IPFire 2.19 - Core Update 110 released

by Michael Tremer, April 28, 2017

Do you like what you are reading? Subscribe to our newsletter and don't miss out on the latest...   Join Now

This is the official release announcement for IPFire 2.19 – Core Update 110. This updates comes with some exciting new features as well as updates of many system packages and many bug and security fixes.

On-Demand IPsec VPNs

IPFire used to keep IPsec VPNs up all the time. This wastes resources if a connection is not used very often for example for a daily backup only.

Core Update 110 allows to configure IPsec VPNs in an On-Demand mode which will establish the connection as soon as it is needed and will close it after 15 minutes of inactivity to save resources.

This is especially handy for people who have a large number of IPsec net-to-net connections on either weak hardware or connections that are not required all the time like maintenance or backup connections, etc.

Performance Enhancements for DNS

unbound, the DNS resolver working inside IPFire, has been tuned to allow more concurrent queries and assigned more memory to keep a larger DNS cache.

Especially in large networks or when a burst of DNS queries needs to be handled, there is a notable increase of performance.


  • Graphs in the web user interface are now larger to show more detail
  • Packets that are received from a bridge interface are not passed through the firewall engine any more
  • Apache allows more concurrent connections now, which speeds up distributing proxy.pac, updates from Update Accelerator and more
  • The GeoIP database is now regularly updated over HTTPS
  • Gabriel Rolland has updated the Italian translation
  • Jonatan Schlag reorganised all initscripts in the build system which makes packaging add-ons easier
  • setup allows now to set the subnet mask of the RED interface to This is required with some web hosting companies which are trying to save IPv4 addresses and then need a host route for the default gateway.

Updated Packages

apcupsd 3.14.14, bind 9.11.0-P3, cairo 1.14.8, conntrack-tools 1.4.4, fontconfig 2.12.1, freetype 2.7.1, lm_sensors 3.4.0, nettle 3.3, ntp 4.2.8p10, openssh 7.4p1 – for PCI compliance, pixman 0.34.0, squid 3.5.25, unbound 1.6.1, wget 1.19.1


cups 2.2.2 & cups-filter, ffmpeg 3.2.4, ghostscript 9.20, mc 4.8.19, motion 4.0.1, tcpdump 4.9.0

New Packages
  • gnutls, an SSL library
  • epson-inkjet-printer-escpr for EPSON printers
  • lcms2, an image library
  • qpdf and poppler PDF rendering libraries
Dropped Packages

Avahi has been dropped because of lack of a maintainer

We are currently crowdfunding a Captive Portal for IPFire and would like you to ask to check it out and support us!

Please help us to support the work on IPFire Project with your donation.