Search found 71 matches

by fkienker
July 14th, 2017, 4:39 pm
Forum: Development
Topic: Core 112 Testing
Replies: 3
Views: 217

Re: Core 112 Testing

The installation of the Core 112 went as expected - no surprises. After a reboot, the firewall seems more responsive. Squid, in particular, works much better and is less demanding of the CPU. It also seems to have cleared up some of the outstanding squid bugs. Thanks to all who worked so hard on thi...
by fkienker
July 14th, 2017, 4:34 pm
Forum: Development
Topic: Core 112 Testing
Replies: 3
Views: 217

Re: Core 112 Testing

Arne.F, my search of the forums did not find this post for some reason. Maybe I didn't figure out how to use the new search in phpBB correctly.

Fred
by fkienker
July 13th, 2017, 8:04 pm
Forum: Development
Topic: Core 112 Testing
Replies: 3
Views: 217

Core 112 Testing

I see from Michael's release note that iftop has been removed. Say it isn't so! I looked for a notice that iftop is no longer being maintained, but could not find one. That said, other releases have quietly dropped it as well. Iftop has been my "go-to" utility for "what is slowing down the internet"...
by fkienker
June 19th, 2017, 4:09 pm
Forum: Development
Topic: OpenVPN '--ns-cert-type' is deprecated
Replies: 17
Views: 1174

Re: OpenVPN '--ns-cert-type' is deprecated

[quote="ummeegge"]Have pushed now a first idea to Git which includes: - Extended key usage based on RFC3280 TLS rules for OpenVPNs OpenSSL configuration, so '--remote-cert-tls server' can be used instead of the old and deprecated '--ns-cert-type server' if the host certificate (Root certificate by t...
by fkienker
June 12th, 2017, 4:06 pm
Forum: Development
Topic: OpenVPN '--ns-cert-type' is deprecated
Replies: 17
Views: 1174

Re: OpenVPN '--ns-cert-type' is deprecated

Thanks so much for doing the investigation on this! Time (and software) marches on and being prepared is far better than being surprised.

Fred
by fkienker
June 12th, 2017, 4:04 pm
Forum: Development
Topic: Feature request - add the Linux at command
Replies: 1
Views: 262

Feature request - add the Linux at command

The Linux at command is extremely useful when administering systems, particularly when it is done via scripts. It is a worthy addition to IPFire. Yes, I know it is possible to do the same things from cron but it is far clumsier than at, which is the reason for at to begin with.
by fkienker
May 20th, 2017, 5:25 pm
Forum: IPFire in General
Topic: Core 110: unbound does not resolve DHCP names
Replies: 2
Views: 206

Re: Core 110: unbound does not resolve DHCP names

I tried to replicate your issue but it works correctly on both an IPFire Core 110 firewall box and the two servers on our test network. Did you have this issue previous to Core 110? What have you tried to resolve the issue? If you could post more information about your DHCP configuration it would ai...
by fkienker
May 19th, 2017, 5:11 pm
Forum: Development
Topic: OpenVPN-2.4.0 integration into IPFire
Replies: 23
Views: 2687

Re: OpenVPN-2.4.0 integration into IPFire

Thanks for the update. I am going to try to pull this to a test box this weekend, time permitting. Will attempt to give you some feedback after that.

Best regards,
Fred
by fkienker
May 11th, 2017, 1:26 am
Forum: IPFire in General
Topic: Core 110 Unbound Issue/Bug?
Replies: 22
Views: 1471

Re: Core 110 Unbound Issue/Bug?

The init file for unbound is in /etc/rc.d/init.d. The diff listed in bugzilla is designed for use with the patch utility. You can either use patch or directly edit the file. If you are not sure how to use these, it might be a good idea to wait for the update. The incorrect application of this change...
by fkienker
May 10th, 2017, 5:24 pm
Forum: IPFire in General
Topic: Core 110 Unbound Issue/Bug?
Replies: 22
Views: 1471

Re: Core 110 Unbound Issue/Bug?

Just confirming - the fix from Bugzilla solved the issue on all of the firewalls where it appeared.

Thanks for the quick fix!
Fred
by fkienker
May 4th, 2017, 6:46 pm
Forum: Development
Topic: CORE 110 Testing
Replies: 14
Views: 1002

Re: CORE 110 Testing

Another weird issue: after update and reboot the System ---> Home page reports Note: WARNING: DNSSEC has been disabled But nothing is changed from 109: I use 8.8.8.8 and 8.8.4.4 as DNS and looking at the startup messages they come up without any problem. IPFire_WebAppsTest.png I also have this same...
by fkienker
May 4th, 2017, 6:41 pm
Forum: IPFire in General
Topic: Core 110 Unbound Issue/Bug?
Replies: 22
Views: 1471

Re: Core 110 Unbound Issue/Bug?

Hello , Is your issue similar to what's displayed on the screenshots added? I get the message on the main web UI stating it is disabled however in External it shows up as validating. I have this issue on several systems. Previously, these same systems had no issues. Since it has not caused other is...
by fkienker
April 25th, 2017, 7:05 pm
Forum: Development
Topic: Core 110 testing
Replies: 7
Views: 627

Re: Core 110 testing

Could not get it to work from openSUSE Leap 42. Some of the prerequisites are present in Core 110: /lib/cups/filters/epson-escpr & /lib/cups/filters/epson-escpr-wrapper. CUPS log in IPFire showed no errors & web interface reports all jobs completed - but no printout - indeed no activity at all at p...
by fkienker
April 14th, 2017, 6:55 pm
Forum: IPFire in General
Topic: UNBOUND : performance issues with many users while surfing the web
Replies: 58
Views: 4955

Re: UNBOUND : performance issues with many users while surfing the web

I have a number of mods in the sysctl.conf file currently to address using higher "horsepower" hardware than IPFire is usually oriented toward. Will compare your changes to those I currently have and research any others you have provided. I will be posting my response in the English Development foru...
by fkienker
April 14th, 2017, 6:45 pm
Forum: Development
Topic: Ossec for IPFire
Replies: 17
Views: 2318

Re: Ossec for IPFire

Just saw that you have now added x64 packages! Have downloaded them and will try to install and test shortly. Will report back any news, good or bad.

Thanks in advance for all of you hard work!
Fred