OPNsense 16.7 RC1 发布了。OPNsense 是一个开源易用，而且易于构建的基于 FreeBSD 的防火墙和路由平台。包括大多数商业防火墙的特性。提供功能完整却易用的 GUI 管理界面。新的测试版本提供了SSL fingerprinting，通过System Health页面监控CPU温度，HTTPS代理支持和NTP可以禁用。此版本还具有hardenedbsd’s ASLR的实施来改进内存安全。
详细更新列表：
SSL fingerprinting / blacklisting in the IDS/IPS
Firewall rules category tags for easy filtering
CPU temperature graph in system health
Custom mirror support for firmware upgrades
OpenVPN client-specific overrides can now be bound to selected servers
Added RFC 4638 support (MTU > 1492 in PPPoE)
NTP can now be disabled if required
New category-based remote ACL support in proxy server
ICAP configuration aded to proxy server
Pluggable service infrastructure
Pluggable syslog infrastructure
Finished a full sweep of visible GUI pages for improved look and feel
HTTPS proxy support
Russian translations 100% completed
NetFlow export to multiple remote destinations
NetFlow local reporting frontend
PPTP, L2TP and PPPoE Servers ported to MPD5
HAProxy plugin
Traffic shaping with CoDel / FQ-CoDel
Firewall alias geolocation support
Cron GUI and API
Japanese translations 100% completed
Dashboard revamp with multi-column support, drag and drop and mini API
RFC 6238 (TOTP) support for two-factor authentication
HardenedBSD's ASLR implementation
High availability page for remote service status and start/stop/restart
API commands for remote reboot and power off
Firmware page resume support and cron-based "nightly" updates
opnsense-patch, the tremendously nifty patching tool
Traffic graphs frontend has been replaced by a modern alternative
PPTP, L2TP and PPPoE Servers are now individual plugins no longer found in the default installation
Pluggable interface infrastructure
New firewall GUI page for custom scrubbing rules (normalisation)
Removal of proxy-based NAT reflection
No more custom PHP modules
FreeBSD 10.3
Suricata 3.1
软件详情：https://opnsense.org/
下载地址：https://opnsense.org/download/
来自:开源中国社区
