Sun, 2 Dec 2007 13:09:15 -0800 http://www.ipcop.org/ IPCop backend syndication with RSS en-us http://www.ipcop.org/images/iclogo.png http://www.ipcop.org/ ipcop-devel@lists.sourceforge.net http://www.ipcop.org/Article39.html Update is splitted in two part to accomodate free space limitation related to the numerous new packages added since the recent releases. A way to recover some free spaces has been created, allowing to select one of the two 'kernel type' installed ( monoprocessor or smp kernel). After 1.4.17 installation, Use the 'Refresh update list' button to see the new update page. If you see a red section on disk usage, you need to select a 'kernel type'. That will free space on /dev/root and /boot partitions. On next reboot, you will need to select again the kernel on the grub boot menu if another line than the first was selected. Limit for red warning is 20 MB free on /dev/root and 1 MB on /boot. Any scsi disk with two kernel versions (2.4.31 and 2.4.34) and 2 kernel types has filled the /boot partition. Starting from 1.4.18, /boot partition size will be increased from 8 to 10 MB. Some changes has been introduced since rc2 related to ntp (fix ntp user with ntpdate), squid upgraded to 2.6.STABLE17, timezone upgraded to tzdata2007i, snort rules permissions again. If you have installed 1.4.17rc / 1.4.18rc2, you need now to apply finale 1.4.18 update to take the last changes and you could now do that from web interface. Most of the work made on 1.4.17 / 1.4.18 are bug fixes and update interface changes. As usual, this version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO or usb bootable images for a fresh install. Please report any problems in bug tracking system or on devel list. You have to subscribe on all ipcop lists to be allowed to send messages. On system log, update section no more work. Change in home/httpd/cgi-bin/logs.cgi/log.dat 'installpackage' => '(installpackage\[.*\])' to be 'installpackage' => '(installpackage)' By design, the last update could now always be reinstalled. So check on top left the version displayed instead of attempting to install again. Files are available on 'IPCop' package at Sourceforge Firefox does not work well actually to load .gpg files from Sourceforge. You could workaround installing DownThemall add-on and using a right click on the file link 'Register link target with dTa...' For 386 machines a19b781eff5923168f0a73736d3a0e33 ipcop-1.4.17-update.i386.tgz.gpg 268aa583a8adf763468b4dad179c3423 ipcop-1.4.18-update.i386.tgz.gpg Replace fcdsl package (same content) 2d95c6a0c5f78ab3c5e0e55f4494f25f ipcop-avmdrv-2.4.34-1.i386.tgz.gpg fbef594fa8912a46f15854e4f8214a2d ipcop-1.4.18-install-cd.i386.iso eebee4b26c02367df0cb11338699bf47 ipcop-1.4.18-install-pxe.i386.tgz bfa3639917c5de9760f947e44d7f879b ipcop-1.4.18-install-usb-fdd.i386.img.gz c2f93fd2a2110c6f15ad796c0436bbc3 ipcop-1.4.18-install-usb-hdd.i386.img.gz 8109dfcc6863c9b867eeb6f2fcc620b2 ipcop-1.4.18-install-usb-zip.i386.img.gz For alpha machines 6a4a610e3ab07815e7ec26f11b3d1888 ipcop-1.4.17-update.alpha.tgz.gpg e0e781d30acea9e6dfb4d65a2fd5e182 ipcop-1.4.18-update.alpha.tgz.gpg 0065045ed4983fad364d4559e091679c ipcop-1.4.18-install-cd.alpha.iso IPCop sources ae952b2c119c49324e34bc1bbe19d837 ipcop-1.4.18-sources.tgz External sources packages (needed only if you want to compile from sources) 5084a2025a0036ce145385a0758355e0 ipcop-1.4.18-othersrc.tar.bz2 f454a07ccf4afc783f24819347910572 ipcop-1.4.18-othersrc.tar.bz2.md5 Sun, 2 Dec 2007 13:09:15 -0800 http://www.ipcop.org/Article38.html If you update snort rules actually, snort now will fail to start. The reason is that now snort.org publish rules now on current branch that are no more compatible with snort-2.6.1.5 To fix the issue, you would need to manually change the URL for rules download and load again the rules that will be accepted by snort-2.6.1.5. Change has to be made on /usr/local/bin/snortrules.pl Replace my $rulesbranch="current"; by my $rulesbranch="2.6"; 2.6 branch was not available until recently. You may have to wait 15 mn after a previous rules load to be allowed to load rules again. This problem is fixed on next IPCop release that will be published soon for testing. 1.4.18rc1 has been canceled due to minor bugs detected. 1.4.18rc2 should have been released on 24 November but sourceforge uploaded was broken. It should be fixed now, so rc2 should be released the 26. Official release is programmed for 1 December. Mon, 19 Nov 2007 16:19:59 -0800 http://www.ipcop.org/Article37.html This release fixes some bugs, update glibc , Net::DNS and capi for security reasons. Upgraded packages are squid, snort, e100, r1000 and pulsar glibc is a disputed issue CVE-2007-3508 concerning possibility to exploit the bug.(glibc fix miss on our update information). If you use a custom kernel with same 2.4.34 name than official kernel and no subversion, update will replace NIC drivers and those modules may not work on your custom kernel. In the futur, we should provide a way to differentiate a custom kernel from official kernels. As usual, this version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO or usb bootable images or pxe for a fresh install. Files are available on 'IPCop' package at Sourceforge fcdls package is unchanged from 1.4.15 md5sums for i386 machines 8802707d7663f32436de78d67bec9d63 ipcop-1.4.16-fcdsl.i386.tgz c0d326c9e7502d46adfd438ecef6e3ce ipcop-1.4.16-install-cd.i386.iso eeb21587413d43f3b444b53c9dd1eac3 ipcop-1.4.16-install-pxe.i386.tgz b503194f3f30f5fa26579a69354e6e7c ipcop-1.4.16-install-usb-fdd.i386.img.gz 5f57ac7d80170555c229285ccf9e879e ipcop-1.4.16-install-usb-hdd.i386.img.gz 116cb6f111a079e97ec50975b335f85b ipcop-1.4.16-install-usb-zip.i386.img.gz ed0d15d14dc0facab0a5a427b3a8f1fd ipcop-1.4.16-update.i386.tgz.gpg for alpha machines 438fc8c70e32c45d6622bc9b5c49a792 ipcop-1.4.16-update.alpha.tgz.gpg 7f5f8c41b436f89a6610d072ee99ed19 ipcop-1.4.16-install-cd.alpha.iso sources 7d4e3699726c00686aa786bf0c94581d ipcop-1.4.16-sources.tgz c90ab4975d39aba3e10dab4f4a745019 ipcop-1.4.16-othersrc.tar.bz2 d157d1aa367383ea1325db1b33767a70 ipcop-1.4.16-othersrc.tar.bz2.md5 Tue, 17 Jul 2007 08:26:37 -0700 http://www.ipcop.org/Article34.html This release is only bug fixes and completed translations for greek, spanish, vietnamese langs. Bugs introduced in 1.4.14 are fixed. As usual, this version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO or usb bootable images for a fresh install. Files are available on 'IPCop' package at Sourceforge fcdsl package is unchanged from 1.4.14 md5sums for i386 machines 6e7e1cf908e52eed754c3a3c09fd9f3a ipcop-1.4.15-fcdsl.i386.tgz f14707736fec87ec26fc4f8fb471353a ipcop-1.4.15-install-cd.i386.iso a7b87fe0a09a13e9d24027efc8c0a028 ipcop-1.4.15-install-pxe.i386.tgz 23b5d6d8ddc7ccc3e9811c742832649c ipcop-1.4.15-install-usb-fdd.i386.img.gz eb12ae27751875d5ef428d832c2d1ffa ipcop-1.4.15-install-usb-hdd.i386.img.gz fb808ac85cda4be75680d4bfbc030219 ipcop-1.4.15-install-usb-zip.i386.img.gz 246f3c0f58c4c7acdce9ec821a6f53f8 ipcop-1.4.15-update.i386.tgz.gpg for alpha machines b208a8b7f9f6c0cc2a0600a8089e4148 ipcop-1.4.15-install-cd.alpha.iso bb9868954744e7ffd149a63b491c54f6 ipcop-1.4.15-update.alpha.tgz.gpg sources 964d1f809ff6527a349ce12a16a37cf4 ipcop-1.4.15-sources.tgz Fri, 9 Mar 2007 17:42:41 -0800 http://www.ipcop.org/Article32.html This release is mainly bug fixes, upgrade due to security issues and updated timezone. Main upgrade are squid-2.6.STABLE9, snort-2.6.1.3, timezone2007c and works on VPN As usual, this version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO or usb bootable images for a fresh install. There is the usual .gpg update to reach 1.4.14 level and a separate package for those not able to update to 1.4.14 before the US daylight saving time change occuring on March 11. This ipcop-1.4-tz2007c package could be installed on any 1.4 version manually It install only updated timezone files and zdump to control the effect. It does not change anything else. It is not needed after 1.4.14 update. Instructions to install this package : - copy the package to /tmp, - open with tar zxf ipcop-1.4-tz2007c..tgz - type ./install (with the dot before / ) - erase files on /tmp after Files are available on 'IPCop' package at SF fcdls package is unchanged from 1.4.13 There is bugs with: - snort rules update, - squid.conf, - ipsec vpn 1.4.15 will be released soon to fix this issue. You could fix the problem in command line with: for snort chown -R nobody:nobody /etc/snort chown nobody:nobody /var/ipcop/snort/settings for squid chown nobody:nobody /var/ipcop/proxy/squid.conf With ipsec VPN, il is not possible to workaouround without recompiling ipsecctrl. Please report any other problem that would require to be fixed on 1.4.15. md5sums for i386 machines 3aeb69b83e85610988d8ac9ebbbaf45c ipcop-1.4.14-update.i386.tgz.gpg 4f6fe0be2dd4efc8be804679ef43e275 ipcop-1.4.14-fcdsl.i386.tgz 9f9d8bd6f7f8e488f0a9513662e9a5cf ipcop-1.4.14-install-cd.i386.iso 2476425546e635e720485e38efa2064e ipcop-1.4.14-install-pxe.i386.tgz a2013df604b166ba53bdbe421d2c6dce ipcop-1.4.14-install-usb-fdd.i386.img.gz 0008cd06d3a85b732d68c9d8457c7ef9 ipcop-1.4.14-install-usb-hdd.i386.img.gz c47383dfd9ca55d0f1b305868c809bc7 ipcop-1.4.14-install-usb-zip.i386.img.gz df4cb03246008c19c445ae4b4473061c ipcop-1.4-tz2007c.i386.tgz for alpha machines e9d804dc3a3ebd22733e2c998caa3b6d ipcop-1.4.14-update.alpha.tgz.gpg 89025009cc8ab07feaf8becdf60afb47 ipcop-1.4.14-install-cd.alpha.iso 4878b9229a6b5f1d18c00fc2d43d2454 ipcop-1.4-tz2007c.alpha.tgz sources 7e2c964e44283c40a27fc1a8a550a955 ipcop-1.4.14-sources.tgz 9634d4a523764ab7bf5c018d7cb6c874 ipcop-1.4.14-othersrc.tar.bz2 5d5fdfedb22ee2b1a4cf22c57dc4f360 ipcop-1.4.14-othersrc.tar.bz2.md5 Sun, 4 Mar 2007 15:53:37 -0800 http://www.ipcop.org/Article31.html This release update a few tools due to security issues, fix bugs and update some drivers. You are encouraged to update from previous releases as soon as you can. IPCop v1.4.13 is released inchanged from 1.4.13rc1. As usual, this version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO or usb bootable images for a fresh install. Update is split in two parts due to space limits on small configurations. Install the two updates and reboot mandatory. Kernel-2.4.34 is provided. This kernel update may cause trouble with unofficial add-ons not compiled for this kernel. An iso for alpha is provided again for 1.4.13 release. It is intended that starting from 1.4.13, alpha version will be released in the same timing as i386 version. No update from alpha v1.4.0 version will be published as the gap is too much important. You would have to backup and install again. Files are available on 'IPCop' package at Sourceforge Tue, 16 Jan 2007 00:35:13 -0800 http://www.ipcop.org/Article29.html IPCop v1.4.11 has been released with small changes in ids.cgi and vpnmain.cgi from 1.4.11rc1. Files could be downloaded from Sourceforge As usual, this version can be installed as an update from previous v1.4.10 versions or with a ready-to-go ISO for a fresh install. What is newer is that it could now be installed from usb key (or usb-zib) or from a pxe package. To install the update, it is necessary that kernel 2.4.31 is running. Kernel 2.4.29 is suppressed during the update to let free space for a new kernel on next release. Reboot is necessary after the update to use a patched 2.4.31 kernel. md5sums 1d8a85c96bd5cc69a751c5291410b0c2 ipcop-fcdsl-1.4.11.i386.tgz 0655e93bd948bbe2086cfb30b675a78a ipcop-install-cd-1.4.11.i386.iso a3a75d98b13e6d87a93429f512a79967 ipcop-install-pxe-1.4.11.i386.tgz 29b4a1afd0bd6680263e2c487b553036 ipcop-install-usb-fdd-1.4.11.i386.img.gz c3214288c1988dd413d886fa34d38524 ipcop-install-usb-hdd-1.4.11.i386.img.gz 6cb619eae99b207c773dff677f43697e ipcop-install-usb-zip-1.4.11.i386.img.gz 4770ba892d5c3564c6905abda76af866 ipcop-sources-1.4.11.tgz 398881cd06240d49eb7da182fd304684 ipcop-packages-cd-1.4.11.i386.iso 1e414e0f27aace4218e5ca305bf2a3b8 ipcop-update-1.4.11.i386.tgz.gpg Wed, 23 Aug 2006 16:03:16 -0700 http://www.ipcop.org/Article27.html You can now test your prefered firewall system without a dedicated system, using a VMWare community-built appliance. You can find it here : IPCop under VMWare. You can use it with the free VMWare Player or VMWare server softwares. Fri, 3 Mar 2006 01:03:28 -0800 http://www.ipcop.org/Article25.html IPCop v1.4.10 is only bug fixes and is released unchanged from 1.4.10test1. It can be downloaded from Here or on SF.net As usual, this version can be installed as an update from the previous v1.4.x versions or with a ready-to-go ISO for a fresh install. IPCop v1.4.10 is only bug fixes and is released unchanged from 1.4.10test1. md5sums 379f9693213cd201788a71d5269ef4c0 ipcop-fcdsl-1.4.10.i386.tgz d4848635eb08e2f131f71fccb8dd9ab7 ipcop-install-1.4.10.i386.iso 0651d7bcb4e4dca4daef7649f472807d ipcop-sources-1.4.10.tgz 4e62d3c4d33bbbd1abf2fd3961615305 ipcop-update-1.4.10.i386.tgz.gpg fcdsl package did not change in 1.4.10 from 1.4.8/1.4.9 Please report any problems in bug tracking system or on devel list. Gilles Wed, 9 Nov 2005 23:53:29 -0800 http://www.ipcop.org/Article24.html A year ago, first of 1.4.0 serie was released. Overall download counter for IPCop on sourceforge is now more than 2.500.000. Thank to all who make IPCop work, to all who contribute by supporting users, tracking bugs, writing code, doc, working on the background. IPCop v1.4.9 is only bug fixes and is released with minor changes from 1.4.9test1. It can be downloaded from Here or on SF.net As usual, this version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO for a fresh install. 1.4.9 update installation will mainly reload firewall rules. A reboot is not necessary. md5sums 9fe36d8becb003e65626128b0c70481c ipcop-fcdsl-1.4.9.i386.tgz 6e9e6ce949fe14efda4f793c1bed4b17 ipcop-install-1.4.9-1.i386.iso 0af698987fae864d753d8eb67ebb8898 ipcop-sources-1.4.9.tgz 64424bcd7afa9ba56ec0d31d10f2cd40 ipcop-update-1.4.9.i386.tgz.gpg fcdsl package is unchanged since 1.4.8 Download files names slightly change : - for possible other architecture support in the futur - to differenciate from 1.4.9test1 where files were wrongly uploaded with 1.4.9 name Thu, 6 Oct 2005 00:31:50 -0700 http://www.ipcop.org/Article22.html The IPCop 1.4.8 is now available and can be downloaded from Here or on SF.net. This version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO for a fresh install. Install both 1.4.7/1.4.8 updates and reboot to use the new kernel. Update is split in 2 parts like 1.4.3/1.4.4 to solve some space issues with disk less than 800 MB. Update was tested to work on flash disk (this was not the case in 1.4.3/1.4.4). MD5: 93538c45825c0fb5bbcb644f80f8907d fcdsl-1.4.8.tgz MD5: 789d92f23f7def21d0eb4e660d7c49f8 ipcop-1.4.8.iso MD5: 2916d4667663b9d37880b2bf21e2da44 sources-ipcop-1.4.8.tgz MD5: e26b8a1921e33e5114fc2367d5d0fd45 update-1.4.7.tgz.gpg MD5: 05930394026f2aa7c36bf652840293f6 update-1.4.8.tgz.gpg You need to use kernel-2.4.29 to install this update. Previous kernel 2.4.27 will be removed to free space for new kernel 2.4.31 Because of this kernel removal (for those who installed before 1.4.4), it is difficult to say exactly how much free space is necessary (it depend if 2.4.27 is present). It should no more be a problem, if you don't have added hudge files on a small disk. As a shortcut,I would say you need 10 MB free on /root before 1.4.7 installation if 2.4.27 is present and 25 MB if not. If you have less than 30 MB free on /root, you will need 25 Mb free on /var/log. After 1.4.7 update installation, the update page is changed to display space available. If you run from a flash disk, the kernel running during the update can only be 2.4.29 (and not smp). There is not enought free space available on standard /boot made by makeflash to support 2 smp kernel. This is changed for futur makeflash installation with a standard 8MB size like with real disk. After the update with flash, you can start whatever kernel 2.4.31 you want but 2.4.29-smp can't be started. ... Fri, 26 Aug 2005 06:51:57 -0700 http://www.ipcop.org/Article21.html IPCop v1.4.6 was release with no changes from 1.4.6test. As usual, this version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO for a fresh install. Install update and restart connection to make the new dnsmasq version run. Download from Here or on SF.net. Read more to know all changes and special comments. Wed, 11 May 2005 05:45:35 -0700 http://www.ipcop.org/Article19.html The IPCop v1.4.5 is now released ! You can download this release here. As usual, this version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO for a fresh install. Install update and restart connection to make the new dnsmasq version run. Read more to know the changes in this new release. Thu, 31 Mar 2005 01:23:22 -0800 http://www.ipcop.org/Article16.html !!! Attention : a full v1.4.4 installation (full = from the full ISO, not an update) is broken with Pusal DSL Card !!! This issue will be solved in a forthcoming patch. Regarding the update, you can use the 2.4.27 kernel, which is compatible with Pulsar card. This is the V1.4.4 release version. Number goes directly in 1.4.4 because update is split in 2 parts. IPCop 1.4.4 is now available at Sourceforge and in the download page here. As usual, this version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO for a fresh install. Install both updates and reboot. MD5: 01a4a1961b12cec30ed3e9fc76d8ccd6 update-1.4.3.tgz.gpg MD5: 07c736df11bb9ec35912e4381767188c update-1.4.4.tgz.gpg MD5: 49738055b3d3e51ecf84b3a90c627447 ipcop-1.4.4.iso MD5: 08a3b29731987cac9383946cecad6c90 sources-ipcop-1.4.4.tgz MD5: 23c9547e2d501bfccedc053449bafd85 fcdsl-1.4.4test1.tgz For frizt dsl modems, fcdsl-1.4.4 could be uploaded before rebooting. Update is cut in two files in an attempt to solve the abort message 'This is not an authorised update.' because there is not enough free space available on root partition. It may not have enough free space on the root partition for disk size smaller than approximately 900 MB to warrant the install of the update. With more than 30 MB free, you will be able to install the two updates. You may create more free space on your disk by removing the part of the kernel you do not use (2.4.27-smp for most of us). In this case, type : rm -rf /lib/modules/2.4.27-smp and don't forget the -smp termination. df must display more than 30MB available for the root partition to be able to install the updates. If installation fail, report the error message found in /var/log/http/error_log Some changes were made to make IPCop more add-on friendly for next releases. But v1.4.3 and v1.4.4 update may broke every add-ons: - because header.pl is updated - due the 'use strict' on cgi script to enforce correct scripting rules --> Install only add-on updated for v1.4.3/v1.4.4 Tue, 15 Mar 2005 23:59:06 -0800 http://www.ipcop.org/Article14.html V1.4.2 changes are only related to bug fixes. List of (some) problems solved in V1.4.2 - fix dhcp.cgi bug in header.pl - fix eciadsl-nortek to use correct usb alt interface in rc.red - fix insecure dependency related to fritdsl modems in rc.red - fix status.cgi page menu without javascript - fix dhcp.cgi : read timesettings for correct test - fix snort log rotation not working wich could have made snort end - fix syslog path in restartsyslogd (if syslog was not running) - set empty DOMAIMNAME in restarthosts to prevent ctrl/Z in hosts file - upgrade fcdsl2 firmware and module to 03.11.04 and include drdsl - upgrade Pulsar driver to 4.018 - upgrade fcron to 2.02 (CAN-2004-1030, CAN-2004-1031, CAN-2004-1032 & CAN-2004-1032) - change 256MB flash disk log size from 10 to 30MB - add usr/bin/host for ipsec verify - add reload capability to rc.firewall.local Other details in doc/Changelog from the source package or in the .iso. Files available in the downloads section. Mon, 20 Dec 2004 02:34:12 -0800 http://www.ipcop.org/Article12.html Linux.com recently published an article on IPCop 1.4.0, written by Rob Reilly. Read the entire article here. Fri, 26 Nov 2004 02:35:49 -0800 http://www.ipcop.org/Article10.html IPCop 1.4.1 is now available. Updates in the release include:- * New pulsar driver (4.0.15) * Squid 2.5STABLE7 * Conexant driver update * ECI ADSL Nortek support * DNSmasq 2.17 * latest versions of apache, openssl * many bug fixes to the CGI scripts and upgrade procedures. For a full list of updates, check out the CVS logs. Sun, 21 Nov 2004 12:30:04 -0800 http://www.ipcop.org/Article7.html The first IPCop 1.4.0 ISO is available for Alpha processors. It has some limitations in that it doesn't support the following hardware: * Conexant PCI ADSL cards * Fritz DSL * Pulsar driver * Bewan driver The reason for the above, is that the drivers include proprietary binary modules that are only compiled for x86 platforms. You need to campaign to those driver writers to get this changed. Additionally, the fdisk process must be done manually. This can be achieved by waiting for the message 'NOW FDISK' and switching to VT3 and performing the task. Tue, 5 Oct 2004 04:22:13 -0700 http://www.ipcop.org/Article2.html The IPCop team is proud to announce the Final 1.4.0 Release today ! IPCop Linux is a complete Linux distribution whose sole purpose is to protect the networks on which it is installed. It is extremely easy for anyone to install and configure. Frequently, the IPCop firewall can be installed within 10 to 15 minutes. Fri, 1 Oct 2004 00:00:00 -0700 http://www.ipcop.org/Article1.html The IPCop project have decided accordingly with the development process change the web interface like the team did with the firewall administration interface. This changes are related to the project roadmap designed to continue with the perfect develop of this fascinating security tool. We have not been able to migrate the old Twiki user database. You will need to re-register on the website. Also, not all data has been migrated to the new website. The old website will remain available here until December 1st, 2004. Thu, 23 Sep 2004 00:00:00 -0700