OPNSense/plugins b24cec3net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms dialogEditBGPPeergroups.xml, net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga BGP.xml

net/frr: Add bgp listen range to peer groups (#4722)

DeltaFile
+8-0net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms/dialogEditBGPPeergroups.xml
+7-0net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga/BGP.xml
+5-0net/frr/src/opnsense/service/templates/OPNsense/Quagga/bgpd.conf
+20-03 files

OPNSense/plugins 248fa0csecurity/crowdsec/src/etc/inc/plugins.inc.d crowdsec.inc, security/crowdsec/src/opnsense/mvc/app/controllers/OPNsense/CrowdSec/Api DecisionsController.php ServiceController.php

crowdsec: 1.0.10 (#4706)

* Update crowdsec rule reference ($ -> <>); bump release

* php cleanup

* javascript: reformat

* backport js changes from pfsense: var -> const, let, function order

* backport name change

* backport changes: const -> var; id =

* prettier

* tabs

* backport callback style

    [13 lines not shown]
DeltaFile
+442-398security/crowdsec/src/opnsense/www/js/CrowdSec/crowdsec.js
+58-28security/crowdsec/src/etc/inc/plugins.inc.d/crowdsec.inc
+39-11security/crowdsec/src/opnsense/scripts/OPNsense/CrowdSec/reconfigure.py
+12-13security/crowdsec/src/opnsense/mvc/app/controllers/OPNsense/CrowdSec/Api/DecisionsController.php
+11-11security/crowdsec/src/opnsense/mvc/app/views/OPNsense/CrowdSec/general.volt
+5-15security/crowdsec/src/opnsense/mvc/app/controllers/OPNsense/CrowdSec/Api/ServiceController.php
+567-47612 files not shown
+637-51718 files

OPNSense/plugins 90fedaawww/caddy/src/opnsense/service/templates/OPNsense/Caddy Caddyfile

www/caddy: Fix active health check in template from https://github.com/opnsense/plugins/pull/4721 (#4725)

DeltaFile
+8-8www/caddy/src/opnsense/service/templates/OPNsense/Caddy/Caddyfile
+8-81 files

OPNSense/plugins bc2bb3dwww/caddy/src/opnsense/mvc/app/controllers/OPNsense/Caddy/forms dialogHandle.xml, www/caddy/src/opnsense/mvc/app/models/OPNsense/Caddy Caddy.xml

www/caddy: Add active health checks (#4721)

* www/caddy: Add active health checks

* www/caddy: Update Caddy model validation rules for health checks

Adjusted regex masks for `health_uri`, `health_upstream`, and `health_status` fields to improve validation accuracy. Changed `health_upstream` to `IPPortField` for better type handling.

* www/caddy: Moved Active checks after Passive checks in UI.
Use defaults for health_upstream IPPortField

* www/caddy: fix default for `health_follow_redirects`
DeltaFile
+107-0www/caddy/src/opnsense/mvc/app/controllers/OPNsense/Caddy/forms/dialogHandle.xml
+32-0www/caddy/src/opnsense/mvc/app/models/OPNsense/Caddy/Caddy.xml
+30-0www/caddy/src/opnsense/service/templates/OPNsense/Caddy/Caddyfile
+169-03 files

OPNSense/plugins 84af7canet/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms dialogEditBGPPeergroups.xml, net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga BGP.xml

net/frr: Add bgp listen range to peer groups
DeltaFile
+8-0net/frr/src/opnsense/mvc/app/controllers/OPNsense/Quagga/forms/dialogEditBGPPeergroups.xml
+7-0net/frr/src/opnsense/mvc/app/models/OPNsense/Quagga/BGP.xml
+5-0net/frr/src/opnsense/service/templates/OPNsense/Quagga/bgpd.conf
+20-03 files

OPNSense/plugins d64bc86security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeAutomation ConfigdReloadCaddy.php, security/acme-client/src/opnsense/mvc/app/models/OPNsense/AcmeClient AcmeClient.xml

security/acme-client: reload www/caddy automation added (#4692)

* security/acme-client: reload www/caddy automation added
DeltaFile
+45-0security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeAutomation/ConfigdReloadCaddy.php
+1-0security/acme-client/src/opnsense/mvc/app/models/OPNsense/AcmeClient/AcmeClient.xml
+46-02 files

OPNSense/plugins c0e59dfwww/squid Makefile, www/squid/src/opnsense/mvc/app/models/OPNsense/Proxy Proxy.xml

www/squid: bump
DeltaFile
+1-1www/squid/Makefile
+1-1www/squid/src/opnsense/mvc/app/models/OPNsense/Proxy/Proxy.xml
+2-22 files

OPNSense/plugins f1ffc53www/squid/src/opnsense/mvc/app/controllers/OPNsense/Proxy/forms main.xml, www/squid/src/opnsense/mvc/app/models/OPNsense/Proxy Proxy.xml

www/squid: select behavior for banned hosts (#4710)

DeltaFile
+17-1www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.acl.conf
+6-0www/squid/src/opnsense/mvc/app/controllers/OPNsense/Proxy/forms/main.xml
+4-0www/squid/src/opnsense/mvc/app/models/OPNsense/Proxy/Proxy.xml
+27-13 files

OPNSense/plugins eac5473Mk defaults.mk

Framwwork: stray newline
DeltaFile
+0-1Mk/defaults.mk
+0-11 files

OPNSense/plugins 024f101dns/ddclient Makefile pkg-descr

dns/ddclient: pick up this fix
DeltaFile
+1-1dns/ddclient/Makefile
+1-0dns/ddclient/pkg-descr
+2-12 files

OPNSense/plugins a357518dns/ddclient/src/opnsense/mvc/app/models/OPNsense/DynDNS DynDNS.xml, dns/ddclient/src/opnsense/scripts/ddclient/lib address.py

dns/ddclient: empty ip send to dns provider & replace dyndns by dynu (#4448)

* check for empty string ip address

* Replace dyndns ipv4 by dynu ipv6 and ipv4

* Add services and cleaner check of no ip

* PR feedback - revert

* Update dns/ddclient/src/opnsense/scripts/ddclient/lib/account/__init__.py

---------

Co-authored-by: Meliox <na>
Co-authored-by: Ad Schellevis <AdSchellevis at users.noreply.github.com>
DeltaFile
+2-1dns/ddclient/src/opnsense/mvc/app/models/OPNsense/DynDNS/DynDNS.xml
+2-1dns/ddclient/src/opnsense/scripts/ddclient/lib/address.py
+1-1dns/ddclient/src/opnsense/scripts/ddclient/lib/account/__init__.py
+5-33 files

OPNSense/plugins c05cef9www/caddy pkg-descr, www/caddy/src/opnsense/mvc/app/controllers/OPNsense/Caddy/forms general.xml

www/caddy: sync with master
DeltaFile
+0-314www/caddy/src/opnsense/service/templates/OPNsense/Caddy/includeDnsProvider
+65-92www/caddy/src/opnsense/service/templates/OPNsense/Caddy/Caddyfile
+28-71www/caddy/src/opnsense/mvc/app/models/OPNsense/Caddy/Caddy.xml
+24-46www/caddy/src/opnsense/mvc/app/controllers/OPNsense/Caddy/forms/general.xml
+28-3www/caddy/src/opnsense/mvc/app/views/OPNsense/Caddy/reverse_proxy.volt
+15-8www/caddy/pkg-descr
+160-5347 files not shown
+201-53813 files

OPNSense/plugins a5fdb9cwww/caddy pkg-descr Makefile

www/caddy: Add changelogs and bump plugin to version 2.0.0 (#4703)

* www/caddy: Update pkg-descr

* www/caddy: Bump version

* www/caddy: Sync pkg-descr with available description in github.com/caddyserver
DeltaFile
+15-8www/caddy/pkg-descr
+1-2www/caddy/Makefile
+16-102 files

OPNSense/plugins 2ecce43www/caddy pkg-descr

www/caddy: Sync pkg-descr with available description in github.com/caddyserver
DeltaFile
+1-8www/caddy/pkg-descr
+1-81 files

OPNSense/plugins 43174e4www/caddy Makefile

www/caddy: Bump version
DeltaFile
+1-2www/caddy/Makefile
+1-21 files

OPNSense/plugins e1699bbwww/caddy pkg-descr

www/caddy: Update pkg-descr
DeltaFile
+14-0www/caddy/pkg-descr
+14-01 files

OPNSense/plugins 60a094awww/squid Makefile pkg-descr, www/squid/src/opnsense/service/templates/OPNsense/Proxy squid.conf

www/squid: sync with master
DeltaFile
+1-0www/squid/Makefile
+1-0www/squid/pkg-descr
+1-0www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.conf
+3-03 files

OPNSense/plugins 601e0eewww/squid Makefile pkg-descr

www/squid: new revision
DeltaFile
+1-0www/squid/Makefile
+1-0www/squid/pkg-descr
+2-02 files

OPNSense/plugins 856d3abnet/frr pkg-descr Makefile

net/frr: new version for later release
DeltaFile
+4-0net/frr/pkg-descr
+1-2net/frr/Makefile
+5-22 files

OPNSense/plugins 546c1ffsysutils/beats/src/opnsense/mvc/app/controllers/OPNsense/Beats/Api ServiceController.php, sysutils/beats/src/opnsense/mvc/app/controllers/OPNsense/Beats/forms filebeat.xml

sysutils/beats: sync with master
DeltaFile
+460-0sysutils/beats/src/opnsense/service/templates/OPNsense/Beats/filebeat.yml
+62-0sysutils/beats/src/opnsense/mvc/app/models/OPNsense/Beats/Filebeat.php
+53-0sysutils/beats/src/opnsense/mvc/app/controllers/OPNsense/Beats/forms/filebeat.xml
+52-0sysutils/beats/src/opnsense/mvc/app/models/OPNsense/Beats/Filebeat.xml
+51-0sysutils/beats/src/opnsense/mvc/app/views/OPNsense/Beats/filebeat.volt
+48-0sysutils/beats/src/opnsense/mvc/app/controllers/OPNsense/Beats/Api/ServiceController.php
+726-011 files not shown
+873-017 files

OPNSense/plugins 84904b7. README.md, sysutils/beats Makefile

sysutils/beats: final changes before release
DeltaFile
+2-1sysutils/beats/src/opnsense/service/conf/actions.d/actions_beats.conf
+1-2sysutils/beats/Makefile
+1-1README.md
+1-0sysutils/beats/src/opnsense/mvc/app/controllers/OPNsense/Beats/Api/ServiceController.php
+5-44 files

OPNSense/plugins 10993e8www/squid/src/opnsense/service/templates/OPNsense/Proxy squid.conf

Update squid.conf (#4688)

DeltaFile
+1-0www/squid/src/opnsense/service/templates/OPNsense/Proxy/squid.conf
+1-01 files

OPNSense/plugins 94b1244www/c-icap pkg-descr, www/c-icap/src/etc/inc/plugins.inc.d cicap.inc

www/c-icap: sync with master
DeltaFile
+15-5www/c-icap/src/opnsense/service/templates/OPNsense/CICAP/c-icap.conf
+9-0www/c-icap/src/etc/inc/plugins.inc.d/cicap.inc
+6-1www/c-icap/pkg-descr
+0-7www/c-icap/src/opnsense/service/templates/OPNsense/CICAP/newsyslog.conf
+0-6www/c-icap/src/opnsense/scripts/OPNsense/CICAP/setup.sh
+6-0www/c-icap/src/opnsense/service/templates/OPNsense/Syslog/local/cicap.conf
+36-193 files not shown
+38-239 files

OPNSense/plugins cb02932security/clamav Makefile, security/clamav/src/opnsense/service/conf/actions.d actions_clamav.conf

security/clamav: sync with master
DeltaFile
+1-1security/clamav/Makefile
+1-0security/clamav/src/opnsense/service/conf/actions.d/actions_clamav.conf
+2-12 files

OPNSense/plugins afdaea8net/radsecproxy pkg-descr Makefile, net/radsecproxy/src/opnsense/service/templates/OPNsense/RadSecProxy radsecproxy.conf

net/radsecproxy: sync with master
DeltaFile
+11-0net/radsecproxy/pkg-descr
+6-0net/radsecproxy/src/opnsense/service/templates/OPNsense/RadSecProxy/radsecproxy.conf
+1-2net/radsecproxy/Makefile
+18-23 files

OPNSense/plugins 62f0a64mail/postfix pkg-descr Makefile, mail/postfix/src/opnsense/service/templates/OPNsense/Postfix main.cf

mail/postfix: sync with master
DeltaFile
+4-0mail/postfix/pkg-descr
+1-2mail/postfix/Makefile
+1-1mail/postfix/src/opnsense/service/templates/OPNsense/Postfix/main.cf
+6-33 files

OPNSense/plugins 88f6804net/radsecproxy pkg-descr Makefile

net/radsecproxy: new version
DeltaFile
+11-0net/radsecproxy/pkg-descr
+1-2net/radsecproxy/Makefile
+12-22 files

OPNSense/plugins 72b3fefnet/radsecproxy/src/opnsense/service/templates/OPNsense/RadSecProxy radsecproxy.conf

Added AccountingServer options (#4669)

Co-authored-by: Marcel Ritter <marcel+git at linux-ng.de>
DeltaFile
+6-0net/radsecproxy/src/opnsense/service/templates/OPNsense/RadSecProxy/radsecproxy.conf
+6-01 files

OPNSense/plugins 05584f9www/caddy/src/opnsense/mvc/app/controllers/OPNsense/Caddy/forms general.xml dialogReverseProxy.xml, www/caddy/src/opnsense/mvc/app/models/OPNsense/Caddy Caddy.xml

www/caddy: Remove DNS Provider subsystem except cloudflare in favor of global custom config file (#4691)

* www/caddy: Remove DNS Provider subsystem except cloudflare. Since caddy-v2.10.0, a global DNS Provider can be set. This enables users to drop in a custom configuration file with their DNS Provider configuration into global settings, if they plan to supply their own custom build anyway. This change fixes the maintainability issues completely.

* www/caddy: Remove includeDnsProvider template

* www/caddy: Some minor cleanups in the form to reflect the Auto HTTPS and DNS Provider changes better
DeltaFile
+0-314www/caddy/src/opnsense/service/templates/OPNsense/Caddy/includeDnsProvider
+3-72www/caddy/src/opnsense/mvc/app/models/OPNsense/Caddy/Caddy.xml
+14-46www/caddy/src/opnsense/mvc/app/controllers/OPNsense/Caddy/forms/general.xml
+3-54www/caddy/src/opnsense/service/templates/OPNsense/Caddy/Caddyfile
+1-1www/caddy/src/opnsense/mvc/app/controllers/OPNsense/Caddy/forms/dialogReverseProxy.xml
+21-4875 files

OPNSense/plugins b0ab959mail/postfix pkg-descr Makefile, mail/postfix/src/opnsense/service/templates/OPNsense/Postfix main.cf

mail/postfix: Disable NTLM login because of deprectation (#4663)

* Disable NTLM login because of deprectation

As NTLMv1 gets disabled and removed by Microsoft [1] and NTLMv2 authentication is broken (causing authentication failures), NTLM should be disabled altogether in Postfix to force other auth options. If a SMTP server replies with AUTH NTLM LOGIN, it tries to use NTLM which fails if only NTLM v2 is enabled on the server.

[1] https://borncity.com/win/2024/12/23/windows-11-24h2-server-2025-ntlmv1-has-been-removed/

* Update pkg-descr

* Update Makefile

* Update mail/postfix/Makefile

---------

Co-authored-by: Franco Fichtner <franco at lastsummer.de>
DeltaFile
+4-0mail/postfix/pkg-descr
+1-2mail/postfix/Makefile
+1-1mail/postfix/src/opnsense/service/templates/OPNsense/Postfix/main.cf
+6-33 files