From mboxrd@z Thu Jan 1 00:00:00 1970 From: The IPFire Project To: ipfire-announce@lists.ipfire.org Subject: IPFire 2.15 - Core Update 82 released Date: Thu, 11 Sep 2014 22:08:30 +0200 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============8388662041734404454==" List-Id: --===============8388662041734404454== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable This is the official release announcement for IPFire 2.15 =E2=80=93 Core Upda= te 82. This Core Update=E2=80=99s main features are the inclusion of the crowd-funded Windows Active-Directory Single Sign-On Web Proxy and the option to disable masquerading (NAT) on the local networking interfaces. In addition to that, several system libraries and tools have been updated, and minor bugs have been fixed. Windows Active-Directory Single Sign-On Web Proxy Proper and secure authentication against the squid Web Proxy has not been possible in IPFire before. The =E2=80=9CWindows=E2=80=9D authentication = has been broken for a long time since there were bigger changes in the Windows Domain Controllers. This update adopts IPFire to the new and secure Active Directory authentication interfaces which use the SMB and Kerberos protocols. Documentation is available on our IPFire wiki [1] and some more technical insights on the IPFire planet post [2]. We would like to thank all donors who contributed to this feature. Firewall changes Disabling masquerading on local zones is now possible to configure on the GUI. If you have got public IP address space this can be used on one of the zones (for example DMZ) and the firewall will not need to NAT any packets at all. This functionality was requested by David Hauser from Technische Universit=C3=A4t Wien (Vienna University of Technology). Timo Eissler also contributed a fix for some Voice-over-IP devices that fail to register after reconnection of the Internet connection. All packets that are sent to the firewall will now be dropped until the Internet connection has been fully established and therefore false entries into the connection tracking table will be avoided. Misc. * pppd has been updated to version 2.4.7. This release fixes some seldom occurring crashes on some PPPoE connections that use MSCHAPv2 for authentication. * gmp has been updated to version 6.0.0 * mpfr has been updated to version 3.2.1 * Several fixes for the CGI scripts have been submitted by Dominik Hassler: * OpenVPN: The generated configuration files now contain correct line endings. * Active connections: IP addresses from the static OpenVPN address pools are now coloured correctly * Axel Gembe contributed a fix for correct validation of fully qualified domain names according to RFC1035. * Some coding style and minor bugs have been fixed in the ddns.cgi script. * batctl, boost, and tracepath are now shipped with the core distribution. Add-ons New arrivals * bacula (contributed by Timo Eissler) * squid-accounting: Alexander Marx wrote a new squid accounting addon which can create beautiful PDF reports about how much data traffic has been used by each proxy user or IP address (Documentation [3]) Updates * owncloud has been updated to version 7.0.0 by Daniel Weism=C3=BCller Thanks to all contributors and testers. We are happy to have you helping to make IPFire better. If you want to contribute, too, please consider sending us a donation. [1] http://wiki.ipfire.org/en/configuration/network/proxy/wui_conf/microsoft-= active-directory [2] http://planet.ipfire.org/post/microsoft-active-directory-authentication-f= or-the-web-proxy [3] http://wiki.ipfire.org/en/addons/squid-accounting/start --===============8388662041734404454== Content-Type: application/pgp-signature Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="signature.asc" MIME-Version: 1.0 LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KVmVyc2lvbjogR251UEcgdjIKCmlRSWNCQUFC Q2dBR0JRSlVFZ0UrQUFvSkVJQjU4UDl2a0FrSHJVRVAvMURZelp3TFZKMGNCOGk5a1V0RFpaNTAK NGZIdkJnaEhBVlh2Y2xtVWlaa0wrMS81TlNTU1RtQWtZRXMra1Z1ZWFDNTFNakd2VCtLMEhCeTkz TWZjRGo0cAo1VjNvSDZjei9KbEJWWDFjbWNIOUtjL3lGYTZqSzFxa0VlR0N4SitHTFNheEdUV3Fu bUJzbDEySGJ0Q0NPeWd2Ck9uL1ZtQTNURzBqdWltTEN5VWlzMGx5Y0V5Z1lTNTl6UmxsaHFXSmJu cXgvRVZ3d0U5aDlrWnd3M3RETm1aNTMKL3IzK1VGVnh4UUtlejNCYkdRUlZBY3diNzRuTkluNHRy OG83bGZsRWJ2R3JUKzRROS9EeWExeGZjeEQ2QWFYeQpmL1RNWjVmeXBsUWJKMnBZVGJxWGs2aGd5 UGp2QnZPcTk4UFJsaXIxSGlnUmxQLzVFUW1jNjE0aTJ0K2ZDb05qCjYxci9lcDNZU2x0aGVHNTVJ Q0JsV1ovRjNpQVZRWGZXYjd6UENsR0NGSzNCc2VWMGs5SW1nYmFiczZyYjUxNWgKSWdaMUw4Rzgz bi9vMW9ZS1IrcGgzV254eEgvT3VraW9YeGg0K0VOU1ZSNGNnWE13NFFRYnNseFQ3NGhROVRFbwpx b01wS1dncTB2MHVyYmszUkRTbTdPNjJmcktHeTdPNkhJSEpPWkpBQVZNbm5WUmNJYzFnZ2VubGpz bXZrSTJjCnB0U2UyNzA4VDE5bGEyZjI0cGx4MDhUQmpnZEFhbmpDbkJCYmVrM2VLcUFzc2JsSjZL V0JSYzZhV01EZ3EzOGYKeDVBRXViQjlZMVI3L1psK2xsMGpJMGtYclBnaGU5SnVJRWphaFhRSTVk UnRhQVlRNVFEOW5OWGF1L0lidXY3OQpXYlNiMTJ4ZkJIbkV1ZXFIYjNlZAo9cTk5OAotLS0tLUVO RCBQR1AgU0lHTkFUVVJFLS0tLS0K --===============8388662041734404454==--