|
|
 |
|
|
|
|
|
|
|
| |
Update is splitted in two part because of a kernel update to accomodate free space limitation.
1.4.19 contain some packages updates, most notabily a dnsmasq update to be immune on recent dns advisory.
1.4.20 install the second part of the kernel update and configure the new kernel.
1.4.19 could be installed separately from 1.4.20. A reboot is not needed after 1.4.19 installation.
Concerning the dns issue, see more details in
http://www.heise-online.co.uk/news/DNS-security-problem-details-released--/111145
It is very likely anyone need to a patch without waiting and our is in 1.4.19 for
dnsmasq.
The dns server you use need to be patched too or you may switch to opendns.
You need to reboot to use the new kernel after 1.4.20 installation.
Files are available on 'IPCop' package at Sourceforge
be875f7491117174fccded3fec4be9bf ipcop-1.4.19-update.i386.tgz.gpg
fe1eb0fd1c22e30fe5595a168f096305 ipcop-1.4.20-update.i386.tgz.gpg
816e96dccd712d0482e1924560f3db10 ipcop-avmdrv-2.4.36-1.i386.tgz.gpg
2032842766045da0feb7fbb4fe9d5956 ipcop-1.4.20-install-cd.i386.iso
ea6266f4a312a5db31f17d7d75856378 ipcop-1.4.20-install-pxe.i386.tgz
bd9ac9e8e29133ad9945fabedb47e4a0 ipcop-1.4.20-install-usb-fdd.i386.img.gz
15686fcc165fefd127786deb85cb39a7 ipcop-1.4.20-install-usb-hdd.i386.img.gz
55e2baac23c5d176723d874b3c007ddc ipcop-1.4.20-install-usb-zip.i386.img.gz
Sources
47b820fc1c28f2b1865ede8a3f0015fe ipcop-1.4.20-sources.tgz
External sources packages (./make.sh getothersrc could do that for you)
938e4ffda38dac874a12e6f0e9d7dd0d ipcop-1.4.20-othersrc.tar.bz2
412de52fc0bde67613d8e460003a1c68 ipcop-1.4.20-othersrc.tar.bz2.md5
I will publish only binaries for x86 for 1.4.20 unless requested
If you use the alpha port, please report.
The new kernel contain :
- a new security protection against against null pointer dereference
( mmap_min_addr=4096)
- some new nic drivers skge sky2 sc92031 atl1 atl2
- improved support in some IDE or sata driver
Please report success/failure for nic and disk controllers detection.
Silan sc92031 driver should recognize RslTek 8139D card.
It's a patch I have made and I need to know if everything is right.
Original driver has some bugs I try to fix.
As usual, this version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO or usb bootable images for a fresh install.
ipcop-avmdrv-2.4.36-1.i386.tgz.gpg is needed to install for avm drivers users.
The date on the machine where the update is installed has to be good.
If date is in the past, signature is considered in the futur and update will refuse to install.
You would have only the 'This is not an authorized update' message warning on web interface.
Gilles
|
|
|
|
|
|
| |
Posted by: Gesp
on Tuesday, July 22, 2008
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update is splitted in two part to accomodate free space limitation related to the numerous new packages added since the recent releases.
A way to recover some free spaces has been created, allowing to select one of the two 'kernel type' installed ( monoprocessor or smp kernel).
After 1.4.17 installation, Use the 'Refresh update list' button to see the new update page. If you see a red section on disk usage, you need to select a 'kernel type'. That will free space on /dev/root and /boot partitions. On next reboot, you will need to select again the kernel on the grub boot menu if another line than the first was selected.
Limit for red warning is 20 MB free on /dev/root and 1 MB on /boot.
Any scsi disk with two kernel versions (2.4.31 and 2.4.34) and 2 kernel types has filled the /boot partition. Starting from 1.4.18, /boot partition size will be increased from 8 to 10 MB.
Some changes has been introduced since rc2 related to ntp (fix ntp user with ntpdate), squid upgraded to 2.6.STABLE17, timezone upgraded to tzdata2007i, snort rules permissions again.
If you have installed 1.4.17rc / 1.4.18rc2, you need now to apply finale 1.4.18 update to take the last changes and you could now do that from web interface.
Most of the work made on 1.4.17 / 1.4.18 are bug fixes and update interface changes.
As usual, this version can be installed as an update from previous v1.4.x versions or with a ready-to-go ISO or usb bootable images for a fresh install.
Please report any problems in bug tracking system or on devel list.
You have to subscribe on all ipcop lists to be allowed to send messages.
On system log, update section no more work.
Change in home/httpd/cgi-bin/logs.cgi/log.dat
'installpackage' => '(installpackage\[.*\])'
to be
'installpackage' => '(installpackage)'
By design, the last update could now always be reinstalled. So check on top left the version displayed instead of attempting to install again.
Files are available on 'IPCop' package at Sourceforge
Firefox does not work well actually to load .gpg files from Sourceforge.
You could workaround installing DownThemall add-on and using a right click on the file link 'Register link target with dTa...'
For 386 machines
a19b781eff5923168f0a73736d3a0e33 ipcop-1.4.17-update.i386.tgz.gpg
268aa583a8adf763468b4dad179c3423 ipcop-1.4.18-update.i386.tgz.gpg
Replace fcdsl package (same content)
2d95c6a0c5f78ab3c5e0e55f4494f25f ipcop-avmdrv-2.4.34-1.i386.tgz.gpg
fbef594fa8912a46f15854e4f8214a2d ipcop-1.4.18-install-cd.i386.iso
eebee4b26c02367df0cb11338699bf47 ipcop-1.4.18-install-pxe.i386.tgz
bfa3639917c5de9760f947e44d7f879b ipcop-1.4.18-install-usb-fdd.i386.img.gz
c2f93fd2a2110c6f15ad796c0436bbc3 ipcop-1.4.18-install-usb-hdd.i386.img.gz
8109dfcc6863c9b867eeb6f2fcc620b2 ipcop-1.4.18-install-usb-zip.i386.img.gz
For alpha machines
6a4a610e3ab07815e7ec26f11b3d1888 ipcop-1.4.17-update.alpha.tgz.gpg
e0e781d30acea9e6dfb4d65a2fd5e182 ipcop-1.4.18-update.alpha.tgz.gpg
0065045ed4983fad364d4559e091679c ipcop-1.4.18-install-cd.alpha.iso
IPCop sources
ae952b2c119c49324e34bc1bbe19d837 ipcop-1.4.18-sources.tgz
External sources packages (needed only if you want to compile from sources)
5084a2025a0036ce145385a0758355e0 ipcop-1.4.18-othersrc.tar.bz2
f454a07ccf4afc783f24819347910572 ipcop-1.4.18-othersrc.tar.bz2.md5
|
|
|
|
|
|
| |
Posted by: Gesp
on Sunday, December 02, 2007
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
If you update snort rules actually, snort now will fail to start.
The reason is that now snort.org publish rules now on current branch that are no more compatible with snort-2.6.1.5
To fix the issue, you would need to manually change the URL for rules download and load again the rules that will be accepted by snort-2.6.1.5.
Change has to be made on /usr/local/bin/snortrules.pl
Replace
my $rulesbranch="current";
by
my $rulesbranch="2.6";
2.6 branch was not available until recently.
You may have to wait 15 mn after a previous rules load to be allowed to load rules again.
This problem is fixed on next IPCop release that will be published soon for testing.
1.4.18rc1 has been canceled due to minor bugs detected.
1.4.18rc2 should have been released on 24 November but sourceforge uploaded was broken. It should be fixed now, so rc2 should be released the 26.
Official release is programmed for 1 December.
|
|
|
|
|
|
| |
Posted by: Gesp
on Tuesday, November 20, 2007
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This release fixes some bugs, update glibc , Net::DNS and capi for security
reasons. Upgraded packages are squid, snort, e100, r1000 and pulsar
glibc is a disputed issue CVE-2007-3508 concerning possibility to exploit the
bug.(glibc fix miss on our update information).
If you use a custom kernel with same 2.4.34 name than official kernel and no subversion, update will replace NIC drivers and those modules may not work on your custom kernel.
In the futur, we should provide a way to differentiate a custom kernel from official kernels.
As usual, this version can be installed as an update from previous v1.4.x
versions or with a ready-to-go ISO or usb bootable images or pxe for a fresh
install.
Files are available on 'IPCop' package at Sourceforge
fcdls package is unchanged from 1.4.15
md5sums
for i386 machines
8802707d7663f32436de78d67bec9d63 ipcop-1.4.16-fcdsl.i386.tgz
c0d326c9e7502d46adfd438ecef6e3ce ipcop-1.4.16-install-cd.i386.iso
eeb21587413d43f3b444b53c9dd1eac3 ipcop-1.4.16-install-pxe.i386.tgz
b503194f3f30f5fa26579a69354e6e7c ipcop-1.4.16-install-usb-fdd.i386.img.gz
5f57ac7d80170555c229285ccf9e879e ipcop-1.4.16-install-usb-hdd.i386.img.gz
116cb6f111a079e97ec50975b335f85b ipcop-1.4.16-install-usb-zip.i386.img.gz
ed0d15d14dc0facab0a5a427b3a8f1fd ipcop-1.4.16-update.i386.tgz.gpg
for alpha machines
438fc8c70e32c45d6622bc9b5c49a792 ipcop-1.4.16-update.alpha.tgz.gpg
7f5f8c41b436f89a6610d072ee99ed19 ipcop-1.4.16-install-cd.alpha.iso
sources
7d4e3699726c00686aa786bf0c94581d ipcop-1.4.16-sources.tgz
c90ab4975d39aba3e10dab4f4a745019 ipcop-1.4.16-othersrc.tar.bz2
d157d1aa367383ea1325db1b33767a70 ipcop-1.4.16-othersrc.tar.bz2.md5
|
|
|
|
|
|
| |
Posted by: Gesp
on Tuesday, July 17, 2007
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This release is only bug fixes and completed translations for greek, spanish, vietnamese langs.
Bugs introduced in 1.4.14 are fixed.
As usual, this version can be installed as an update from previous v1.4.x
versions or with a ready-to-go ISO or usb bootable images for a fresh install.
Files are available on 'IPCop' package at Sourceforge
fcdsl package is unchanged from 1.4.14
md5sums
for i386 machines
6e7e1cf908e52eed754c3a3c09fd9f3a ipcop-1.4.15-fcdsl.i386.tgz
f14707736fec87ec26fc4f8fb471353a ipcop-1.4.15-install-cd.i386.iso
a7b87fe0a09a13e9d24027efc8c0a028 ipcop-1.4.15-install-pxe.i386.tgz
23b5d6d8ddc7ccc3e9811c742832649c ipcop-1.4.15-install-usb-fdd.i386.img.gz
eb12ae27751875d5ef428d832c2d1ffa ipcop-1.4.15-install-usb-hdd.i386.img.gz
fb808ac85cda4be75680d4bfbc030219 ipcop-1.4.15-install-usb-zip.i386.img.gz
246f3c0f58c4c7acdce9ec821a6f53f8 ipcop-1.4.15-update.i386.tgz.gpg
for alpha machines
b208a8b7f9f6c0cc2a0600a8089e4148 ipcop-1.4.15-install-cd.alpha.iso
bb9868954744e7ffd149a63b491c54f6 ipcop-1.4.15-update.alpha.tgz.gpg
sources
964d1f809ff6527a349ce12a16a37cf4 ipcop-1.4.15-sources.tgz
|
|
|
|
|
|
| |
Posted by: Gesp
on Saturday, March 10, 2007
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This release is mainly bug fixes, upgrade due to security issues and updated timezone. Main upgrade are squid-2.6.STABLE9, snort-2.6.1.3, timezone2007c and works on VPN
As usual, this version can be installed as an update from previous v1.4.x
versions or with a ready-to-go ISO or usb bootable images for a fresh install.
There is the usual .gpg update to reach 1.4.14 level and a separate package for
those not able to update to 1.4.14 before the US daylight saving time change
occuring on March 11.
This ipcop-1.4-tz2007c package could be installed on any 1.4 version manually
It install only updated timezone files and zdump to control the effect.
It does not change anything else. It is not needed after 1.4.14 update.
Instructions to install this package :
- copy the package to /tmp,
- open with tar zxf ipcop-1.4-tz2007c.<machine>.tgz
- type ./install (with the dot before / )
- erase files on /tmp after
Files are available on 'IPCop' package at SF
fcdls package is unchanged from 1.4.13
There is bugs with:
- snort rules update,
- squid.conf,
- ipsec vpn
1.4.15 will be released soon to fix this issue.
You could fix the problem in command line with:
for snort
chown -R nobody:nobody /etc/snort
chown nobody:nobody /var/ipcop/snort/settings
for squid
chown nobody:nobody /var/ipcop/proxy/squid.conf
With ipsec VPN, il is not possible to workaouround without recompiling ipsecctrl.
Please report any other problem that would require to be fixed on 1.4.15.
md5sums
for i386 machines
3aeb69b83e85610988d8ac9ebbbaf45c ipcop-1.4.14-update.i386.tgz.gpg
4f6fe0be2dd4efc8be804679ef43e275 ipcop-1.4.14-fcdsl.i386.tgz
9f9d8bd6f7f8e488f0a9513662e9a5cf ipcop-1.4.14-install-cd.i386.iso
2476425546e635e720485e38efa2064e ipcop-1.4.14-install-pxe.i386.tgz
a2013df604b166ba53bdbe421d2c6dce ipcop-1.4.14-install-usb-fdd.i386.img.gz
0008cd06d3a85b732d68c9d8457c7ef9 ipcop-1.4.14-install-usb-hdd.i386.img.gz
c47383dfd9ca55d0f1b305868c809bc7 ipcop-1.4.14-install-usb-zip.i386.img.gz
df4cb03246008c19c445ae4b4473061c ipcop-1.4-tz2007c.i386.tgz
for alpha machines
e9d804dc3a3ebd22733e2c998caa3b6d ipcop-1.4.14-update.alpha.tgz.gpg
89025009cc8ab07feaf8becdf60afb47 ipcop-1.4.14-install-cd.alpha.iso
4878b9229a6b5f1d18c00fc2d43d2454 ipcop-1.4-tz2007c.alpha.tgz
sources
7e2c964e44283c40a27fc1a8a550a955 ipcop-1.4.14-sources.tgz
9634d4a523764ab7bf5c018d7cb6c874 ipcop-1.4.14-othersrc.tar.bz2
5d5fdfedb22ee2b1a4cf22c57dc4f360 ipcop-1.4.14-othersrc.tar.bz2.md5</machine>
|
|
|
|
|
|
| |
Posted by: Gesp
on Sunday, March 04, 2007
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
IPCop v1.4.11 has been released with small changes in ids.cgi and vpnmain.cgi from 1.4.11rc1.
Files could be downloaded from Sourceforge
As usual, this version can be installed as an update from previous v1.4.10
versions or with a ready-to-go ISO for a fresh install.
What is newer is that it could now be installed from usb key (or usb-zib) or from a pxe package.
To install the update, it is necessary that kernel 2.4.31 is running.
Kernel 2.4.29 is suppressed during the update to let free space for a new kernel on next release.
Reboot is necessary after the update to use a patched 2.4.31 kernel.
md5sums
1d8a85c96bd5cc69a751c5291410b0c2 ipcop-fcdsl-1.4.11.i386.tgz
0655e93bd948bbe2086cfb30b675a78a ipcop-install-cd-1.4.11.i386.iso
a3a75d98b13e6d87a93429f512a79967 ipcop-install-pxe-1.4.11.i386.tgz
29b4a1afd0bd6680263e2c487b553036 ipcop-install-usb-fdd-1.4.11.i386.img.gz
c3214288c1988dd413d886fa34d38524 ipcop-install-usb-hdd-1.4.11.i386.img.gz
6cb619eae99b207c773dff677f43697e ipcop-install-usb-zip-1.4.11.i386.img.gz
4770ba892d5c3564c6905abda76af866 ipcop-sources-1.4.11.tgz
398881cd06240d49eb7da182fd304684 ipcop-packages-cd-1.4.11.i386.iso
1e414e0f27aace4218e5ca305bf2a3b8 ipcop-update-1.4.11.i386.tgz.gpg
|
|
|
|
|
|
| |
Posted by: Gesp
on Thursday, August 24, 2006
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
You can now test your prefered firewall system without a dedicated system, using a VMWare community-built appliance.
You can find it here : IPCop under VMWare.
You can use it with the free VMWare Player or VMWare server softwares.
|
|
|
|
|
|
| |
Posted by: Riric
on Friday, March 03, 2006
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Sourceforge Project
|
|
|
Categories Menu
|
|
|
Languages
|
|
Langue préférée :   |
|
Past Articles
|
|
- Wednesday, November 09
- IPCop 1.4.10 released (18)
- Thursday, October 06
- IPCop 1.4.9 released (59)
- Friday, August 26
- IPCop 1.4.8 Available (71)
- Wednesday, May 11
- IPCop 1.4.6 released (245)
- Thursday, March 31
- IPCop 1.4.5 released (140)
- Tuesday, March 15
- IPCop 1.4.3/1.4.4 released (1)
- Monday, December 20
- IPCop v1.4.2 released (10)
- Friday, November 26
- IPCop firewall polices your neighborhood (11)
- Sunday, November 21
- IPCop 1.4.1 (177)
- Tuesday, October 05
- IPCop 1.4.0 for Alpha processors (10)
Older articles
|
|
|
|
Tracker
Mailing Lists
CVS Tree
Released Files