OPNsense 16.7 released |

Welcome everyone,

It is time for the next major iteration in open-source security! After 6 months and 20 minor releases we hereby declare the general availability of OPNsense 16.7, nick-named “Dancing Dolphin”. The highlights of this major release include:

Suricata 3.1.1 with Intel Hyperscan support

NetFlow-based reporting and export

Traffic shaping using CoDel / FQ-CoDel

Two-factor authentication based on RFC 6238 (TOTP)

HTTPS and ICAP support in the proxy server

FreeBSD 10.3 with full integration of HardenedBSD ASLR

UEFI boot and installation modes

Substantial updates to our language packs: Japanese, Russian, German, French, Chinese

We thank all contributors, testers and users for their relentless support and invaluable feedback. The release candidate phase has been the most fun we have had so far.

Attention: An incompatibility in Chrome may prevent the firmware update from running. Try a different browser to upgrade to 16.7 where a workaround has been added to avoid the problem in the future.

All images can be found on the mirrors below with checksums attached to the end of this announcement:

https://opnsense.org/download/

Please stay in touch, tell us what you think about OPNsense and how we can improve it further! You can find us in any of these popular locations:

Twitter: https://twitter.com/opnsense
Forum: https://forum.opnsense.org/
GitHub: https://github.com/opnsense
IRC: Freenode #OPNsense

Lastly, here are the full changes since 16.7-RC2:

installer: fix UI glitch with overlong disk name selections
installer: warn on low RAM as install phase can fail
ports: suricata 3.1.1[1], php 5.6.24[2]
system: Etc/UTC is now the default time zone
system: prevent user from deleting itself
interfaces: register groups in the system immediately
firmware: add subscription option for private repositories[3]
firmware: work around API POST problem on Chrome by deleting css source map pointer
firewall: allow cron to set arbitrary syslog times for alias updates
proxy: add syslog target for access_log
reporting: can now individually flush health reports
reporting: can now flush insight and NetFlow data
reporting: translate interface names on health page
reporting: shut down insight service on backup to prevent database corruption
lang: Russian is now 97% completed (contributed by Smart-Soft Ltd.)
lang: minor updates in all other languages