Mwepụta nke ngwa nkesa maka ịmepụta firewalls IPFire 2.25

Dị ntọhapụ nke ngwa nkesa maka ịmepụta ndị na-anya ụgbọ elu na firewalls IPFire 2.25 Isi 141. IPFire bụ ihe dị iche site na usoro ntinye dị mfe na nhazi nhazi site na ntanetị weebụ nwere nghọta, juputara na eserese anya. Nha nwụnye iso image bụ 290 MB (x86_64, i586, ARM).

Usoro a bụ modular, na mgbakwunye na ọrụ ndị bụ isi nke nzacha ngwugwu na njikwa okporo ụzọ maka IPFire, modul dị na mmejuputa usoro maka igbochi ọgụ dabere na Suricata, maka ịmepụta ihe nkesa faịlụ (Samba, FTP, NFS), a ihe nkesa ozi (Cyrus-IMAPd, Postfix, Spamassassin, ClamAV na Openmailadmin) na ihe nkesa ebipụta (CUPS), na-ahazi ọnụ ụzọ VoIP dabere na akara mmuke na Teamspeak, na-emepụta ebe ikuku ikuku, na-ahazi ihe ntanetị na ihe nkesa vidiyo (MPFire, Videolan). , Icecast, Gnump3d, VDR). Iji tinye mgbakwunye na IPFire, a na-eji njikwa ngwugwu pụrụ iche, Pakfire.

Na mwepụta ọhụrụ:

  • Akụkụ interface arụgharịrị arụgharịrị yana edemede nkesa metụtara DNS:
    • Nkwado agbakwunyere maka DNS-over-TLS.
    • Ejikọtala ntọala DNS na ibe niile nke interface weebụ.
    • Ọ ga-ekwe omume ugbu a ịkọwa ihe karịrị sava DNS abụọ site na iji ihe nkesa kachasị ngwa ngwa site na ndepụta ndabara.
    • agbakwunyere ọnọdụ mbelata QNAME (RFC-7816) iji belata nnyefe nke ozi agbakwunyere na arịrịọ iji gbochie ntapu nke ozi gbasara ngalaba a rịọrọ wee bulie nzuzo.
    • Emejuputala ihe nzacha iji wepụta saịtị naanị maka ndị okenye nọ na ọkwa DNS.
    • Agbatịla oge nbudata ngwa ngwa site na ibelata ọnụọgụ ndenye DNS.
    • Emejuputala ihe nleba anya ma ọ bụrụ na onye na-eweta na-enyocha arịrịọ DNS ma ọ bụ nkwado DNSSEC na-ezighi ezi (ọ bụrụ na enwere nsogbu, a na-atụgharị ụgbọ njem na TLS na TCP).
    • Iji dozie nsogbu na mfu nke ngwugwu ndị kewara ekewa, a na-ebelata ihe nchekwa EDNS ka ọ bụrụ 1232 bytes (uru 1232 họọrọ n'ihi na ọ bụ ihe kachasị elu nke nha nzaghachi DNS, na-eburu n'uche IPv6, dabara na uru MTU kacha nta. (1280).
  • Ụdị ngwugwu emelitere, gụnyere GCC 9, Python 3, knot 2.9.2, libhtp 0.5.32, mdadm 4.1, mpc 1.1.0, mpfr 4.0.2, nchara 1.39, suricata 4.1.6. 1.9.6.
  • Nkwado agbakwunyere maka asụsụ Go na Rust. Isi ihe mejupụtara gụnyere ihe nchọgharị elinks na ngwugwu rfkill.
  • Ihe mgbakwunye emelitere akpọnwụwo 0.6.5, libseccomp 2.4.2, nano 4.7, openvmtools 11.0.0, tor 0.4.2.5, tshark 3.0.7. Agbakwunyere ihe mgbakwunye amazon-ssm-agent ọhụrụ iji kwalite njikọta na igwe ojii Amazon.
  • A kpochapụrụ ozi nbipu n'ime faịlụ ndị nwere ike ime iji belata nha nkesa mgbe echichi gasịrị.
  • Nkwado agbakwunyere maka akụkụ LVM.
  • Nkwado agbakwunyere maka nzacha ngwugwu netwọkụ sitere na ndị ahịa OpenVPN gaa na IPS (Sistemụ Mgbochi Mgbochi);
  • Na Pakfire, a na-eji HTTPS na-ebunye ndepụta enyo (na mbụ, arịrịọ mbụ sitere na HTTP, na ihe nkesa ahụ ga-enyeghachi ya na HTTPS).

isi: opennet.ru

Tinye a comment