5 Pull requests merged by 5 people

• System: Access: migrate Users and Groups to MVC/API

  #8046 merged Nov 21, 2024

• feat(dhcp): add dhcp-socket-type option to Kea DHCP server

  #8069 merged Nov 19, 2024

• Reduce pointless logging

  #7857 merged Nov 18, 2024

• routing/gateways: Fix ipv4 and ipv6 validation not being displayed in the gateway form

  #8060 merged Nov 13, 2024

• Update opnsense-version to restore old default output

  #8047 merged Nov 8, 2024

6 Pull requests opened by 6 people

• Tooltip for Radius group sync

  #8055 opened Nov 12, 2024

• Openvpn authentication with otp as suffix

  #8058 opened Nov 13, 2024

• Remote syslog localip

  #8061 opened Nov 13, 2024

• Handle dev.pchtherm temperatures in the thermal dashboard widget

  #8062 opened Nov 14, 2024

• monit: wrap exec in double quotes to allow arguments

  #8085 opened Nov 25, 2024

• dashboard: Add certificate widget that displays CAs and Certs sorted by expiration date

  #8105 opened Dec 3, 2024

47 Issues closed by 16 people

• after update to 24.1.8 the routing is no longer correct

  #7516 closed Dec 3, 2024

• Allow Separate Prefix-Specific Router Advertisement Options on a Single Interface

  #7513 closed Dec 2, 2024

• [ BE 23.10 ... BE 24.10_7-amd64 ] Automatic fail-over to a Fallback Gateway still fails

  #8064 closed Dec 2, 2024

• OpenVPN Rules don't apply

  #8102 closed Dec 2, 2024

• TOTP Authentication

  #8100 closed Dec 2, 2024

• UI: Upgrade font awesome icons to version 6

  #8101 closed Dec 2, 2024

• mvc/auth: Add validation to PrivController to prevent lockout

  #8094 closed Dec 2, 2024

• mvc: normalize multiple slashes into single slashes for URLs

  #7709 closed Dec 2, 2024

• Wireguard - Track IPv6 Interface for dynamic GUA prefix delegation to Tunnel Address

  #8096 closed Nov 30, 2024

• no more traffic on uplink (happens since update to OPNsense 24.7.9_1-amd64)

  #8097 closed Nov 30, 2024

• Firmware status page hangs forever

  #7825 closed Nov 29, 2024

• system: add a python script that monitors and perhaps averages temperature readings

  #7730 closed Nov 27, 2024

• No IPv6 Adress from Telekom Germany

  #8083 closed Nov 27, 2024

• Suricata enabled kills IPV6

  #8091 closed Nov 27, 2024

• OPNSense Theme CSS Issue

  #8088 closed Nov 26, 2024

• Firewall->Shaper->Rules not showing all pipes and queues in Target selection dropdown when creating new Rule

  #7499 closed Nov 26, 2024

• Rename "Firmware" menu entry to something else, move it to the top of the list along with settings.

  #7497 closed Nov 25, 2024

• Automatic Ldap group syncing not working openldap memberof is deprecated

  #7496 closed Nov 25, 2024

• interfaces: kill PPP and Wireless logs, redirect to system log, fold types into "Other Types" category renaming it to "Types"

  #7880 closed Nov 25, 2024

• IPsec: EAP-TLS IKEv2 fails with No trusted certificate found to verify TLS peer

  #7491 closed Nov 24, 2024

• Support PREF64 for Router Advertisements

  #7487 closed Nov 23, 2024

• Bug in hostapd setup script

  #8079 closed Nov 22, 2024

• System: Access: migrate Users and Groups to MVC/API

  #7904 closed Nov 21, 2024

• How to use configd.py or the backend registry/database to add elements using a python script and without writing xml

  #8072 closed Nov 20, 2024

• LAN interface tracking with manual adjustment and SLAAC-only WAN interface

  #7552 closed Nov 20, 2024

• [Feature] Global Aliases

  #7481 closed Nov 20, 2024

• system: trust: global settings page

  #7901 closed Nov 19, 2024

• IPSec - Tunnel Settings - cannot edit existing Phase2 entries

  #7479 closed Nov 19, 2024

• Add dhcp-socket-type option to kea

  #8068 closed Nov 18, 2024

• IDS/IPS - make suricata stats.log configurable/optional

  #7101 closed Nov 18, 2024

• [BUG] WAN interface periodically losing DHCP lease

  #7478 closed Nov 18, 2024

• feature: Adding a duplicate IP to MAC reservation causes kea to stop working

  #7477 closed Nov 18, 2024

• Register Kea DHCP Leases (dynamic mappings) with Unbound

  #7475 closed Nov 17, 2024

• System: Access: Users - replace ldap import with "default group" option

  #8065 closed Nov 16, 2024

• NAT redirect rules don't respect interface selection and instead rely solely on source address

  #7952 closed Nov 16, 2024

• Wireguard interface not coming online after reboot - "required IPv4 interface address could not be found, skipping"

  #7468 closed Nov 14, 2024

• Firewall: Rules: Interface: Facilitate checking by showing only 'in' or 'out' firewall rules of an interface

  #7466 closed Nov 14, 2024

• allow use of aliases in `system > settings > general > dns servers` and other dns server input locations

  #7464 closed Nov 14, 2024

• PPPoE set idle timeout not working when INT value is 0.

  #7465 closed Nov 14, 2024

• Static IPv6 not working has expected.

  #8041 closed Nov 9, 2024

• Error "Unexpected error, check log for details" when changing nginx settings

  #8048 closed Nov 9, 2024

• Some hosts hardly/not at all reachable through wireguard

  #7454 closed Nov 7, 2024

• System: Trust: Authorities - cleanup openssl trust store

  #7909 closed Nov 7, 2024

• Hyperscan Now Proprietary

  #7453 closed Nov 7, 2024

• 24.7.7 can't set up vlan as LAN -> no webgui

  #8033 closed Nov 6, 2024

• Port NAT via OpenVPN: normal fw rule is not hit while floating rule works fine

  #7450 closed Nov 6, 2024

• Port Forward reply to not getting set correctly

  #7448 closed Nov 5, 2024

37 Issues opened by 36 people

• OpenVPN disconnects every couple minutes

  #8106 opened Dec 3, 2024

• Block rule show as pass

  #8104 opened Dec 2, 2024

• Lighttpd PHP_FCGI_CHILDREN cap limits usability

  #8103 opened Dec 2, 2024

• no more traffic on uplink and strange way to recover

  #8098 opened Nov 30, 2024

• [Feature request] Warning in GUI if files found in /usr/local/etc/swanctl/conf.d/

  #8093 opened Nov 27, 2024

• Changes to enable/disable of Suricata IDS/IPS rulesets don't take effect with Download & Update Rules button

  #8092 opened Nov 27, 2024

• Audit Log file shows proxy IP instead of client IP (possible solution included)

  #8089 opened Nov 26, 2024

• KEA writes logs, even though it says it's no longer running in GUI

  #8087 opened Nov 25, 2024

• Gateway monitoring does not work when multiple connections share the same gateway

  #8086 opened Nov 25, 2024

• OCSP stapling support is missing for lighttpd

  #8084 opened Nov 24, 2024

• Process Improvement - PHP Static Analysis

  #8082 opened Nov 23, 2024

• Kea refuses to make DHCP offer with ERROR: MBZ nibble 0x6 != 0

  #8081 opened Nov 23, 2024

• WPA broken for wifi after 24.7 update

  #8080 opened Nov 22, 2024

• Failure to add floating rules to new VLAN or group

  #8078 opened Nov 21, 2024

• Rules do not work update 11212024

  #8077 opened Nov 21, 2024

• Size down the wide of Interface Statistics coloums

  #8076 opened Nov 21, 2024

• 24.7.8 - ISC DHCPv4 does not register new leases in Unbound

  #8075 opened Nov 21, 2024

• Add support for `ether` anchors and rules

  #8074 opened Nov 20, 2024

• Routes for enabled Wireguard peers are created irrespective of their connection status.

  #8071 opened Nov 19, 2024

• Regression in opnsense NAT/NAT-PMP with using tailscale on client devices behind opnsense router with CGNAT WAN

  #8070 opened Nov 19, 2024

• Option to put static-dhcp mapped clients into alias.

  #8067 opened Nov 18, 2024

• Overwrite link-local address with my own ULA

  #8066 opened Nov 17, 2024

• Add an option to block private/random MAC addresses

  #8063 opened Nov 15, 2024

• [pfsync multiqueue] tcp connections dropped when pfsync is active and multiqueue is enabled

  #8059 opened Nov 13, 2024

• DHCP server active when it isn't

  #8056 opened Nov 12, 2024

• KEA dhcp client hostname to syslog

  #8054 opened Nov 12, 2024

• Unbound: Require manual restart to populate system AAAA record

  #8052 opened Nov 11, 2024

• Unbound host overrides breaks when adding a wildcard entry

  #8051 opened Nov 10, 2024

• [Feature Request] Add port information for STUNS/TURNS 5349

  #8050 opened Nov 9, 2024

• [Feature Request] Add port information for DNS 853 (QUIC/TLS)

  #8049 opened Nov 9, 2024

• Error trying to upgrade to 24.7.8

  #8045 opened Nov 7, 2024

• OPNsense becomes unreachable when new interface is enabled or disabled

  #8044 opened Nov 7, 2024

• Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/etc/inc/rrd.inc

  #8043 opened Nov 6, 2024

• Set TCP flags to "Any flags" by default on allow-rules for "any" protocol

  #8040 opened Nov 5, 2024

• Authentication - remove rc.expireaccounts (for being redundant)

  #8037 opened Nov 4, 2024

• `opnsense-bootstrap`: Very slow download speed for packages

  #8036 opened Nov 4, 2024

• KEA DHCP Lease to Reservation Wizard.

  #8035 opened Nov 3, 2024

56 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• netflow on pppoe interface not working

  #7947 commented on Nov 4, 2024 • 0 new comments

• FQ_Codel not trraffic shaping upload

  #8029 commented on Nov 6, 2024 • 0 new comments

• IPv6 - multi prefix delegation options

  #7647 commented on Nov 6, 2024 • 0 new comments

• Gateway monitoring dies randomly

  #7027 commented on Nov 9, 2024 • 0 new comments

• [feature request] Kia Leases

  #7949 commented on Nov 12, 2024 • 0 new comments

• Import Wireguard client from another system and reuse the QR code and wg0.conf in 'edit peer', ability to edit dns server and tunnel subnet ip address

  #7977 commented on Nov 13, 2024 • 0 new comments

• Unbound DNS leak - inconsistency

  #7679 commented on Nov 16, 2024 • 0 new comments

• DS-Lite not coming up after a reboot

  #7713 commented on Nov 16, 2024 • 0 new comments

• Gateway monitoring says link is down whereas link actually works (probably not OPNsense related)

  #7635 commented on Nov 18, 2024 • 0 new comments

• WAN DHCP refresh still drops connection/packets in 24.7.5_3?

  #8020 commented on Nov 18, 2024 • 0 new comments

• captive portal does not send Calling Station ID to the client during the connection

  #7844 commented on Nov 18, 2024 • 0 new comments

• system: snapshot default names and other ideas

  #7824 commented on Nov 18, 2024 • 0 new comments

• Add RFC 5080 message authenticator support to the authenticator (RADIUS client) in core

  #7983 commented on Nov 20, 2024 • 0 new comments

• rules do not work

  #8034 commented on Nov 21, 2024 • 0 new comments

• interfaces: restructure PPP to allow complex IPv6-only deployments and remove "Use IPv4 connectivity" by making it the default

  #7446 commented on Nov 25, 2024 • 0 new comments

• incorrect WAN IP address on PPPOE

  #7984 commented on Nov 25, 2024 • 0 new comments

• Kea: Support DHCP lease times per subnet

  #7592 commented on Nov 27, 2024 • 0 new comments

• wrong matching shown in firewall state table

  #7724 commented on Dec 1, 2024 • 0 new comments

• [Feature Request] Web GUI option to disable auto firewall rules from /usr/local/etc/inc/filter*

  #7783 commented on Dec 3, 2024 • 0 new comments

• system: add a certificate widget to allow visibility for upcoming expiries

  #7898 commented on Dec 3, 2024 • 0 new comments

• webgui: ocsp staple support

  #5567 commented on Dec 3, 2024 • 0 new comments

• Customize amount of Netflow aggregator history kept

  #6085 commented on Dec 3, 2024 • 0 new comments

• Add base-uri and report-sample csp directives

  #6194 commented on Dec 3, 2024 • 0 new comments

• unbound: Add support for DoH and DoT

  #6558 commented on Dec 3, 2024 • 0 new comments

• Configure SSH Host Certificates

  #6785 commented on Dec 3, 2024 • 0 new comments

• trust : crl : implemented fetch and scheduled update from a URL

  #6838 commented on Dec 3, 2024 • 0 new comments

• Move the Enable checkbox for legacy tunnels to a visible place

  #7095 commented on Dec 3, 2024 • 0 new comments

• Monit: support quotes in passwords

  #7156 commented on Dec 3, 2024 • 0 new comments

• Date/Time display locale format selector

  #7343 commented on Dec 3, 2024 • 0 new comments

• Allow setting UniFi Controller IP in Kea DHCP.

  #7361 commented on Dec 3, 2024 • 0 new comments

• Firewall: fix issues with antilockout firewall rule

  #7381 commented on Dec 3, 2024 • 0 new comments

• Add response code REFUSED at Unbound blocklists

  #7530 commented on Dec 3, 2024 • 0 new comments

• KEA: custom DNS for reservation #7310 - basic GUI and conf implementa…

  #7564 commented on Dec 3, 2024 • 0 new comments

• OpenVPN, handle basically radius Calling-Station-Id attribute to iden…

  #7565 commented on Dec 3, 2024 • 0 new comments

• OpenVPN - Enhance tunnel networks with nopool and dedicated ifconfig-…

  #7568 commented on Dec 3, 2024 • 0 new comments

• OpenVPN - Bugfix of unused keepalive parameters for configuration setup

  #7572 commented on Dec 3, 2024 • 0 new comments

• OpeVPN - Enhance keepalive parameters for client overrides

  #7574 commented on Dec 3, 2024 • 0 new comments

• OpenVPN: Wrong RADIUS_NAS_PORT_TYPE implementation value Ethernet ins…

  #7584 commented on Dec 3, 2024 • 0 new comments

• Unbound - allow TTL on host overrides. Fixes: #7597

  #7616 commented on Dec 3, 2024 • 0 new comments

• Ntp: Add pool checkbox to timeserver configuration

  #7760 commented on Dec 3, 2024 • 0 new comments

• Reporting: Health: Graphs

  #7794 commented on Dec 3, 2024 • 0 new comments

• Services: Unbound DNS: Blocklist - CNAME and A record on query fix

  #7815 commented on Dec 3, 2024 • 0 new comments

• Use FontAwesome for menu entries

  #7839 commented on Dec 3, 2024 • 0 new comments

• NTPD configuration cleanups

  #7841 commented on Dec 3, 2024 • 0 new comments

• Update ICANN Trust Anchor to include the new one

  #7852 commented on Dec 3, 2024 • 0 new comments

• Add DHCPv4 Leases widget

  #7865 commented on Dec 3, 2024 • 0 new comments

• VPN: IPsec: Mobile Clients - explicit split-include - charon attribute

  #7876 commented on Dec 3, 2024 • 0 new comments

• Check if any gateways exist before iterating

  #7960 commented on Dec 3, 2024 • 0 new comments

• diagnostics/traffic: Improve Top talkers table in traffic

  #7979 commented on Dec 3, 2024 • 0 new comments

• Firewall/Diagnostics/Sessions: Enable searching for query string via GET query parameter

  #7980 commented on Dec 3, 2024 • 0 new comments

• Traffic ipv6 translation support

  #7981 commented on Dec 3, 2024 • 0 new comments

• Traffic ipv6 translation support (clean)

  #7985 commented on Dec 3, 2024 • 0 new comments

• Add boot file selection for Kea

  #7987 commented on Dec 3, 2024 • 0 new comments

• Unbound DNS: Overrides: Add note

  #8001 commented on Dec 3, 2024 • 0 new comments

• Fix cputemp rrd

  #8024 commented on Dec 3, 2024 • 0 new comments

• Docs/clarify static lease register

  #8028 commented on Dec 3, 2024 • 0 new comments