|
The changes made since the test version dated 2005/08/18 are :
- setup :fix hostname update missing the domain name
- httpscert script was added : the script allow to read the https certificate issuer with /usr/local/bin/httpscert read
With /usr/local/bin/httpscert new, a new certificate is made using the actual long hostname. This was made to fix the warning message in the GUI because hostname did not match certificate name.
You are warned if there is a difference between certificate and hostname
during boot.
It may not have been sufficiently stated but v1.2 and v1.3 are no more maintained and contain some vulnerabilies. Please consider to upgrade as soon as you can. If there is a problem to install v1.4, work with us to solve those issues. Fill a bug report on sourceforge or send a message on the devel list.
For those who use unofficial add-ons, there is some progress made to less disturb add-ons but it will be only noticable after add-ons use the new addon-lang directory to preserve their changed texts.
Abstract of previous changes since v1.4.6
Installer
- Fix ata_piix SATA support by adding EXPORT_SYMBOL_GPL capability at busybox-0.60.5
- Fix pcmcia installation and netcard detection with floppy boot.
- On floppy boot install, shift search of scscidrv-<version>.img to images/scscidrv-<version>.img to allow usage of mounted loop iso. With real files, place it in an images directory.</version></version>
Changes in update
- Fix etc/modules.conf is more recent than ...modules.dep
- Fix support with smp new kernel and scsi driver
- Complete the menu options for the old kernel like for the most recent kernel
- Workaround for flash disk with limited /boot size. Previous smp files are suppressed on /boot
Set mkflash to use 8 MB /boot size to support old smp kernel
- Fix '/ is busy' with scsi disk once after new kernel installation
- Create an addon-lang directory to allow add-ons to retrieve specific lang phrases after update
- To untar the update, try to use /var/log partition to avoid space problem on /root. If it fail, use /root partition.
Upgraded packages
- arping from 2.03 to 2.05
- bzip2 from 1.02 to 1.0.3 plus patch against CAN-2005-1260
- Compress-Zlib from 1.3.4 to 1.35
- dhcpcd-1.3.22-pl4_corrupt-packet.patch CAN-2005-1896
- eagle-usb from 2.1.1 to 2.3.2
- eciadsl from 0.10 to 0.11beta1
- gnupg from 1.2.5 to 1.4.2
- logwatch from 5.2.1 to 6.1.2
- openswan-1.0.10rc2 (support restart option)
- pcmcia-cs from 3.2.7 to 3.2.8
- procps from 3.2.1 to 3.2.5
- pulsardsl from 4.018 to 4.0.19
- squid from STABLE9 to 2.5.STABLE10
- tcpdump patch against CAN-2005-1267
- zlib-1.2.3 CAN-2005-2096
New packages
- ethtool : this is helpfull for those who want to let IPCop sleep when not used.
ethtool is used to configure the network card /usr/sbin/ethtool -s eth0 wol g
This could be added in rc.local.
You could wake up the IPCop machine by sending the magic-packet to the MAC address. This could only work with some limit on IPCop side : you can't use dhcp on green since the PC sending the magic-packet already has an IP and you can't have an orange interface
- iptstate command line utility RFE 1167726
- libwww-perl for HTTP downloads from CGIs
This should resolve the issues some users are having with IDS rule updates.
Also should fix the inability to download update lists when an upstream proxy requires user/pass (bug 1205470)
- SSLeay support to Perl (for https)
- vlan.1.8 and corresponding kernel module
Others changes
config.dat
- Add option to choose number of lines per page of log (viewsize)
dhcp.cgi
- Allows bootp protocol (per interface) into DHCP server and corrects displaying of unlimited lease.
- Modify regexp to allow options with digits in advoptions-list to be displayed.
- Permits entering duplicate IP in fixed lease. close bug 1197940
ddns.cgi
- Fix rfe1093108: updates to dyndns service are done only if gethostbyname returns different address.
- An optional cron call once/month force updates (-f -m options) to avoid loosing account on particular stable lines. This has to be enabled in GUI.
- Add dtDns support (rfe 1202972)
- Add new provider dynserv.ca (org|net|com)
graphs.cgi
- fixe bug 1118124 :Change maximum on traffic graph RRDs to support 100 MBit links
ids.cgi
- Add a 'no' update option to not trigger a warning on save when no oinkcode is set
- Use libwww-perl for HTTP downloads from CGIs, this should resolve the issues some
users are having with IDS rule updates. Also should fix the inability to download update lists when an upstream proxy requires user/pass (bug 1205470)
ipsec
- Added some 'seed' to certs generation with '-rand option'. Each cert is numbered
- Fix a stack based buffer overflow in ipsecctrl (blue interface)
makegraphs
- change maximum on traffic graph RRDs to support 100 MBit links, fixes bug 1118124
rc.netaddress.up
- If "rc.red start" fails, no dnsmasq server is running. So start it even if it will be killed some lines later in normal operation!
setup
- fix domainname missing in hostname after hostname change
setportfw
- change SNAT behaviour for port forwards to only apply when required it also expands the SNAT to work for orange to orange connections (before it only applied to blue and green)
wireless.cgi
- modify page to list DHCP leases on Blue Network. RFE 1048379. Includes inline editing
Important :
A functionnality was scheduled but not added in this release : the firewall options page. It is not available right now.
Web interface port :
In this release you can not change the https port number from the GUI, but you can proceed using the command line :
- use /usr/local/bin/setreservedports 5445
Only a number between 445 and 65535 is allowed
- Use http and port 81 if you forgot the port you have changed on https
|
