What is up everyone,

Summer challenges aside: 26.7 is almost here! It includes FreeBSD 15.1 and a somewhat small list of other highlights. The reason for that is a stringent backporting strategy that was employed in the 26.1 series.

Keep in mind this is an online-based pre-production test release. Upgrades from the 26.1.11 development version are already available. The final release date for 26.7 is July 15.

Here are the development highlights since version 26.1 came out:

• Interfaces assignments to MVC/API
• Gateway groups to MVC/API
• Firewall rules MVC page is now the default
• Source NAT is now a replacement for outbound NAT
• Captive portal IPv6 support
• Kea DDNS, custom options and dynamic prefix delegation support
• OpenVPN 2.7 with TLS-Crypt v2 support
• FreeBSD 15.1
• Python 3.13
• PHP 8.5

And these are the changes against version 26.7-RC1:

• system: include interfaces widget in dashboard default
• firewall: constraint source NAT getAction() to only general page and align setAction() accordingly
• firewall: use proper path for one-to-one NAT rules for renaming operations
• firewall: avoid emitting reply-to on block rules as well
• captive portal: adjust accounting interval to Acct-Interim-Interval
• firmware: remove overzealous cleansing in output_cmd to unhide individual character progress
• monit: fix mail-format and poll-time validation
• mvc: add file type to forms
• ports: suricata 8.0.6[1]

A hotfix release was issued as 26.7.r2_3:

• interfaces: fix faulty netmask on loopback address due to upstream change
• firewall: change interface group render/apply order
• backend: swap "strict" template logic as it was reversed
• src: pf: do not mangle IP header before shared forwarding
• src: additional stable/15 networking patches

Stay safe,
Your OPNsense team