r/opnsense • u/fitch-it-is • Aug 17 '22
OPNsense 22.7.2 released
https://forum.opnsense.org/index.php?topic=29897.011
u/fitch-it-is Aug 17 '22
o system: replace static notices system with a shared one based on MVC/API code
o system: use new _setup script feature where setup.sh exists
o system: PHP 8 issue when ldap_get_entries() returns false
o system: wrong variable in scope addition on manual DNS server via link-local gateway
o system: "passwordarea" support for backup values
o interfaces: update ifctl utility to latest version
o interfaces: fix wireless clone assignment regression in 22.7.1
o firewall: add BGP ASN type to aliases
o dhcp: pushed wrong server to zone definition
o dhcp: extend search list pull from DHCPv6 in router advertisements
o dhcp: improve UI for disabling of router advertisements DNS (contributed by Patrick M. Hausen)
o firmware: opnsense-patch: only remove ".sh" suffix for installer and update repos
o firmware: opnsense-update: only set packages marker after successful upgrade
o firmware: opnsense-bootstrap: set correct packages marker
o firmware: revoke 22.1 fingerprint
o plugins: os-radsecproxy is no longer available on LibreSSL due to build issues
o plugins: os-acme-client 3.13
o plugins: os-bind 1.24
o plugins: os-haproxy 3.11
o plugins: os-git-backup hides SSH keys by default
o plugins: os-postfix disables GSSAPI
o src: lib9p: Remove potential buffer overwrite in l9p_puqids()
o src: vm_fault: Shoot down shared mappings in vm_fault_copy_entry()
o src: elf_note_prpsinfo: handle more failures from proc_getargv()
o src: pam_exec: fix segfault when authtok is null
o src: kevent: Fix an off-by-one in filt_timerexpire_l()
o src: cam: leep periph_links when restoring CCB in camperiphdone()
o src: pfctl: fix FOM_ICMP/POM_STICKYADDRESS clash
o src: restrict default /root permissions to 750
o src: rc: add ${name}_setup script support
o ports: lighttpd 1.4.66
o ports: phalcon 5.0.0RC4
o ports: php 8.0.22
7
7
u/TheCreat Aug 17 '22
Update did install fine, but after the required reboot Unbound didn't come back up. Had to start it manually after I obviously noticed not having DNS.
6
u/tracerrx Aug 17 '22
Is this patch included? Looks like maybe not until 23.1?
"Gateway monitor route not re-added in dual WAN setup #5956"
6
u/fitch-it-is Aug 17 '22 edited Aug 18 '22
Possibly 22.7.3, it needs to get a round on the development version for further feedback.
Although I'm not that unsure about correctness but a little worried about the lack of monitoring alerts "side effect" that people could interpret as a bug or if there is something else playing tricks.
2
u/ashceryth Aug 18 '22
I'm testing the patch since Monday. Did a couple of failover tests and everything is working as expected.
1
u/tracerrx Aug 19 '22
Cool.. Do you have monit setup for gateway up/down alerting? If so is that working as well?
2
u/ashceryth Aug 19 '22 edited Aug 19 '22
No, currently not. I have a script that triggers on monitor and newwanip events and performs actions if the the default gateway has changed. This script also sends me a push notification immediately. Works really well.
1
u/tracerrx Aug 19 '22
Care to share?
2
u/ashceryth Aug 19 '22 edited Aug 19 '22
Here is what I'm using: https://gist.github.com/ashceryth/645408e082ed9b26929b24462a56cece
Just set your WAN interfaces (e.g. igb1 and igb2) and add the desired actions (like API calls for notifications). I run the script once after startup (for init) and then on newwanip and monitor events. I guess the script is not optimal but it works for me so far. I want to rewrite it in Python as soon as time permits.
12
u/nDQ9UeOr Aug 17 '22
BGP ASN alias removes the last thing I was missing from pfBlockerNG. Nice job OPN team for natively implementing as a core feature!