OPNsense 16.1.9 released

[Franco Fichtner]

Hi guys,

We expect all of you are doing well?  It has been a longer while
since the last update so 16.1.9 has got a bit of everything to
keep the spirits high.  :)

There is tremendous progress in the translations.  It just so
happens that we now have a comprehensive Russian translation as
well which is going to be completed in the upcoming weeks.  Many
thanks to Smart-Soft Ltd. for making this happen.  The contender
is Japanese through the work of Chie Taguchi, who did most of the
translation that we have had for a year.  It is going to be a
close race to the finish line for both languages.  Then again,
the whole translation team is doing an amazing job.

As polarising as it may be, we have added HTTPS support in the
proxy server.  Another noteworthy item is StrongSwan 5.4.0, which
helps to address IPSec status page hangs that some have observed
with complex setups.  We are looking for feedback for these items,
please do write in.

Here are the full patch notes:

o src: tzdata updated to 2016c[1]
o src: prevent kernel panic on ipfw/dummynet module unload
o src: let ng_ether_attach() only attach to supported types to
  avoid kernel panics
o ports: curl 7.48.0[2], strongswan 5.4.0[3],
  pcre 8.38 (patched CVE-2016-1283)[4], php 5.6.20[5]
o languages: added Russian to the release, now 60% complete
  (contributed by Smart-Soft Ltd.)
o languages: updated Japanese, now 70% complete (contributed
  by Chie Taguchi)
o languages: updated German, now 81% complete
o languages: updated French, now 50% complete
o firewall: allow editing of up to 5000 aliases
o firewall: remove link to associated filter rule edit as edit
  is not allowed
o firewall: add port range check to aliases edit
o firewall: when alias URL SSL verification is off, do not
  verify the hostname either
o firewall: condense alias pages into a single view
o firewall: remember scrolling position to return to the previous
  position after edit
o firewall: alias import now supports type selection (network and
  host types)
o firmware: added German-based mirror (contributed by Alexander Lauster)
o system: load modules before setting tunables to support
  settings for modules
o system: fix boot issue that prevented SSH from starting up in
  some instances
o interface: do not show wireless parents on the assignment page
  as it cannot be assigned
o ipsec: individual collapse/expand for status page
o dhcp: allow backwards-compatibility with imported configs
o captive portal: fix missing busyTimeout on voucher database access
o openvpn: remember scrolling position to return to the previous
  position after edit
o proxy: HTTPS support added
o proxy: added ability to change the hostname and admin email
  (contributed by Frederic Lietart)
o proxy: avoid race condition on cache dir creation (contributed
  by Frederic Lietart)
o development: allow hiding of menu entries using the
  Visibility="delete" attribute


Stay safe,
Your OPNsense team

--
[1] http://mm.icann.org/pipermail/tz-announce/2016-March/000037.html
[2] https://curl.haxx.se/changes.html
[3] https://wiki.strongswan.org/projects/strongswan/wiki/Changelog54
[4] https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-1283
[5] http://php.net/ChangeLog-5.php#5.6.20