Ruleset Check FireCtl now reviews your firewall rules and aliases for six common issues: allow rules without any restriction, block rules that don't log, disabled rules, rules without a description, empty aliases, and aliases no rule refers to. Findings you keep on purpose can be marked as accepted — they move to their own section instead of showing up every time. Configuration History Compare two configuration revisions and see exactly what changed and when. Useful when something stopped working and you need to know what was touched. How much is shown is set per area; in sensitive areas, values are replaced with a placeholder. DHCP The leases screen now says what is actually going on: no DHCP server active, a server running without leases, or dnsmasq as the DHCP server, whose leases FireCtl does not read yet. Also fixed Rule statistics now show a zero instead of hiding the line.

Minor bug fixes.

FireCtl is now free to download. The Dashboard stays free — everything else runs on FireCtl Pro, available as a yearly, monthly, or Lifetime purchase. - Seven days of full Pro access included with every installation — no purchase, nothing to cancel - Early supporters keep everything: if you bought FireCtl before the switch, you keep the full feature set permanently - Special offer: the yearly plan is discounted right now — see the app for details Plus smaller fixes and improvements.

Minor bug fixes and stability improvements.

Minor bugfixes and adjusted pricing.

FireCtl is now free to download with a 7-day free trial — explore every Pro feature, no payment required to start. After the trial, the Dashboard stays free forever. Pro unlocks the full app as an annual or monthly subscription, or a one-time Lifetime purchase. Already bought FireCtl? Thank you — you keep full Pro access automatically. Nothing changes for you.

Proxmox VE integration: cluster overview with nodes (CPU, RAM, storage, LAN, uptime), VM and LXC management, snapshots, auto-snapshot before OPNsense firmware updates. Tailscale support. Diagnostics tools: ping and traceroute. Live logs: universal search, rule label inline, auto-refresh picker. What's New card on version upgrade.

Hotfix for OPNsense 26.1+ users: Unbound Query Forwarding works fully again. Background: OPNsense renamed the entire Unbound DomainOverride API in version 26.1, which silently broke Query Forwarding operations in 1.4. FireCtl 1.4.1 now uses the modern endpoints and automatically falls back to the legacy ones for users still on earlier OPNsense versions. What's working again: - Viewing Query Forwarding entries - Adding new entries - Toggling entries on and off - Editing and deleting entries Many thanks to Chris Gelatt for the bug report and helping pinpoint the root cause.

FireCtl 1.4 brings your firewall to the Home Screen: four new widgets for multi-WAN failover, system health, VPN connections, and certificate expiry. This release also adds a full certificate management module with expiry-based filtering (30/60/90 days), revocation, CRL management, and deletion — all directly from the app. The DHCP module has been rebuilt from the ground up: dnsmasq is now supported alongside ISC and Kea, with a dedicated Reservations tab and the ability to promote any DHCP lease to a permanent reservation with a single tap. A new audit log shows your OPNsense's complete configuration history from anywhere. The new Active States card and VLAN library round out the network overview. For OPNsense 26.1+ users: permission handling has been fully rewritten. Restricted API permissions no longer cascade into "Could not load" errors in unrelated parts of the app. Plus many smaller fixes: firewall logs filter correctly by interface, the firmware update screen is more robust, and long-running operations now keep the screen awake. Documentation of required OPNsense permissions per feature is in active development at firectl.com/docs/permissions.

Bug fixes from customer feedback: Removed misleading "plugin not installed" error that could appear during firmware updates on OPNsense 26.1+ Screen now stays awake during firmware updates — no more tapping to keep the display alive Added a retry button to the connection test in profile setup, helpful when the first attempt fails after the iOS Local Network permission prompt Thanks for the detailed feedback that made this release possible.

What's New in 1.3.0 - Share Extension: Add URLs as URL, URL-table, or host aliases directly from Safari, Mail, or any app's share sheet — with smart mode/type warnings to keep your firewall config clean. - FreeRADIUS Management: View, add, edit, and toggle RADIUS users for your 802.1X / VLAN / WiFi authentication setup. Now with reliable plugin detection that works even right after OPNsense updates. - Up to 10 Profiles: Manage multiple OPNsense firewalls with per-profile theme colors and settings. - Dashboard: New reboot button right in the System Info card. - MAC Format per Profile: Choose how MAC addresses are displayed for each firewall (colon, dash, dot, or no separator). - Improvements: Lease-to-RADIUS shortcut, rules grouped by interface with per-rule statistics, gateway sort order with defaults first, and many small polish improvements. Thanks for using FireCtl. Feedback welcome at info@firectl.com.