IPFire 2.29 - Core Update 204 is now available for download. It is a housekeeping release that brings a healthy dose of updates across the entire operating system and fixes a regression in our recent migration to Knot Resolver. Behind the scenes, we have been busy with some exciting things, and you will see the first of them in upcoming releases.
Knot Resolver
In the last release, we migrated from Unbound to Knot Resolver for networks protected by IPFire. We have received very positive feedback that DNS resolution is noticeably faster and that some long-standing issues have been resolved. However, the migration introduced a regression: clients connected via IPsec, WireGuard or OpenVPN were unable to resolve names, because Knot Resolver replied from the wrong source IP address. This release fixes the issue. Doing so required substantial changes to the I/O layer of Knot Resolver, which we have contributed upstream.
Miscellaneous
- Intrusion Prevention System: Julio Lira's "Advanced Phishing Protection" ruleset is now available as a ruleset provider.
- Kernel: The IPFire kernel has been rebased on Linux 6.18.54, which includes various fixes from the upstream maintainers for improved stability and security.
- WireGuard: Configuration files with multiple space-separated subnets can now be imported correctly (#13951).
- RISC-V: The experimental builds are now tuned for out-of-order cores. They remain compatible with the RVA22 baseline while taking advantage of the improvements in RVA23.
- Updated packages: acl 2.4.0, attr 2.6.0, Apache 2.4.68, bash 5.3p15, BIND 9.20.24, c-ares 1.34.8, cURL 8.21.0, elinks 0.19.1, ethtool 7.1, expat 2.8.2, file 5.48, glib 2.88.2, harfbuzz 14.2.1, hwdata 0.409, json-c 0.19, kbd 2.10.0, Knot 3.5.6, Knot Resolver 6.4.2, less 704, libarchive 3.8.8, libjpeg 3.2.0, lsof 4.99.7, OpenSSH 10.4p1, OpenSSL 3.6.5, pango 1.58.0, perl 5.42.2, perl-Net-DNS 1.55, protobuf 35.1, SQLite 3.53.3, sysstat 12.7.9, systemd 261.1, tzdata 2026c, vim 9.2.0769, wireless-regdb 2026.05.30
Add-Ons
- Observium Agent can now report the status of the Apache web server.
- Zabbix now reports metrics for Knot Resolver.
- Avahi: Fixed a hang during shutdown when the daemon was not running, caused by an unhandled error.
- Updated packages: ALSA 1.2.16, ClamAV 1.5.3, dnsdist 2.1.0, fetchmail 6.6.6, FFmpeg 8.1.2, Git 2.55.0, HAProxy 3.4.2, ltrace 0.8.1, monit 6.0.0, nano 9.1, netsnmpd 5.9.5.2, Postfix 3.11.4, rsync 3.5.0, strace 7.1, stunnel 5.78, tmux 3.7b, transmission 4.1.3, tshark 4.6.7
There is a lot more on the way. Monitoring and reporting are getting a serious upgrade that will give you a much clearer picture of what your firewall is doing and how your network is behaving. We will share more about this very soon.
A big thank you to everyone who tested this release and sent us feedback. Your reports, especially from users connecting via IPsec, WireGuard and OpenVPN, helped us make sure the Knot Resolver fix works as intended.
IPFire is built by a small team and a dedicated community. If IPFire protects your network, please consider becoming a sponsor and helping us keep the project independent and moving forward.