ipfire - an open source firewall solution


         
IPFire is a server distribution with intended to use as a firewall. It focuses on flexibility, and scales from small to middle sized business networks and home networks.

Along with this hardened, minimalist come lots of addons that can be installed with a simple click. That's what makes IPFire different from other firewall distributions: it is easy to configure for any task, and easy to administer once it's set up.

Features
  • stateful inspection firewall based on linux netfilter architecture
  • intrusion detection system with Guardian addon as extension (IPS system)
  • filter for invalid/non-standard packages
  • separate network segments for server (DMZ) and wireless with custom policies
  • DoS attack protection
  • application proxies for HTTP and FTP (with access control and content filtering) and DNS
  • incoming and outgoing packet filtering
  • Quality of Service and traffic shaping
This is to announce the release of Core Update 60, which comes with a security fix for IPSec. We recommend to update as soon as possible.

This is a pure update because it does not make much sense to upload a whole set of images for a one-line fix. If you want to install IPFire, please download IPFire 2.11-C59 and apply all updates.

The provided security fix is in the strongswan package:
strongswan (4.6.4) – RSA signature verification vulnerability CVE-2012-2388

The recently announced OpenVPN changes that were planned for Core Update 60 have been postponed to Core Update 61.

Download Current version: