net/frr: Changelog for v1.50 (#5133)
* net/frr: Changelog for v1.50
* Fix a helptext to be more generic and one string.
* Remove private AS should be advanced
net/frr: Add capability support for BGP neighbors (#5128)
* net/frr: Add capability support for BGP neighbors
I've recently tried to use OPNsense in an environment where the use of link-local addresses is required.
Since the link-local capability is not available, I was not able to use OPNsense then.
Obviously, there are some other with the same problem:
* [os-frr] wrong interface for IPv6 link-local used to connect to neighbor #4962
* https://forum.opnsense.org/index.php?topic=36088.0
So, I'd like to offer support for BGP capabilities.
* net/frr: Improve help string for BGP Capabilities as suggested by @Monviech
* net/frr: Fix typo as found by @Monviech
* net/frr: Remove not needed attribute as suggested by @Monviech
[5 lines not shown]
[wazuh-agent] Add repeated_offenders config, fix template issues (#5116)
- Add repeated_offenders field to active response settings
- Remove 'without context' from ossec.conf include loop to allow
variable access in config fragments
- Fix opnsense-fw.conf template bug: wazuh_command -> active_response
- Bump model version to 1.0.3
net/ndp-proxy-go: Add depend on CARP syshook (#5108)
* net/ndp-proxy-go: Add depend on CARP syshook
* net/ndp-proxy-go: When carp_depend_on is enabled, prevent service start on BACKUP
* Depend on CARP is advanced mode, sort other more advanced options under headers
* Use model instead of global config
* Use custom variable for carp check
* Change label and adjust help text
net/frr: Prevent errors in diagnostics view when a frr daemon is not started (#5119)
* net/frr: Prevent errors in diagnostics view when a frr daemon is not started
* Add revision
security/wazuh-agent: Fix active response duplicate key causing false aborts (#5104)
When multiple IPs trigger the same rule simultaneously, they were
sharing the same check_keys value (only rule ID), causing the manager
to abort all but the first execution.
Changed the key to include both rule_id and srcip to make it unique
per source IP, allowing multiple simultaneous blocks while still
preventing duplicate blocks of the same IP.
Fixes #4738
Feature/dnscrypt proxy blocklist support (#5083)
* Add ports to Events page
* fixes race condition updating the blocklist
* Native integration with DNSCrypt-proxy
Added Q-Feeds domains to the DNSBL list of DNSCrypt-Proxy. Changed since the initial way, this is more native. Q-Feeds domains txt files only created if DNSCrypt-proxy is installed and if the list (qf) is selected.
ddclient: add Hetzner DNS provider (#5082)
Add native support for Hetzner Cloud DNS API (api.hetzner.cloud).
Hetzner is migrating from dns.hetzner.com to Cloud Console,
with the old API shutting down in May 2026.
Features:
- Bearer token authentication
- A and AAAA record support
- Multiple hostnames (comma-separated)
- Configurable TTL
Rewrite plugin, so it backs up the content of /conf/backup/ instead, (#4952)
this makes it only upload configs that have actually changed.
fixes #4945
Co-authored-by: Daniel Lysfjord <lysfjord.daniel at smokepit.net>
