Software Update: IPCop 1.4.4

The developers behind IPCop have released version 1.4.4 of the program of the same name. IPCop is a Linux firewall distribution, mainly targeting home users and the SoHo environment. The version number has jumped from 1.4.2 to 1.4.4 because this update is split into two parts. This is to prevent people with a small root partition from getting the error message ‘This is not an authorized update.’ to get. More information about this can be found in the release notes on this page to find back. The main changes in this release can be read below:

Interface

• sound checkbox option for ip-up/ip-down
• optional refresh for index.cgi
• fix a bug that caused a fixed lease to always be Enabled after being edited in dhcp.cgi
• improve reload in the standard rc.local.firewall : it is at the user charge to report a change after upgrade
• add remark field in dhcp.cgi
• fix external Access page for port ranges and include a remark field
• fix a typo on rc.red with GATEWAY when stopping connection with RFC1483 and atm adsl modem
• lock rc.updatered usage by the first call until the script end to continue the second. Sometime down was ending after new
• add an option to Dyndns behind IPCop. It must not be used with dial on demand for obvious reasons.
• VPN fix with ESP group selection
• VPN fix with .p12 certificate import
• split header.pl in two parts: better speed for non cgi scripts, allow easier upgrade without breaking add-ons on futur releases
• fix setup with DNS gateway
• fix stack smashing attack with lspci -vv
• fix shaping ceiling
• restart VPN after doing a reset in the GUI
• fix eagle-usb and isdn (remove CRLF for cmv files)
• add no-ip group and empty domain in ddns.cgi
• fix substring match for a VPN interface number with 2 digits
• fix 2 perl security issues
• add an option with ‘dma’ in syslinux menu during install (SiS chipset workaround)
• support D-link DGE-528T ID as a r8169 clone
• fix recent change in setddns.pl with no-ip
• revert to gd-2.0.20 to make traffic graph work again

Upgraded packages

• bewan unicorn driver to 0.9.0 : better synch
• dhcp to 3.0.2 (bug fix for rules parsing)
• dnsmasq to 2.20
• eagle-usb 2.1.1 (eagle III support)
• eciadsl-nortek 0.10 new package
• kernel 2.4.29 : many local security issues fixed
• libpng to 1.2.8 (crash risk with 1.2.7)
• openswan 1.0.9
• squid to v2.5 STABLE9. Solve some security issues or failures
• tar 1.13.25 Fix for CAN-2002-0399
• Replace zlib 1.2.1 patched version with V1.2.2

Compilation

• add md5sum checking during source files loading and compilation
• remove gcc-2.95.3 to build the kernel and use gcc-3.3.4 for both userspace and kernel
• better bash detection during compilation
• strip should not follow symlink resolving in building machine files
• suppress strip error for non stripable files
• silent Openssl warnings with deprecated -m486 option