Search found 32 matches

by callifo
June 14th, 2019, 11:58 am
Forum: IPFire in General
Topic: CPU Vulnerabilities clarification.
Replies: 12
Views: 268

Re: CPU Vulnerabilities clarification.

I do have plans to move to a new platform in the near future, but realistically there are no good replacements that wont also be vulnerable. The blog post suggested considering AMD, but there are no low power AMD mini PCs, let alone ones with dual NICs on them. That side is a bit disappointing. I c...
by callifo
June 14th, 2019, 11:50 am
Forum: IPFire in General
Topic: CPU Vulnerabilities clarification.
Replies: 12
Views: 268

Re: CPU Vulnerabilities clarification.

In 32bit, the vulnerability page doesn't actually detect the vulnerabilities? Mine are all green; I'm running a very very old atom. This is correct. Some older Atom CPU's doesn't use "speculative execution" so they are not vulnerable to all speculation vulnerabilities. But if your Atom support x64_...
by callifo
June 14th, 2019, 2:46 am
Forum: IPFire in General
Topic: CPU Vulnerabilities clarification.
Replies: 12
Views: 268

Re: CPU Vulnerabilities clarification.

So to clarify, two things from the last blog post, 1) 32bit is being stopped? I didn't quite get a sense of whether this was a possibility, or it was actually happening? 2) In 32bit, the vulnerability page doesn't actually detect the vulnerabilities? Mine are all green; I'm running a very very old a...
by callifo
February 10th, 2019, 8:39 am
Forum: IPFire in General
Topic: IPTV config
Replies: 5
Views: 583

Re: IPTV config

Can you find a VLAN setting for the IPTV interface in your existing router?

The IPTV VLAN needs to be set in the ipfire connection page
by callifo
February 10th, 2019, 3:00 am
Forum: Addons
Topic: Problems update Guardian 2.0.2
Replies: 28
Views: 2184

Re: Problems update Guardian 2.0.2

Same as above, 127 still has this issue present. Running IPFire 2.21 (i586) - core127
by callifo
February 10th, 2019, 2:56 am
Forum: IPFire in General
Topic: IPTV config
Replies: 5
Views: 583

Re: IPTV config

By the looks of it, the IPTV vlan on IPFire is expecting DHCP. Either something isn't right here as you aren't getting an address, or the VLAN number is wrong? Where did you get VLAN8 from, its not shown in any of the pictures you've supplied.
by callifo
October 23rd, 2018, 11:48 am
Forum: IPFire in General
Topic: 2 x IPFIRE
Replies: 4
Views: 606

Re: 2 x IPFIRE

Do you have a layer 3 switch? Connect layer 3 switch to both IPfire instances on the LAN side, each interface in that IPfire instances LAN address range. Use each IPfire's static route function and point the remote IPfire's LAN subnet it to the layer 3 switches local interface. Repeat on both IPfire...
by callifo
October 18th, 2018, 12:07 pm
Forum: IPFire in General
Topic: 2 x IPFIRE
Replies: 4
Views: 606

Re: 2 x IPFIRE

You also need to disable IP masquerading (NAT) when traversing from outside/inside or inside/outside. Either universally, or just when the source is 192.. going to 172....

Not sure how to do that on IPfire though, never done it.
by callifo
October 3rd, 2018, 9:45 pm
Forum: IPFire in General
Topic: Why so many open ports ?
Replies: 18
Views: 1430

Re: Why so many open ports ?

You should be bridging the cable router, otherwise you just end up with double NAT.

I've tested mine from the internet as it's using PPPoE to initiate the connection. I've tested it with a full detailed nessus scan. Nothing open but the ports I had opened (sip, openvpn, etc).
by callifo
October 3rd, 2018, 1:39 pm
Forum: IPFire in General
Topic: Why so many open ports ?
Replies: 18
Views: 1430

Re: Why so many open ports ?

Yeah I think the OP needs to better explain what they are doing. The RED interface should definitely not be a 10.,192.,172.x address unless he is running an IPFire instance on his home network for testing (and green is now a double NAT'd subnet). IPFire would normally have the external internet faci...
by callifo
September 7th, 2018, 10:45 am
Forum: Installation
Topic: HOW TO SECURE NETWORK WITH MAC ADDRESS
Replies: 5
Views: 900

Re: HOW TO SECURE NETWORK WITH MAC ADDRESS

Managed switch and port security. Dont believe there is a way to do what your asking on the router.
by callifo
August 16th, 2018, 10:09 pm
Forum: Addons
Topic: asterisk crashes after update to 120
Replies: 14
Views: 2016

Re: asterisk crashes after update to 120

Thanks Arne, loaded up and seems to be running fine. I'll keep an eye on it and see if any issues comes up.
by callifo
August 3rd, 2018, 11:06 am
Forum: IPFire in General
Topic: Core update, pakfire The downloaded file... wasn't verified by IPFire.org
Replies: 22
Views: 2428

Re: Core update, pakfire The downloaded file... wasn't verified by IPFire.org

hello, what is this archive that is broken ? [root@ipfire pakfire]# gpg --import ipfire-pgp-key.txt gpg: key D713594B: public key "IPFire Pakfire Package Signing Key <pakfire@ipfire.org>" imported gpg: Total number processed: 1 gpg: imported: 1 (RSA: 1) [root@ipfire pakfire]# pakfire update --force...
by callifo
August 3rd, 2018, 11:02 am
Forum: IPFire in General
Topic: Core update, pakfire The downloaded file... wasn't verified by IPFire.org
Replies: 22
Views: 2428

Re: Core update, pakfire The downloaded file... wasn't verified by IPFire.org

Yeah to download straight from the server, the key fingerprint is different to what I posted above. Its currently,

gpg --homedir /opt/pakfire/ --keyserver pgp.ipfire.org --always-trust --status-fd 2 --recv-key "3ECA8AA4478208B924BB96206FEF7A8ED713594B"
by callifo
July 31st, 2018, 2:55 pm
Forum: IPFire in General
Topic: Core update, pakfire The downloaded file... wasn't verified by IPFire.org
Replies: 22
Views: 2428

Re: Core update, pakfire The downloaded file... wasn't verified by IPFire.org

Thanks Michael, update is now running. Just noticed if I 'fix' the permissions on the pakfire folder to make the gpg tool happy so it will permit the new key import, it breaks my ipfire webpage. So I needed to import that new key and then change the folder back to what it was. Edit: /etc/init.d/pakf...