Turris Security report 2022/12

In previous days a vulnerability in Samba application was found. Remote attacker could use this vulnerability to execute arbitrary code. Today we released version 3.6.25 of packages samba-server and samba-client that contain fix for this issue. This update should be installed on the routers automatically.

Another major update of operating system of router Turris - Turris OS 2.0 - was released today.

List of changes:

• OpenWrt updated to stable version 14.07 Barrier Breaker.
• New design of Foris interface optimized for mobile devices, added section for installation of package lists.
• New package lists: squid, TOR, cacerts (certificates of root authorities).
• Majordomo - fixed sorting of months and crash with empty configuration, cache optimization.
• Fixes and optimizations of ucollect and plugins ucollect-buckets and ucollect-bandwith.
• Increased limit of maximum allowed connections.
• Maximum length of syslog messages increased.
• Security fixes of OpenSSL and Unbound resolver.
• Support for Modem Turris (aka SMRT).

Since the beginning of year 2015, CZ.NIC has a new address. Now you can find us at Milešovská 1136/5, Prague 3, just nearby Jiřího z Poděbrad Square.

We've started to publish "greylists" of IP addresses that have shown some suspicious activity on the firewalls of Turris routers. A detailed description and links to download of the latest greylists can be found on a dedicated page with description of the greylist.

Another major update of operating system of router Turris - Turris OS 1.8 - was released today.

List of changes:

• New version of ucollect-spoof.
• Minor fixes in loading of ipsets firewall rules.
• Ucollect-bandwidth for passive measurement of connection speed.
• Authoritative DNS server Knot updated to version 1.6.0.
• More fixes of bash shell.
• Possibility of assigning names to devices displayed in Majordomo.
• Preparations for update to new version of OpenWrt.

Recently the global and user statistics have been extended with outputs from the Bandwidth probe of the ucollect application.

Network bandwidth is obtained from passive measurement which monitors traffic flowing through the router and calculates download and upload speed of data send from/to internet. Quantiles of these values are then plotted - these values represent the maximum speed that was utilized during a monitored interval by certain percentage of routers.

Also, some features that were requested by our users have been implemented in the statistics.

Another major update of operating system of router Turris - Turris OS 1.7 - was released today.

List of changes:

• Minor fixes in ucollect and ucollect-flow.
• New plugin ucollect-spoof for testing of sending of packets with spoofed source address.
• New plugin ucollect-refused for monitoring of refused outgoing connections.
• Possibility to set which firewall rules should be applied in /etc/config/firewall-turris.
• Added package list 'majordomo'.
• Fixed bug in Foris that could emerge when multiple users accessed the interface at one time.
• Python updated to 2.7.8.

Another major update of operating system of router Turris - Turris OS 1.6 - was released today.

List of changes:

• Fixes of updater crashes and other minor adjustments.
• Ucollect - method of updating flows rules from the server optimized.
• Initiator of the communication is recorded in flows.
• Only ipsets are used for logging and blocking of the communication in firewall.
• Foris maintains persistent connection to the backend to improve performance.
• Notifier sends Czech emails with diacritics.

Router Turris is not only a powerful network device, but also an open platform designed to be easily extended and improved. And it is this part of the project that the current competition for innovative users focuses on.

Software as well as hardware extensions can take part in the competition. Out of all submissions, three winners will be selected by a jury of experts and the users themselves will have the opportunity to select their own favorite. Winner projects will be published on the www.turris.cz website and presented at the Internet and Technology 14.2 conference (November 29, 2014, Prague).

More information about the competition is available on the user forum of project Turris (unfortunately only in Czech).

• Sent invitations: 1382
• Accepted invitations: 1005
• Declined invitations: 78
• Expired invitations: 298
• Pending invitations: 7
• Activated routers: 977

Another major update of operating system of router Turris - Turris OS 1.5 - was released today.

List of changes:

• Fixed bug in saving of Foris "Maintenance" form.
• In firewall user can activate saving of .pcap files for further analysis.
• Added NAT detector to ucollect.
• Added missing option "bind" of p910nd.
• Authoritative DNS server Knot upgraded to 1.5.1.

• Sent invitations: 1379
• Accepted invitations: 998
• Declined invitations: 78
• Expired invitations: 297
• Pending invitations: 7
• Activated routers: 967