@smils:
@pigbrother:
Изменений довольно много, некторые весьма существенны.
Почти окончательный список:
https://doc.pfsense.org/index.php?title=2.3_New_Features_and_Changes
Какие существенны на ваш взгляд?
Навскидку. IMHO.
Moved to a FreeBSD 10.3-RELEASE base
The PPTP VPN Server has been completely removed
The LiveCD platform has been removed. The ISO is a bootable installer, as always, but it cannot run a live system
Removed zoneinfo.tgz file for Time Zones, move to the same format as FreeBSD.
Removed use of PBI-based packages, moved to pkg(ng)
Fixed installation and handling of packages to use pkg, now works identically in the GUI and shell/console
Factory reset now completely uninstalls packages
Replaced apinger with dpinger(!)
Check gateway monitor settings after upgrade, dpinger has different options than apinger.
Added code to allow gateways outside of an interface subnet
Added drag-and-drop rule reordering for firewall and NAT rules
Added reordering for 1:1 NAT rules
Added support for a separator bar in firewall and NAT rules for use as a visual reference
Added a hit counter to the firewall rule display with states and bandwidth consumed by packets matching rules
Added a visual indication in the rule list for floating rules with the "quick" property set
Improved state display on Diagnostics > States, now shows packets and bytes for each state
Fixed setting non-default MTUs in some edge cases
Added support for PPPoE with MTU/MRU
Replaced the default passwd hash for root/admin using bcrypt (blowfish).
Existing user passwords will continue to work in their existing format until the user's password is changed.
User passwords cannot be automatically converted as they are not stored plain text. To convert the password hash of an existing user to bcrypt, edit the user and change their password.
Fixed the WebGUI becoming slow or unusable when an LDAP server used for GUI auth is unreachable
Fixed dnsmasq host overrides when both DNS Forwarder and Resolver are enabled
Changed the default behavior of the OpenVPN server to use topology subnet, not net30
Changed Client-Specific Overrides so they can be set to apply to specific servers rather than being globally set
Improved display of server certificates on OpenVPN servers to help avoid users incorrectly picking user certificates for servers
Removed PPTP Server.
Add MS-CHAPv2 option to L2TP Configuration
Removed WEP
Removed the "Certificate Authority" option on the Certificates tab of the Cert Manager when creating a Certificate. To make a Certificate Authority, use the CAs tab instead
