1.2.14

Tested with OPNSense Version: 25.1.5_5

Features

• FRR BGP/OSPF Route-Redistribution (#206 #215 @jiuka)
• FRR OSPF Network (#203 @jiuka)
• FRR BGP Peer-Group (#198 @jiuka)
• ZFS-Snapshot Module (#205 @jiuka @superstes )
• HA-Sync Modules (#204 @jiuka)
• IPSec-PSK match-fields (#194 @superstes @nerrehmit)

Fixes

• OpenVPN API-Fixes (#214 @jiuka)
• FRR API-Fixes (#196 @jiuka @superstes)
• Nested alias-content and validators-cleanup (#141 @jiuka @superstes )
• FRR OSPF Redistribution (#215 @jiuka)
• FRR BGP Route-Map Diff-Handling (#39 @jiuka)

Project

• CI for Integration-Tests was improved (@superstes)

---

Thanks to all contributors ❤️

Support the project: patreon.com/OXL

1.2.13

⚠️ Security Fixes ⚠️

• API Key and Secret were logged when using api_credential_file (@alteriks @superstes #187)
  If you provided your API-credentials this way - we recommend you to rotate them!
• WireGuard private_key and psk were logged (@alteriks #189)

For more information see: GHSA-hvj8-79wm-m3m7

Features

• VIP Unicast Support (@dreezey #130)
• ACME-Client Modules (@jiuka @superstes #132)
• Kea-DHCP Subnets & General (@woelfle @superstes #135, #136)
• Postfix Modules (@jiuka #140)
• One-to-One NAT Module (@jiuka #146)
• GRE Interface (@jiuka #152)
• IPSec Manual SPD (@jiuka #179)

Fixes

• Many minor fixes (@jiuka @superstes )

Project

• CI for Integration-Tests was improved (@superstes )

1.2.12

Features:

• DHCP Reservations @KalleDK
• DHCP ControlAgent @KalleDK
• Enhanced Developer Documentation
• Raw Python3 Interface/CLI (no Dependency on Ansible) @O-X-L

Fixes:

• Multiple Updates because of OPNSense API-Updates
• Deprecation of Unbound-Domain Module

We wish you happy holidays and hopefully a good next year! ☃️

1.2.11

Features:

• DHCP-Relay Modules @jiuka
• interface_lagg and interface_loopback Modules @jiuka
• unbound_dnsbl Module @jiuka

Fixes:

• Fixed Bind MX-Type validation
• Deny system-actions if upgrade is running
• Fixed Rule bugs @jiuka

1.2.10

Features:

• nginx_general and nginx_upstream_server Modules (#64) @atammy-narmi
• gateway Module (#81) @kdhlab
• rule_interface_group Module (#84) @jiuka
• Better error message on connection errors

Fixes:

• Connect to firewall over IPv6 (#82)
• Enable rule and rule_multi to use port-aliases and port-ranges (#86)
• Virtual-Environment fixes (#79)
• Add warning to system-upgrade module (#80)
• Multiple minor fixes

1.2.9

Features:

• OpenVPN Modules
• VLAN Device Names
• Enhanced system-upgrade
• IPSec PSK module (@atammy-narmi)

Fixes:

• Many for OPNSens v24.1
• ipsec_child parameter (@atammy-narmi)
• Made unbound_dot 'domain' parameter optional

API:

• Connect-Retries (@ohartl)
• API Usage refactoring

1.2.8

Implemented Intrusion Prevention System API

• ansibleguy.opnsense.ids_action
• ansibleguy.opnsense.ids_general
• ansibleguy.opnsense.ids_ruleset
• ansibleguy.opnsense.ids_rule
• ansibleguy.opnsense.ids_user_rule
• ansibleguy.opnsense.ids_policy
• ansibleguy.opnsense.ids_policy_rule

1.2.7

• Added missing 'apply' to rule & source_nat (4075bd1)
• Fixes for latest version
  • webproxy_general (1b5697b)
  • wireguard_server (14a73f0)

1.2.6

• unbound_acl module (@gjdoornink)

1.2.5

• unbound_general module (@gjdoornink)
• Fixes for traffic-shaper modules (c45db45)