Hi there,

Today ships the first release version of the supplemental firewall rule API via plugin, a new firewall shaper statistics GUI and API and the usual number of improvements and third party updates.

Note that this version does not ship OpenSSL 1.1.1g as at this point our release decision would have been to push 20.1.5 to next week or do a smaller 20.1.6 next week on top.

Here are the full patch notes:

o system: support configuration for SSH HostKeyAlgorithms, KexAlgorithms, Ciphers and MACs
o system: simplify validations in gateway monitor settings
o interfaces: mark VXLAN and loopback devices as configurable
o interfaces: validation typo caused failure to communicate unassignable targets
o interfaces: netstat tree view GUI and API
o interfaces: use libxo to extract ARP data
o firewall: checkbox selection ignores visibility setting
o firewall: add network group type to combine aliases cleanly
o firewall: IPv6 essential icmpv6 allow for ::
o firewall: new shaper statistics GUI and API
o firewall: support filter log messages with PID
o reporting: when flow times are not returned stick to receive timestamp
o openvpn: use multihome when selecting “any” interface with UDP
o unbound: create shared startup script for background task
o mvc: also store “” field value as initial state to prevent empty fields as being marked as changed
o mvc: firewall source NAT ranges support in plugins
o mvc:  keep options in static set for PortField
o mvc: support interface targets without addresses
o mvc. add “migration_prefix” attribute to model
o mvc: catch ArgumentCountError
o mvc: skip empty gateway artefact
o plugins: os-acme-client 1.31[1]
o plugins: os-firewall 1.0 API supplemental package
o plugins: os-haproxy 2.22[2]
o plugins: os-unbound-plus 1.1[3]
o plugins: os-wol 2.3 adds case insensitive matching in widget (contributed by Gauss23)
o ports: ca_root_nss 3.51.1
o ports: dnsmasq 2.81[4]
o ports: krb5 1.18.1[5]
o ports: openvpn 2.4.9[6]
o ports: php 7.2.30[7]
o ports: py-certifi 2020.4.5.1
o ports: strongswan 5.8.4[8]

Stay safe and healthy,
Your OPNsense team

—
[1] https://github.com/opnsense/plugins/pull/1784
[2] https://github.com/opnsense/plugins/pull/1783
[3] https://github.com/opnsense/plugins/blob/master/dns/unbound-plus/pkg-descr
[4] http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
[5] https://web.mit.edu/kerberos/krb5-1.18/
[6] https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.9
[7] https://www.php.net/ChangeLog-7.php#7.2.30
[8] https://wiki.strongswan.org/versions/77