forum.ipfire.org

Loaded the nightly build of 130 and managed to break IPS every time I restore a backup to the machine. Tried several rebuilds, off line or online loading but restoring backup from version 129 results in the IPS service no longer running. Tried a number of things, rebooting, stop/start IPS with no lu...

Loaded up the 129 build without issues. Saw on the blog that the spectre-meltdown-checker script is now available as an add-on, only I don't see it listed in packfire?

Not aware of a method to use the ipfire qos for what you describe. I too have my iot on blue network and a security cam system (wired). A quick and dirty method would be simply to limit your blue wifi device speeds which is easy to set on box's running ddwrt, possibly not easy on others.

Tried a test version a couple of days ago. I had the GeoIP enabled but the gui kept locking up on me randomly it seemed. Maybe I'll try the latest build tomorrow if I get time.

Looks like there are additional problems with Guardian/intrusion detection because I experienced a number of odd things last night while trying to tune my setup. -Intrusion detection filter check box's selections disappear by themselves yet I suspect there still active because memory load did not ch...

Think I found the fix to this. After many uninstalls reinstalls, service stop and starts with no success in getting guardian working again.. Until in Guardian Configuration interface, I set "monitor snort alert file" to OFF, then save setting, then set "monitor snort alert file" to ON and save setti...

Thanks TimF,

Adding this into IpFire would be great. Another thing I noticed is when I disabled the IPfblocklist it appears to not really disable it or broke the geoip block. Kept seeing entries for countries I had blocked appear in the firewall log. Ended up reinstalling Ipfire to clear it out.

I'm also having issues with Guardian not adding anything to the block list after update to PFire 2.21 (x86_64) - core126. Although initially when I updated from 125 it did work but after trying a block list addon I reinstalled ipfire, then no mater what Guardian does not add entry's.

Just setup the Ipfblocklist without issues. After the rules updated I see that the order of operation is not what I had expected it would be. Specifically it seems the Ipfblocklist is taking place before the GeoIP block system. This results in an huge increase in entries in the firewall log for coun...

Really would be a great addition to be able to save the blocked lists. I see about 35 new blocked host entries per day. With my "block time" set to 30 days there's quite a list of blocked hosts lost on reboots.

Currently on reboot Guardian generated blocked hosts lists are lost. Would be better if these could be saved.