{"id":182658,"date":"2026-07-17T04:53:29","date_gmt":"2026-07-17T02:53:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-distributiva-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-26-7"},"modified":"2026-07-17T04:53:29","modified_gmt":"2026-07-17T02:53:30","slug":"vypusk-distributiva-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-26-7","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-distributiva-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-26-7","title":{"rendered":"Rilascio del distribuitore per la creazione di firewall OPNsense 26.7","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u00c8 stato pubblicato il rilascio della distribuzione per la creazione di firewall OPNsense 26.7, che si \u00e8 separata dal progetto pfSense nel 2015 con l'obiettivo di sviluppare una distribuzione completamente open source, capace di offrire funzionalit\u00e0 pari a quelle delle soluzioni commerciali per il deployment di firewall e gateway di rete. A differenza di pfSense, il progetto si posiziona come indipendente da qualsiasi azienda, sviluppato con la partecipazione attiva della comunit\u00e0 e con un processo di sviluppo completamente trasparente, offrendo inoltre la possibilit\u00e0 di utilizzare le proprie implementazioni in prodotti esterni, anche commerciali. I codici sorgenti dei componenti della distribuzione, cos\u00ec come gli strumenti utilizzati per la compilazione, sono distribuiti sotto licenza BSD. Le compilazioni sono disponibili in forma di LiveCD e immagine di sistema per la registrazione su memorie Flash (490 MB).       <\/p>\n<p>Il contenuto della distribuzione si basa sul codice di FreeBSD. Tra le funzionalit\u00e0 di OPNsense: un completo strumento di compilation open source, supporto per l'installazione in forma di pacchetti sopra un normale FreeBSD, strumenti per il bilanciamento del carico, un'interfaccia web per l'organizzazione della connessione degli utenti alla rete (Captive portal), meccanismi per il monitoraggio dello stato delle connessioni (firewall stateful basato su pf), sistema di limitazione della banda, filtraggio del traffico, creazione  <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/vpn\/\" title=\"VPN\" data-wpil-keyword-link=\"linked\">VPN<\/a> sulla base di IPsec, OpenVPN e PPTP, integrazione con LDAP e RADIUS, supporto per DDNS (Dynamic DNS), sistema di report e grafici visivi.       <\/p>\n<p>Con la distribuzione possono essere create configurazioni ad alta disponibilit\u00e0 basate sull'uso del protocollo CARP, che consentono di avviare, oltre al firewall primario, un nodo di riserva che verr\u00e0 sincronizzato automaticamente a livello di configurazione e assumer\u00e0 il carico in caso di guasto del nodo primario. Per l'amministratore \u00e8 disponibile un'interfaccia web per la configurazione del firewall, realizzata utilizzando il framework web Bootstrap e Phalcon MVC.      <\/p>\n<p>Tra le modifiche:  <\/p>\n<ul>\n<li class=\"l\"> \u00c8 stata effettuata la migrazione alla base di codice di FreeBSD 15.1 (in precedenza veniva utilizzato FreeBSD 14.3).\n<li class=\"l\"> Le interfacce per la configurazione delle regole dei firewall, per l'assegnazione delle interfacce di rete (separazione tra LAN e WAN) e per la gestione dei gruppi di gateway sono state migrate all'uso del framework MVC e ora sono ulteriormente disponibili tramite API Web per l'automazione della gestione della configurazione di rete.\n<li class=\"l\"> \u00c8 stato aggiunto un master per la migrazione delle regole di traduzione degli indirizzi dal vecchio formato di configurazione Outbound NAT al nuovo formato, che utilizza l'architettura Source NAT (SNAT).\n<li class=\"l\"> Nel configuratore KEA DHCP \u00e8 stata aggiunta la supporto per DDNS (Dynamic) e l'assegnazione automatica dei prefissi IPv6 (blocchi di indirizzi).\n<li class=\"l\"> Nel Captive portal \u00e8 stata aggiunta la supporto per IPv6.\n<li class=\"l\"> Aggiornate le versioni di OpenVPN 2.7, PHP 8.5, Python 3.13.\n<li class=\"l\"> Risolta una vulnerabilit\u00e0 critica (CVE-2026-57155, livello di sicurezza 9.9 su 10) che consente a un utente non privilegiato senza accesso alla shell e con accesso limitato agli alias (elencare nomi di reti e host) di eseguire codice con diritti root. La vulnerabilit\u00e0 \u00e8 causata dalla mancanza di controlli adeguati nella gestione dei dati dal database GeoIP associati ai paesi. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/lir\/ipv4\/\" title=\"indirizzi IP.\" data-wpil-keyword-link=\"linked\">indirizzi IP.<\/a>.\n<p>Il codice del paese dal database GeoIP veniva inserito senza verifica durante la formazione del nome del file da registrare, permettendo di sovrascrivere qualsiasi file nel sistema, poich\u00e9 il processore viene eseguito con diritti di root. Attraverso l'API Web, un utente non privilegiato poteva specificare il proprio URL per caricare un database GeoIP modificato per alias. Per ottenere diritti di root, in una delle voci del database, invece del codice del paese, \u00e8 possibile specificare &#171;..\\\/..\\\/..\\\/..\\\/..\\\/..\\\/..\\\/..\\\/etc\\\/newsyslog.conf.d\\\/zzz_pwn&#187;, il che porter\u00e0 alla creazione di un file di configurazione per il sistema di rotazione dei log, nel quale possono essere definite le comandi eseguiti con diritti di root.     <\/ul>\n<p>Fonte: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65915\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 OPNsense 26.7, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 2015 \u0433\u043e\u0434\u0443 \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 pfSense \u0441 \u0446\u0435\u043b\u044c\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0433 \u0431\u044b \u043e\u0431\u043b\u0430\u0434\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0448\u043b\u044e\u0437\u043e\u0432. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 pfSense \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u0443\u0447\u0430\u0441\u0442\u0438\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182658","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 OPNsense 26.7, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 2015 \u0433\u043e\u0434\u0443 \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 pfSense \u0441 \u0446\u0435\u043b\u044c\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0433 \u0431\u044b \u043e\u0431\u043b\u0430\u0434\u0430\u0442\u044c.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-distributiva-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-26-7\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 OPNsense 26.7 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 OPNsense 26.7, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 2015 \u0433\u043e\u0434\u0443 \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 pfSense \u0441 \u0446\u0435\u043b\u044c\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0433 \u0431\u044b \u043e\u0431\u043b\u0430\u0434\u0430\u0442\u044c.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-distributiva-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-26-7\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-17T02:53:30+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-17T02:53:30+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rilascio della distribuzione per la creazione di firewall OPNsense 26.7 | ProHoster","description":"\u00c8 stato pubblicato il rilascio della distribuzione per la creazione di firewall OPNsense 26.7, che nel 2015 si \u00e8 staccata dal progetto pfSense con l'obiettivo di sviluppare una distribuzione completamente aperta.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-distributiva-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-26-7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 OPNsense 26.7 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 OPNsense 26.7, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 2015 \u0433\u043e\u0434\u0443 \u043e\u0442\u0434\u0435\u043b\u0438\u043b\u0441\u044f \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 pfSense \u0441 \u0446\u0435\u043b\u044c\u044e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0433 \u0431\u044b \u043e\u0431\u043b\u0430\u0434\u0430\u0442\u044c.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/vypusk-distributiva-dlya-sozdaniya-mezhsetevyh-ekranov-opnsense-26-7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-17T02:53:30+00:00","article:modified_time":"2026-07-17T02:53:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182658","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:02","updated":"2026-08-05 12:22:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/182658","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=182658"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/182658\/revisions"}],"predecessor-version":[{"id":182751,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/182658\/revisions\/182751"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=182658"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=182658"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=182658"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}