IPFire is een open source firewall voor i586-, x86_64- en Arm-systemen. Het bevat onder andere een intrusion detection/prevention system, deelt het netwerk op in zones, doet stateful packet inspection en biedt vpn-mogelijkheden. Voor meer informatie verwijzen we naar deze pagina. De ontwikkelaars hebben versie 2.29 Core Update 204 uitgebracht en de changelog daarvan kan hieronder worden gevonden.
IPFire 2.29 - Core Update 204 releasedIPFire 2.29 - Core Update 204 is now available for download. It is a housekeeping release that brings a healthy dose of updates across the entire operating system and fixes a regression in our recent migration to Knot Resolver. Behind the scenes, we have been busy with some exciting things, and you will see the first of them in upcoming releases.
Knot ResolverIn the last release, we migrated from Unbound to Knot Resolver for networks protected by IPFire. We have received very positive feedback that DNS resolution is noticeably faster and that some long-standing issues have been resolved. However, the migration introduced a regression: clients connected via IPsec, WireGuard or OpenVPN were unable to resolve names, because Knot Resolver replied from the wrong source IP address. This release fixes the issue. Doing so required substantial changes to the I/O layer of Knot Resolver, which we have contributed upstream.
MiscellaneousAdd-Ons
- Intrusion Prevention System: Julio Lira's "Advanced Phishing Protection" ruleset is now available as a ruleset provider.
- Kernel: The IPFire kernel has been rebased on Linux 6.18.54, which includes various fixes from the upstream maintainers for improved stability and security.
- WireGuard: Configuration files with multiple space-separated subnets can now be imported correctly (#13951).
- RISC-V: The experimental builds are now tuned for out-of-order cores. They remain compatible with the RVA22 baseline while taking advantage of the improvements in RVA23.
- Updated packages: acl 2.4.0, attr 2.6.0, Apache 2.4.68, bash 5.3p15, BIND 9.20.24, c-ares 1.34.8, cURL 8.21.0, elinks 0.19.1, ethtool 7.1, expat 2.8.2, file 5.48, glib 2.88.2, harfbuzz 14.2.1, hwdata 0.409, json-c 0.19, kbd 2.10.0, Knot 3.5.6, Knot Resolver 6.4.2, less 704, libarchive 3.8.8, libjpeg 3.2.0, lsof 4.99.7, OpenSSH 10.4p1, OpenSSL 3.6.5, pango 1.58.0, perl 5.42.2, perl-Net-DNS 1.55, protobuf 35.1, SQLite 3.53.3, sysstat 12.7.9, systemd 261.1, tzdata 2026c, vim 9.2.0769, wireless-regdb 2026.05.30
- Observium Agent can now report the status of the Apache web server.
- Zabbix now reports metrics for Knot Resolver.
- Avahi: Fixed a hang during shutdown when the daemon was not running, caused by an unhandled error.
- Updated packages: ALSA 1.2.16, ClamAV 1.5.3, dnsdist 2.1.0, fetchmail 6.6.6, FFmpeg 8.1.2, Git 2.55.0, HAProxy 3.4.2, ltrace 0.8.1, monit 6.0.0, nano 9.1, netsnmpd 5.9.5.2, Postfix 3.11.4, rsync 3.5.0, strace 7.1, stunnel 5.78, tmux 3.7b, transmission 4.1.3, tshark 4.6.7
There is a lot more on the way. Monitoring and reporting are getting a serious upgrade that will give you a much clearer picture of what your firewall is doing and how your network is behaving. We will share more about this very soon.
:fill(white):strip_exif()/i/2004006994.jpeg?f=thumbmedium)