Hello there,We are back for new features, updates and reliability fixes. Noteworthy are the addition of the PIE shaper option and firewall alias API. Both Unbound and Dnsmasq have been updated to their latest version.Here are the full patch notes:o firewall: resolve interface address ":0" for port forwarding in kernelo firewall: list action corrections (contributed by Thomas Bandixen)o firewall: add support for the PIE shaper (contributed by Michael Muenz)o firewall: migrate to new alias API including a new failsafeo firewall: repair log widget for plugin themeso interfaces: do not remove CARP addresses on link-downo interfaces: get pfsync MTU from actual CARP interfaceo interfaces: add backend call returning all interface datao interfaces: partially rewrite ping, port and traceroute toolso interfaces: improve IPv6 merging in make_ipv6_64_address()o interfaces: use correct IPv6 interface where appropriateo interfaces: replace get_configured_interface_list() usageo interfaces: small refactoring around interface up and down codeo system: cleanups in utility and config functionso captive portal: added connect action in API (contributed by zvs44)o firmware: move build-time version information to core version fileo firmware: rename backend script "audit" to "security" for clarityo ipsec: bring back service widget lost back in 2016o monit: change status page to support easier CSS stylingo unbound: set up a full chroot including local log socketo unbound: replace custom msort() function with standard functiono unbound: use correct IPv4 or IPv6 interface for address lookupso webgui: use interfaces_addresses() for interface bindingo mvc: show an error message on failed model migrationso mvc: refactor __items access via iterateItems()o mvc: accept style keyword on all input typeso mvc: improved menu API endpoint integrationo plugins: os-bind adds 4 new blacklist providers (contributed by Michael Muenz)o plugins: os-dyndns validates custom updates solely for URL inputo plugins: os-nginx 1.3 correctly sets upstream headers (contributed by Fabian Franz)o plugins: os-theme-cicada 1.6 (contributed by Team Rebellion)o plugins: os-theme-rebellion 1.7 (contributed by Team Rebellion)o plugins: os-theme-tukan 1.5 (contributed by Team Rebellion)o plugins: os-zerotier reorders VPN menu entry (contributed by Michael Muenz)o src: fix regression in IPv6 fragment reassembly[1]o src: fix NULL pointer dereference in freebsd4_getfsstat[2]o src: fix DoS in listen syscall over IPv6 socket[3]o src: fix small kernel memory disclosures[4]o ports: unbound 1.8.1[5]o ports: dnsmasq 2.80[6]Stay safe,Your OPNsense team--[1] https://www.freebsd.org/security/advisories/FreeBSD-EN-18:09.ip.asc [2] https://www.freebsd.org/security/advisories/FreeBSD-EN-18:10.syscall.asc [3] https://www.freebsd.org/security/advisories/FreeBSD-EN-18:11.listen.asc [4] https://www.freebsd.org/security/advisories/FreeBSD-EN-18:12.mem.asc [5] https://nlnetlabs.nl/projects/unbound/download/ [6] http://www.thekelleys.org.uk/dnsmasq/CHANGELOG