Slashdot Mirror
OPNsense 17.1 Released, Based On FreeBSD 11 (phoronix.com)
An anonymous reader quotes Phoronix: OPNsense 17.1 is now available as the newest release of this network-focused FreeBSD-based operating system forked from pfSense. It's now been two years since the first official release of OPNsense and to celebrate they have out a big update. OPNsense 17.1 re-bases to using FreeBSD 11.0, there's now a SSH remote installer, new language support, more hardening features used from HardenedBSD, new plugins, integrated authentication via PAM, and many other improvements. Some of the new plug-ins include FTP Proxy, Tinc VPN, and Let's Encrypt support.
This version has been named "Eclectic Eagle".
This version has been named "Eclectic Eagle".
Really was a fan of pfSense as an easy way to protect a network of many. Good to hear it's still a project.
BSD stories right after I wake up make me want to sleep more.
Just what the world needs, more different versions of Linux. It is so neat to see that people can avoid working together and instead put their efforts into many many different versions of Linux, each with their own ego and their own ways of doing things. So what if the average user gets more and more confused and can never figure out what is going on. Linux is not intended for the average user, it is intended for the Linux high priests, who can belittle the average user for finding things so confusing.
I'm an American. I love this country and the freedoms that we used to have.
Or maybe it just smells that way.
BSD sucks, GNU/Linux forever! Anti-GPL infidels are nothing but slaves to their proprietary overlords. Let my people go! Give up your unholy non-copyleft ways now and perhaps you won't be smote when our Lord, St. IGNUcius, delivers us to the promised land! Amen, hallelujah, and may the source be with you (and GPLed)!
Trump forked several women (if by forked you mean grabbed them by the pussy). If children were subjected to this we'd be outraged but it was adult white women so it's OK. Why do Trump supporters lack a moral compass? What's wrong with Trump supporters? They must be mostly gay white men who hate women.
Both are available on BSD pkg already, but without web-gui and stats, it's a hack at best to use IT.
I know, using Cisco AnyConnect to connect non Cisco product is violating their license thus replacing ASA wouldn't go without client charges also. But it would be ok to connect openconnect client to ASA.
However DTLS/ TLS vpn is so much reliable than IPSec when remote access is needed compared to counterparts that using IPSec or any other properietary tcp/update ports does not make sense.
I am FreeBSD user addicted to it since 1998. It is amazing to see this project still up and growing, especially because *BSD is "dying" for almost 14 years (see https://slashdot.org/comments.pl?sid=70502&cid=6404771)
I am *BSD user addicted to it since 1998. It is amazing to see this project still up and growing, especially because FreeBSD is "dying" for almost 13 years.
I had the newest pfSense installed when I found out they hadn't ported the 2.2.x tinc plugin to 2.3. I switched to a Linux based firewall, but ipv6 setup hasn't worked yet after working flawlessly under pfSense. OPNsense sounds like it might just be the answer I've been looking for.
Only my personal experience, but I've been running it for several releases.
Every post in the forum when I had a question was answered by those willing and trying to help, including answers by devs.
Every bug submission I've made has been attended to quickly with pre-point fixes for me to test and then released as patches for all.
I recommend it to anyone who wants to give it a try. They've added a lot of polish over the past few releases. It's been rock solid for me for a couple of years now with upgrading to major releases in place with zero loss of settings or any problems.
Just my 2 cents.
Everyone and their brother uses pfsense and is part of the Freebsd project. Is OPNsense just a clone or a fork? What does it do that pfsense can't?
http://saveie6.com/
I have been using pfsense for a few years now. I have been interested in this because i has an api. Long term i would like to build out something that can block ips based on elasticsearch queries using elastalert. If anyone has good or bad stories feel free to share!
Here is an article from 2014 http://pfsensesetup.com/vpn-tu...?
Also the ports are included too so if something is not installed it's a CD /usr/ports and a make install clean away
http://saveie6.com/
PFSense has turned into huge sales pitch. Any mention of using your own custom built hardware is met with a sales pitch to use PFSense's overpriced pre-built hardware with pre-loaded software. Hard to tell if they're paid shills, partners, or just drooling fanboys (probably a mix of all three). My guess, the only support in the near future will be community based - all real support will be paid only or only if you're running it on their hardware. Good to see that Opnsense is offering an alternative.
What does OPN stands for?
They seem pretty nice. Tiny 1RU cases, smaller than most switches.
These things run intel atom or Xeon chips, and use intel chipsets and Ethernet phys. The hardware is optimised for pfSense, whatever that means.
But, the company seem like it's now run by a bunch of kikes. You must pay $99 per year for access to their precious documentation. You probably need to download the free version, install it somewhere, pay up your $99, just so you can verify the thing does what you need.
However, it does do pfsync, bgp, and can route traffic at very high speed for very low cost. And, unlike Cisco, juniper, sonicwall, and friends, there hasn't been any stupid shit like hard coded credentials, or uncloseable wan ports...
Everyone and their brother uses pfsense and is part of the Freebsd project. Is OPNsense just a clone or a fork? What does it do that pfsense can't?
OPN is a fork of pf. Here's their reasoning behind it:
* https://docs.opnsense.org/fork/thefork.html
I have no idea how legitimate these concerns are/were at the time.