BSD Commit Log Search

net/relayd: removed isEmptyAndRequired()

[wazuh-agent] Add repeated_offenders config, fix template issues (#5116)

- Add repeated_offenders field to active response settings
- Remove 'without context' from ossec.conf include loop to allow
  variable access in config fragments
- Fix opnsense-fw.conf template bug: wazuh_command -> active_response
- Bump model version to 1.0.3

net/ndp-proxy-go: Add depend on CARP syshook (#5108)

* net/ndp-proxy-go: Add depend on CARP syshook

* net/ndp-proxy-go: When carp_depend_on is enabled, prevent service start on BACKUP

* Depend on CARP is advanced mode, sort other more advanced options under headers

* Use model instead of global config

* Use custom variable for carp check

* Change label and adjust help text

net/frr: Prevent errors in diagnostics view when a frr daemon is not started (#5119)

* net/frr: Prevent errors in diagnostics view when a frr daemon is not started

* Add revision

Bump version and changelog

net/frr: Prevent errors in diagnostics view when a frr daemon is not started

security/wazuh-agent: Fix active response duplicate key causing false aborts (#5104)

When multiple IPs trigger the same rule simultaneously, they were
sharing the same check_keys value (only rule ID), causing the manager
to abort all but the first execution.

Changed the key to include both rule_id and srcip to make it unique
per source IP, allowing multiple simultaneous blocks while still
preventing duplicate blocks of the same IP.

Fixes #4738

net/ndp-proxy-go: Add ratelimit for pfctl operations (#5096)

net/ndp-proxy-go: Add ratelimit for pfctl operations

Feature/dnscrypt proxy blocklist support (#5083)

* Add ports to Events page

* fixes race condition updating the blocklist

* Native integration with DNSCrypt-proxy

Added Q-Feeds domains to the DNSBL list of DNSCrypt-Proxy. Changed since the initial way, this is more native. Q-Feeds domains txt files only created if DNSCrypt-proxy is installed and if the list (qf) is selected.

misc/theme-rebellion: sync with master

net/ndp-proxy-go: sync with master

net/udpbroadcastrelay: sync with master

www/squid: remove old link reference; closes #9537

www/web-proxy-sso: sync with master

ddclient: Cloudflare - add Cloudflare dns ip check option, merge https://github.com/opnsense/plugins/pull/4184 with minor modifications.

www/nginx: bump model version

nginx: add optional HTTP/3 support with dynamic Alt-Svc (#5071)

ddclient: add Hetzner DNS provider (#5082)

Add native support for Hetzner Cloud DNS API (api.hetzner.cloud).
  Hetzner is migrating from dns.hetzner.com to Cloud Console,
  with the old API shutting down in May 2026.

  Features:
  - Bearer token authentication
  - A and AAAA record support
  - Multiple hostnames (comma-separated)
  - Configurable TTL

Rewrite plugin, so it backs up the content of /conf/backup/ instead, (#4952)

this makes it only upload configs that have actually changed.

fixes #4945

Co-authored-by: Daniel Lysfjord <lysfjord.daniel at smokepit.net>

net/freeradius: Change TLS max version to 1.3 (#4883)

index.volt changes (#4719)

Removed fixed size grid data-width specifiers.

Opnsense-Bootgrid.css added (#4718)

Added file to correct colours in new areas of GUI

net/frr: watchfrr service handling (#4712)

Set SMUX socket to localhost (#4652)

Defaults to all interfaces and isn't needed. Setting it to the loopback address disables the outdated feature as much as possible.

Add dnspod.cn ddns support (#4370)

* Add dnspod.cn ddns support

* Add multiple hostname support

* Fix the problem of processing the result returned by ModifyRecordBatch

* Fix using wrong variable

---------

Co-authored-by: AnShen <x at ipy.me>

mail/postfix: align mailbox and message size (#4330)

add Name prefix to influxdb Telegraf plugin (#4198)

net/freeradius: Add option to enable EAP-PWD (#4093)

* Add option to enable EAP-PWD

* also make server_id configurable

net/ndp-proxy-go: Add cache file support (#5085)