December 2, 2016

Updates Released for IPFire Open Source Firewall

(LiveHacking.Com) – Two new core updates for the IPFire firewall distribution have been released. Core update 54 contains minor feature enhancements and bugfixes, while core update 55 incorporates the six security updates recently released for OpenSSL.

Core update 54
Update 54 adds the latest Intel network drivers (for igb 3.2.10, e1000 8.0.53 and e1000e 1.6.3) and updates the web proxy service to consumes less memory in some occasions. The intrusion detection system rules download is working again for the latest ruleset and the hardware status section on the web user interface recognizes more harddrives.

The detail are as follows:
Package updates: squid 3.1.18, snort 2.9.1.2 (daq 0.6.2), smartmontools (5.42)
Network drivers: Intel network drivers (igb 3.2.10, e1000 8.0.53, e1000e 1.6.3), ath9k-htc (USB) firmware 1.3, timezone and hardware database, GeoIP database
Small bugfixes: Syntax error in DHCP client script, H.323 connection tracking modules are not loaded when the system starts.

Core update 55
The recent updates to OpenSSL, the popular open source toolkit for SSL/TLS, which fixed a total of six security flaws made the bulk of the changes for update 55. The only other update of interest is that OpenSSH has also been updated to version 5.9p1.

More information about these updates can be found in the release announcement, plus in the Core 54 & Core 55 change logs. IPFire 2.11 Core 55 is available to download from  here.

IPFire 2.9 Core 47 Released – Updates PHP to Fix Floating-Point Bug

The IPFire project has announced an update to the open source firewall solution. IPFire 2.9 Core 47 is a bugfix release but does bring some minor feature updates. The biggest part of the update is a security patch for PHP. In January a bug was found in PHP when converting the number 2.2250738585072011e-308 from a string. The PHP team released an update and now this update has trickled down to the IPFire project.

Other changes in the Core 47 update include the ability to configure the VLAN IDs that are used for IGMP streaming, plus support for PPTP servers that require a host route for the dial-in connections.

IPFire is designed primarily to be a Stateful Packet Inspection (SPI) firewall but it can also be configured to act as a File Server, Mail Server or VPN gateway. Using a modular design IPFire runs exactly what you require and nothing more.

The hardware requirements for IPFire 2.9 are modest: an Intel Pentium I compatible CPU (i586), 128 MB RAM and 1GB of disk space. It can also run as a virtual machine using KVM, VMware and VirtualBox.