pfSenseをアップデート 2.3.4→2.3.4_1

pfSenseをアップデートした記録 2.3.4→2.3.4_1

アップデート内容確認

2.3.4から2.3.4_1(2.3.4-p1)にアップデートします

変更点を確認
2.3.4-p1 New Features and Changes – PFSenseDocs
https://doc.pfsense.org/index.php/2.3.4-p1_New_Features_and_Changes

WEBGUIのXSS対策がメインです

アップデートの手順

事前に設定のバックアップをした上で以下の操作でアップデートを実行
手順はいつもと同じです

まずダッシュボードのVersionのところにある雲マークか
System→Updateを選択

2.3.4から2.3.4_1へアップデートと表示出てるのを確認して「Confirm」を押す

無事に完了すると自動で再起動開始されます

最後に2.3.4_1の状態で設定をバックアップして完了

Update時の処理ログ

>>> Updating repositories metadata... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
>>> Unlocking package pfSense-kernel-pfSense... done.
>>> Downloading upgrade packages... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
Checking for upgrades (99 candidates): .......... done
Processing candidates (99 candidates): ..... done
The following 47 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
  php56-zlib: 5.6.30 -> 5.6.31 [pfSense]
  php56-xmlwriter: 5.6.30 -> 5.6.31 [pfSense]
  php56-xmlreader: 5.6.30 -> 5.6.31 [pfSense]
  php56-xml: 5.6.30 -> 5.6.31 [pfSense]
  php56-tokenizer: 5.6.30 -> 5.6.31 [pfSense]
  php56-sysvshm: 5.6.30 -> 5.6.31 [pfSense]
  php56-sysvsem: 5.6.30 -> 5.6.31 [pfSense]
  php56-sysvmsg: 5.6.30 -> 5.6.31 [pfSense]
  php56-sqlite3: 5.6.30 -> 5.6.31 [pfSense]
  php56-sockets: 5.6.30 -> 5.6.31 [pfSense]
  php56-simplexml: 5.6.30 -> 5.6.31 [pfSense]
  php56-shmop: 5.6.30 -> 5.6.31 [pfSense]
  php56-session: 5.6.30 -> 5.6.31 [pfSense]
  php56-readline: 5.6.30 -> 5.6.31 [pfSense]
  php56-posix: 5.6.30 -> 5.6.31 [pfSense]
  php56-pdo_sqlite: 5.6.30 -> 5.6.31 [pfSense]
  php56-pdo: 5.6.30 -> 5.6.31 [pfSense]
  php56-pcntl: 5.6.30 -> 5.6.31 [pfSense]
  php56-openssl: 5.6.30 -> 5.6.31 [pfSense]
  php56-opcache: 5.6.30 -> 5.6.31 [pfSense]
  php56-mcrypt: 5.6.30 -> 5.6.31 [pfSense]
  php56-mbstring: 5.6.30 -> 5.6.31 [pfSense]
  php56-ldap: 5.6.30 -> 5.6.31 [pfSense]
  php56-json: 5.6.30 -> 5.6.31 [pfSense]
  php56-hash: 5.6.30 -> 5.6.31 [pfSense]
  php56-gettext: 5.6.30 -> 5.6.31 [pfSense]
  php56-filter: 5.6.30 -> 5.6.31 [pfSense]
  php56-dom: 5.6.30 -> 5.6.31 [pfSense]
  php56-curl: 5.6.30 -> 5.6.31 [pfSense]
  php56-ctype: 5.6.30 -> 5.6.31 [pfSense]
  php56-bz2: 5.6.30 -> 5.6.31 [pfSense]
  php56-bcmath: 5.6.30 -> 5.6.31 [pfSense]
  php56: 5.6.30 -> 5.6.31 [pfSense]
  pfSense-upgrade: 0.22_1 -> 0.25 [pfSense]
  pfSense-rc: 2.3.4 -> 2.3.4_1 [pfSense-core]
  pfSense-kernel-pfSense: 2.3.4 -> 2.3.4_1 [pfSense-core]
  pfSense-default-config: 2.3.4 -> 2.3.4_1 [pfSense-core]
  pfSense-base: 2.3.4 -> 2.3.4_1 [pfSense-core]
  pfSense: 2.3.4 -> 2.3.4_1 [pfSense]
  openvpn23: 2.3.14 -> 2.3.17 [pfSense]
  nginx: 1.10.3_1,2 -> 1.12.1,2 [pfSense]
  curl: 7.54.0 -> 7.54.1 [pfSense]
  bind-tools: 9.11.1 -> 9.11.1P1 [pfSense]

Installed packages to be REINSTALLED:
  openldap-client-2.4.44 [pfSense]
  oniguruma5-5.9.6_1 [pfSense]
  libmcrypt-2.5.8_3 [pfSense]
  libltdl-2.4.6 [pfSense]

Number of packages to be upgraded: 43
Number of packages to be reinstalled: 4

49 MiB to be downloaded.
[1/47] Fetching php56-zlib-5.6.31.txz: .. done
[2/47] Fetching php56-xmlwriter-5.6.31.txz: .. done
[3/47] Fetching php56-xmlreader-5.6.31.txz: .. done
[4/47] Fetching php56-xml-5.6.31.txz: ... done
[5/47] Fetching php56-tokenizer-5.6.31.txz: . done
[6/47] Fetching php56-sysvshm-5.6.31.txz: . done
[7/47] Fetching php56-sysvsem-5.6.31.txz: . done
[8/47] Fetching php56-sysvmsg-5.6.31.txz: .. done
[9/47] Fetching php56-sqlite3-5.6.31.txz: ... done
[10/47] Fetching php56-sockets-5.6.31.txz: ..... done
[11/47] Fetching php56-simplexml-5.6.31.txz: ... done
[12/47] Fetching php56-shmop-5.6.31.txz: . done
[13/47] Fetching php56-session-5.6.31.txz: .... done
[14/47] Fetching php56-readline-5.6.31.txz: .. done
[15/47] Fetching php56-posix-5.6.31.txz: .. done
[16/47] Fetching php56-pdo_sqlite-5.6.31.txz: .. done
[17/47] Fetching php56-pdo-5.6.31.txz: ...... done
[18/47] Fetching php56-pcntl-5.6.31.txz: .. done
[19/47] Fetching php56-openssl-5.6.31.txz: ...... done
[20/47] Fetching php56-opcache-5.6.31.txz: ........ done
[21/47] Fetching php56-mcrypt-5.6.31.txz: .. done
[22/47] Fetching php56-mbstring-5.6.31.txz: .......... done
[23/47] Fetching php56-ldap-5.6.31.txz: ... done
[24/47] Fetching php56-json-5.6.31.txz: ... done
[25/47] Fetching php56-hash-5.6.31.txz: .......... done
[26/47] Fetching php56-gettext-5.6.31.txz: . done
[27/47] Fetching php56-filter-5.6.31.txz: ... done
[28/47] Fetching php56-dom-5.6.31.txz: ....... done
[29/47] Fetching php56-curl-5.6.31.txz: .... done
[30/47] Fetching php56-ctype-5.6.31.txz: . done
[31/47] Fetching php56-bz2-5.6.31.txz: .. done
[32/47] Fetching php56-bcmath-5.6.31.txz: ... done
[33/47] Fetching php56-5.6.31.txz: .......... done
[34/47] Fetching pfSense-upgrade-0.25.txz: .. done
[35/47] Fetching pfSense-rc-2.3.4_1.txz: . done
[36/47] Fetching pfSense-kernel-pfSense-2.3.4_1.txz: .......... done
[37/47] Fetching pfSense-default-config-2.3.4_1.txz: . done
[38/47] Fetching pfSense-base-2.3.4_1.txz: .......... done
[39/47] Fetching pfSense-2.3.4_1.txz: . done
[40/47] Fetching openvpn23-2.3.17.txz: .......... done
[41/47] Fetching openldap-client-2.4.44.txz: .......... done
[42/47] Fetching oniguruma5-5.9.6_1.txz: .......... done
[43/47] Fetching nginx-1.12.1,2.txz: .......... done
[44/47] Fetching libmcrypt-2.5.8_3.txz: .......... done
[45/47] Fetching libltdl-2.4.6.txz: ..... done
[46/47] Fetching curl-7.54.1.txz: .......... done
[47/47] Fetching bind-tools-9.11.1P1.txz: .......... done
Checking integrity... done (0 conflicting)
>>> Upgrading pfSense kernel... 
Checking integrity... done (0 conflicting)
The following 2 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
  pfSense-kernel-pfSense: 2.3.4 -> 2.3.4_1 [pfSense-core]
  pfSense-rc: 2.3.4 -> 2.3.4_1 [pfSense-core]

Number of packages to be upgraded: 2
[1/2] Upgrading pfSense-rc from 2.3.4 to 2.3.4_1...
[1/2] Extracting pfSense-rc-2.3.4_1: .... done
[2/2] Upgrading pfSense-kernel-pfSense from 2.3.4 to 2.3.4_1...
[2/2] Extracting pfSense-kernel-pfSense-2.3.4_1: .......... done
===> Keeping a copy of current kernel in /boot/kernel.old
Upgrade is complete.  Rebooting in 10 seconds.
>>> Locking package pfSense-kernel-pfSense... done.
Success

pfSense 2.4の方向性

2.3系も落ち着いてきて既に開発サイドは2.4系がメインになってきました

pfSense Software Version 2.4-RELEASE Highlights
https://www.netgate.com/blog/pfsense-software-version-2-4-release-highlights.html

軽くまとめるとこんな感じ
32bit版の廃止
NanoBSD版の廃止
ARMサポート開始
FreeBSD 11.0系へ更新(現在は10.3系)
UEFIサポート開始
ZFSサポート開始
OpenVPNの2.4系へ更新(現在は2.3系)