http://www.zeroshell.net/eng/ Zeroshell Net Services is a Server Linux distribution that provided the main services a LAN requires: authentication and authorization with Kerberos 5 and LDAP, Radius server and Captive Portal for network web login, routing and bridging with 802.1q VLAN suport, VPN site-to-site and host-to-site, dns and dhcp servers, xDSL connection, dynamic dns client, virtual servers, WAN connections load balancing, Network Time Server, syslog server, .... en Fulvio Ricciardi Sun, 30 March 2008 Fulvio.Ricciardi@zeroshell.net http://www.zeroshell.net/eng/download Jun 29 2008 Zeroshell 1.0.beta10 is ready. It comes with a newer Kernel which is able to manage more recent hardware. Starting with this release, SATA and USB HD/CDROM are also supported for the boot. Setting the IDE Hard Disk as Primary Master is not longer required for booting. Some bugs have been fixed and the Host-to-LAN VPN service with OpenVPN and the startup script support have been improved. http://www.zeroshell.net/eng/patch-details#AA00 Fri, 02 May 2008 A preconfigured version of DansGuardian is available, that cooperating with the transparent proxy service, allows to filter the unwanted web pages. The default configuration blocks the web pages containing adult material. More details available at URL http://www.zeroshell.net/eng/patch-details#AA00 http://www.zeroshell.net/eng/download/ Sat, 30 Mar 2008 It is available an image of Zeroshell 1.0.beta9 that is able to boot from an USB disk. The minimum size of the USB device is 1 GByte. It is compatible either with USB 1.1 or USB 2.0. In addition, by using an USB 2.0 Flash Memory, the bootstrap is faster than using the ISO image. http://www.zeroshell.net/eng/download/ Sat, 15 Mar 2008 Zeroshell 1.0.beta9 is now available. This release contains a Transparent Web Proxy (HAVP) that uses ClamAV Antivirus to scan the web pages visited by the users in order to block Viruses and Worms. In addition, the proxy server allows to manage a Blacklist and a Whitelist of URLs. A flag in the Captive Portal configuration now allows to disable the SSL protocol in the case it is not required for security reason. By using this flag, it is possible to eliminate the security warnings of the user browsers when the X.509 certificate is not signed by a trusted Certification Authority. The flow of QoS classifier has been changed and it is now more intuitive. Apache and OpenSSL packages have been updated, because the previous versions were vulnerable as reported by Nessus. http://www.zeroshell.net/eng/download/ Sun, 20 Jan 2008 Zeroshell 1.0.beta8 is now available. The main new feature is the WiFi support, with which, a Zeroshell box is able to act as a Multi-SSID Wireless Access Point. Any SSID can be either routed or bridged with a 802.1q VLAN. Different type of wireless security access modalities are supported, such as WPA-PSK, WPA-EAP with Radius and WEP. Multiple WiFi cards can be managed in the same box and the Load-Balancing between them can be configured. Many bugs have been fixed and the security level of the Captive Portal and the VPN connections has been increased. In addition, the network interfaces can be configured to dynamically acquire an IP address by contacting a DHCP server. http://www.zeroshell.net/eng/download/ Mon, 04 Nov 2007 In the download section it is available a package which adds WiFi support to Zeroshell. The Client Station and the Access Point modes are both supported. This release of the WiFi package only works with Wi-Fi cards (miniPCI and PCI) which have the Atheros Communications chipsets supported by the Kernel modules available at http://madwifi.org. To learn how to install the Wi-Fi package, read the post http://www.zeroshell.net/eng/forum/viewtopic.php?t=479 http://www.zeroshell.net/eng/download/ Wed, 16 Sep 2007 ZeroShell 1.0.beta7 release is available. A few bugs have been fixed and Host-to-LAN VPN connections are now possible using OpenVPN. This type of VPN, which is supported by the most used platforms such as Linux, Solaris, OpenBSD, FreeBSD, NetBSD, Mac OS X and Microsoft Windows, is easier to configure in the client than the L2TP/IPSec VPN. Using OpenVPN, ZeroShell is able to authenticate the VPN users with X.509 certificates, Kerberos 5 servers (such as a Active Directory Domain controllers) and RADIUS servers. A client configuration file for OpenVPN is available in the download section. http://www.zeroshell.net/eng/download/ Wed, 22 Aug 2007 ZeroShell 1.0.beta6 release is available at the URL http://www.zeroshell.net/eng/download/. The main new features are related to the Captive Portal which is now able to authenticate also by using external RADIUS servers and the X.509 certificates. The X.509 authentication allow you to use the Smart Card to access to the LAN. This release includes the Daemon Watcher that is a process which checks if the services (LDAP, DNS, Kerberos, RADIUS, DHCP, ssh) work fine and it restarts them if a crash occurs. FreeRadius is updated with the latest release which should work with the supplicant 802.1x/PEAP of Windows Vista. http://www.zeroshell.net/eng/download/ Wed, 27 Jun 2007 ZeroShell 1.0.beta5 release is available at the URL http://www.zeroshell.net/eng/download. It contains many bug fixes and new features. The main improvement is the implementation in the Firewall of the Connection Tracking Logger which allows to log all the connections (Protocol, Source IP, Source Port, Destination IP, Destination Port). http://www.zeroshell.net/eng/captiveportaldetails/ Wed, 04 Apr 2007 A Captive Portal BUG is causing that the Username and the Password of the users are listed in the History of the browser. You should not use the Captive Portal in a public place such as a HotSpot in which more users are able to access to a same web browser profile. This bad behavior will be corrected in the 1.0.beta5 release. http://www.zeroshell.net/eng/download/ Sun, 18 Feb 2007 The difference with the previous version is the presence of the package l7-filter that allows to classify the traffic by inspecting the application layer. This is useful if you want to provide the QoS to the protocols that you are not able to identify only with the IP addresses or the TCP/UDP ports such as the VoIP protocols H323 and SIP. http://www.zeroshell.net/eng/download/ Sun, 28 Jan 2007 The main new feature of this release is the QoS (Quality of Service) manager to control the traffic over a congested network. You will be able to guarantee the minimum bandwidth, limit the max bandwidth and prioritize the traffic classes. Moreover, you will able with the Firewall and QoS classifier to intercept Peer-to-Peer file sharing traffic by using IPP2P iptables module and connection tracking. http://www.zeroshell.net/eng/download/ Tue, 07 Nov 2006 Due to several requests I have added support for the WRAP (Wireless Router Application Platform) boards. These nice and cheap small computer for network appliances need of a custom CompactFlash image http://www.zeroshell.net/eng/forum/ Thu, 02 Nov 2006 Some forums are available about ZeroShell, networking, Linux and networking and embedded devices for network appliances http://www.zeroshell.net/eng/download Wed, 25 Oct 2006 ZeroShell 1.0.beta2 Compact Flash image released http://www.zeroshell.net/documentation/ Sat, 21 oct 2006 It is available a pdf how-to by Cristian Colombini about the possibility to protect a LAN using the ZeroShell Captive Portal. http://www.zeroshell.net/eng/download Sun, 24 Sep 2006 The main feature of this release is the Captive Portal to authenticate network access using web login. http://www.zeroshell.net/eng/download Thu, 29 June 2006 The compact flash image of ZeroShell 1.0.beta1 is released. This type of medium is useful to work with embedded devices for network appliances http://www.zeroshell.net/eng/download Sun, 25 June 2006 The ISO image of Zeroshell 1.0.beta1 is now available. The Compact Flash image and the C++ source code will be available as soon as possible.