Kua tukuna te tohatoha o te papaahi OPNsense 26.7 mai i te kaupapa pfSense i te tau 2015 me te whainga ki te whakawhanake i tetahi tohatoha puna tuwhera ka taea te mahi o nga otinga arai arumoni me nga huarahi. Kaore i rite ki te pfSense, ko te kaupapa kaore i te whakahaerehia e te kamupene kotahi, i whakawhanakehia me te whai waahi tika o te hapori me te whai waahi ki te whakawhanaketanga tino marama, me te whai waahi ki te whakamahi i tetahi o ana whanaketanga ki nga hua tuatoru, tae atu ki nga mea hokohoko. Ko te waehere puna o nga waahanga tohatoha, me nga taputapu e whakamahia ana mo te huihuinga, ka tohatohahia i raro i te raihana BSD. Kua whakaritea nga huihuinga i roto i te ahua o te LiveCD me te ahua punaha mo te tuhi i runga i nga puku Flash (490 MB).
Ko te kaupapa matua o te tohatoha he waehere FreeBSD. Kei roto i ngā āhuatanga o OPNsense: he mekameka taputapu hanga tuwhera-pūtake, he tautoko mō te tāutanga hei mōkihi i runga ake i te FreeBSD noa, he taputapu taurite kawenga, he atanga tukutuku mō te whakarite hononga kaiwhakamahi ki te whatunga (Captive Portal), he tikanga aroturuki āhua hononga (he pareārai āhua i runga i te pf), he pūnaha whakawhāiti whānui, he tātari waka, me te waihanga VPN e hangai ana ki te IPsec. OpenVPN me te PPTP, te whakaurunga ki te LDAP me te RADIUS, te tautoko DDNS (Dynamic DNS), he pūnaha pūrongo tirohanga me ngā kauwhata.
I runga i te kaupapa o te tohatoha, ka taea te hanga i nga whirihoranga whakaraerae i runga i te whakamahinga o te kawa CARP me te tuku ki te whakarewa, hei taapiri atu ki te papangaahi matua, he node taapiri, ka tukutahi aunoa ki te taumata whirihoranga me ka tango i te kawenga i te mea ka rahua te node tuatahi. Ka tukuna he atanga tukutuku ki te kaiwhakahaere mo te whirihora i te papangaahi, i hangaia ma te whakamahi i te anga paetukutuku Bootstrap me te Phalcon MVC.
I roto i nga huringa:
- Kua oti te whakawhiti ki te pūtake waehere FreeBSD 15.1 (i mua ko te FreeBSD 14.3 te whakamahinga).
- Kua nekehia ngā atanga mō te whirihora i ngā ture pareārai, te tuku atanga whatunga (te wehewehe i waenga i te LAN me te WAN), me te whakahaere i ngā rōpū kuwaha ki te whakamahi i te anga MVC, ā, kua taea te uru atu mā te Web API hei whakahaere aunoa i te whakahaere whirihoranga whatunga.
- Kua tāpirihia he ruānuku hei whakawhiti i ngā ture whakamāori wāhitau mai i te hōputu whirihoranga NAT Waho tawhito ki te hōputu hou mā te whakamahi i te hoahoanga Source NAT (SNAT).
- Kua tāpirihia te tautoko mō te DDNS (Hihiri) me te tohatoha aunoa o ngā kupumatua IPv6 (ngā poraka wāhitau) ki te whirihoranga DHCP KEA.
- Kua tāpirihia te tautoko IPv6 ki te tomokanga Captive.
- Ngā putanga kua whakahoutia OpenVPN 2.7, PHP 8.5, Python 3.13.
- Kua whakatikahia tētahi ngoikoretanga nui (CVE-2026-57155, taumata kino 9.9 i roto i te 10). Nā tēnei ngoikoretanga i āhei ai tētahi kaiwhakamahi kāore i te whai mana ki te whakamahi i te anga me te urunga iti ki ngā ingoa kē (ngā rārangi ingoa whatunga me te ingoa manaaki) ki te whakahaere i te waehere me ngā mana pakiaka. Nā te korenga o ngā tirotiro tika i te tukatuka raraunga mai i te pātengi raraunga GeoIP e hono ana i ngā whenua me ngā wāhitau IP te ngoikore.
I whakakapia te waehere whenua mai i te pātengi raraunga GeoIP me te kore manatoko i te wā i hangaia ai te ingoa kōnae e tuhia ana, e āhei ai te tuhirua i tētahi kōnae i roto i te pūnaha, i te mea ka whakahaerehia e te kaiwhakahaere me ngā mana pakiaka. Ka taea e te kaiwhakamahi kāore i te whai mana te whakamahi i te Web API ki te tohu i tētahi URL hei tango i tētahi pātengi raraunga GeoIP kua whakarerekētia mō ngā ingoa kē. Hei whiwhi mana pakiaka, ka taea te tohu "../../../../../../../../etc/newsyslog.conf.d/zzz_pwn" hei utu mō te waehere whenua i roto i tētahi o ngā tāurunga pātengi raraunga. Mā tēnei ka hangaia he kōnae whirihoranga mō te pūnaha hurihuri takiuru, ka taea te tautuhi i ngā whakahau e whakahaerehia ana me ngā mana pakiaka.
Source: opennet.ru
