OPNSense

Recent Commits

• Franco Fichtner(03 Sept 26)

  Revert "interfaces: anchor accept_rtadv in interface_dhcpv6_configure() #10828" This partially reverts commit 8d939116c4e892116ab9717be8d61c1136506857.

• Franco Fichtner(03 Sept 26)

  interfaces: anchor accept_rtadv in interface_dhcpv6_configure() #10828 This avoids duplication and always executes it at the right point in time when the DHCPv6 client mode is activated. Suggested by: @laozhoubuluo

• Franco Fichtner(03 Sept 26)

  interfaces: ppp-ipv6.php may be executed before later stages of interface_configure() #10828

• Stephan de Wit(03 Sept 26)

  ui: prevent modal dragging from search bar

• Franco Fichtner(03 Sept 26)

  interfaces: reverse the queue build order to fix the last regression #10810 interfaces_configure() would re-classify VLAN as "software" after making in pluggable, but the actual intention of the queues build was that trackers, bridges and dhcp6c interfaces were started up last. This wasn't given in the loop since the more specific checks were at the end instead of at the front. It also reduces the complexity in the processing.

• Franco Fichtner(03 Sept 26)

  interfaces: require queue build strategy Does not fix the VLAN ordering issue yet.

• Stephan de Wit(03 Sept 26)

  bootgrid: ensure a minimum amount of rows to render This is a continuation of https://github.com/opnsense/core/pull/10408

• Konstantinos Spartalis(03 Sept 26)

  ux: fix widget bottom gap (#10837)

• Stephan de Wit(03 Sept 26)

  ui: implement dialog search field (#10825) Co-authored-by: Ad Schellevis <[email protected]>

• Franco Fichtner(03 Sept 26)

  interfaces: a few config_read_array() replacements

• Franco Fichtner(03 Sept 26)

  interfaces: bring back passing plugins_devices() from interfaces_configure()

• Franco Fichtner(03 Sept 26)

  firmware: adjust the incompatible pkg test "FreeBSD" is now "FreeBSD-ports" and since we know we want "OPNsense" we can make pin it this way much better. One downside is the "unknown-repository" when installing from ports but it's easy enough to circumvent this check for testing.

• Franco Fichtner(02 Sept 26)

  system: fush volt template cache in shared action

• Stephan de Wit(02 Sept 26)

  ui: attach selectors piped through replaceInputWithSelector to body This prevents dropdowns from overflowing inside a modal

• Konstantinos Spartalis(02 Sept 26)

  acl: add missing and fix some issues

• Bjoern Jakobsen(02 Sept 26)

  System: High Availability: Settings - Add pfsync version 1500, implements #10829 Signed-off-by: Bjoern Jakobsen <[email protected]>

• Franco Fichtner(01 Sept 26)

  src: style sweep

• Franco Fichtner(01 Sept 26)

  firewall: bogons private net exclusion moves to bogons.txz preprocessing; closes #9048 The set is now modified to split out the private ranges from the larger bogons block so we can remove this exclusion from the alias to "make inversion better again". ;)

• Greelan(01 Sept 26)

  Services: Dnsmasq DNS & DHCP: include expire and lease type in leases search fields (#10824)

• Greelan(01 Sept 26)

  Services: Kea DHCPv4/6: fix leases sorting (#10823)

• Monviech(01 Sept 26)

  Firewall: Rules: Add match keyword and normalization options (#10812) Firewall: Rules: Add match action and normalization options Add `match` as a regular MVC firewall rule action and support `scrub (...)` options on both `pass` and `match` rules. Switch global normalization to modern PF syntax by emitting `set reassembly` and generating random-ID and interface MSS handling as match rules. Legacy scrub rules and configuration paths remain unchanged, with no migration or compatibility handling introduced. Normalize unsupported combinations when changing away from `pass` via js handler. Add `match` support to the firewall live log and widget, expose the normalization controls in the rule dialog as advanced options, and include the related UI and formatter adjustments.

• Stephan de Wit(01 Sept 26)

  ipsec: add some hybrid post-quantum variants as additional key exchanges (#10798)

• Franco Fichtner(31 Aug 26)

  system: minor touches on widget styles

• Konstantinos Spartalis(31 Aug 26)

  widget: Services: more structured layout (#10817) * widget: Services: structured layout * Update Services.js

• Ad Schellevis(30 Aug 26)

  system: audit log injection via login username in auth_log() * prevent syslog.filter splitting our messages * remove newlines when flushing out local files PR: GHSA-jjm2-jg4p-3v9q

• Greelan(31 Aug 26)

  dnsmasq: leases sorting fixes (#10790) * dnsmasq: leases sorting fixes * Refactor to use sortable fields

• Franco Fichtner(31 Aug 26)

  system: also consider VTI tunnels for lower priority #10819

• Franco Fichtner(31 Aug 26)

  interface: replace strstr()/strpos() with more precise str_starts_with() This works for everything but VLANS which still need to check for an inlie _vlan for backwards compatibility.

• Franco Fichtner(31 Aug 26)

  interfaces: /dev paths no longer taint devices

• Franco Fichtner(29 Aug 26)

  system: give WireGuard the same tunnel priority treatment #10819 In the defaults it may be preferred by default route checking. For the default route we do not check if these are to be considered upstream.