web interface for Captive Portal Connections, PF state monitoring, traffic filtering, support for various protocols (IPSEC, OpenVPN, and PPTP), integration with LDAP and RADIS, Dynamic DNS support, and visual reports and graphs.
One of the notable features of OPNSENSE is the ability to create fault-tolerant configurations using the CARP protocol. This allows for the launch of a spare node that automatically synchronizes with the main inter-grid screen and takes over the load in the event of a failure.
The latest release of OPNSENSE, version 23.7, comes with several changes and updates. It incorporates changes from the branch FreeBSD 13.2-Stable and transitions to the PHP 8.2 branch. It also adds new features such as filtering logs by message importance, manual protocol selection for VLAN, and PMTUD support. Additionally, various components and plugins have been updated to their latest versions, including OS-ACME-Client, OS-BIND, OS-DNSCRYPT-PROXY, OS-Firewall, and OS-Telegraf. The distribution also includes improved support for detection and prevention of Suricata invasion.
To learn more about OPNSENSE 23.7 and its features, you can visit the official forum post.
- Changes from the branch FreeBSD 13.2-Stable.
- The components for setting up the OpenVPN, binding IP addresses for DHCP (DHCP Lease), the UNS-server UNBound DNS-server and group control in the inter-sequeter, which allowed them to support control of control through the APIs are translated.
- The transition to the PHP 8.2 branch (8.2.8).