n00b Unlimited - Forums https://n00bunlimited.net/ vBulletin Forums en Sun, 09 Aug 2026 12:15:11 GMT vBulletin 60 https://n00bunlimited.net/images/misc/rss.png n00b Unlimited - Forums https://n00bunlimited.net/ IPFire 2.29 - Core Update 203 released https://n00bunlimited.net/home/forum/site-news/ipfire/80491-ipfire-2-29-core-update-203-released Mon, 20 Jul 2026 09:00:48 GMT
This is the release announcement for IPFire 2.29 – Core Update 203, which is now available.

This is a substantial update, and its centrepiece is a fundamental change to how IPFire handles DNS: we have replaced Unbound with Knot Resolver, giving us a more flexible foundation and a range of new capabilities, from a DNS Firewall to encrypted upstream forwarding. Alongside it, the WiFi access point gains support for the 6 GHz band, and there are the usual security fixes and package updates throughout. These changes reach into a core part of the system, and we're grateful to everyone who helped test the release candidate over the past weeks and reported back.

DNS: Moving from Unbound to Knot Resolver

With this release, IPFire replaces its DNS Resolver with Knot Resolver.

This is a significant change under the hood, and not one we made lightly. Unbound has served IPFire well for many years and remains an excellent resolver. But DNS has quietly become one of the most important parts of the modern network. It is no longer only about turning names into addresses — it increasingly carries the information other protocols rely on to connect quickly, securely and privately, from encrypted transport to the records clients use to establish encrypted connections. To keep building on top of DNS, we needed a resolver we can extend and integrate deeply with the rest of IPFire. Knot Resolver's modular, scriptable architecture gives us exactly that foundation.

What this brings you today:
  • Encrypted upstream forwarding (DNS over TLS) — queries to your chosen upstream resolvers can now be sent over TLS, so they can't be read or tampered with in transit.
  • DNS Firewall — block malware, advertising and whole categories of unwanted domains at the DNS layer.
  • Encrypted zone data (over TLS) — the DNS Firewall's filtering and policy zones are now pulled over an encrypted connection by zone-sync, a new tool we built in C. Updates are transferred incrementally and can no longer be read or tampered with in transit.
  • SafeSearch — enforce safe search across the major search engines and YouTube for your whole network.
  • Conditional forwarding — send queries for specific zones to specific servers. (Note the change below.)
  • Local overrides — define your own DNS records for local hostnames.
  • DHCP integration — a custom module makes hostnames from DHCP leases resolvable in DNS, replacing the old Unbound DHCP Leases Bridge with no loss of function.

Under the hood:
  • Persistent Cache — the cache now survives restarts, so resolution stays fast after a reboot and there's less load on upstream servers.
  • Shared state across multiple workers — Knot Resolver uses several worker processes that share one cache and state, making efficient use of multiple CPU cores without fragmenting the cache.

Please note: Forwarded zones can no longer be specified as fully-qualified domain names. You now need to replace any entries on the DNS Forwarding page that use FQDNs with IP addresses.

A note on what went into this release: replacing the DNS resolver was far from a drop-in swap. Alongside integrating Knot Resolver itself, we wrote a good deal of new code — including custom modules for DHCP and filtering, and zone-sync, a tool we built in C to keep the DNS Firewall's data current over an encrypted connection.

WiFi: Support for the 6 GHz Band

The IPFire WiFi access point now supports the 6 GHz band, opening up the spectrum introduced with WiFi 6E and WiFi 7.

Why this matters:
  • More room, less interference — the 6 GHz band is new and largely empty. Without decades of legacy devices crowding it, wireless clients get cleaner airtime and more stable connections, even in busy neighbourhoods.
  • Wider channels, higher throughput — the additional spectrum leaves room for many more wide (80 and 160 MHz) channels, so you can run faster connections without them overlapping and interfering with one another.
  • No radar detection, no interruptions — unlike parts of the 5 GHz band, the 6 GHz band does not require radar detection (DFS). The access point starts up immediately and can never be forced off its channel by a radar event, so there are no sudden dropouts.

We have also fixed a bug that prevented the access point from starting when a 40 MHz channel width was combined with a manually selected channel.

Misc.

  • AWS: IPFire can now retrieve EC2 instance metadata using IMDSv2, the token-based and more secure version of the metadata service that AWS now recommends and increasingly enforces by default. This means IPFire runs correctly on instances configured to require IMDSv2, while IMDSv1 remains supported for existing deployments.
  • The microcode for some Intel processors has been updated to version 20260512 to address a vulnerability filed as INTEL-SA-01420
  • A bug with Perl failing to properly encode/decode UTF-8 strings has been fixed so that the web UI will show translations with non-ASCII characters properly again
  • OpenVPN: The icon to download the configuration has been replaced by a clearer version; and for Roadwarrior clients with a static IP address allocation, the name of the subnet is now shown next to the connection.
  • sysklogd will now listen on localhost again, which is useful for chrooted processes that want to log messages
  • Updated packages: BIND 9.20.23, Boost 1.90.0, coreutils 9.11, btrfs-progs 7.0, e2fsprogs 1.47.4, elfutils 0.195, expat 2.8.1, fcron 3.4.1, fontconfig 2.18.1, gdb 17.2, gnupg 2.5.20, GRUB 2.14, grub-btrfs 4.14, iana-etc 20260511, krb5 1.22.2, less 702, libedit 20260512-3.1, libksba 1.8.0, libloc 0.9.19, libunistring 1.4.2, libusb 1.0.30, LuaJIT 2.1.707c12b, LVM2 2.03.41, meson 1.11.1, nettle 4.0, OpenVPN 2.7.4, rrdtool 1.10.3, SQLite 3.53.1, strongswan 6.0.7 (CVE-2026-47895), Suricata 8.0.6, util-linux 2.42, vim 9.2.0526, which 2.25, xfsprogs 7.0.1, zone-sync 0.0.2

Add-Ons

  • Updated packages: dnsdist 2.0.6, ntfs-3g 2026.2.25, Postfix 3.11.3, rsync 3.4.3, samba 4.24.2, spice 0.16.0, spice-protocol 0.14.5, tmux 3.6b, tshark 4.6.6
  • Zabbix Agent: Fixes for OpenVPN 2.7 status parsing and ping error handling have been applied

Thank You

Core Update 203 reaches into one of the most fundamental parts of the system, and getting there took months of work: rebuilding DNS resolution from the ground up, writing new tooling like zone-sync, and testing all of it against real-world traffic. We're especially grateful to everyone who ran the release candidate, filed bugs, and helped us catch issues before they reached the wider community.

Work like this is slow, detailed and largely invisible, and it is only possible because IPFire is supported by the people who rely on it. If this release is useful to you, please consider making a donation — it is what lets us keep building.

Thank you for using IPFire.


More...]]> Ipfire siosios https://n00bunlimited.net/home/forum/site-news/ipfire/80491-ipfire-2-29-core-update-203-released Team Fortress 2 Update Released https://n00bunlimited.net/home/forum/site-news/steam-news/80490-team-fortress-2-update-released Thu, 16 Jul 2026 21:31:18 GMT An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:...
  • Updated Taxi Cabbed war paint
    • Fixed mip settings on the stickers
    • Fixed using the incorrect wear texture
  • Updated/Added some tournament medals
  • Updated koth_dryfield
    • Fixed the teleporter prison exploit
    • Fixed the broken geometry of the RED hut near the point
    • Attempt to fix a flying RED roof spotted from afar
    • Fixed the watercooler facing the wall
    • Improved access to the balcony section to make jumping easier
    • Added many missing player clip


    • An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:
    • Updated Taxi Cabbed war paint
      • Fixed mip settings on the stickers
      • Fixed using the incorrect wear texture
    • Updated/Added some tournament medals
    • Updated koth_dryfield
      • Fixed the teleporter prison exploit
      • Fixed the broken geometry of the RED hut near the point
      • Attempt to fix a flying RED roof spotted from afar
      • Fixed the watercooler facing the wall
      • Improved access to the balcony section to make jumping easier
      • Added many missing player clip


    More...]]>     Steam News siosios https://n00bunlimited.net/home/forum/site-news/steam-news/80490-team-fortress-2-update-released     <![CDATA[From Days to Hours: IPFire's RISC-V Builds Get a Real Machine]]> https://n00bunlimited.net/home/forum/site-news/ipfire/80489-from-days-to-hours-ipfire-s-risc-v-builds-get-a-real-machine Thu, 16 Jul 2026 09:30:13 GMT Building IPFire 2 can be painful. The build system requires that large parts of the distribution are built from scratch each time we run a build....
    Building IPFire 2 can be painful. The build system requires that large parts of the distribution are built from scratch each time we run a build. Usually that takes a couple of hours, but for one architecture, it has been taking days. What we call a Nightly Build has actually been taking more than a whole weekend; we needed to get it back down to something that could finish overnight.

    If you have been following the IPFire development team for some time, you know that we are quite keen to make IPFire run on any kind of suitable hardware. We have been early adopters for ARM - back in the day when 32 bit ARM was very painful - and we ported IPFire to RISC-V a couple of years ago, too. However, we didn't have any suitable hardware to build it as it wasn't available at all at the time, so we had to fall back on an emulated build inside our infrastructure. Every command that is being called will have to be interpreted just-in-time from the riscv64 instruction set and converted into runnable x86 code. This is a process that is extremely slow; so slow that day-to-day development is virtually impossible for RISC-V.

    Ending The Emulation Bottleneck

    This didn't bother us too much at first - RISC-V is still a second-class citizen in IPFire and we are early to the party. But to move it forward, we needed to get rid of the emulation bottleneck.

    Some months ago, we pre-ordered a Milk-V Jupiter 2 which has finally arrived.

    Previous experiences with early-bird ARM hardware have not been great. Lack of support in the Linux kernel, stability issues and a small community have resulted in lots of products being shelved. With RISC-V and Jupiter 2 it seems to be the exact opposite. We chose from a couple of distributions, used a custom kernel from SpacemiT, and had the whole thing set up very quickly.



    The Rough Edges

    Some caveats had to be sorted though: There are some outstanding issues with the power management of the device and support for the NVMe SSD that we added is not too stable yet. The biggest issue however is that the device generates a lot of heat - even when it is idle. Idling at 74°C, the board climbed past 85°C within minutes of starting a build, which required us to improve the cooling a little. Hopefully the power management will improve soon so that we can operate the system at a more sustainable temperature soon.

    The Result

    Despite these smaller issues, our Milk-V Jupiter 2 has now been added to our build system for IPFire 2 and it has started to compile the nightly builds. The build time is down from a whopping 54-56 hours in the emulated setup to only seven hours.

    This is a huge step forward for us to actually work on the RISC-V ecosystem and only the start. As more RISC-V hardware is becoming available and as it matures, we intend to put more resources behind it. We want more choice, a real alternative from x86, and we are hoping to see very small, yet very powerful IPFire systems on RISC-V over the next couple of years.

    Where We Go From Here

    We see vast potential in RISC-V as a target architecture and we believe that now is the time to invest in it. Let's iron out the gaps in hardware support, build out the IPFire to take advantage of the features of the hardware, and get it to a viable, production-ready alternative to ARM and x86.

    When will it be ready? We don't know, yet. But the only way to find out is to start now. So join us and contribute. Help us test and send us feedback.


    More...]]>     Ipfire siosios https://n00bunlimited.net/home/forum/site-news/ipfire/80489-from-days-to-hours-ipfire-s-risc-v-builds-get-a-real-machine     Team Fortress 2 Update Released https://n00bunlimited.net/home/forum/site-news/steam-news/80488-team-fortress-2-update-released Tue, 14 Jul 2026 20:40:04 GMT An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:...
  • Fixed missing sound for Taunt: Circuit Breaker
  • Renamed "Northern Nights" Summer 2026 Unusual effect to "Polar Prism"
  • Updated the Floral Growth Unusual effect to fix orientation/position problems
  • Updated the Bald Spotter
    • Adjusted vertex normals and diffuse on head
    • Adjusted normals and specular on head mirror
    • Reduced mesh size slightly toward the front and back of the head
    • Fixed some facial flexes
    • Reduced texture size of lens
  • Updated the Surgical Shroud
    • Fixed vertex normal issue on coat
    • Adjusted Phongfresnelranges on mirror to improve envmap effect
    • Reduced texture size of mirror
  • Updated/Added some tournament medals
  • Updated koth_dusker to globally improve lighting in outdoor areas for better team recognition
  • Updated cp_premuda
    • Fixed conflicting files leading to crashes
    • Fixed several spawn room errors
    • Adjusted respawn-times to make capping easier
    • Adjusted sound timings and volume
    • Brightened up dark spaces and tunnels
    • Smaller changes all around the map to improve game flow
    • Miscellaneous visual and clipping bugs fixed


    • An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:
    • Fixed missing sound for Taunt: Circuit Breaker
    • Renamed "Northern Nights" Summer 2026 Unusual effect to "Polar Prism"
    • Updated the Floral Growth Unusual effect to fix orientation/position problems
    • Updated the Bald Spotter
      • Adjusted vertex normals and diffuse on head
      • Adjusted normals and specular on head mirror
      • Reduced mesh size slightly toward the front and back of the head
      • Fixed some facial flexes
      • Reduced texture size of lens
    • Updated the Surgical Shroud
      • Fixed vertex normal issue on coat
      • Adjusted Phongfresnelranges on mirror to improve envmap effect
      • Reduced texture size of mirror
    • Updated/Added some tournament medals
    • Updated koth_dusker to globally improve lighting in outdoor areas for better team recognition
    • Updated cp_premuda
      • Fixed conflicting files leading to crashes
      • Fixed several spawn room errors
      • Adjusted respawn-times to make capping easier
      • Adjusted sound timings and volume
      • Brightened up dark spaces and tunnels
      • Smaller changes all around the map to improve game flow
      • Miscellaneous visual and clipping bugs fixed


    More...]]>     Steam News siosios https://n00bunlimited.net/home/forum/site-news/steam-news/80488-team-fortress-2-update-released     Now Available on Steam - Angels Fall First, 10% off! https://n00bunlimited.net/home/forum/site-news/steam-news/80487-now-available-on-steam-angels-fall-first-10-off Sat, 11 Jul 2026 22:10:13 GMT Angels Fall First (http://store.steampowered.com/app/367270/) is Now Available on Steam and is 10% off!* From commanding the battle standing on... Angels Fall First is Now Available on Steam and is 10% off!*

    From commanding the battle standing on the bridge of your flagship all the way down to tactical infantry firefights - AFF brings together all the combat you ever loved in a rich science fiction setting. Boarding, pilotable capital ships, deep weapon customization and full Bot support included!

    *Offer ends July 18 at 10AM Pacific Time


    Angels Fall First is Now Available on Steam and is 10% off!*

    From commanding the battle standing on the bridge of your flagship all the way down to tactical infantry firefights - AFF brings together all the combat you ever loved in a rich science fiction setting. Boarding, pilotable capital ships, deep weapon customization and full Bot support included!

    *Offer ends July 18 at 10AM Pacific Time


    More...]]>     Steam News siosios https://n00bunlimited.net/home/forum/site-news/steam-news/80487-now-available-on-steam-angels-fall-first-10-off     Team Fortress 2 Update Released https://n00bunlimited.net/home/forum/site-news/steam-news/80486-team-fortress-2-update-released Fri, 10 Jul 2026 19:10:26 GMT An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:...
  • Updated the Beachcomber's Brim to fix an incorrect material
  • Updated Taunt: The Circuit Breaker
    • Fixed incorrect team color on prop
    • Fixed orphaned particles
  • Updated the Inglorious Patriot
    • Adjusted the normal map and refined the colors
    • Improved the weighting on the bottom pockets
    • Updated the backpack icon
  • Updated pl_redwood
    • Fixed various lighting issues
    • Zipline dismount jump speed now ramps up from 1.1x base class speed to 1.8x
    • Decreased delay before a player can dismount a zipline by jumping from 0.6s to 0.25s
    • Decreased delay before a player can dismount a zipline by crouching from 0.3s to 0.1s
    • Fixed players who dismount a zipline in mid-air not receiving mini-crits from the Direct Hit and Reserve Shooter
    • Fixed the B.A.S.E. Jumper's parachute deploying while using a zipline
  • Updated koth_camp_saxton
    • Vastly improved optimization. Further investigation is ongoing.
    • Tweaked log-and-netting walls along the central shore for clearer definition
    • Fixed several instances of minor prop clipping
    • Fixed players getting stuck on the wood-carved Saxtons
    • Improved clipping throughout


    • An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:
    • Updated the Beachcomber's Brim to fix an incorrect material
    • Updated Taunt: The Circuit Breaker
      • Fixed incorrect team color on prop
      • Fixed orphaned particles
    • Updated the Inglorious Patriot
      • Adjusted the normal map and refined the colors
      • Improved the weighting on the bottom pockets
      • Updated the backpack icon
    • Updated pl_redwood
      • Fixed various lighting issues
      • Zipline dismount jump speed now ramps up from 1.1x base class speed to 1.8x
      • Decreased delay before a player can dismount a zipline by jumping from 0.6s to 0.25s
      • Decreased delay before a player can dismount a zipline by crouching from 0.3s to 0.1s
      • Fixed players who dismount a zipline in mid-air not receiving mini-crits from the Direct Hit and Reserve Shooter
      • Fixed the B.A.S.E. Jumper's parachute deploying while using a zipline
    • Updated koth_camp_saxton
      • Vastly improved optimization. Further investigation is ongoing.
      • Tweaked log-and-netting walls along the central shore for clearer definition
      • Fixed several instances of minor prop clipping
      • Fixed players getting stuck on the wood-carved Saxtons
      • Improved clipping throughout


    More...]]>     Steam News siosios https://n00bunlimited.net/home/forum/site-news/steam-news/80486-team-fortress-2-update-released     Team Fortress 2 Update Released https://n00bunlimited.net/home/forum/site-news/steam-news/80485-team-fortress-2-update-released Wed, 08 Jul 2026 23:21:04 GMT An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:...
  • Updated the Beachcomber's Brim to add a second style that was originally missed
  • Updated the Northern Nights, Umbral Lights, and Solar Singed Unusual effects to fix a naming conflict
  • Updated the Blissful Butterflies and Wispful Wings Unusual effects to fix visibility issues
  • Updated the Hard Hearing to fix truncated style names
  • Updated backpack image for the Pyro's Overalls to fix the alpha channel
  • Updated the Sandwich Diner and Sideshow war paints to fix the alpha channels
  • Updated the Team Union war paint to remove a few rogue pixels


    • An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:
    • Updated the Beachcomber's Brim to add a second style that was originally missed
    • Updated the Northern Nights, Umbral Lights, and Solar Singed Unusual effects to fix a naming conflict
    • Updated the Blissful Butterflies and Wispful Wings Unusual effects to fix visibility issues
    • Updated the Hard Hearing to fix truncated style names
    • Updated backpack image for the Pyro's Overalls to fix the alpha channel
    • Updated the Sandwich Diner and Sideshow war paints to fix the alpha channels
    • Updated the Team Union war paint to remove a few rogue pixels


    More...]]>     Steam News siosios https://n00bunlimited.net/home/forum/site-news/steam-news/80485-team-fortress-2-update-released     Team Fortress 2 Update Released https://n00bunlimited.net/home/forum/site-news/steam-news/80484-team-fortress-2-update-released Tue, 07 Jul 2026 17:23:00 GMT An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:...


    Summer 2026!
    • Featuring 6 new community maps: Dryfield, Camp Saxton, Shorelight, Redwood, Premuda, and Mojave
    • Added the Summer 2026 Cosmetic Case
      • Contains 24 new community-contributed items
      • Has a chance to give a taunt Unusualifier as a bonus item
    • Added 4 new community-contributed taunts to the Mann Co. Store
      • Taunt: The Circuit Breaker
      • Taunt: Buffoon's Bivouac
      • Taunt: Faux-calization
      • Taunt: Friendly Fire
    • Added 12 new community-created Unusual effects
      • 7 new effects for Unusual hats
      • 5 new effects for Unusual taunts
    • Added the Summer 2026 War Paint Case
      • Contains 10 new community-created War Paints that make-up the Summer 2026 Collection
      • Has a chance to give a taunt Unusualifier as a bonus item
    • All cosmetic and taunt cases will grant Summer 2026 Unusual effects instead of their normal Unusual effects during the Summer event. This does not include crates.
    • The Summer event runs through September 15th, 2026
    General
    • Security and stability improvements
    • Fixed bad alpha channel for The Creature's Grin, Rocket Operator, The Bountiful Bow, The Alternative Medicine Mann, and The Candyman's Cap (community fix from Chickenman456)
    • Fixed the "Neo Tokyo" warpaint on the BLU team not matching the RED team because the alpha channel was incorrect (community fix from Whurrhurr)
    • Fixed bad alpha channel for the Pile of End of the Line Key Gifts' backpack icon (community fix from JoriKos)
    • Fixed Stat Clock model attaching incorrectly on dropped weapons (community fix from rabscootle)
    • Fixed Stat Clock values always displaying '0' on world models (community fix from rabscootle)
    • Fixed intel carrier glow disappearing when Spy cloaks (community fix from shockpast)
    • Fixed bad alpha channel for Voodoo Juju's backpack icon (community fix from DiskIntegrity)
    • Fixed Silver Botkiller Mk.I having cubemapping in the wrong area due to a VMT error (community fix from Whurrhurr)
    • Fixed misspelling on cp_well's BLU rocket clamp texture (community fix from DiskIntegrity)
    • Fixed wrong paths in soundscript events for some taunts (community fix from robbilookatme)
    • Fixed Spy control point response rules lines playing when disguised/invisible (community fix from Churkinator)
    • Fixed weapon Unusual effects (community fix from Cipherlock and rune)
      • Fixed particles being orphaned after death
      • Fixed the Energy Orb Unusual effect desyncing from the weapon when the player moves too sharply
    • Fixed effects flooding the screen when spectating a dead teammate in first person with an unusual weapon (community fix from RGBACatlord)
    • Fixed missing coin effect for HOUWAR's second style (community fix from DiskIntegrity)
    • Fixed outdated description for the Splendid Screen (community fix from JoriKos)
    • Trimmed delay at the start of the sound file for the Panic Attack's shooting sound
    • Fixed the Engineer not being able to move for a few seconds after using Taunt: Cheers!
    • Updated cp_powerhouse to fix collision problem with crates on final control points
    • Updated cp_fortezza
      • Reworked interior of shack building next to Point A
      • Rebalanced ammo packs around Point A
      • Improved visuals across the map
      • Made rotation for shortcut path shorter
    • Updated koth_blowout
      • Prevent sentry guns from being built inside a prop under the stairs in the maintenance room
      • Visual changes to improve clarity and consistency


    An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:



    Summer 2026!
    • Featuring 6 new community maps: Dryfield, Camp Saxton, Shorelight, Redwood, Premuda, and Mojave
    • Added the Summer 2026 Cosmetic Case
      • Contains 24 new community-contributed items
      • Has a chance to give a taunt Unusualifier as a bonus item
    • Added 4 new community-contributed taunts to the Mann Co. Store
      • Taunt: The Circuit Breaker
      • Taunt: Buffoon's Bivouac
      • Taunt: Faux-calization
      • Taunt: Friendly Fire
    • Added 12 new community-created Unusual effects
      • 7 new effects for Unusual hats
      • 5 new effects for Unusual taunts
    • Added the Summer 2026 War Paint Case
      • Contains 10 new community-created War Paints that make-up the Summer 2026 Collection
      • Has a chance to give a taunt Unusualifier as a bonus item
    • All cosmetic and taunt cases will grant Summer 2026 Unusual effects instead of their normal Unusual effects during the Summer event. This does not include crates.
    • The Summer event runs through September 15th, 2026
    General
    • Security and stability improvements
    • Fixed bad alpha channel for The Creature's Grin, Rocket Operator, The Bountiful Bow, The Alternative Medicine Mann, and The Candyman's Cap (community fix from Chickenman456)
    • Fixed the "Neo Tokyo" warpaint on the BLU team not matching the RED team because the alpha channel was incorrect (community fix from Whurrhurr)
    • Fixed bad alpha channel for the Pile of End of the Line Key Gifts' backpack icon (community fix from JoriKos)
    • Fixed Stat Clock model attaching incorrectly on dropped weapons (community fix from rabscootle)
    • Fixed Stat Clock values always displaying '0' on world models (community fix from rabscootle)
    • Fixed intel carrier glow disappearing when Spy cloaks (community fix from shockpast)
    • Fixed bad alpha channel for Voodoo Juju's backpack icon (community fix from DiskIntegrity)
    • Fixed Silver Botkiller Mk.I having cubemapping in the wrong area due to a VMT error (community fix from Whurrhurr)
    • Fixed misspelling on cp_well's BLU rocket clamp texture (community fix from DiskIntegrity)
    • Fixed wrong paths in soundscript events for some taunts (community fix from robbilookatme)
    • Fixed Spy control point response rules lines playing when disguised/invisible (community fix from Churkinator)
    • Fixed weapon Unusual effects (community fix from Cipherlock and rune)
      • Fixed particles being orphaned after death
      • Fixed the Energy Orb Unusual effect desyncing from the weapon when the player moves too sharply
    • Fixed effects flooding the screen when spectating a dead teammate in first person with an unusual weapon (community fix from RGBACatlord)
    • Fixed missing coin effect for HOUWAR's second style (community fix from DiskIntegrity)
    • Fixed outdated description for the Splendid Screen (community fix from JoriKos)
    • Trimmed delay at the start of the sound file for the Panic Attack's shooting sound
    • Fixed the Engineer not being able to move for a few seconds after using Taunt: Cheers!
    • Updated cp_powerhouse to fix collision problem with crates on final control points
    • Updated cp_fortezza
      • Reworked interior of shack building next to Point A
      • Rebalanced ammo packs around Point A
      • Improved visuals across the map
      • Made rotation for shortcut path shorter
    • Updated koth_blowout
      • Prevent sentry guns from being built inside a prop under the stairs in the maintenance room
      • Visual changes to improve clarity and consistency


    More...]]>     Steam News siosios https://n00bunlimited.net/home/forum/site-news/steam-news/80484-team-fortress-2-update-released     IPFire 2.29 - Core Update 203 is available for testing https://n00bunlimited.net/home/forum/site-news/ipfire/80483-ipfire-2-29-core-update-203-is-available-for-testing Wed, 10 Jun 2026 09:40:21 GMT
    This is the release announcement for IPFire 2.29 – Core Update 203, which is now available for testing.

    This is a substantial update, and its centrepiece is a fundamental change to how IPFire handles DNS: we have replaced Unbound with Knot Resolver, giving us a more flexible foundation and a range of new capabilities, from a DNS Firewall to encrypted upstream forwarding. Alongside it, the WiFi access point gains support for the 6 GHz band, and there are the usual security fixes and package updates throughout. Because these changes reach into a core part of the system, we would especially value your help in testing this release before it reaches everyone.

    DNS: Moving from Unbound to Knot Resolver

    With this release, IPFire replaces its DNS Resolver with Knot Resolver.

    This is a significant change under the hood, and not one we made lightly. Unbound has served IPFire well for many years and remains an excellent resolver. But DNS has quietly become one of the most important parts of the modern network. It is no longer only about turning names into addresses — it increasingly carries the information other protocols rely on to connect quickly, securely and privately, from encrypted transport to the records clients use to establish encrypted connections. To keep building on top of DNS, we needed a resolver we can extend and integrate deeply with the rest of IPFire. Knot Resolver's modular, scriptable architecture gives us exactly that foundation.

    What this brings you today:
    • Encrypted upstream forwarding (DNS over TLS) — queries to your chosen upstream resolvers can now be sent over TLS, so they can't be read or tampered with in transit.
    • DNS Firewall — block malware, advertising and whole categories of unwanted domains at the DNS layer.
    • Encrypted zone data (over TLS) — the DNS Firewall's filtering and policy zones are now pulled over an encrypted connection by zone-sync, a new tool we built in C. Updates are transferred incrementally and can no longer be read or tampered with in transit.
    • SafeSearch — enforce safe search across the major search engines and YouTube for your whole network.
    • Conditional forwarding — send queries for specific zones to specific servers. (Note the change below.)
    • Local overrides — define your own DNS records for local hostnames.
    • DHCP integration — a custom module makes hostnames from DHCP leases resolvable in DNS, replacing the old Unbound DHCP Leases Bridge with no loss of function.

    Under the hood:
    • Persistent Cache — the cache now survives restarts, so resolution stays fast after a reboot and there's less load on upstream servers.
    • Shared state across multiple workers — Knot Resolver uses several worker processes that share one cache and state, making efficient use of multiple CPU cores without fragmenting the cache.

    Please note:

    Forwarded zones can no longer be specified as fully-qualified domain names. You now need to replace any entries on the DNS Forwarding page that use FQDNs with IP addresses.

    A note on what went into this release: Replacing the DNS resolver is a large piece of work we have undertaken, and it was far from a drop-in replacement. Alongside integrating Knot Resolver itself, we wrote a good deal of new code — including custom modules for DHCP and filtering, and zone-sync, a tool we built in C to keep the DNS Firewall's data current over an encrypted connection. Work like this is slow, detailed and largely invisible, and it is only possible because IPFire is supported by the people who rely on it. If this release is useful to you and you would like to see more of it, please consider making a donation — it is what lets us keep building.

    WiFi: Support for the 6 GHz Band

    The IPFire WiFi access point now supports the 6 GHz band, opening up the spectrum introduced with WiFi 6E and WiFi 7.

    Why this matters:
    • More room, less interference — the 6 GHz band is new and largely empty. Without decades of legacy devices crowding it, wireless clients get cleaner airtime and more stable connections, even in busy neighbourhoods.
    • Wider channels, higher throughput — the additional spectrum leaves room for many more wide (80 and 160 MHz) channels, so you can run faster connections without them overlapping and interfering with one another.
    • No radar detection, no interruptions — unlike parts of the 5 GHz band, the 6 GHz band does not require radar detection (DFS). The access point starts up immediately and can never be forced off its channel by a radar event, so there are no sudden dropouts.

    We have also fixed a bug that prevented the access point from starting when a 40 MHz channel width was combined with a manually selected channel.

    Misc.

    • AWS: IPFire can now retrieve EC2 instance metadata using IMDSv2, the token-based and more secure version of the metadata service that AWS now recommends and increasingly enforces by default. This means IPFire runs correctly on instances configured to require IMDSv2, while IMDSv1 remains supported for existing deployments.
    • The microcode for some Intel processors has been updated to version 20260512 to address a vulnerability filed as INTEL-SA-01420
    • A bug with Perl failing to properly encode/decode UTF-8 strings has been fixed so that the web UI will show translations with non-ASCII characters properly again
    • OpenVPN: The icon to download the configuration has been replaced by a clearer version; and for Roadwarrior clients with a static IP address allocation, the name of the subnet is now shown next to the connection.
    • sysklogd will now listen on localhost again, which is useful for chrooted processes that want to log messages
    • Updated packages: BIND 9.20.23, Boost 1.90.0, coreutils 9.11, btrfs-progs 7.0, e2fsprogs 1.47.4, elfutils 0.195, expat 2.8.1, fcron 3.4.1, fontconfig 2.18.1, gdb 17.2, gnupg 2.5.20, GRUB 2.14, grub-btrfs 4.14, iana-etc 20260511, krb5 1.22.2, less 702, libedit 20260512-3.1, libksba 1.8.0, libloc 0.9.19, libunistring 1.4.2, libusb 1.0.30, LuaJIT 2.1.707c12b, LVM2 2.03.41, meson 1.11.1, nettle 4.0, OpenVPN 2.7.4, rrdtool 1.10.3, SQLite 3.53.1, strongswan 6.0.7 (CVE-2026-47895), util-linux 2.42, vim 9.2.0526, which 2.25, xfsprogs 7.0.1, zone-sync 0.0.2

    Add-Ons

    • Updated packages: dnsdist 2.0.6, ntfs-3g 2026.2.25, Postfix 3.11.3, rsync 3.4.3, samba 4.24.2, spice 0.16.0, spice-protocol 0.14.5, tmux 3.6b, tshark 4.6.6
    • Zabbix Agent: Fixes for OpenVPN 2.7 status parsing and ping error handling have been applied

    Testing and Feedback

    As always, please help us make this release as solid as it can be. If you are able, install Core Update 203 on a test system, put it through its paces — particularly around DNS resolution, the DNS Firewall and WiFi — and report anything unexpected on our bug tracker.

    Your testing and your reports are what let us release with confidence, and we are grateful to everyone who takes the time.

    Thank you for helping us build IPFire.


    More...]]>     Ipfire siosios https://n00bunlimited.net/home/forum/site-news/ipfire/80483-ipfire-2-29-core-update-203-is-available-for-testing     IPFire 2.29 - Core Update 202 released https://n00bunlimited.net/home/forum/site-news/ipfire/80482-ipfire-2-29-core-update-202-released Tue, 26 May 2026 14:04:47 GMT In this release, IPFire 2.29 - Core Update 202, we are fixing the most prominent kernel vulnerabilities of the last few weeks. OpenVPN has been...
    In this release, IPFire 2.29 - Core Update 202, we are fixing the most prominent kernel vulnerabilities of the last few weeks. OpenVPN has been updated to version 2.7 which brings support for Data Channel Offloading massively upgrading throughput for your OpenVPN tunnels. As usual, this release contains a large number of package updates with various more security fixes.

    We would like to encourage to install this update as soon as possible to be protected against the unusually large amount of vulnerabilities that have been discovered recently in the Linux kernel as well as lots of other software components. Ensure to reboot your IPFire system afterwards.

    Linux Kernel Security Vulnerabilities

    In this release, the IPFire kernel has been rebased on Linux 6.18.32 which most notably fixes a couple of prominent security vulnerabilities:
    • Dirty Frag — ESP/IPsec (CVE-2026-43284) — A local privilege escalation flaw disclosed on May 7, 2026 in the kernel module providing support for ESP, one of the protocols used for IPsec, allowing an unprivileged local user to escalate to root.
    • Copy Fail (CVE-2026-31431) — A logic flaw in the Linux kernel's cryptographic subsystem, specifically within the algif_aead module of the AF_ALG interface, disclosed April 29, 2026, that lets any unprivileged local user gain root via a tiny exploit on essentially every distribution shipping kernels built since 2017.



    While these vulnerabilities are serious for Linux systems in general, IPFire is by design not exposed to the most common attack paths. Both flaws require an unprivileged local user with shell access to the system, and IPFire does not provide unprivileged shell accounts on the firewall - only the administrator has access to the console, and there are no other users logged in. That said, defence in depth matters, and we always recommend keeping systems up to date regardless of whether a known attack path applies, because the next vulnerability may well take a different shape.

    OpenVPN 2.7

    IPFire is now shipping OpenVPN 2.7 which has been released earlier this year. Over the last couple of updates, we have already rolled out changes that allow a smooth transition. The highlight of this release is support for Data Channel Offloading (DCO) to the kernel. Instead of passing any packets to the OpenVPN daemon for encryption and decryption, the kernel can encrypt or decrypt packets itself which will massively boost throughput. We have observed throughput to jump from 1 GBit/s to 10 GBit/s per tunnel with reduced jitter and less CPU utilisation due to the kernel's better use of the hardware's crypto acceleration.

    Misc.

    • Firewall: Multiple ports in a comma-separated list are now being applied properly (#13959)
    • Intrusion Prevention System: The IPS is no longer logging any stats which have used a lot of disk space on some systems. The updater automatically removes any log files freeing the disk space. The remaining log files are now being rotated daily instead of weekly.
    • The IPFire DNS Proxy is now permitted outbound access without any additional firewall rules
    • IPsec: Due to a typo in a script, some automatically generated firewall rules were not removed after a tunnel was shut down. This did not have any other implications than a growing table of redundant rules.
    • In glibc, a crafted DNS response can trick gethostbyaddr/gethostbyaddr_r into treating a non-answer section as a valid answer, violating the DNS spec. The result is an out-of-bounds read and bogus hostnames returned to callers — risky for anything that uses reverse DNS in logging or access decisions (GLIBC-SA-2026-0005).
    • Updated packages: abseil-cpp 20260107.1, Apache2 2.4.67, autoconf 2.73, BIND 9.20.22, btrfs-progs 6.19.1, cURL 8.20.0, ethtool 7.0, expat 2.8.0, freetype 2.14.3, glib 2.88.1, GnuTLS 3.8.13, groff 1.24.1, harfbuzz 14.2.0, hwdata 0.406, iana-etc 20260409, intel-microcode 20260227, inotify-tools 4.25.9.0, iproute2 7.0.0, ipset 7.24, Knot 3.5.4, libarchive 3.8.7, libcap 2.78, libcap-ng 0.9.3, libedit 20251016-3.1, libgcrypt 1.12.2, libinih 62, libjpeg 3.1.4.1, libpng 1.6.58, libsodium 1.0.22, liburcu 0.15.6, libxml2 2.15.3, lmdb 0.9.35, LVM2 2.03.40, man-pages 6.18, mdadm 4.6, oath-toolkit 2.6.14, OpenSSH 10.3p1, OpenSSL 3.6.2, OpenVPN 2.7.3, pango 1.57.1, parted 3.7, pciutils 3.15.0, python3-yaml 6.0.3, sed 4.10, SQLite 3.53.0, strongSwan 6.0.6, Suricata 8.0.5, systemd 260.1, texinfo 7.3, tzdata 2026b, Unbound 1.25.1, usb-modeswitch-data 20251207, wireguard-tools 1.0.20260223, XZ 5.8.3
    • IP Blocklist: Links to the BOGON and BOGON_FULL lists have been updated

    Add-Ons

    • Samba: A security researcher working under the pseudonym valent1 has reported two security vulnerabilities in this add-on which are patched in this release:
      • Missing input validation during the join operation allowed authenticated attackers to run arbitrary shell commands as a non-privileged user (CVE pending)
      • Inappropriate shell command escaping allowed attackers to gain root privileges from a shell using the sambactrl helper binary (CVE pending)
    • Who Is Online? valent1 reported a now fixed XSS vulnerability for authenticated users (CVE pending)
    • Updated packages: arpwatch 3.9, dnsdist 2.0.5, ffmpeg 8.1, FRR 10.6.0, htop 3.5.1, iperf3 3.21, Git 2.54.0, HAProxy 3.2.15, keepalived 2.3.4, libid3tag 0.16.4, libmicrohttpd 1.0.5, libmpc 1.4.1, libpciaccess 0.19, libvirt 12.3.0, lldpd 1.0.21, mympd 25.0.1, nano 9.0, ncat 7.99, nfs 2.9.1, nmap 7.99, Postfix 3.11.1, rsync 3.4.2, Samba 4.24.1, Tor 0.4.9.7, transmission 4.1.1, tshark 4.6.5, Zabbix Agent 7.0.24 (LTS) + Monitoring for D-Bus & LLDP


    We want to urge you to upgrade your systems, so you aren't vulnerable to the Dirty Frag, Copy Fail, Fragnesia vulnerabilities. Thanks to everyone for giving feedback for the testing release and reporting any problems to Bugzilla.

    If you would like to thank the developers & support their work, please donate, to keep the project moving fast!


    More...]]>     Ipfire siosios https://n00bunlimited.net/home/forum/site-news/ipfire/80482-ipfire-2-29-core-update-202-released     Team Fortress 2 Update Released https://n00bunlimited.net/home/forum/site-news/steam-news/80481-team-fortress-2-update-released Mon, 25 May 2026 16:16:24 GMT An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:...
  • Fixed crash related to wearables leaking when weapons are dropped (community fix from Sean McGeehan)


    • An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:
    • Fixed crash related to wearables leaking when weapons are dropped (community fix from Sean McGeehan)


    More...]]>     Steam News siosios https://n00bunlimited.net/home/forum/site-news/steam-news/80481-team-fortress-2-update-released     Team Fortress 2 Update Released https://n00bunlimited.net/home/forum/site-news/steam-news/80480-team-fortress-2-update-released Fri, 22 May 2026 22:40:44 GMT An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:...
  • Fixed crash related to KeyValues
  • Fixed Mk.II Botkiller eyes not glowing in the dark (community fix from Whurrhurr)
  • Fixed Halloween spell attribute text being grayed out during full moons (community fix from FrozenDragon)
  • Fixed attachments on dropped weapons having broken textures for certain war paints and skins (community fix from Piogre)
  • Fixed automatic "Control Point Lost" lines not playing (community fix from robbilookatme)
  • Fixed spacing issues for item descriptions (community fix from DiskIntegrity)
  • Fixed many cases where Spy disguises were broken (community fix from Sean McGeehan)
  • Fixed The Fancy Spellbook's large backpack icon not matching the small version
  • Updated VScript to allow set damage for force calc (community fix from doclic)
  • Updated the Snow Merc to count as an assister in the death notice
  • Updated the prop for Taunt: Dead Mann's Drink to fix a problem with LODs
  • Updated the Die Regime-Panzerung to add a 'No Bullets' style
  • Updated/Added some tournament medals
  • Updated the Mann of the Hour
    • Restored missing rim mask
    • Made shapekeys for a few problematic face flexes
    • Replaced incorrect normal map
    • Altered hair mesh to ensure compatibility with Voodoo-Cursed Scout Soul
    • Updated backpack icon to represent above changes
  • Updated koth_demolition
    • Fixed some lighting issues with the pipes next to the control point
    • Replaced some textures in the radio rooms
    • Added a clipbrush on the radio rooms to avoid players getting stuck when going in the air (thanks Big Wiggy)
    • Reworked the nobuild on the crane platform to allow Engineers to build on the concrete area (thanks Uncle Dane)
    • Fixed a leftover prop being inside a wall
    • Fixed a texture in the jumppad using the wrong cubemap
    • Made the catwalk behind the office building a bit bigger
    • Added a clipbrush to the pipes on the furnace rooms so players can climb up to the barrels
  • Updated plr_hacksaw and plr_hacksaw_event
    • Removed attic balconies overlooking the capture zone
    • Moved a small pickup location into the attic
    • Fixed clipping errors
  • Updated cp_process_final
    • Fixed various collision issues across the map
      • Most of these involved changing existing collision from player_clip to bullet_block to prevent splash damage from getting caught on small pieces of level geometry
      • Some of these involved closing off open areas where explosions could vanish
      • Some of these involved making collision areas more clear by including new geometry to better indicate what would collide and what wouldn't
    • Increased skybox height across the map to be consistent with other 5CP maps
    • Changed the small prop pipes at last to be nonsolid, but still block stickies
      • Players should be able to cleanly walk and jump along these pipes without getting stuck
      • Additionally, rockets and other explosions should collide cleanly through the pipes so they don't block splash damage
      • Stickies will adhere to the pipes as expected, rather than clipping through and being hidden by the pipe model
    • Changed the level geometry around the large pipes on the ground near the last control point. They are now enclosed in glass and have a layer of bullet block so that collision is correct.
    • Increased the height of numerous doors across the entire map. Players should be able to jump normally through the door without hitting their heads.
    • Removed some rocks near the angled ramp at 2nd and replaced them with crates
    • Added angled player clipping underneath some of the large awnings at middle to prevent players from getting stuck under the awnings
    • Made exterior fences more consistent with the bounding of the level
    • Changed some metal textures to better match the mirrored symmetry of the level
    • Added some additional detail behind the starting spawn room
    • Cleaned up the displacements in the middle and second to better handle splash damage, and reduced the amount of grass poking through concrete
    • Replaced some small pipes at the 2nd spire to make a more consistent platform
    • Made many existing light props nonsolid to prevent movement issues
      • Most were already nonsolid, but this should make most props consistent
  • Updated cp_metalworks
    • Fixed various collision issues across the map
      • Most of these involved changing existing collision from player_clip to bullet_block to prevent splash damage from getting caught on small pieces of level geometry
    • Changed the level geometry at last to have more consistent collision
      • While there are small gaps and holes in the windows/doors of the new bunker and the stack of wood/chickenwire, they are covered with bullet block to prevent collision issues
    • Changed the way shadows work on certain walls throughout the map to prevent shadows leaking through
    • Redesigned the second forward spawn for both teams. The spawn has now moved back and into a larger hut structure in the yard before the second control point.
    • Increased the door size of the first forward spawn
    • The various small door brushes throughout the map have been turned into func_brushes and have had collision turned off so they don't catch splash
    • Made adjustments to the truck ramp at middle. The ramp is now a displacement, which should catch splash damage correctly and allow player to walk up to the wall cleanly.
    • Changed the collision around the very tall light poles throughout the map. Players should no longer get caught on them while in midair (but they still can't land on top of them).
    • Fixed a section of displacement where players could get stuck in the ground
    • Slight visual tweaks throughout the level


    • An update to Team Fortress 2 has been released. The update will be applied automatically when you restart Team Fortress 2. The major changes include:
    • Fixed crash related to KeyValues
    • Fixed Mk.II Botkiller eyes not glowing in the dark (community fix from Whurrhurr)
    • Fixed Halloween spell attribute text being grayed out during full moons (community fix from FrozenDragon)
    • Fixed attachments on dropped weapons having broken textures for certain war paints and skins (community fix from Piogre)
    • Fixed automatic "Control Point Lost" lines not playing (community fix from robbilookatme)
    • Fixed spacing issues for item descriptions (community fix from DiskIntegrity)
    • Fixed many cases where Spy disguises were broken (community fix from Sean McGeehan)
    • Fixed The Fancy Spellbook's large backpack icon not matching the small version
    • Updated VScript to allow set damage for force calc (community fix from doclic)
    • Updated the Snow Merc to count as an assister in the death notice
    • Updated the prop for Taunt: Dead Mann's Drink to fix a problem with LODs
    • Updated the Die Regime-Panzerung to add a 'No Bullets' style
    • Updated/Added some tournament medals
    • Updated the Mann of the Hour
      • Restored missing rim mask
      • Made shapekeys for a few problematic face flexes
      • Replaced incorrect normal map
      • Altered hair mesh to ensure compatibility with Voodoo-Cursed Scout Soul
      • Updated backpack icon to represent above changes
    • Updated koth_demolition
      • Fixed some lighting issues with the pipes next to the control point
      • Replaced some textures in the radio rooms
      • Added a clipbrush on the radio rooms to avoid players getting stuck when going in the air (thanks Big Wiggy)
      • Reworked the nobuild on the crane platform to allow Engineers to build on the concrete area (thanks Uncle Dane)
      • Fixed a leftover prop being inside a wall
      • Fixed a texture in the jumppad using the wrong cubemap
      • Made the catwalk behind the office building a bit bigger
      • Added a clipbrush to the pipes on the furnace rooms so players can climb up to the barrels
    • Updated plr_hacksaw and plr_hacksaw_event
      • Removed attic balconies overlooking the capture zone
      • Moved a small pickup location into the attic
      • Fixed clipping errors
    • Updated cp_process_final
      • Fixed various collision issues across the map
        • Most of these involved changing existing collision from player_clip to bullet_block to prevent splash damage from getting caught on small pieces of level geometry
        • Some of these involved closing off open areas where explosions could vanish
        • Some of these involved making collision areas more clear by including new geometry to better indicate what would collide and what wouldn't
      • Increased skybox height across the map to be consistent with other 5CP maps
      • Changed the small prop pipes at last to be nonsolid, but still block stickies
        • Players should be able to cleanly walk and jump along these pipes without getting stuck
        • Additionally, rockets and other explosions should collide cleanly through the pipes so they don't block splash damage
        • Stickies will adhere to the pipes as expected, rather than clipping through and being hidden by the pipe model
      • Changed the level geometry around the large pipes on the ground near the last control point. They are now enclosed in glass and have a layer of bullet block so that collision is correct.
      • Increased the height of numerous doors across the entire map. Players should be able to jump normally through the door without hitting their heads.
      • Removed some rocks near the angled ramp at 2nd and replaced them with crates
      • Added angled player clipping underneath some of the large awnings at middle to prevent players from getting stuck under the awnings
      • Made exterior fences more consistent with the bounding of the level
      • Changed some metal textures to better match the mirrored symmetry of the level
      • Added some additional detail behind the starting spawn room
      • Cleaned up the displacements in the middle and second to better handle splash damage, and reduced the amount of grass poking through concrete
      • Replaced some small pipes at the 2nd spire to make a more consistent platform
      • Made many existing light props nonsolid to prevent movement issues
        • Most were already nonsolid, but this should make most props consistent
    • Updated cp_metalworks
      • Fixed various collision issues across the map
        • Most of these involved changing existing collision from player_clip to bullet_block to prevent splash damage from getting caught on small pieces of level geometry
      • Changed the level geometry at last to have more consistent collision
        • While there are small gaps and holes in the windows/doors of the new bunker and the stack of wood/chickenwire, they are covered with bullet block to prevent collision issues
      • Changed the way shadows work on certain walls throughout the map to prevent shadows leaking through
      • Redesigned the second forward spawn for both teams. The spawn has now moved back and into a larger hut structure in the yard before the second control point.
      • Increased the door size of the first forward spawn
      • The various small door brushes throughout the map have been turned into func_brushes and have had collision turned off so they don't catch splash
      • Made adjustments to the truck ramp at middle. The ramp is now a displacement, which should catch splash damage correctly and allow player to walk up to the wall cleanly.
      • Changed the collision around the very tall light poles throughout the map. Players should no longer get caught on them while in midair (but they still can't land on top of them).
      • Fixed a section of displacement where players could get stuck in the ground
      • Slight visual tweaks throughout the level


    More...]]>     Steam News siosios https://n00bunlimited.net/home/forum/site-news/steam-news/80480-team-fortress-2-update-released     IPFire 2.29 - Core Update 202 is available for testing https://n00bunlimited.net/home/forum/site-news/ipfire/80479-ipfire-2-29-core-update-202-is-available-for-testing Mon, 11 May 2026 08:21:15 GMT Today we are proud to present the next challenger stepping into the ring: IPFire 2.29 Core Update 202! In this corner, a brand-new Linux 6.18 kernel....
    Today we are proud to present the next challenger stepping into the ring: IPFire 2.29 Core Update 202! In this corner, a brand-new Linux 6.18 kernel. In the other corner, OpenVPN 2.7 with kernel-accelerated Data Channel Offload, delivering up to 10 Gigabit per second per tunnel. Add to that a long list of important security fixes, package updates, and bug fixes - and you have a release that is ready for testing. So power up your test systems, and let's get readyyyy to upgraaaade!

    Linux Kernel Security Vulnerabilities

    In this release, the IPFire kernel has been rebased on Linux 6.18.28 which most notably fixes a couple of prominent security vulnerabilities:
    • Dirty Frag — ESP/IPsec (CVE-2026-43284) — A local privilege escalation flaw disclosed on May 7, 2026 in the kernel module providing support for ESP, one of the protocols used for IPsec, allowing an unprivileged local user to escalate to root.
    • Copy Fail (CVE-2026-31431) — A logic flaw in the Linux kernel's cryptographic subsystem, specifically within the algif_aead module of the AF_ALG interface, disclosed April 29, 2026, that lets any unprivileged local user gain root via a tiny exploit on essentially every distribution shipping kernels built since 2017.

    While these vulnerabilities are serious for Linux systems in general, IPFire is by design not exposed to the most common attack paths. Both flaws require an unprivileged local user with shell access to the system, and IPFire does not provide unprivileged shell accounts on the firewall - only the administrator has access to the console, and there are no other users logged in. That said, defence in depth matters, and we always recommend keeping systems up to date regardless of whether a known attack path applies, because the next vulnerability may well take a different shape.

    OpenVPN 2.7

    IPFire is now shipping OpenVPN 2.7 which has been released earlier this year. Over the last couple of updates, we have already rolled out changes that allow a smooth transition. The highlight of this release is support for Data Channel Offloading (DCO) to the kernel. Instead of passing any packets to the OpenVPN daemon for encryption and decryption, the kernel can encrypt or decrypt packets itself which will massively boost throughput. We have observed throughput to jump from 1 GBit/s to 10 GBit/s per tunnel with reduced jitter and less CPU utilisation due to the kernel's better use of the hardware's crypto acceleration.

    Misc.

    • Firewall: Multiple ports in a comma-separated list are now being applied properly (#13959)
    • Intrusion Prevention System: The IPS is no longer logging any stats which have used a lot of disk space on some systems. The updater automatically removes any log files freeing the disk space. The remaining log files are now being rotated daily instead of weekly.
    • The IPFire DNS Proxy is now permitted outbound access without any additional firewall rules
    • IPsec: Due to a typo in a script, some automatically generated firewall rules were not removed after a tunnel was shut down. This did not have any other implications than a growing table of redundant rules.
    • In glibc, a crafted DNS response can trick gethostbyaddr/gethostbyaddr_r into treating a non-answer section as a valid answer, violating the DNS spec. The result is an out-of-bounds read and bogus hostnames returned to callers — risky for anything that uses reverse DNS in logging or access decisions (GLIBC-SA-2026-0005).
    • Updated packages: abseil-cpp 20260107.1, Apache2 2.4.67, autoconf 2.73, BIND 9.20.22, btrfs-progs 6.19.1, cURL 8.20.0, ethtool 7.0, expat 2.8.0, freetype 2.14.3, glib 2.88.1, GnuTLS 3.8.13, groff 1.24.1, harfbuzz 14.2.0, hwdata 0.406, iana-etc 20260409, intel-microcode 20260227, inotify-tools 4.25.9.0, iproute2 7.0.0, ipset 7.24, Knot 3.5.4, libarchive 3.8.7, libcap 2.78, libcap-ng 0.9.3, libedit 20251016-3.1, libgcrypt 1.12.2, libinih 62, libjpeg 3.1.4.1, libpng 1.6.58, libsodium 1.0.22, liburcu 0.15.6, libxml2 2.15.3, lmdb 0.9.35, LVM2 2.03.40, man-pages 6.18, mdadm 4.6, oath-toolkit 2.6.14, OpenSSH 10.3p1, OpenSSL 3.6.2, OpenVPN 2.7.3, pango 1.57.1, parted 3.7, pciutils 3.15.0, python3-yaml 6.0.3, sed 4.10, SQLite 3.53.0, strongSwan 6.0.6, Suricata 8.0.4, systemd 260.1, texinfo 7.3, tzdata 2026b, Unbound 1.25.0, usb-modeswitch-data 20251207, wireguard-tools 1.0.20260223, XZ 5.8.3
    • IP Blocklist: Links to the BOGON and BOGON_FULL lists have been updated

    Add-Ons

    • Updated packages: arpwatch 3.9, dnsdist 2.0.5, ffmpeg 8.1, FRR 10.6.0, htop 3.5.1, iperf3 3.21, Git 2.54.0, HAProxy 3.2.15, keepalived 2.3.4, libid3tag 0.16.4, libmicrohttpd 1.0.5, libmpc 1.4.1, libpciaccess 0.19, libvirt 12.3.0, lldpd 1.0.21, mympd 25.0.1, nano 9.0, ncat 7.99, nfs 2.9.1, nmap 7.99, Postfix 3.11.1, rsync 3.4.2, Samba 4.24.1, Tor 0.4.9.7, transmission 4.1.1, tshark 4.6.5, Zabbix Agent 7.0.24 (LTS) + Monitoring for D-Bus & LLDP


    As always, this update would not be possible without the hard work of the IPFire developers, the wider open-source community whose projects we ship, and everyone who tests, reports bugs, and contributes patches. If you would like to support the continued development of IPFire, please donate - every contribution helps us keep the project independent and moving forward.

    Happy testing!


    More...]]>     Ipfire siosios https://n00bunlimited.net/home/forum/site-news/ipfire/80479-ipfire-2-29-core-update-202-is-available-for-testing     Left 4 Dead - Update https://n00bunlimited.net/home/forum/site-news/steam-news/80478-left-4-dead-update Wed, 06 May 2026 18:43:54 GMT An update has been released for Left 4 Dead: - Fixed several exploits that could be used to crash servers or remote players. An update has been...
    - Fixed several exploits that could be used to crash servers or remote players.

    An update has been released for Left 4 Dead:

    - Fixed several exploits that could be used to crash servers or remote players.

    More...]]>     Steam News siosios https://n00bunlimited.net/home/forum/site-news/steam-news/80478-left-4-dead-update