Latest News and Updates
News Filtering Options
2018-01-11 NEW • Development Release: OPNsense 18.1 RC1 OPNsense is a FreeBSD-based operating system designed for firewalls and routers. The project has released a new release candidate for OPNsense 18.1. “We humbly present to you the sum of another major iteration of the OPNsense firewall. Over the second half of 2017 well over 500 changes have made it into this first release candidate. Most notably, the firewall NAT rules have been reworked to be more flexible and usable via plugins, which is going to pave the way for subsequent API works on the core firewall functionality. For more details please find the attached list of changes below. Meltdown and Spectre patches are currently being worked on in FreeBSD, but there is no reliable timeline. We will keep you up to date through the usual channels as more news become available. Here is the full list of changes against version 17.7.11: disabled AHCI MSI to prevent early mount failures with removable media; use correct crypto library to gather GUI SSL ciphers; added ‘save and go back’ button to user edit page….” Further details and a list of changes can be found in the project’s release announcement. Download (SHA256): OPNsense-18.1.r1-OpenSSL-dvd-amd64.iso.bz2 (258MB, signature)
About OPNsense OPNsense is a FreeBSD-based specialist operating system (and a fork of pfSense) designed for firewalls and routers. It is developed by Deciso B.V. in the Netherlands. Some of the features of OPNsense include forward caching proxy, traffic shaping, intrusion detection, two-factor authentication and easy OpenVPN client setup. The project’s focus on security brings a number of unique features, such as the option to use LibreSSL instead of OpenSSL (selectable in the GUI) and a custom build based on HardenedBSD. OPNsense also includes an update mechanism that delivers important security updates in a timely fashion.
Recent Related News and Releases
2017-07-31 BSD Release: OPNsense 17.7 Robert van Papeveld has announced the release of a new version of OPNsense, a FreeBSD-based operating system for firewalls and routers. The new version, OPNsense 17.7, features SafeStack hardening, many updated language translations and an updated Realtek driver which should improve network stability. “We are writing to you today to announce the final release of version 17.7 ‘Free Fox’, which, over the course of the last 6 months, includes highlights such as SafeStack application hardening, the Realtek re driver for better network stability, a Quagga plugin with broad routing protocol support and the Unbound resolver as the new default. Additionally, translations for Czech, Chinese, Japanese, Portuguese and German have been completed for the first time during this development cycle. Focus in OPNsense has shifted to improving and streamlining its various systems and providing continuous updates, which amounts to over 300 individual changes made since 17.1 so far. The plugin infrastructure is growing as well. And we, last but not least, have been working more closely than ever with HardenedBSD by unifying our ports infrastructure.” More information is available in the project’s release announcement. Download: OPNsense-17.7-OpenSSL-dvd-amd64.iso.bz2 (223MB, SHA256).
2017-07-17 Development Release: OPNsense 17.7 RC1 Jos Schellevis has announced the release of a new development snapshot of the OPNsense operating system, a firewall platform based on FreeBSD. The new release candidate for OPNsense 17.7 includes security and stability improvements as well as several updated translations: “We are writing to you today to announce the first release candidate for version 17.7, which, over the course of the last five months, includes highlights such as SafeStack application hardening, the Realtek re driver for network stability, a Quagga plugin with broad routing protocol support and the Unbound resolver as the new default. Additionally, translations for Czech, Chinese, Japanese, Portuguese and German have been completed during this iteration. Focus in OPNsense has shifted to improving and streamlining its various systems and providing continuous updates, which amounts to over 300 individual changes made in 17.1 so far.” Further details can be found in the project’s release announcement. Download: OPNsense-17.7.r1-OpenSSL-dvd-amd64.iso.bz2 (225MB, SHA256).
2017-01-31 BSD Release: OPNsense 17.1 The OPNsense operating system is a FreeBSD-based specialist operating system (and a fork of pfSense) designed for firewalls and routers. The project has released a new stable version of the OPNsense operating system, version 17.1. “The OPNsense team is proud to announce the final availability of version 17.1, nicknamed Eclectic Eagle. This major release features FreeBSD 11.0, the SSH remote installer, new languages Italian / Czech / Portuguese, state-of-the-art HardenedBSD security features, PHP 7.0, new plugins for FTP Proxy / Tinc VPN / Let’s Encrypt, native PAM authentication against e.g. 2FA (TOTP), as well a rewritten Nano-style card images that adapt to media size to name only a few. We would like to encourage everyone to supervise this major upgrade physically. As such, it cannot be performed from the GUI. Instead, go to the root console menu, choose option 12 and type ‘17.1’ at the prompt. The process will download a full set of updates and reboot multiple. All operating system files and packages will be re-installed as a consequence.” Additional information can be found in the project’s release announcement. Download: OPNsense-17.1-OpenSSL-cdrom-amd64.iso.bz2 (252MB, SHA256).
2016-12-16 Development Release: OPNsense 17.1 Beta The OPNsense project is a FreeBSD-based operating system developed for firewalls and routers. The project has released a new development snapshot which uses FreeBSD 11.0 as its base. “With the best wishes for the holiday season attached we hereby humbly present our 17.1-BETA images and thank everyone for their early input, valid questions and generally keeping us on our toes throughout the past months. The next major release features FreeBSD 11.0, the SSH remote installer, new languages Italian and Czech, state-of-the-art HardenedBSD security features, PHP 7.0, native PAM authentication against e.g. 2FA (TOTP), as well a rewritten Nano-style card images that adapt to the media size to name only a few. These will be the only beta images. They are not suitable for production environments. Release candidate builds will start in January in order to provide production-ready images.” Additional information can be found in the project’s release announcement. Download: OPNsense-17.1.b-OpenSSL-cdrom-amd64.iso.bz2 (254MB, SHA256).
2016-07-28 BSD Release: OPNsense 16.7 Jos Schellevis has announced the release of OPNsense 16.7, a FreeBSD-based specialist operating system designed for firewalls and routers: “It is time for the next major iteration in open-source security. After 6 months and 20 minor releases we hereby declare the general availability of OPNsense 16.7, nick-named ‘Dancing Dolphin’. The highlights of this major release include: Suricata 3.1.1 with Intel Hyperscan support; NetFlow-based reporting and export; traffic shaping using CoDel / FQ-CoDel; two-factor authentication based on RFC 6238 (TOTP); HTTPS and ICAP support in the proxy server; FreeBSD 10.3 with full integration of HardenedBSD ASLR; UEFI boot and installation modes; substantial updates to our language packs: Japanese, Russian, German, French, Chinese. Attention: an incompatibility in Chrome may prevent the firmware update from running. Try a different browser to upgrade to 16.7 where a workaround has been added to avoid the problem in the future.” Read the complete release announcement which includes a list of all the recent changes. Download: OPNsense-16.7-OpenSSL-cdrom-amd64.iso.bz2 (219MB, SHA256), OPNsense-16.7-OpenSSL-cdrom-i386.iso.bz2 (201MB, SHA256).
2016-07-04 Development Release: OPNsense 16.7 RC1 OPNsense is a FreeBSD-based project designed to be run on firewalls and routers. The OPNsense team has released a new development snapshot, OPNsense 16.7-RC1. The new testing release offers SSL fingerprinting, monitoring CPU temperature through the System Health page, HTTPS proxy support and NTP can be disabled as needed. This release also features HardenedBSD’s ASLR implementation for improved memory security. “It has been 5 months since 16.1 came out. Since then, over 1500 commits and 18 stable releases have continuously improved and enhanced the project. Since then, thousands of new users have joined. And, since then, our new documentation has been extended and tweaked with numerous guides, explanations and answers to your questions. The cumulation of these efforts is this announcement of the first release candidate for 16.7. Images are being provided to encourage to try these in a fresh setting, but the configuration import in the installer and the GUI work as usual so that migration is simple.” A complete list of changes can be found in the project’s release announcement. Download: OPNsense-16.7.r1-OpenSSL-cdrom-amd64.iso.bz2 (224MB, SHA256).
2016-01-28 BSD Release: OPNsense 16.1 OPNsense is a FreeBSD-based operating system for firewalls and routers that was originally forked from pfSense. The OPNsense project has released a new version, OPNsense 16.1 “Crafty Coyote”, which is based on FreeBSD 10.2. The new release features several improvements to the firewall, dashboard and translations. The project has also rolled out new documentation. “16.1 is nick-named `Crafty Coyote’ in honour of our beloved childhood TV sessions. It is the accumulation of 6 months of work, having had our focus on re engineering the captive portal, native intrusion prevention, plugin support, and transforming the reporting front-end into something more modern and flexible just to name a few. Apart from the recently published security advisories, we have included a quick navigation feature which can be activated by pressing (TAB) followed by search keywords and hitting (ENTER) to go to the desired page. Last but not least, a larger batch of improvements and fixes went into assorted sections of the GUI that certainly help to get your work done without ending up dazed and confused.” Further information and a complete list of changes can be found in the project’s release announcement. Download: OPNsense-16.1-OpenSSL-cdrom-amd64.iso.bz2 (220MB, SHA256).