IPFire

IPFire è una distribuzione Linux orientata al networking, che offre, modularmente:

• Firewall
• Web Proxy
• VPN Gateway
• Intrusion detection
• Quality of Service
• Virtualizzazione
• Wireless access point

Il tutto pensato per essere semplice da configurare ed è costantemente aggiornato.

Versione 2.27 Core 173

Questa versione contiene (in Inglese):

The first Core Update in 2023 has been released: IPFire 2.27 – Core Update 173. It introduces support for 4G and 5G modems that use the QMI interface, features a kernel fresh from the latest 6.1 stable series, as well as the usual plethora of package updates, security improvements and bug fixes.

IPFire users running 32-bit ARM devices should note that support for this architecture will sunset at the end of this month, and are advised to migrate their installations to a hardware architecture supported by IPFire now. Consequently, this will be the last update released for this architecture.

Introducing QMI support

The Qualcomm MSM Interface is a proprietary interface increasingly used by 4G and 5G cellular modems. Commencing with this Core Update, IPFire supports interacting with such modems, thus significantly expanding its hardware compatibility to QMI-only cellular modems, and providing a faster and more modern interface.

Thanks to Michael for implementing this feature. On that occasion, he also refactored related networking code.

Linux Kernel 6.1.11

Arne has updated the Linux kernel to the most recent stable series, 6.1.11, which has become the new long-term series. Aside from the usual improvements such major kernel updates bring like bug fixes, improved hardware support and security improvements, we took the occasion to bring several new hardening changes to IPFire users:

• System calls permitting processes to read or write other processes’ memory are no longer provided by the kernel.
• On EFI systems supporting it, the firmware is now instructed to wipe all memory when rebooting, to hamper cold boot attacks.
• Landlock support has been enabled.
• GCC’s “latent entropy” plugin has been disabled, since it does not generate cryptographically secure entropy.
• To cut attack surface, support for both the ACPI configuration file system and obsolete PCMCIA/CardBus subsystem has been removed.
• On 64-bit ARM installations, direct memory access via malicious PCI devices is no longer possible.

Risorse

La distribuzione può essere scaricata da:

• 64 bit (378 MB): https://downloads.ipfire.org/releases/ipfire-2.x/2.27-core173/ipfire-2.27-core173-x86_64.iso

Il sito web della distribuzione è: http://www.ipfire.org/

Screenshot

 

IPFire 2.13 Core 69