Tso tawm cov khoom siv faib rau kev tsim IPFire 2.25 firewalls

Muaj tso tawm cov khoom siv faib rau kev tsim cov routers thiab firewalls IPFire 2.25 Tub Ntxhais 141. IPFire yog qhov txawv los ntawm cov txheej txheem kev teeb tsa yooj yim thiab lub koom haum ntawm kev teeb tsa los ntawm lub vev xaib intuitive interface, puv nrog cov duab pom. Installation loj iso duab yog 290 MB (x86_64, i586, ARM).

Lub kaw lus yog modular, ntxiv rau cov haujlwm tseem ceeb ntawm pob ntawv lim thiab kev tswj tsheb khiav rau IPFire, cov qauv muaj nyob nrog kev siv lub kaw lus rau kev tiv thaiv kev tawm tsam raws li Suricata, los tsim cov ntaub ntawv server (Samba, FTP, NFS), a mail server (Cyrus-IMAPd, Postfix, Spamassassin, ClamAV thiab Openmailadmin) thiab lub tshuab luam ntawv (CUPS), teeb tsa lub rooj vag VoIP raws li Asterisk thiab Teamspeak, tsim qhov chaw nkag wireless, teeb tsa lub suab thiab video server (MPFire, Videolan , Icecast, Gnump3d, VDR). Txhawm rau nruab add-ons hauv IPFire, tus thawj tswj pob tshwj xeeb, Pakfire, yog siv.

Hauv qhov kev tso tawm tshiab:

  • Reworked interface Cheebtsam thiab faib scripts ntsig txog DNS:
    • Ntxiv kev txhawb nqa rau DNS-dhau-TLS.
    • DNS nqis tau koom ua ke ntawm txhua nplooj ntawv ntawm lub vev xaib interface.
    • Tam sim no nws muaj peev xwm hais qhia ntau tshaj ob lub DNS servers siv cov neeg siv ceev tshaj plaws los ntawm cov npe ua ntej.
    • Ntxiv QNAME Minimization hom (RFC-7816) kom txo tau qhov kev sib kis ntawm cov ntaub ntawv ntxiv hauv kev thov txhawm rau tiv thaiv kev xau ntawm cov ntaub ntawv hais txog lub npe thov thiab nce kev ceev ntiag tug.
    • Lub lim tau raug siv los lim tawm qhov chaw tsuas yog rau cov neeg laus ntawm qib DNS.
    • Lub sijhawm thauj khoom tau nrawm los ntawm kev txo tus lej ntawm DNS kuaj.
    • Ib qho kev daws teeb meem tau muab coj los siv yog tias tus kws kho mob lim DNS thov lossis tsis raug DNSSEC kev txhawb nqa (thaum muaj teeb meem, kev thauj mus los tau hloov mus rau TLS thiab TCP).
    • Txhawm rau daws cov teeb meem nrog kev poob ntawm cov pob khoom tawg, EDNS tsis loj yog txo rau 1232 bytes (tus nqi 1232 raug xaiv vim nws yog qhov siab tshaj plaws ntawm qhov loj ntawm DNS teb, suav nrog IPv6, haum rau qhov tsawg kawg nkaus MTU tus nqi. (1280).
  • Hloov tshiab pob versions, suav nrog GCC 9, Python 3, pob caus 2.9.2, libhtp 0.5.32, mdadm 4.1, mpc 1.1.0, mpfr 4.0.2, xeb 1.39, suricata 4.1.6. tsis sib xws 1.9.6.
  • Ntxiv kev txhawb nqa rau Go thiab Rust hom lus. Cov ntsiab lus tseem ceeb suav nrog elinks browser thiab pob rfkill ua.
  • Hloov tshiab add-ons dehydrated 0.6.5, libseccomp 2.4.2, nano 4.7, openvmtools 11.0.0, tor 0.4.2.5, txark 3.0.7. Ntxiv ib qho tshiab amazon-ssm-tus neeg sawv cev ntxiv rau txhawm rau txhim kho kev koom ua ke nrog Amazon huab.
  • Debugging cov ntaub ntawv nyob rau hauv cov ntaub ntawv executable tau raug ntxuav kom txo qhov luaj li cas ntawm cov faib tom qab installation.
  • Ntxiv kev txhawb nqa rau LVM partitions.
  • Ntxiv kev txhawb nqa rau kev lim cov pob ntawv network los ntawm OpenVPN cov neeg siv khoom rau IPS (Intrusion Prevention System);
  • Hauv Pakfire, HTTPS yog siv los thauj cov npe ntawm daim iav (yav dhau los, thawj qhov kev thov yog los ntawm HTTP, thiab cov neeg rau zaub mov yuav muab xa mus rau HTTPS).

Tau qhov twg los: opennet.ru

Ntxiv ib saib