This has been fixed and submitted upstream. Due to the state of the repeated packet not being considered, the IPS did not allow any SYN-ACK packets back through to the client which caused the connection to time out. This happened on TCP stacks that use the timestamp option and where the first SYN packet does not reach the server.

IPS: A long-stand bug has been discovered which caused that some TCP connections could not be opened and timed out.

We encourage you to migrate immediately as it will be done in less than half an hour. If you are running on an i586 system, you should backup your configuration, perform a fresh installation with a supported architecture and restore the backup. We are very hopeful that we will be able to concentrate our limited development time more on architectures and features that are used by the masses instead of keeping support for something that only a few people are still using and that is becoming harder and harder since so many distributions have already done this step which leaves us with lots of bugs to find ourselves instead of taking advantage of the open source community.

Having announced this plan a year ago, the time has finally come. This is the last release supporting 32 bit Intel-compatible processors - in our case i586 and older. In certain environments, this enables IPFire to significantly more throughput and lower latency since more CPU resources are available when needed. We have continued our work to take advantage of improvements in the kernel that help to decrease CPU usage when forwarding large numbers of packets. Noteworthy are various performance improvements on 'zero copy' for increased throughput and lower latency Core Scheduling ( for safer Hyperthreading), and a new drivers for NTFS. The new kernel is long-term supported by the Linux kernel developers and comes with various new drivers and performance improvements.

Due to dropping or upstreaming our patchset this was a lot easier than the previous step to 5.10. Once a few releases after upgrading to Linux 5.10, we have now rebased the IPFire kernel on Linux 5.15. De bijbehorende aankondiging ziet er als volgt uit: Linux 5.15 De ontwikkelaars hebben versie 2.27 Core Update 162 uitgebracht voor productiesystemen. Voor meer informatie verwijzen we naar deze pagina. Het bevat onder andere een intrusion detection/prevention system, deelt het netwerk op in zones, doet stateful packet inspection en biedt vpn-mogelijkheden. IPFire is een opensourcefirewall voor i586-, x86_64- en ARM-systemen.

Ipfire openvpn client download