OPNsense 16.7 RC1 发布了。OPNsense 是一个开源易用,而且易于构建的基于 FreeBSD 的防火墙和路由平台。包括大多数商业防火墙的特性。提供功能完整却易用的 GUI 管理界面。新的测试版本提供了SSL fingerprinting,通过System Health页面监控CPU温度,HTTPS代理支持和NTP可以禁用。此版本还具有hardenedbsd’s ASLR的实施来改进内存安全。 详细更新列表: SSL fingerprinting / blacklisting in the IDS/IPS Firewall rules category tags for easy filtering CPU temperature graph in system health Custom mirror support for firmware upgrades OpenVPN client-specific overrides can now be bound to selected servers Added RFC 4638 support (MTU > 1492 in PPPoE) NTP can now be disabled if required New category-based remote ACL support in proxy server ICAP configuration aded to proxy server Pluggable service infrastructure Pluggable syslog infrastructure Finished a full sweep of visible GUI pages for improved look and feel HTTPS proxy support Russian translations 100% completed NetFlow export to multiple remote destinations NetFlow local reporting frontend PPTP, L2TP and PPPoE Servers ported to MPD5 HAProxy plugin Traffic shaping with CoDel / FQ-CoDel Firewall alias geolocation support Cron GUI and API Japanese translations 100% completed Dashboard revamp with multi-column support, drag and drop and mini API RFC 6238 (TOTP) support for two-factor authentication HardenedBSD's ASLR implementation High availability page for remote service status and start/stop/restart API commands for remote reboot and power off Firmware page resume support and cron-based "nightly" updates opnsense-patch, the tremendously nifty patching tool Traffic graphs frontend has been replaced by a modern alternative PPTP, L2TP and PPPoE Servers are now individual plugins no longer found in the default installation Pluggable interface infrastructure New firewall GUI page for custom scrubbing rules (normalisation) Removal of proxy-based NAT reflection No more custom PHP modules FreeBSD 10.3 Suricata 3.1 下载地址:https://opnsense.org/download/ OPNsense 16.7 RC1 发布,防火墙和路由平台下载地址