Release Candidate1 pre-1.4.2, please report any issues, ASAP.
Due to many security fixes, Asterisk (pjsip), sRTP replay protection, et al.,
we plan on releasing AstLinux 1.4.2 sooner than the typical 3-4 month release
cycle.
** IMPORTANT NOTICE
-- The ipsec-tools (racoon) support in AstLinux has been removed. The
development of ipsec-tools has been ABANDONED.
The Network tab -> VPN Type: "IPsec Peers" and "IPsec Mobile" in the
web interface has been removed.
The AstLinux Team suggests using either WireGuard or OpenVPN for your
VPN needs, but if IPsec is required for
compatibility reasons the Network tab -> VPN Type: "IPsec strongSwan"
should be able to do what you want,
albeit in a less than ideal text based configuration.
More info:
https://doc.astlinux-project.org/userdoc:tt_ipsec_vpn_strongswan
** The AstLinux Team is regularly upgrading packages containing security and
bug fixes as well as adding new features of our own.
-- Linux Kernel 4.19.177 (version bump), security and bug fixes
-- ipsec-tools (racoon) package has been removed.
More info:
https://doc.astlinux-project.org/userdoc:tt_ipsec_vpn_strongswan
-- OpenSSL, version bump to 1.1.1j, security fixes
-- OpenVPN, version bump to 2.4.10
-- WireGuard VPN, module 1.0.20210219 (version bump), tools 1.0.20210223
(version bump)
-- unbound, version bump to 1.13.1
-- zabbix, version bump to 4.0.29
-- vnStat, new package, version 2.6, interface counter history is saved to
/mnt/kd/vnstat/vnstat.db every hour.
Enabled by default to keep a log of network traffic for external
interface(s). No sniffing of traffic is performed.
New rc.conf variable VNSTAT_ENABLE can be set to "no" to disable.
-- Web Interface, added vnStat tab, available to "admin/staff" users. Hidden
by default in Prefs tab.
-- Asterisk 13.29.2 ('13se' no change)
Older than latest Asterisk 13.x version but more tested, built
--without-pjproject
-- Asterisk 13.38.2 (version bump) and 16.16.2 (version bump)
-- Note: All Asterisk versions now have sRTP replay protection, new rtp.conf
config option: srtpreplayprotection=yes
This new rtp.conf option is enabled by default.
Buggy SIP user agents may require srtpreplayprotection=no if audio issues
occur with sRTP streams.
-- Complete Pre-Release ChangeLog:
https://s3.amazonaws.com/beta.astlinux-project/astlinux-changelog/ChangeLog.txt
The "AstLinux Pre-Release ChangeLog" and "Pre-Release Repository URL" entries
can be found under the "Development" tab of the AstLinux Project web site ...
AstLinux Project -> Development
https://www.astlinux-project.org/dev.html
AstLinux Team
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users
Donations to support AstLinux are graciously accepted via PayPal to
pay...@krisk.org.
