Hello fellows,

Today we proudly present to you 15.7.20, which includes several improvements
and fixes in all areas.  Notable from a development perspective are the
opnsense-bootstrap tool, which can install the latest OPNsense version on a
FreeBSD 10.1.  Additionally, the development branch offers a sneak preview of
Suricata in true IPS mode!  Instructions on how to test it can be found in
the forum[9].

Here are the full patch notes:

o src: fix kqueue write events never fired for files greater 2GB[1]
o src: remove obsolete locking primitives IFA_LOCK() / IFA_UNLOCK()
o src: enable netmap(4) driver support in the kernel
o src: merge stf(4) driver modifications from pfSense[2]
o ports: squid 5.3.11[3]
o ports: strongswan 5.3.4[4]
o ports: choparp 20150613[5]
o ports: libxml 2.9.3[6]
o ports: pkg 1.6.2[7]
o ports: opnsense-bootstrap, the infamous installer that works on stock
  FreeBSD[8]
o intrusion detection: ignore json parse errors in eve log file
o intrusion prevention (development): added Suricata 2.1beta4 in inline
  mode[9]
o interfaces: reverted cache removal due to multiple speed regressions reports
o backend: send timeouts with proper description to syslog
o openvpn: fix auth server selection for translations
o filter: make the status reload page provide better debug info
o interfaces: fix mobile carrier selection on main interface edit page
o interfaces: unify release/renew/connect/disconnect buttons in status page
o dashboard: show cell mode for ppp if available


Stay safe,
Your OPNsense team

--
[1] https://www.freebsd.org/security/advisories/FreeBSD-EN-15:19.kqueue.asc
[2] https://github.com/opnsense/src/commit/19ba0fbfd15ea8ff24ce172dee30e1
[3] http://ftp.meisei-u.ac.jp/mirror/squid/squid-3.5-ChangeLog.txt
[4] https://www.strongswan.org/blog/2015/11/16/strongswan-5.3.4-released.html
[5] https://github.com/quinot/choparp
[6] http://www.xmlsoft.org/news.html
[7] https://github.com/freebsd/freebsd-ports/commit/0466b08981bf9c714
[8] https://github.com/opnsense/update/commit/e3f63ecdb1149a8cc30e3
[9] https://forum.opnsense.org/index.php?topic=1740
