Search found 4806 matches

by ummeegge
Today, 4:49 pm
Forum: Development
Topic: unbound - DoT
Replies: 73
Views: 8501

Re: unbound - DoT

Thanks for the clarification! ;) Your welcome. So looks like DoH is better comparing to DoT in privacy? As far as it supporting SNI? You mean ESNI ? In my tests it didn´t work so far but even this has been changed i won´t use it in the current implementation causing the mentioned arguments (please ...
by ummeegge
Today, 4:34 pm
Forum: Development
Topic: unbound - DoT
Replies: 73
Views: 8501

Re: unbound - DoT

Hi all, ESNI is currently only available via DoH and i think Firefox (cause the TRR feature) is currently (or was) also a must have for this. You can find here --> https://forum.ipfire.org/viewtopic.php?f=50&t=21954&start=45#p124874 a little deeper testing in that manner. In short you need to enable...
by ummeegge
Today, 4:11 pm
Forum: VPN
Topic: Kein OpenVPN mehr nach Update auf 135
Replies: 8
Views: 89

Re: Kein OpenVPN mehr nach Update auf 135

Hallo zusammen, Hatte hier ein ähnliches Problem nach dem Wechsel von 134 auf 135. was da seltsam ist, es gab keine Änderungen am OpenVPN zwischen diesen Versionen, hast du da schon mal was gepostet wo es Logs gibt ? Eine ähnliche Meldung 19:17:32 openvpnserver[2459]: 159.253.115.119:52937 OpenSSL: ...
by ummeegge
Today, 4:00 pm
Forum: Development
Topic: OpenVPN - Say goodbye to --dh and hello to --ecdh-curve ?
Replies: 18
Views: 1498

Re: OpenVPN - Say goodbye to --dh and hello to --ecdh-curve ?

Hi Fred, Any chance this will ever make into the Core production code? Its better than what is being shipped currently have ask in the mailinglist but there was a clear favour to leave the DH-parameter where it is. I would like to thank you nevertheless for your tests and your feedback, may this inf...
by ummeegge
September 20th, 2019, 3:34 pm
Forum: Generelle Fragen
Topic: Wieder Probleme mit Erstellung ISO Sicherung (0.00 MB)
Replies: 5
Views: 116

Re: Wieder Probleme mit Erstellung ISO Sicherung (0.00 MB)

Hallo zusammen, die URL ist derzeit? nicht erreichbar, hab da mal einen Bug aufgemacht --> https://bugzilla.ipfire.org/show_bug.cgi?id=12184 . @Arne Macht es Sinn "IPVER" --> https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=src/scripts/backupiso;hb=92fbca34173e3533cdae748d6c7196c42ed94e6c#l4 nicht ...
by ummeegge
September 16th, 2019, 6:23 am
Forum: Konfiguration
Topic: Updateinformation per Skript auslesen
Replies: 3
Views: 95

Re: Updateinformation per Skript auslesen

Oder schnell in einem Mirror --> https://mirrors.ipfire.org/ geschaut ? z.b.: curl -s https://mirror1.ipfire.org/releases/ipfire-2.x/ | grep -Eo 'core[0-9]{1,3}' | tail -1 Zum schöner anschauen und HTML verbannen curl -s https://mirror1.ipfire.org/releases/ipfire-2.x/ | grep -Eo 'core[0-9]{1,3}' | s...
by ummeegge
September 12th, 2019, 5:15 am
Forum: Development
Topic: [Feature request] Ipfire binary signing
Replies: 6
Views: 256

Re: [Feature request] Ipfire binary signing

I see. May a good idea if you take your request to the developer mailinglist --> https://lists.ipfire.org/mailman/listinfo/development or to the bugtracker -->
https://bugzilla.ipfire.org where you might get a faster response to this idea.

Best,

UE
by ummeegge
September 11th, 2019, 7:01 pm
Forum: Development
Topic: [Feature request] Ipfire binary signing
Replies: 6
Views: 256

Re: [Feature request] Ipfire binary signing

You can find the SHA256 Hash for every ISO on the download site e.g. --> https://www.ipfire.org/download/ipfire-2.23-core135 under "Checksums"

UE
by ummeegge
September 11th, 2019, 4:16 pm
Forum: VPN
Topic: Core134 - OpenVPN - Download "ungesichertes Client-Packet" nicht Error 500 Möglich
Replies: 5
Views: 99

Re: Core134 - OpenVPN - Download "ungesichertes Client-Packet" nicht Error 500 Möglich

BetaTester wrote:
September 11th, 2019, 2:24 pm
Also nun konnte ich die Pakete ungesichert herunterladen. Vielen Dank
Freut mich das es geht.
BetaTester wrote:
September 11th, 2019, 2:24 pm
Eventuell änderst du dein Beitrag, das Kommando zur Erstellung des ta.key stammt aus deiner Feder
Siehe: viewtopic.php?f=22&t=21831#p127168
Done.

UE
by ummeegge
September 11th, 2019, 2:12 pm
Forum: Development
Topic: [Feature request] Ipfire binary signing
Replies: 6
Views: 256

Re: [Feature request] Ipfire binary signing

Hi, Pakfire checks for a valid signature --> https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=src/pakfire/lib/functions.pl;hb=93eff0dcb853657a9518a06194002ebf31d2e9eb#l273 but (de)crypts it also --> https://git.ipfire.org/?p=ipfire-2.x.git;a=blob;f=src/pakfire/lib/functions.pl;hb=93eff0dcb853657a95...
by ummeegge
September 11th, 2019, 2:07 pm
Forum: IPFire in General
Topic: Intrusion Prevention System (Suricata) completely blocks my external network connection !
Replies: 28
Views: 1139

Re: Intrusion Prevention System (Suricata) completely blocks my external network connection !

Hi, I then have a question, does anyone know a command line way for me to test the accessibility of a website using HTTP or HTTPS ? I would then like to add this command to my script...so the script could also see when the connectivity problem blocks the Squid proxy only. may with curl ? e.g. curl -...
by ummeegge
September 11th, 2019, 1:38 pm
Forum: VPN
Topic: Core134 - OpenVPN - Download "ungesichertes Client-Packet" nicht Error 500 Möglich
Replies: 5
Views: 99

Re: Core134 - OpenVPN - Download "ungesichertes Client-Packet" nicht Error 500 Möglich

Da hängen eine ganze Reihe von Kommandos dran, schau vielleicht erstmal ob du den Reset mit den gefixten ta.key Permissions hinbekommst. Wenn nicht dann schau mal was unter /var/log/httpd/error_log steht damit man auch weiss warum er das nicht macht.

UE
by ummeegge
September 11th, 2019, 11:47 am
Forum: VPN
Topic: Core134 - OpenVPN - Download "ungesichertes Client-Packet" nicht Error 500 Möglich
Replies: 5
Views: 99

Re: Core134 - OpenVPN - Download "ungesichertes Client-Packet" nicht Error 500 Möglich

Da haben das letzte mal bei dem manuell abgestzten Kommando zum ta.key erstellen die richtigen Permissions gefehlt, die sollten so aussehen --> -rw------- 1 nobody nobody 636 Feb 9 2019 /var/ipfire/ovpn/certs/ta.key mit einem chmod 600 /var/ipfire/ovpn/certs/ta.key chown nobody:nobody /var/ipfire/ov...
by ummeegge
September 8th, 2019, 6:35 pm
Forum: Addons
Topic: Telegraf
Replies: 11
Views: 717

Re: Telegraf

Hi, i think the compiler flags has been set according to the directories so the files should be placed like already shown in the package. The initscript looks like a Systemd one since there is no start-stop-daemon nor the needed init-functions on IPFire you need to rewrite it to SysVinit (examples c...
by ummeegge
September 4th, 2019, 4:46 pm
Forum: IPFire in General
Topic: OpenVPN not generating ta.key
Replies: 8
Views: 271

Re: OpenVPN not generating ta.key

Hi,
in here --> viewtopic.php?f=16&t=21330&start=45#p123926 you can find a potential fix for this.

UE