Long story short: we thank all early testers of 18.1-RC1! You guys have made it possible to push this online update of 18.1-RC2 sooner than anticipated.

Here are the full patch notes:

• system: add workaround for new 32 bit mmap disallow default (requires reboot)
• system: modify the boot sequence to improve initial IP assignment for PPPoE
• system: support additional RADIUS attributes and show them in the authentication tester
• system: only zap non-directories in /var/run on boot
• system: remove mocked version string in high availability synchronisation
• system: added mail facility remote logging
• firewall: optional hash identifier for rules makes them easier to find in system file
• firewall: support IPv4 + IPv6 selection for port forwards
• firewall: add VIP gateway option for PPPoE interfaces
• firewall: rename NPT to NPTv6 for clarity
• firewall: race condition in creating alias directory
• firewall: make NAT reflection enable less ambiguous
• interfaces: fix “route change” usage in PPPoE name server setup
• dhcp: properly route assigned IPv6 prefixes
• firmware: new release type version is unknown when updates have never been checked
• firmware: security audit previously said “upgrade done”
• firmware: remove defunct mirrors
• installer: allow to overwrite /boot even on read-only media
• installer: restore DUID if found during early import
• intrusion detection: fix backend scripts after refactor
• openssh: tweak GUI display of greeting message
• openssh: make not permitting root login explicit
• openvpn: revert a change and fix deprecated option
• web proxy: allow SSL nobump via CN
• ui: HTML compliance fixes obsolete table attributes (contributed by NOYB)
• ui: HTML compliance fixes attribute “type” on i-tag (contributed by NOYB)
• ui: HTML compliance fixes attribute “for” on div-tag (contributed by NOYB)
• ui: HTML compliance for license page and dashboard widgets (contributed by NOYB)
• mvc: new validators for host names
• plugins: pass update type on configure to avoid spurious syslog reloads
• plugins: acme-client 1.13[1] (contributed by Frank Wall)
• plugins: c-icap 1.5 fixes startup race with clamav plugin
• plugins: frr 1.0_1 fixes service probing
• plugins: iperf 1.0 (contributed by Fabian Franz)
• plugins: lldp 1.0 (contributed by Michael Muenz)
• plugins: redis 1.0 (contributed by Fabian Franz)

The list of currently known issues with 18.1-RC1:

• The firewall NAT rule generation rewrite is not yet fully verified.
• The web GUI recovery is not yet fully implemented.

  Stay safe,
  Your OPNsense team

  —
  [1] https://github.com/opnsense/plugins/pull/482