NethServer 7 RC2 "Gnocchi" released


pablo-3 We're approching very quickly the final release but we're still knee deep in fixing bugs and sorting out some issues that came up since the last release. Now, after a few weeks of hard work, we're finally ready for a new release of NethServer and it's time get it off the ground. Today, I'm excited to announce that NethServer 7 RC2 "Gnocchi" has been released and is publicly available. In the past, we asked for help from our members to make NethServer 7 the best release yet and this is happening!

Overview

The RC2 release of NethServer 7 introduces no new features but aims to fix bugs in previous releases.

Changes from RC1

Legacy short user name support

By default, NethServer 7 enables the @domain suffix in user and group names, this new convention confuses the system user, and force to reconfigure his account credentials on any network client. Moreover, some applications require a configuration adjustment and such default is quite different from the previous NethServer version 6.x approach. We have defined an additional option to support both name forms (short, long) and keep all data consistent.

And so much more

These are just the major highlights in 7 RC2 but there are other tiny improvements, refinements, and bugfixes that we aren’t covering here like:
  • SMB filesystem ACLs are not applied
  • Guest cannot write to shared folder
  • SambaAudit: "Reload" button doesn't work
  • Virtual host inline help does not include plugins
  • Missing home dir on RSAT-created accounts
  • Useless Password policy page
  • Missing inline help in Password policy page
Full RC2 issues list is available on github

What does the RC release mean?

A release candidate (RC) is a testing version with the potential to be a final product, which is ready to release unless significant bugs emerge. RC releases can be used in production, especially if new features are not used on mission critical systems. Upgrades to the final release will be supported.

What needs test

Even in RC2, the most notable new feature that needs a good amount of testing is the AD Domain Controller setup, with particular focus on the depending functions such as email, shared folders and user authentication.

Feature freeze phase

This release is already in a core feature freeze phase, all work on adding new core features is suspended, shifting the effort towards fixing bugs and improving the stability and user experience. This RC2 release contains all the exciting features of NethServer 7 in a form that anyone can help test. This testing, guided by the NethServer team, helps us target and identify bugs.

Future release

No new modules will be added or modified before the final release, we invite to stay tuned with our community for fresh news and updates about the forthcoming Stable Release.

Thank the overall NethServer community

As always, we want to take a moment to say thank you to everyone who makes NethServer possible! When you download a copy of NethServer or participate in your very own NethServer community, you enable us to write good Open Source software that many thousands have downloaded.

Why Gnocchi?

Gnocchi are thick, soft dough dumplings that may be made from semolina, ordinary wheat flour, egg, cheese, potato, breadcrumbs, cornmeal, or similar ingredients, with or without flavourings of herbs, vegetables, cocoa, or prunes. The dough for gnocchi is most often rolled out, then cut into small pieces of about the size of a cork. As RC2 could be used as an alternative to the upcoming final release, Gnocchi is eaten as a first course (primo piatto) as an alternative to soups (minestre) or pasta. It's the favorite dish of our best RC1 contributors @JeffBales @saitobenkei and @rolf so that would be a special tribute to the men who helped us test NethServer over the past month

Download and Test

We need your help to make NethServer 7 the best release yet, so please take some time to download and try out the RC2 and make sure the things that are important to you are working.
  • You can install it on a virtual machine or on a bare-metal server using a DVD or USB stick
  • Upgrade from RC1 is supported through the Software center
If you find a bug, please report it replying to this topic – every bug you uncover is a chance to improve the experience for thousands of NethServer users worldwide, also our amazing quality team will be called upon to give its support on that! Together, we can make NethServer rock-solid. We have a culture of coordinating new features and pushing fixes upstream as much as possible, and your feedback will help improve not only NethServer but Linux and free software as a whole. Ready to check it out? Then head to the docs and download:
NethServer 7 RC2 (784MB) (from SourceForge.net)
Torrent link: nethserver-7.2.1511-rc2-x86_64.iso.torrent

Read more

NethServer 7 RC1 "Saltimbocca" released


pablo It's only been a short month since we released Beta2 and we’re happy to say that it has already passed 4,000 direct downloads from around 100 different countries. Today, I'm excited to announce that NethServer 7 RC1 "Saltimbocca" has been released and is publicly available. In the past, we asked for help from our members to make NethServer 7 the best release yet, so we hope this is the last step forward on the path towards the final release. Now, we’re thrilled to share it with you and hear your feedback, so let’s jump right into it!

Overview

The RC1 release of NethServer 7 will bring numerous goodies: Deep Packet Inspection, new time conditions on firewall rules, new interface for traffic shaping, Suricata as IPS, new interface for restore data and improved full text search for IMAP.

Changes from Beta2

There are some major changes from Beta2 and it’s impossible to cover them all in detail here, so here are some of our favorite highlights:

Deep Packet Inspection

A major feature of the new firewall is deep packet inspection to the firewall using nDPI. This feature will allow the administrator to create firewall rules like "only the boss computer can access Facebook" or "nobody can download torrents"

New time conditions on firewall rules

The firewall now supports conditions based on time. Administrators should be able to create rules like this:
  • Block Facebook during working hours in the working days
  • Allow Facebook only during lunch time

New interface for the Traffic shaping

A better implementation of traffic shaping with a brand new interface allows the creation of complex rules also with nDPI support. For example, during office hours facebook traffic has low priority The "Firewall rules" page has been extended with the "low priority" and "high priority" actions on rule creation, and Bandwidth configuration of red network interface has been moved inside the "Network" page removing the "Traffic shaping" panel.

Suricata is the new IPS

We have replaced Snort with Suricata for better performances and improved support of newer hardware.

New web interface to restore data from old backups

In the past, the list of files to restore shown in the interface was created reading only the last backup. Now, the user is able to select from which backup files should be restored (and the file list comes from the selected backup).

Improved full text search for IMAP

The upstream dovecot package provides the Lucene-based FTS (Full Text Search) plugin, we have enabled it by default, so the speed of searches performed by IMAP clients (and webmail) is now vastly improved.

And so much more

These are just the major highlights in 7 RC1 but there are other tiny improvements, refinements, and bugfixes that we aren’t covering here like:
  • Shared Mailboxes default
  • XMPP over bosh
  • Clear-test password
  • Collected memory plugin
  • Passive FTP connection with virtualhost
  • Display NetBIOS domain name on DC configuration page
  • Failure on empty group creation
  • Failures on Samba AD accounts management
  • DC join failed, realmd cannot join this realm
  • and more..
Full RC1 issues list is available on github

What does the RC release mean?

A release candidate (RC) is a testing version with potential to be a final product, which is ready to release unless significant bugs emerge. RC releases can be used in production, especially if new features are not used on mission critical systems. Upgrades to the final release will be supported

What needs test

Even in RC1, the most notable new feature that needs a good amount of testing is the AD Domain Controller setup, with particular focus on the depending functions such as email, shared folders and user authentication.

Feature freeze phase

This release is already in a core feature freeze phase, all work on adding new core features is suspended, shifting the effort towards fixing bugs and improving the stability and user experience. This RC1 release contains all the exciting features of NethServer 7 in a form that anyone can help test. This testing, guided by the NethServer team, helps us target and identify bugs.

Future release

No new modules will be added or modified before the final release, we invite to stay tuned with our community for fresh news and updates about the forthcoming Stable Release

Thank the overall NethServer community

As always, we want to take a moment to say thank you to everyone who makes NethServer possible! When you download a copy of NethServer or participate in your very own NethServer community, you enable us to write good Open Source software that many thousands have downloaded.

Why Saltimbocca?

Saltimbocca (also saltinbocca) is a dish (popular in southern Switzerland, Italy, Spain and Greece) made of veal lined or topped with prosciutto and sage or basil; marinated in wine, oil or saltwater depending on the region or one's own taste. This dish is also occasionally topped with capers depending on individual taste. It's the favorite dish of one of the best Beta2 contributor @flatspin (aka Ralf Jeckel from Austria), so that would be a special tribute to the man who helped us test NethServer over the past month

Download and Test

We need your help to make NethServer 7 the best release yet, so please take some time to download and try out the RC1 and make sure the things that are important to you are working.
  • You can install it on a virtual machine or on a bare-metal server using a DVD or USB stick
  • Upgrade from Beta1 is supported through the Software center
If you find a bug, please report it replying to this topic – every bug you uncover is a chance to improve the experience for thousands of NethServer users worldwide, also our amazing quality team will be called upon to give its support on that! Together, we can make NethServer rock-solid. We have a culture of coordinating new features and pushing fixes upstream as much as possible, and your feedback will help improve not only NethServer but Linux and free software as a whole. Ready to check it out? Then head to the docs and download:
NethServer 7 RC1 (784MB) (from SourceForge.net)

Read more

NethServer 7 Beta2 "Bruschetta" released


pablo-33 After a period of hard work on Beta1, I'm excited to announce that NethServer 7 Beta2 has been released and is publicly available. In the past months we have asked for help of our members in making NethServer 7 the best release yet, so that's a big step forward on the path towards the final release. Now, we’re thrilled to share it with you and hear your feedback, so let’s jump right into it.

Overview

The second Beta release of NethServer 7 will bring numerous goodies: NextCloud 10, advanced static routes, new bandidthd and pop3 connector module.

Changes from Beta1

There is a ton of major changes from Beta1 and it’s impossible to cover them all in detail here, so here are some of our favorite highlights:

Nextcloud 10

Nextcloud is a new open source project that makes a private cloud platform at your home, it was born as a fork of the well-known OwnCloud project to reboot it in a better way. Read more in this post NethServer has switched to Nextcloud from version 7 and developers have built the software packages for the community to easy install and update the app.

Advanced static routes

We have improved actual configuration of static routes, now it's possible to implement routes
  • with specific selection of device and metric
  • to force a defaut gateway
This improvement make our firewall more versatile especially in a VPS environment

New bandwidth monitoring module

NethServer comes with ntopng which has also some limitations: only few hours of history available, large amounts of disk space allocated. Plus, our community asked many times a simpler tool to monitor bandwidth usage With all this in mind, in the Beta2 we have added a new module called: BandwidthD BandwidthD is a solid tool that has a proven trackrecord, widely adopted and better integrated in our WebUI

New pop3 connector module

Fetchmail is a remote mail retrieval application that unfortunately doesn't work correctly with some ISP's. Therefore we replaced Fetchmail with the much more promising Getmail application. It's written in Python, easy to extend or customize thanks also to a flexible and extensible architecture.

Reverse proxy

The reverse proxy feature is useful when you want to access internal sites from the outside network and host on an internal webserver. Developed time ago, in Beta2 we added a handy WebUI to configure this amazing feature.

Installation from USB

We have improved the Installation of NethServer from USB, now it works like a charm and it will become a mandatory feature for servers without cdrom reader.

SCL repository is now enabled by default

Software Collections, also known as SCLs, allow you to run the default software version of major applications (like php, python, etc..) that come with CentOS while also allowing a newer version of them to be installed alongside the default version for creating and running software with newer requirements. Now we can use all the power of SCL repository since it's now enabled by default and users can install applications from SCL repository using the yum command.

And so much more

These are just the major highlights in 7 beta2— there are other tiny improvements, refinements, and bugfixes that we aren’t covering here like:
  • Improved package removal on Software Center
  • Refactored implementation of Apache configuration
  • Let's Encrypt
  • Firewall
  • Samba
  • Home binding
  • DHCP on green
  • Roundcubemail
  • SSSD configuration
  • Certificate management
  • Installation from USB

What does the Beta release mean?

Beta releases can be used in production, especially if new features are not used on mission critical systems. Upgrades to the final release will be supported.

What needs test

Also in Beta2, the most notable new feature that needs a good amount of testing is the AD Domain Controller setup, with particular focus on the depending functions such as email, shared folders and user authentication.

Feature freeze phase

This release is already in a core feature freeze phase, all work on adding new core features is suspended, shifting the effort towards fixing bugs and improving the stability and user experience. This Beta2 release contains all the exciting features of NethServer 7 in a form that anyone can help test. This testing, guided by the NethServer team, helps us target and identify bugs.

Future release

Very likely, new modules will be added or modified before the final release, we invite to stay tuned with our community for fresh news and updates about the forthcoming Release Candidate

Thank the overall NethServer community

As usual, we’d like to first thank the overall NethServer community for contributions toward these improvements — whether it was in feedback, bug reports and suggestions or our personal favorite, feedback based on participation in your very own NethServer community.

Why Bruschetta?

"Bruschetta " is an antipasto (starter dish) from Italy consisting of grilled bread rubbed with garlic and topped with olive oil and salt. It's the favorite dish of @GG_jr and @dnutan so that would be a special tribute to those huge contributors. As Grabriel stated: NS beta 2 it's like a "starter dish" before NS RC1 and possible NS RC2 and we will finish with the desert, NS 7 final release.

Download and Test

We need your help to make NethServer 7 the best release yet, so please take some time to download and try out the Beta2 and make sure the things that are important to you are working.
  • You can install it on a virtual machine or on a bare-metal server using a DVD or USB stick
  • Upgrade from Beta1 is supported through the Software center
If you find a bug, please report it replying to this topic – every bug you uncover is a chance to improve the experience for thousands of NethServer users worldwide, also our amazing beta testers team will be called upon to give its support on that! Together, we can make NethServer rock-solid. We have a culture of coordinating new features and pushing fixes upstream as much as possible, and your feedback will help improve not only NethServer but Linux and free software as a whole. Ready to check it out? Then head to the docs and download:
NethServer 7 Beta2 (784MB) (from SourceForge.net)

Read more

Nextcloud: easy to Install, Manage and Use. Just 1 Click Away


nextcloud_logo

Nextcloud is a new open source project that makes a private cloud platform at your home. The objective is to give people back control over their data. As Frank Karlitschek (the founder) announced on 2 June 2016, it was born as a fork of the well-known OwnCloud project to reboot it in a better way.

As OwnCloud, Nextcloud is a web application to store data in your own private machine in a centralized manner. The service is similar to Dropbox or Google Drive, but your personal data reside on your personal server under your control, not in someone else’s data center. Nextcloud permits to store your files, folders, contacts, photo galleries, calendars (or anything else) on a server of your choice protecting your privacy. Thanks to the web/mobile/desktop apps, you can access your data wherever you are, whenever you need it. Your data is always synchronized amongst your devices. One folder, two folders or more – get the most recent version of your files with the desktop and web client or mobile app of your choice, at any time.

NethServer has switched to Nextcloud from version 7 and developers have built the software packages for the community to easy install and update the app.

What are the differences with OwnCloud ?

We love Nextcloud because it aims to significantly accelerate development, focusing on an open process with fewer blockers like Contributor License Agreement or closed enterprise app. It reduces barriers to contribution and increases transparency to enable more input of customers and users. This will provide the bug fixes and security hardening all users need in a very rapid manner.

Nextcloud includes all the enterprise features of OwnCloud as a base installation, integrates a new WebRTC based communication platform with video conferencing and text chat, it has an improved his app store to facilitate developers to deploy new apps and have more and more functions. It has also improved the update process, the possibility to add multiple site federations and so on.

It also offers Collabora, a LibreOffice-based online office which supports all major document, spreadsheet and presentation file formats to edit your file online.

Some key aspects of the project are:

  • security
  • privacy
  • scalability
  • enterprise support
  • resource monitoring
  • easy to use interface
  • many apps as calendar and address books


The problem

Installing and properly configuring Nextcloud requires some efforts: you need to install the web server, the database, the software and integrate all those parts together. And if you need to integrate it with your existing system user and groups ? Or configure daily incremental backups ? Or if you want to manage automatic update/upgrade to the latest version ? Using NethServer it is possible to have a Nextcloud 1-Click installation and automatic subsequent updates without any efforts.


What is NethServer ?

NethServer is a server Linux distribution which have the main goal to make sysadmin’s life easier with Open Source. NethServer helps sysadmins being successful in the IT space by leveraging all the power of a Linux server without complexity. It offers a simple and easy to use web interface, to install and configure all features of a server, from user creation to software installation.


Nextcloud installation

The installation remains the same of ownCloud with Nethserver 6: you can install it with 1-single click and start to use it immediately.

  • Install Nextcloud from Software center: point your browser to NethServer Software center and select Nextcloud from the list, then click ADD.

1_nc_sw_center

  • The package manager will download the latest Nextcloud version and install it.

2_nc_install

Login to Nextcloud

  • Once the installation is complete you can login to Nextcloud with your NethServer user account at https://your_server/nextcloud. You can always login as "admin" user.

3_nc_login

  • On the first login you will see the welcome message:

4_nc_login_welcome

  • And now you can use your data as you prefer:

5_nc_home

A new community has grown up with a number of participants always increasing that permit to have a great product. As Jos Poortvliet (the Nextcloud community manager) said in his blog: "Nextcloud is the future of open source file sync and share and it is the next generation of on-premise cloud technology." This new project is amazing and NethServer is the best choice to use it without any effort, easily and quickly.

Enjoy it and meet us at NethServer community ! 😉

Written by Alessandro Polidori

Useful links

http://nextcloud.com

https://help.nextcloud.com

http://www.nethserver.org

http://docs.nethserver.org/projects/nethserver-devel/en/v7b/nethserver-nextcloud.html

Read more

Overall on NethServer 7 Testing Campaigns


In the past months we have asked for help to our members in making NethServer 7 the best release yet , that's a big step forward on the path of innovation and now we can finally take full advantage of the power of Centos 7 These are the results, a generic overview summarized by numbers that higlights the community interest, partecipation and effort. testing-report2 Also, testing threads were extremely effective at involving new members, in this image you can find which posts have generated the most first-time responses by members. new_users_testing_involved As usual, we’d like to first thank the overall NethServer community for contributions — whether it was in feedback, bug reports and suggestions or our personal favorite, feedback based on participation in your very own NethServer community.

Read more

NethServer 7 Beta1 "Mayo" released


pablo (26) After less then two months of hard work on Alpha3, I'm excited to announce that NethServer 7 Beta1 "Mayo" has been released and is publicly available.

What does the Beta release mean?

Beta releases could be used in production, especially if new features are not used on mission critical systems. Upgrades to the final release will be supported. The most notable new feature that needs a good amount of testing is the AD Domain Controller setup, with particular focus on the depending functions such as email, shared folders and user authentication. With this release, we enter a feature freeze phase, all work on adding new core features is suspended, shifting the effort towards fixing bugs and improving the stability and user experience. Very likely, new modules will be added or modified before the final release. This Beta release contains all the exciting features of NethServer 7 in a form that anyone can help test. This testing, guided by the NethServer team, helps us target and identify bugs. Now, we’re thrilled to share it with you and hear your feedback, so let’s jump right into it.

Overview

The first Beta release of NethServer 7 will bring numerous goodies: a new look that differentiates it from the NethServer 6 family, a brand new Virtual Host panel for easy management of the web server configuration, the ability to configure a Green interface in DHCP mode, refactoring of the "Shared Folder" page with Virtual Hosts and Active Directory Domain Controller role in mind. MultiWan configuration is now merged into the Network page, the Certificate Management panel lets you edit the default self-signed certificates or upload a custom one from an SSL certificate provider. We have simplified Network Services management and new services Rules are added directly from the Firewall panel.

Changes from Alpha

There is a ton of major changes from Alpha and it’s impossible to cover them all in detail here, so here are some of our favorite highlights:

Simplified Network Service panel, added Zones and new rules on Firewall

The implementation of remote network access to system services has been removed from the Network services panel, because It's now possible create Firewall rules to add restrictions. Network services appears as not removable rules on the Firewall panel and using the Firewall itself as source or destination of firewall rules is permitted. services Firewall rules

New Upstream proxy panel

If NethServer can't browse the Internet directly, but has to go thorugh a proxy server, there is now a global HTTP proxy settings page (in the Network panel) to configure all access details for the upstream proxy. The configured proxy will be used for all HTTP and HTTPS traffic originating from the server. The global proxy settings can be overridden for the web proxy (squid) traffic. proxy2

Main DNS Servers configuration moved on Network panel

With the aim of having a single place for all Network configuration options, we have moved the DNS Servers page in the Network panel. dns_proxy

First Configuration Wizard improved

The improved Wizard adds an option to set a smarthost to deliver mails even if the system is not a full featured mail server and checks that the hostname syntax follows the DNS rules. smarthost check_hostname

Certificate Management panel

An updated Server certificate panel allows to edit the default self-signed certificate or upload a custom certificate file bought from SSL certificate provider. The same panel allows you to request a new Let's Encrypt certificate making easier the procedure explained months ago For those of you who are unfamiliar with Let’s Encrypt Client, it is a fully-featured, extensible client for the Let’s Encrypt CA (or any other CA that speaks the ACME protocol) that can automate the tasks of obtaining certificates and configuring service daemons to use them (like webserver). letsencrypt_ssl Example Org   Server certificate

MultiWan configuration is now merged into Network page

Internet Service Providers configuration has been moved to the Network page, consequently MultiWAN fields are added to the Red interface parameters. multi_wan_provider

DHCP mode available for Green

It's now allowed to configure a Green interface in DHCP mode, now DHCP on VPS is a scenario.

Shared folder refactoring

As we already announced we have refactored the "Shared Folder" page with Virtual Hosts and AD Domain Controller role in mind. The "Shared folder" page configures only Samba shares and the "Web access" panel has been moved to the "Virtual hosts" page. User authentication, Extended ACLs and group ownership are enforced only if the server is member of an Active Directory domain.

New Virtual Host panel

This new panel permits to manage the webserver configuration as simple as possible. There is a new kind of object that allows:
  • FTP access to the vhost web root
  • Folders permissions can be set from FTP
  • SSL/TLS certificate selection.
The UI module has a plugin architecture, so additional features can be added by other packages.

“Reload page” button in Software Center

After installing/removing a module from Software Center, a button will invite to "Reload page" to update the dashboard menu.

New look for NethServer 7

We needed a new look for our next release to differentiate the release 7 from old NethServer 6. After a brief survey in the community we chose the "Light Polygons" theme. As part of the new look, we have also refreshed our First Configuration Wizard and the Network Panel with an eye towards usability and readability.

And so much more

These are just the major highlights in 7 beta1— there are literally hundreds of other tiny improvements, refinements, and bugfixes that we aren’t covering here like:
  • Enanchement to Software manager specifically on modules uninstallation
  • Web proxy and Content filter support for Active Directory users and groups
  • Web proxy with PAM and GSSAPI support
  • Domain Controller improvements
  • Authentication with NTLM for Windows XP
  • Authentication with Kerberos for Windows Vista/Seven/10
  • Creation of IP aliases on bridge interfaces
  • VPN panel split in two, OpenVPN and IPsec, to improve users management
  • Shorewall updated to version 5

Thank the overall NethServer community

As usual, we’d like to first thank the overall NethServer community for contributions toward these improvements — whether it was in feedback, bug reports and suggestions or our personal favorite, feedback based on participation in your very own NethServer community. "Mayo" is the primary ingredient of Pizza Rossini and that's a special tribute to one of the main contributors to this release: davidep (aka Davide Principi)

Download and Test

We need your help to make NethServer 7 the best release yet, so please take some time to download and try out the Beta1 and make sure the things that are important to you are working.
  • You can install it on a virtual machine or on a bare-metal server using a DVD or USB stick
  • Upgrade from Alpha 3 is supported through the Software center
If you find a bug, please report it replying to this topic – every bug you uncover is a chance to improve the experience for thousands of NethServer users worldwide, also our amazing beta testers team will be called upon to give its support on that! Together, we can make NethServer rock-solid. We have a culture of coordinating new features and pushing fixes upstream as much as possible, and your feedback will help improve not only NethServer but Linux and free software as a whole. Ready to check it out? Then head to the docs and download:
NethServer 7 Beta1 (784MB)

Read more

On the road towards NethServer 7 Beta 1


Many people have asked me about NethServer 7 developments, obviously they're right and fresh news is needed! Let me say that these were crazy weeks, we have shipped NethServer 6.8 (Beta and Final) and it has been about 1 month since 7 Alpha 3 release which seems like an eternity ago. It's time to break it all down and reveal what the future holds for NethServer 7 Beta1

These are just a bunch of updates for Alpha version, beta1 ISO it isn't released yet but it will be available soon.

Certificate Management panel

With the NethServer update available in the last weeks comes a new certificate page where it will be possible to edit the default self-signed certificate or upload a custom certificate file bought from SSL certificate provider. The same panel allows you to request a new Let's Encrypt certificate making easier the procedure explained times ago For those of you who are unfamiliar with Let’s Encrypt Client, it is a fully-featured, extensible client for the Let’s Encrypt CA (or any other CA that speaks the ACME protocol) that can automate the tasks of obtaining certificates and configuring service daemons to use them (like webserver) letsencrypt_ssl Example Org   Server certificate

MultiWan configuration is now merged into Network page

Providers configuration has been removed and moved to the Network page consequently new MultiWAN fields are added to the Red interface parameters. Main settings, like mode balance/backup, will be still available In the MultiWan page multi_wan_provider

DHCP mode available for Green

It's now allowed to configure a Green interface in DHCP mode, now DHCP on VPS is a scenario (Aruba or similar) we support perfectly.

Shared folder refactoring

As we already announced we have refactored the "Shared Folder" page with Virtual Hosts and AD Domain Controller role in mind. The "Shared folder" page configures only Samba shares and the "Web access" panel has been moved to the "Virtual hosts" page. User authentication, Extended ACLs and group ownership are enforced only if the server is member of an Active Directory domain

New Virtual Host panel

This new panel permits to manage the webserver configuration as simple as possible. There is a new kind of object that allows:
  • FTP access to the vhost web root
  • Folders permissions can be set from FTP
  • SSL/TLS certificate selection.
The UI module has a plugin architecture, so additional features can be added by other packages. About ProxyPass feature we'd release a separate page since it seems a different use case, more firewall oriented.

“Reload page” button in Software Center

After installing/removing a module from Software Center a button with the invite to "Reload page" appears.

New look for NethServer 7

We needed a new look for our next release to differentiate the release 7 from old NethServer 6, so our Alessia tried to make a few attempts. The rule was Few changes to code for little CSS and graphic refactor. Do not waste too much time doing it. After a brief survey in community we chose the new beautiful "Light Polygons" theme. As part of new look we have also refreshed our First Configuration Wizard and the Network Panel with an eye towards usability and readability.

How to obtain these new improvements?

Just install NethServer 7 alpha 3 and click on Update button in the Software Center

Thank you

As usual, we’d like to first thank the overall NethServer community for contributions toward these improvements — whether it was in feedback, bug reports and suggestions.

Read more

NethServer 6.8 "Final" released!


I'm proud to announce that NethServer 6.8 has been released and is publicly available and is the newest long-term support release.

Highlights

There are a ton of major changes to NethServer and it’s impossible to cover them all in detail here, so here are some of our favorite highlights.

  • Based on the recently released CentOS 6.8 operating system,
  • SELinux policy changed from permissive to disabled
  • Package collectd upgraded from version 4 to 5

Firewall: web interface for policy routing

New interface module for managing policy routing rules.

Simplified Multi WAN configuration

New configuration for the multi-wan monitoring along with a new interface.

Performance

As always, there have been several changes with a focus on performance. This includes an optimized ntopng since it heavily used redis to save temporary data about host network traffic. In a scenario where there are many hosts involved, ntopng will highly increase redis memory usage

Use DNSBL to fight spam

Better spam filtering by using the DNS-based Blackhole List (DNSBL),

  • Support for CIDR and IP ranges as source and destination for proxy bypass

Bonding mode

It's now possibile to create a bond with specific mode (active-backup, balance round robin, etc) from the Network page

NethForge enabled by default

Support for installing and enabling the NethForge Software Center category by default, allowing users to find extra modules built by the community.

YUM clean button

New button for cleaning the YUM transactions for freeing up disk space and resolving software installation issues.

New "Public IP" field for OpenVPN

Added a remote field in OpenVPN interface to cover some scenarios where the OpenVPN client can't find the server by searching for its host name

Support for multiple interfaces on ntopng

Now enabling ntopng, all traffic passing through several network interfaces will be analyzed

Other improvements

  • Hairpin NAT from blue and orange
  • New release of WebTop with support for Active Directory, data import from SOGo, and many other updates
  • Upgrading to Owncloud 7.0.13
  • Updated language pack and new Portoguese Brazilian language
  • Multiple fixes for: PPPoE, sNAT, IP/MAC binding, squid, RoundCube, DHCP, pulledpork, adagios, vsftpd, pop3 scan, group email addresses creation.
  • Improve fax report quality
  • Web antivirus whitelist
  • AD groups for squidguard profiles
  • IPsec tunnels with PPPoE
  • New WPAD implementation which includes also proxy bypass
  • Mail to fax
  • Many bug fixes and small enhancements
  • Enhancements to email archive filter
  • L2TP now correctly works with multi WAN
  • IPSec tunnels automatically enable firewall-to-firewall traffic
  • support for using IP and CIDR (Classless Inter-Domain Routing) ranges as the source and destination for the proxy bypass settings, Add CIDR subnets and ip ranges as hosts without proxy in Proxy
  • Samba now supports roaming profiles fir Windows 8,8,1 and 10
  • Samba shares can now be browseable or hidden
  • Various bug fixes on firewall rules and objects, backup web interface, trusted networks, coova chilli, dashboard and bond configuration

Upgrade from version 6.7

Start the update as usual from the Software Center page. It is recommended to reboot the system at the end of the update procedure. updates_nethserver

Thank you

As usual, we’d like to first thank the overall NethServer community for contributions toward this release — whether it was in pull requests, feedback, bug reports and suggestions.

Download

NethServer 6.8 (490MB)

Torrent link: nethserver-6.8-x86_64.iso.torrent

Comment this announce

Read more

NethServer 6.8 beta1 Released!


We are proud to announce a new NethServer release.

NethServer 6.8 beta1 is here, on schedule for our planned June final release.

What is the Beta release?

The Beta release contains all the exciting features of NethServer 6.8 in a form that anyone can help test. This testing, guided by the NethServer team, helps us target and identify bugs.

NethServer Rolling Releases and CentOS

A NethServer system is constituted by RPMs that come mainly from CentOS mirrors and NethServer mirrors. CentOS releases errata and bugfixes recompiling RHEL packages, as reported by the centos-announce mailing list and NethServer does the same, announcing new releases of its specific RPMs on our community.

When CentOS produces a new minor version like 6.8 they publish a new "minimal" ISO image, therefore the NethServer developers do the same adding a small RPM set on that image together with a kickstart file. The resulting image is the NethServer ISO, with installer, server-manager and other stuff.

NethServer 6.8 beta1 changes from 6.7

Highlights

  • Upstream updates from CentOS 6.8
  • Firewall: web interface for policy routing
  • Simplified Multi WAN configuration
  • Use DNSBL to fight spam
  • IPsec site-to-site support
  • Support for CIDR and IP ranges as source and destination for proxy bypass
  • Bonding mode: it's now possible to specify the bond mode (active-backup, balance round robin, etc) from the Network page
  • NethForge is now install and enabled by default like in 7
  • YUM clean button

Firewall and Ntopng

  • Ntopng memory usage optimized
  • Support for multiple interfaces on Ntopng
  • Hairpin NAT from blue and orange

Proxy and Content Filter

  • Web antivirus whitelist
  • AD groups for squidguard profiles
  • Add CIDR subnets and ip ranges as hosts without proxy in Proxy
  • New WPAD implementation which includes also proxy bypass

VPN

  • IPsec tunnels with PPPoE
  • L2TP now correctly works with multi WAN
  • IPSec tunnels automatically enable firewall-to-firewall traffic
  • New "Public IP" field for OpenVPN to ease client configuration
  • Added a remote field in OpenVPN interface to cover some scenarios where the OpenVPN client can't find the server by searching for its host name

Fax Server

  • Mail to fax
  • Improve fax report quality

Shared Folders and PDC

  • Samba now supports roaming profiles fir Windows 8,8,1 and 10
  • Samba shares can now be browseable or hidden

Various upgrades

  • New release of WebTop with support for Active Directory, data import from SOGo, and many other updates
  • Upgrading to Owncloud 7.0.13
  • Updated language pack and Portoguese Brazilian is added

Others

  • Various bug fixes on firewall rules and objects, backup web interface, trusted networks, coova chilli, dashboard and bond configuration
  • Multiple enhancments for: PPPoE, sNAT, IP/MAC binding, squid, RoundCube, DHCP, pulledpork, adagios, vsftpd, pop3 scan, group email addresses creation.

Download or upgrade

Please take some time to download and try out the Beta and make sure the things that are important to you are working. If you find a bug, please report it. This is a great opportunity for non-programmers to contribute back to NethServer.

NethServer 6.8 Beta 1

Manual upgrade from 6.7

The system can be upgraded from the command line.

Make sure the system is fully updated:

yum update

Upgrade the nethserver-release package:

yum localinstall http://mirror.nethserver.org/nethserver/nethserver-release-6.rpm

Clean up yum cache and run update again:

yum clean all && yum update

Finally, reboot the system (optional).

Read more

NethServer 7 alpha3 released


enter image description here

After a few months of hard work, I'm proud to announce that NethServer 7 alpha 3 has been released and is publicly available.

NethServer Alpha 3 brings the Active Directory integration and a centralized account management (so-called "multi-site").

We’re thrilled to share it with you and hear your feedback. We’ve got a lot of news to share with you, so let’s jump right into it.

Overview

NethServer is now designed to leverage existing Active Directory infrastructure and simplify administrative and user control. Administrators can quickly and securely roll out policy decisions using their existing Active Directory. Users authenticate against a single directory, removing the need for multiple accounts, syncing passwords or duplicating information.

Account management

Account management module is included in the ISO, so after the installation the following scenarios are supported out of the box:

  • connecting a remote NethServer running OpenLDAP,
  • connecting a remote Active Directory Domain Controller (Samba or Windows).

By installing additional modules from the Software Center, it is possible to run one of the following identity backends:

  • OpenLDAP,
  • Samba Active Directory.

Samba 4 technology

NethServer is now able to act as Samba Active Directory Controller. Samba Domain Controllers are compatible with the Microsoft Active Directory implementation, that means

  • NethServer can replace a Microsoft Active Directory Domain Controller
  • Native MS-Windows management tools, like RSAT tools and AD PowerShell are compatible with NethServer
  • Group policies can be deployed through native MS-Windows tools
  • Windows workstations can seamlessly join the AD Domain, no more registry tweaks are needed.

Differences from NethServer 6

On NethServer 6, we joined an Active Directory domain in Samba ADS mode, therefore some limitations came up:

  • only some services were configured to work with it,
  • the web UI did not show AD accounts at all,
  • the implementation and the configuration was very complex: 4K lines of code and 3 user databases to keep aligned.

The old Windows NT domain controller role, known as Primary Domain Controller (PDC) role is no longer available.

The workstation (WS) role supports only guest access to file shares.

Upgrade of NethServer 6 is not implemented in Alpha 3. It is planned for the future releases. Both PDC and WS roles should be migrated to Active Directory, to keep the same user authenticated access on file shares.

Big mail server enhancements

Mail server received a lot of love from our developers:

  • all users automatically have a valid mail address: username@domain (of course, you can disable it)
  • mail alias page has been refactored and now you can create distribution lists with internal and external mail addresses
  • you can now create shared mailboxes and associate them to a custom mail alias
  • mail quota and mail queue status have been moved under the Status menu section

Under the Hood

We focused on one main aspect: replace the current user management layer with SSSD.

As you can imagine, this is a huge change at many levels, from e-smith layer to web interface.

Much work has been done and many modules must be adapted to the new core.

This release brings a limited number of supported modules, we will work hard in the next days to add all missing ones.

NethForge is now enabled by default

NethForge is the place where you can find extra modules built by the community. The release RPM is now inside the default distribution, so it's enabled by default and a new "NethForge" category will be available inside the Software Center.

Supported modules

  • IPS (Snort)
  • Backup
  • DNS and DHCP
  • Hylafax
  • Firewall
  • FTP
  • Printers
  • UPS
  • Bandwidth monitor (ntopng)
  • HTTPD
  • OpenVPN
  • Collectd with CGP
  • MariaDB (MySQL)
  • PostgreSQL
  • SNMP
  • Chat
  • Webtop 4
  • Roundecubemail

Following modules have been moved inside the NethForge:

  • SOGo
  • WebVirtMgr (KVM)

Temporarly unsupported modules

  • Shared folder, including Samba and HTTP shares (a full refactor is needed)
  • Web proxy and web content filter
  • VPN IPSec (tunnels already work)
  • Owncloud (need testing with AD and OpenLDAP)
  • Pop3 proxy
  • Adagios and OCS inventory

Deprecated modules

  • Web fax client (Faxweb2)
  • Collectd web, replaced by CGP

Download and Test

We need your help to make NethServer 7 the best release yet, so please take some time to download and try out the Alpha and make sure the things that are important to you are working.

  • You can install it on a virtual machine or on a bare-metal server using a DVD or USB stick.
  • Please, note that upgrade from Alpha 2 is NOT supported.

If you find a bug, please report it replying to this topic – every bug you uncover is a chance to improve the experience for thousands of NethServer users worldwide, also our amazing beta testers team will be called upon to give its support on that!

Together, we can make NethServer rock-solid. We have a culture of coordinating new features and pushing fixes upstream as much as possible, and your feedback will help improve not only NethServer but Linux and free software as a whole.

Ready to check it out? Then head to the docs and download:

NethServer 7 Alpha 3

Read more