Issues

• bug: a pfSense gateway with monitoring disabled exports no monitorDisable, the same as a monitored gateway

  bugconfigurationgopriority:normaltype:bug
  EvilBit-Labs/opnDossier#970 · Filter by author intigenesis opened on Oct 30, 2026
  1

• bug: pfSense floating rule on the Any interface is read as an interface named any, so deny bypasses and WAN exposure go unreported

  auditbugcomplianceconfigurationgopriority:highsecuritytype:bug
  EvilBit-Labs/opnDossier#969 · Filter by author intigenesis opened on Oct 30, 2026

• bug: OPNsense 24.1 and later gateways are not read, so routing.gateways is empty

  bugconfigurationgopriority:normaltype:bug
  EvilBit-Labs/opnDossier#957 · Filter by author intigenesis opened on Oct 29, 2026

• bug: OPNsense 26.7 gateway groups drop tiers 2 to 5 and export tier 1 as one comma-joined item

  bugconfigurationgopriority:normaltype:bug
  EvilBit-Labs/opnDossier#956 · Filter by author intigenesis opened on Oct 29, 2026
  1

• bug: OPNsense 26.1 and later configs in IPS mode are reported as IDS only

  bugconfigurationgopriority:normalsecuritytype:bug
  EvilBit-Labs/opnDossier#955 · Filter by author intigenesis opened on Oct 29, 2026

• bug: a static route disabled on OPNsense 26.1.10 or later is reported as enabled

  bugconfigurationgotype:bug
  EvilBit-Labs/opnDossier#954 · Filter by author intigenesis opened on Oct 29, 2026

• bug: diff never compares aliases, so widening an alias a pass rule names reports no changes

  bugcliconfigurationgopriority:highsecuritytype:bug
  EvilBit-Labs/opnDossier#953 · Filter by author intigenesis opened on Oct 29, 2026
  1

• bug: port forward report columns and diff read ExternalPort and InternalPort, which neither vendor writes

  bugcomponent:displayconfigurationgopriority:normaltype:bug
  EvilBit-Labs/opnDossier#952 · Filter by author intigenesis opened on Oct 29, 2026
  1

• bug: pfSense filter rules without a <type> are not read as pass, so port-forward rules drop out of the red audit and FIREWALL-023

  auditbugcomplianceconfigurationgopriority:highsecuritytype:bug
  EvilBit-Labs/opnDossier#951 · Filter by author intigenesis opened on Oct 29, 2026

• bug: red audit misses port forwards that pass their own traffic or apply to every interface

  auditbugconfigurationgopriority:highsecuritytype:bug
  EvilBit-Labs/opnDossier#950 · Filter by author intigenesis opened on Oct 29, 2026

• bug: the Audit Metadata table prints structs and lists as raw Go values

  auditbugcomponent:displaygopriority:normaltype:bug
  EvilBit-Labs/opnDossier#949 · Filter by author intigenesis opened on Oct 29, 2026
  1

• bug: pfSense interface rules are analyzed as non-quick, so shadow findings name the wrong rule

  auditbugconfigurationgopriority:highsecuritytype:bug
  EvilBit-Labs/opnDossier#947 · Filter by author intigenesis opened on Oct 29, 2026

• bug: shadow analysis reports an IPv4-only or IPv6-only rule as fully covering a later inet46 rule

  auditbugconfigurationgopriority:highsecuritytype:bug
  EvilBit-Labs/opnDossier#946 · Filter by author intigenesis opened on Oct 29, 2026

• feat: read one-to-one NAT and NPT rules on OPNsense and pfSense

  architectureauditconfigurationenhancementepicgosecuritytype:feature
  Feature

  EvilBit-Labs/opnDossier#923 · Filter by author intigenesis opened on Oct 20, 2026

• bug: manual outbound NAT rules in <OPNsense><Firewall><Filter><snatrules> are never parsed

  bugconfigurationgopriority:normaltype:bug
  Bug

  EvilBit-Labs/opnDossier#922 · Filter by author intigenesis opened on Oct 20, 2026 · v1.8.2

• bug: shadow analysis evaluates a floating rule with no interface before floating rules listed above it

  auditbuggopriority:highsecuritytype:bug
  Bug

  EvilBit-Labs/opnDossier#921 · Filter by author intigenesis opened on Oct 20, 2026 · v1.8.2

• fix(parser): presence-only DHCPv6 flags are dropped on the <dhcpd> side

  breaking_changebugconfigurationgopriority:normalsp:3testing
  Bug

  EvilBit-Labs/opnDossier#835 · Filter by author unclesp1d3r opened on Sep 5, 2026 · v1.8.3

• fix(parser): dhcp6-ia-pd-len is parsed but never converted to CommonDevice

  bugconfigurationgopriority:normalsp:2testingtype:bug
  Bug

  EvilBit-Labs/opnDossier#834 · Filter by author unclesp1d3r opened on Sep 5, 2026 · v1.8.3

• docs(standards): retire or narrow the schema-level secret-exclusion rule

  architecturedocumentationgopriority:normalrefactoringsp:2technical-debt
  Task

  EvilBit-Labs/opnDossier#832 · Filter by author unclesp1d3r opened on Sep 4, 2026
  

• feat(display): add --pager flag for built-in pager support

  clicomponent:displayconfigurationenhancementepicpriority:normalsp:2type:feature
  Feature

  EvilBit-Labs/opnDossier#517 · Filter by author unclesp1d3r opened on Mar 29, 2026
  1

• feat(plugin): add VPN, NTP, syslog, and certificate inventory controls

  architectureauditaudit-modecomplianceconfigurationenhancementepicgopriority:highsp:5testingtype:feature
  Feature

  EvilBit-Labs/opnDossier#512 · Filter by author unclesp1d3r opened on Mar 29, 2026
  

• feat(compliance): add optional Href field to Control for linking control IDs to documentation

  audit-modecompliancecomponent:displayenhancementepicgopriority:normalsp:2type:feature
  Feature

  EvilBit-Labs/opnDossier#508 · Filter by author unclesp1d3r opened on Mar 28, 2026
  2

  

• docs(plugin): add manual validation guidance for vulnerability testing (SANS-FW-010)

  audit-modecompliancedocumentationenhancementepicpriority:normalsp:1
  Feature

  EvilBit-Labs/opnDossier#506 · Filter by author unclesp1d3r opened on Mar 28, 2026

• docs(plugin): add manual validation guidance for security policy compliance (SANS-FW-011)

  audit-modecompliancedocumentationepicpriority:normalsp:1
  Feature

  EvilBit-Labs/opnDossier#507 · Filter by author unclesp1d3r opened on Mar 28, 2026

• docs(plugin): add manual validation guidance for MOTD check (FIREWALL-003)

  audit-modecompliancedocumentationepicpriority:normalsp:1
  Feature

  EvilBit-Labs/opnDossier#505 · Filter by author unclesp1d3r opened on Mar 28, 2026