saki kayan rarrabawa don ƙirƙirar hanyoyin sadarwa da tacewar wuta . IPFire yana bambanta ta hanyar tsari mai sauƙi da tsari na tsari ta hanyar haɗin yanar gizo mai hankali, mai cike da zane-zane na gani. Girman shigarwa 290 MB (x86_64, i586, ARM).
Tsarin tsari ne na yau da kullun, ban da mahimman ayyukan fakitin tacewa da sarrafa zirga-zirga don IPFire, ana samun samfuran tare da aiwatar da tsarin hana hare-hare dangane da Suricata, don ƙirƙirar uwar garken fayil (Samba, FTP, NFS), a uwar garken mail (Cyrus-IMAPd, Postfix, Spamassassin, ClamAV da Openmailadmin) da uwar garken bugu (CUPS), suna tsara hanyar VoIP ta hanyar Alamar alama da Teamspeak, ƙirƙirar wurin samun damar mara waya, tsara sabar sauti da bidiyo mai gudana (MPFire, Videolan). , Icecast, Gnump3d, VDR). Don shigar da add-ons a cikin IPFire, ana amfani da manajan fakiti na musamman, Pakfire.
A cikin sabon saki:
- Abubuwan da aka sake yin aikin dubawa da rubutun rarraba masu alaƙa da DNS:
- Ƙara tallafi don DNS-over-TLS.
- An haɗa saitunan DNS akan duk shafukan yanar gizo.
- Yanzu yana yiwuwa a ƙayyade sabar DNS fiye da biyu ta amfani da uwar garken mafi sauri daga jerin tsoho.
- An ƙara yanayin rage girman QNAME (RFC-7816) don rage watsa ƙarin bayani a cikin buƙatun don hana ɗumbin bayanai game da yankin da ake buƙata da ƙara keɓantawa.
- An aiwatar da tacewa don tace shafuka don manya kawai a matakin DNS.
- An ƙara lokacin lodawa ta hanyar rage adadin cak ɗin DNS.
- An aiwatar da tsarin aiki idan mai bayarwa ya tace buƙatun DNS ko tallafin DNSSEC ba daidai ba (idan akwai matsaloli, an canza jigilar zuwa TLS da TCP).
- Don magance matsaloli tare da asarar fakitin da aka raba, an rage girman buffer na EDNS zuwa 1232 bytes (ƙimar 1232 an zaɓa saboda ita ce matsakaicin girman girman amsawar DNS, la'akari da IPv6, ya dace da mafi ƙarancin ƙimar MTU. (1280).
- Sabbin fakitin da aka sabunta, gami da GCC 9, Python 3, knot 2.9.2, libhtp 0.5.32, mdadm 4.1, mpc 1.1.0, mpfr 4.0.2, tsatsa 1.39, suricata 4.1.6. 1.9.6.
- Ƙara tallafi don Go da harsunan Rust. Babban abun da ke ciki ya haɗa da mai binciken elinks da kunshin .
- Abubuwan da aka sabunta sun bushe 0.6.5, libseccomp 2.4.2, nano 4.7, openvmtools 11.0.0, tor 0.4.2.5, tshark 3.0.7. An ƙara sabon ƙari na amazon-ssm-agent don inganta haɗin kai tare da girgijen Amazon.
- An tsaftace bayanan kuskure a cikin fayilolin da za a iya aiwatarwa don rage girman rarraba bayan shigarwa.
- Ƙara goyon baya don ɓangarori na LVM.
- Ƙara goyon baya don tace fakitin cibiyar sadarwa daga abokan ciniki na OpenVPN zuwa IPS (Tsarin Rigakafin Kutse);
- A cikin Pakfire, ana amfani da HTTPS don loda jerin madubai (a da, buƙatun farko ta hanyar HTTP ne, sa'an nan uwar garken zai ba da turawa zuwa HTTPS).
source: budenet.ru