Hello!

After some back and forth today we are rolling back a console default change done in FreeBSD 14.2 that we do not think is necessary at this particular point in time. The bridge configuration code was also refactored to introduce it to MVC/API in an upcoming stable release.

A few more problems with the new captive portal backend have also been addressed in order to make it match the behaviour of the previous one. It is now possible to disable the automatic rules to further refine the desired captive portal behaviour.

Last but not least: Kea DHCPv6 is here. And with it full DHCP and router advertisement support in Dnsmasq to bridge the gap for ISC users who do not need or want Kea. We are going to make Dnsmasq DHCP the default in new installations starting with 25.7, too. ISC DHCP will still be around as a core component in 25.7 but likely moves to plugins for 26.1 next year.

Here are the full patch notes:

A hotfix release was issued as 25.1.6_2:

A hotfix release was issued as 25.1.6_4:


Stay safe,
Your OPNsense team