Michael Tremer

IPFire 2.15 - Core Update 82 is available for testing
by Michael Tremer, August 23, 2014

Hello community!

This is an other testing release announcement this month. IPFire 2.15 – Core Update 82 has been pushed into the testing tree and we appreciate your help testing this release. The more people contribute, the sooner and the better will the update be released.

This Core Update’s main features are the introduction of the crowd-funded Windows Active-Directory Single Sign-On Web Proxy and the option to disable masquerading (NAT) on the local networking interfaces. In addition to that, several system libraries and tools have been updated, and minor bugs have been fixed.

Windows Active-Directory Single Sign-On Web Proxy

Proper and secure authentication against the squid Web Proxy has not been possible in IPFire before. The “Windows” authentication has been broken for a long time since there were bigger changes in the Windows Domain Controllers. This update adopts IPFire to the new and secure Active Directory authentication interfaces which use the SMB and Kerberos protocols.

Documentation is available on our IPFire wiki and some more technical insights on the IPFire planet post.

We would like to thank all donors who contributed to this feature.

Firewall changes

Disabling masquerading on local zones is now possible to configure on the GUI. If you have got public IP address space this can be used on one of the zones (for example DMZ) and the firewall will not need to NAT any packets at all. This functionality was requested by David Hauser from Technische Universität Wien (Vienna University of Technology).

Timo Eissler also contributed a fix for some Voice-over-IP devices that fail to register after reconnection of the Internet connection. All packets that are sent to the firewall will now be dropped until the Internet connection has been fully established and therefore false entries into the connection tracking table will be avoided.

Misc.

Add-ons

New arrivals

Updates


As always, this is now the bit where I ask you for testing. It is essential for us that we can be sure that this is a well-tested and stable update. So if you care as much about IPFire as we do (and I know you do), please take the time to test and report us your feedback!


Posted: August 23, 2014 • 769 views