| Sidebar Sponsor |
 |
| Random Distribution | 
Runtu
Runtu is a Russian desktop Linux distribution based on Ubuntu's LTS (long-term support) releases. It features full support for Russian and a variety of extra applications, tools and media codecs. There are two separate editions that are produced with a varying degree of frequency; the "Xfce" edition tend to get more attention while the "Lite" edition, featuring the LXDE desktop, is also released and updated from time to time.
Status: Active
|
| Tips, Tricks, Q&As | | Tips and tricks: Basename, for loop, dirname, aliases, bash history, xsel clipboard |
| Tips and tricks: GRUB Customizer |
| Questions and answers: Finding and removing meta-data |
| Questions and answers: Command line word processors |
| Tips and tricks: Command line weather, ionice, rename files, video preview snapshot, calednar, ls colour settings |
| Tips and tricks: Navigating multiple shells |
| Tips and tricks: Using GRUB with XFS |
| Questions and answers: Seeking openSUSE derivatives |
| Questions and answers: Remotely running desktop applications |
| Questions and answers: Trusting binary packages |
| More Tips & Tricks and Questions & Answers |
|
 Latest News and Updates |
|
|
| 2022-09-16 |
NEW • Distribution Release: IPFire 2.27 Core 170 |
Rate this project
|
IPFire is a lightweight Linux distribution for use with firewalls and routers. The project has released a new update which introduces publicly supplied IP block lists. "The next Core Update is released: IPFire 2.27 - Core Update 170. It features new IP blocklists for the firewall engine, significant improvements to Pakfire, modernizes the default cryptographic algorithm selection for IPsec connections, as well as a new kernel, and a plethora of bug fixes and security improvements under the hood. IP-Reputation Blocking to keep known threats out: Based on prior development by Tim FitzGeorge, Stefan brought a new feature to the firewall engine, which allows the easy activation of various public IP-based blocklists, just by a single click. All enabled blocklists are updated automatically at an appropriate interval (a technique we already deployed for updating IPS rulesets), and protect against various threats, such as IP addresses or networks having a poor reputation, being involved with cyber crime hosting, or simply not allocated, hence no traffic should be routed to and from them." Additional information can be found in the release announcement. Download (SHA256): ipfire-2.27-core170-x86_64.iso (379MB, torrent, pkglist). |
|
| About IPFire
|
| IPFire is a Linux distribution that focuses on easy setup, good handling and high level of security. It is operated via an intuitive web-based interface which offers many configuration options for beginning and experienced system administrators. IPFire is maintained by developers who are concerned about security and who update the product regularly to keep it secure. IPFire ships with a custom package manager called Pakfire and the system can be expanded with various add-ons.
|
| Recent Related News and Releases |
| 2023-02-27 |
Distribution Release: IPFire 2.27 Core 173 |
|
IPFire is a small Linux distribution for firewalls and other networking devices. The distribution has published a new release which upgrades the kernel to version 6.1 and includes support for accessing 4G and 5G networks. "The Qualcomm MSM Interface is a proprietary interface increasingly used by 4G and 5G cellular modems. Commencing with this Core Update, IPFire supports interacting with such modems, thus significantly expanding its hardware compatibility to QMI-only cellular modems, and providing a faster and more modern interface. Thanks to Michael for implementing this feature. On that occasion, he also refactored related networking code. Arne has updated the Linux kernel to the most recent stable series, 6.1.11, which has become the new long-term series. Aside from the usual improvements such major kernel updates bring like bug fixes, improved hardware support and security improvements, we took the occasion to bring several new hardening changes to IPFire users: System calls permitting processes to read or write other processes' memory are no longer provided by the kernel. On EFI systems supporting it, the firmware is now instructed to wipe all memory when rebooting, to hamper cold boot attacks. Landlock support has been enabled. GCC's 'latent entropy' plugin has been disabled, since it does not generate cryptographically secure entropy." Additional details are presented in the project's release announcement. Download (SHA256): ipfire-2.27-core173-x86_64.iso (378MB, torrent, pkglist). |
|
| 2022-06-13 |
Distribution Release: IPFire 2.27 Core 168 |
|
The IPFire team have published a new update to their security and firewall focused distribution. A key update affects the project's intrusion prevention system (IPS): "Stefan contributed a patch series for notably improving the IPS, particularly when it comes to handling of ruleset providers. While many of the changes are done under the hood, the following are visible to the web interface: Monitoring mode can now be enabled for each ruleset provider individually. This makes baselining and testing much less of a hassle, since newly introduced IPS ruleset providers can now first be used for logging only, without risking disruptions or unintended side-effects. Parsing and restructuring changed or updated rulesets has been improved and is now faster by orders of magnitude. The downloader will now automatically check whether a ruleset has been updated on its providers' server by checking the ETag HTTP header. This allows us to drop the update interval selection; every IPS ruleset will now updated automatically on the appropriate interval." Additional details can be found in the project's release announcement. Download (SHA256): ipfire-2.27.x86_64-full-core168.iso (364MB, torrent, pkglist). |
|
| 2022-03-10 |
Distribution Release: IPFire 2.27 Core 164 |
|
The IPFire distribution is a minimal operating system intended for use on firewalls and routers. The project's latest release includes a new kernel (with Dirty Pipe fixes) along with a number of improvements to the firewall management software. "This update brings a couple of improvements for IPFire's firewall engine. Dropping any hostile traffic: Our IPFire Location Database contains a list of networks that are considered 'hostile' - a network nobody under any circumstance wants to communicate with at all like bullet-proof internet service providers or stolen/hijacked address space. This is enabled by default on new installations, but left disabled in this update. We strongly recommend for everyone to enable this on the Firewall Options page. Read more in a special post. A better source routing validation is being performed: The firewall will now reject any packets from systems that it cannot reach according to its own routing table. Packets that are not recognised by the connection tracking (because they might belong to an invalid connection) are now being logged to help with any debugging." Additional information is available in the project's release announcement. Download (SHA256): ipfire-2.27.x86_64-full-core164.iso (441MB, torrent, pkglist). |
|
| 2021-12-21 |
Distribution Release: IPFire 2.27 Core 162 |
|
IPFire is a lightweight Linux distribution for firewalls, routers, and other security-sensitive appliances. The developers have released a new version, IPFire 2.27 Core Update 162 which will be the last version to support 32-bit x86 machines. "Once a few releases after upgrading to Linux 5.10, we have now rebased the IPFire kernel on Linux 5.15. Due to dropping or upstreaming our patchset this was a lot easier than the previous step to 5.10. The new kernel is long-term supported by the Linux kernel developers and comes with various new drivers and performance improvements. Noteworthy are various performance improvements on 'zero copy' for increased throughput and lower latency; Core Scheduling (for safer Hyperthreading), and a new drivers for NTFS. We have continued our work to take advantage of improvements in the kernel that help to decrease CPU usage when forwarding large numbers of packets. In certain environments, this enables IPFire to significantly more throughput and lower latency since more CPU resources are available when needed. This is the last release supporting 32-bit Intel-compatible processors - in our case i586 and older. Having announced this plan a year ago, the time has finally come." Additional information can be found in the release announcement. Download (SHA256): ipfire-2.27.x86_64-full-core162.iso (408MB, torrent, pkglist). |
|
| 2021-10-05 |
Distribution Release: IPFire 2.27 Core 160 |
|
IPFire is a Linux distribution that focuses on easy setup, good handling and high level of security, intended for use in firewalls and routers. The project has published a new update which focuses on improving network throughput. "In recent days and months, the development team has spent a lot of time on finding bottlenecks and removing those. Our goal is to increase throughput on hardware and bringing latency down, for a faster network. This update brings a first change which will enable network interfaces that support it, to send packets that belong to the same stream to the same processor core. This allows taking advantage of better cache locality and the firewall engine as well as the Intrusion Prevention System benefit from this, especially with a large number of connections and especially on hardware with smaller CPU caches." The IPFire team is also continuing their work to remove Python 2 from their distribution. Additional information is provided in the project's release announcement. Download (SHA256): ipfire-2.27.x86_64-full-core160.iso (406MB, torrent, pkglist). |
|
| 2021-08-18 |
Distribution Release: IPFire 2.27 Core 159 |
|
IPFire is an independent Linux distribution that focuses on easy setup, good handling and high level of security. The project's latest release features a new kernel, updated hardware support, and install media that is compressed with Zstandard compression for better performance. "This is a major update for IPFire, as it rebases the IPFire kernel on Linux 5.10, the latest long-term supported release of the Linux kernel. Arne has been working through a long spring getting IPFire ported on this release and it is now finally ready for prime-time. It features: Support for many new drivers, improved support and performance for existing drivers making IPFire more compatible with new, and powerful with existing hardware. Most notably are many network drivers as well as virtualised communication with the hypervisor in the cloud. Networking throughput has been increased through zero-copy TCP receive and UDP and Bottleneck Bandwidth and RTT congestion control (BBR). Those changes will also decrease the latency of the firewall in the network when forwarding packets. Wireless will have improved throughput and better latency with Airtime Queue Limits which practically enables use of all the 'Bufferbloat' algorithms on wireless. Support for 64-bit ARM hardware has been massively improved and we were able to drop a large amount of custom patches who have been upstreamed into the Linux kernel." Further details can be found in the project's release announcement. Download (SHA256): ipfire-2.27.x86_64-full-core159.iso (405MB, torrent, pkglist). |
|
| 2021-06-21 |
Distribution Release: IPFire 2.25 Core 157 |
|
IPFire is an independent Linux distribution designed for use on firewalls and routers. The project has published a new update which strips away most of Python 2, replacing the code with Python 3. Python 2 reached the end of its supported life on January 1, 2020. "We have made huge efforts to migrate away from Python 2 which has reached its end of life on January 1st of this year. That includes repackaging third-party modules for Python 3 and migrating our own software to Python 3. The work will continue over the next couple of weeks and we are hopeful to remove all Python 2 code with the next release. We will keep Python 2 around for a little bit longer to give everyone with custom scripts a little bit of time to migrate them away, too. The IPFire kernel has been rebased on Linux 4.14.232 which brings various security and stability fixes." Further details may be found in the project's release announcement. Download (SHA256): ipfire-2.25.x86_64-full-core157.iso (309MB, torrent, pkglist). |
|
| 2021-03-03 |
Distribution Release: IPFire 2.25 Core 154 |
|
Michael Tremer has announced the release of IPFire 2.25 Core 154, an updated build of the project's Linux-based distribution designed for routers and firewalls. This version comes with a large number of package upgrades, DNS resolution improvements and WPA3 client support: "The first update of the year will be an enormous one. We have been working hard in the lab to update the underlying operating system to harden and improve IPFire and we have added WPA3 client support and made DNS faster and more resilient against broken Internet connections. This is probably the release with the largest number of package updates. This is necessary for us to keep the system modern and adopt any fixes from upstream projects. The DNS proxy working inside IPFire will now reuse any TLS and TCP connections for DNS resolution making it substantially faster. Before, a TCP or TLS connection had to be opened and closed after a response was received causing a lot of overhead. Please consider if your setup can run DNS-over-TLS to protect your privacy." Read the rest of the release announcement for further details. Download (SHA256, pkglist): ipfire-2.25.x86_64-full-core154.iso (307MB, torrent), ipfire-2.25.2gb-ext4.x86_64-full-core154.img.xz (271MB, torrent). |
|
|
| Sidebar Sponsor |
 |
|
• 
• 
• 
• 
• 
• 
• 
bc1qtede6f7adcce4kjpgx0e5j68wwgtdxrek2qvc4 
86fA3qPTeQtNb2k1vLwEQaAp3XxkvvvXt69gSG5LGunXXikK9koPWZaRQgfFPBPWhMgXjPjccy9LA9xRFchPWQAnPvxh5Le