Issues

• Audit Metadata table renders recommendations and configuration_summary as Go struct dumps

  auditbugcomponent:displaygopriority:normaltype:bug
  EvilBit-Labs/opnDossier#990 · Filter by author unclesp1d3r opened on Nov 9, 2026 · v1.9.1
  1

• docs: generated model reference describes XML schema types as export paths

  bugdocumentationgopriority:normaltechnical-debttype:bug
  EvilBit-Labs/opnDossier#986 · Filter by author intigenesis opened on Nov 7, 2026
  1

• validate rejects a floating rule with no direction that convert reads as any

  bugconfigurationgopriority:normaltype:bug
  EvilBit-Labs/opnDossier#977 · Filter by author unclesp1d3r opened on Nov 4, 2026
  1

• fix(parser): convert pfSense virtual IPs so red mode knows the firewall's CARP and IP alias addresses

  auditbugconfigurationdocumentationgopriority:highsecuritytype:bug
  EvilBit-Labs/opnDossier#975 · Filter by author unclesp1d3r opened on Nov 4, 2026
  1

• bug: a pfSense gateway with monitoring disabled exports no monitorDisable, the same as a monitored gateway

  bugconfigurationgopriority:normaltype:bug
  EvilBit-Labs/opnDossier#970 · Filter by author intigenesis opened on Oct 30, 2026
  1

• bug: pfSense floating rule on the Any interface is read as an interface named any, so deny bypasses and WAN exposure go unreported

  auditbugcomplianceconfigurationgopriority:highsecuritytype:bug
  EvilBit-Labs/opnDossier#969 · Filter by author intigenesis opened on Oct 30, 2026

• bug: port forward report columns and diff read ExternalPort and InternalPort, which neither vendor writes

  bugcomponent:displayconfigurationgopriority:normaltype:bug
  EvilBit-Labs/opnDossier#952 · Filter by author intigenesis opened on Oct 29, 2026
  1

• bug: red audit misses port forwards that pass their own traffic or apply to every interface

  auditbugconfigurationgopriority:highsecuritytype:bug
  EvilBit-Labs/opnDossier#950 · Filter by author intigenesis opened on Oct 29, 2026

• bug: the Audit Metadata table prints structs and lists as raw Go values

  auditbugcomponent:displaygopriority:normaltype:bug
  EvilBit-Labs/opnDossier#949 · Filter by author intigenesis opened on Oct 29, 2026
  1

• bug: shadow analysis reports an IPv4-only or IPv6-only rule as fully covering a later inet46 rule

  auditbugconfigurationgopriority:highsecuritytype:bug
  EvilBit-Labs/opnDossier#946 · Filter by author intigenesis opened on Oct 29, 2026

• feat: read one-to-one NAT and NPT rules on OPNsense and pfSense

  architectureauditconfigurationenhancementepicgosecuritytype:feature
  Feature

  EvilBit-Labs/opnDossier#923 · Filter by author intigenesis opened on Oct 20, 2026

• bug: manual outbound NAT rules in <OPNsense><Firewall><Filter><snatrules> are never parsed

  bugconfigurationgopriority:normaltype:bug
  Bug

  EvilBit-Labs/opnDossier#922 · Filter by author intigenesis opened on Oct 20, 2026 · v1.9.1

• fix(parser): presence-only DHCPv6 flags are dropped on the <dhcpd> side

  breaking_changebugconfigurationgopriority:normalsp:3testing
  Bug

  EvilBit-Labs/opnDossier#835 · Filter by author unclesp1d3r opened on Sep 5, 2026 · v1.9.2

• fix(parser): dhcp6-ia-pd-len is parsed but never converted to CommonDevice

  bugconfigurationgopriority:normalsp:2testingtype:bug
  Bug

  EvilBit-Labs/opnDossier#834 · Filter by author unclesp1d3r opened on Sep 5, 2026 · v1.9.2

• docs(standards): retire or narrow the schema-level secret-exclusion rule

  architecturedocumentationgopriority:normalrefactoringsp:2technical-debt
  Task

  EvilBit-Labs/opnDossier#832 · Filter by author unclesp1d3r opened on Sep 4, 2026
  

• feat(display): add --pager flag for built-in pager support

  clicomponent:displayconfigurationenhancementepicpriority:normalsp:2type:feature
  Feature

  EvilBit-Labs/opnDossier#517 · Filter by author unclesp1d3r opened on Mar 29, 2026
  1

• feat(plugin): add VPN, NTP, syslog, and certificate inventory controls

  architectureauditaudit-modecomplianceconfigurationenhancementepicgopriority:highsp:5testingtype:feature
  Feature

  EvilBit-Labs/opnDossier#512 · Filter by author unclesp1d3r opened on Mar 29, 2026
  

• feat(compliance): add optional Href field to Control for linking control IDs to documentation

  audit-modecompliancecomponent:displayenhancementepicgopriority:normalsp:2type:feature
  Feature

  EvilBit-Labs/opnDossier#508 · Filter by author unclesp1d3r opened on Mar 28, 2026
  2

  

• docs(plugin): add manual validation guidance for vulnerability testing (SANS-FW-010)

  audit-modecompliancedocumentationenhancementepicpriority:normalsp:1
  Feature

  EvilBit-Labs/opnDossier#506 · Filter by author unclesp1d3r opened on Mar 28, 2026

• docs(plugin): add manual validation guidance for security policy compliance (SANS-FW-011)

  audit-modecompliancedocumentationepicpriority:normalsp:1
  Feature

  EvilBit-Labs/opnDossier#507 · Filter by author unclesp1d3r opened on Mar 28, 2026

• docs(plugin): add manual validation guidance for MOTD check (FIREWALL-003)

  audit-modecompliancedocumentationepicpriority:normalsp:1
  Feature

  EvilBit-Labs/opnDossier#505 · Filter by author unclesp1d3r opened on Mar 28, 2026

• docs(plugin): add manual validation guidance for SSH banner check (FIREWALL-001)

  audit-modecompliancedocumentationepicpriority:normalsp:1
  EvilBit-Labs/opnDossier#504 · Filter by author unclesp1d3r opened on Mar 28, 2026
  2

• feat(plugin): add config revision tracking check (FIREWALL-060)

  audit-modecomplianceconfigurationenhancementepicgopriority:normalsp:3testingtype:feature
  Feature

  EvilBit-Labs/opnDossier#503 · Filter by author unclesp1d3r opened on Mar 28, 2026

• feat(model): add Unbound interface binding to CommonDevice (FIREWALL-059)

  auditaudit-modecomplianceconfigurationenhancementepicgopriority:normalsecuritysp:2testingtype:feature
  Feature

  EvilBit-Labs/opnDossier#502 · Filter by author unclesp1d3r opened on Mar 28, 2026

• feat(model): add UPnP/NAT-PMP config to CommonDevice (FIREWALL-057)

  audit-modecomplianceconfigurationenhancementepicgopriority:normalsecuritysp:2type:feature
  Feature

  EvilBit-Labs/opnDossier#501 · Filter by author unclesp1d3r opened on Mar 28, 2026