FireBrick - Firewalls, Bonding ADSL, Routers, Traffic Shaping...
FireBrick SoHo / Plus Software
As a matter of policy, FireBrick software upgrades are free to download for all FireBrick customers.
You are currently viewing the most recent factory software releases for the FireBrick SoHo / Plus.
Installation Instructions
To install new software you need to load two files:
- a FireBrick software file
- a User Interface file.
Log in to your FireBrick administration pages, select Setup and then Upload/Restore, and select the FireBrick software file you downloaded. This will take up to a minute to load, after which you are prompted to load the user interface. Select the user interface file requested. This will take up to a minute, and then your FireBrick will be ready to use again.
Select the correct OEM version for your FireBrick (default is Standard)
Slight change for delayed packets (error packets/responses) affected normal traffic
Speed lanes were not re-allocated when time profiles changed unless "re-route" also ticked on profile. Fixed
Slight change in TCP stack for RST responses
Corrected winter time / summer time change to be 01:00 UTC not 01:00 BST
Subtle internal error in tunnel handling fixed - could drop some tunnel packets incorrectly.
Changed URL for manuals and software on FireBrick website.
Internal changes for factory build - no other changes
As 1.17.283 (Estelle)
1.17.283 (Estelle) Beta
Default IMAP filter changed for IMAP4 (port 143)
It appears that moving filters, or routes, etc, left the firebrick in a state where a reboot would lose the config.
1.17.281 (Celia) Beta
Fixed "Clear alert" on Setup.
Changed to link from login as this affected customers using other ports than port 80
Added tunnel source IP address option (useful when using multiple backup routes)
1.17.274 (Blas) Beta
Minor corrections to user interface - do not use Agatha
1.17.273 (Agatha) Beta
SNMP now reports interface speed for a speed lane as the highest of the rate *or* cap on a speed lane, as rate alone could be too low and so ignored by mrtg.
Changes to internal operation of user interface - please advise if any problems
Profiles were not being set in some options (e.g. subnet) in SoHo, fixed
Full protocol selection (e.g. GRE, IPSec) now available in SoHo
Bonded uplink now available on SoHo (but not ping scanning or fallback)
Load balanced routing now available in SoHo, but cannot put after subnets like the Plus
Bounce mode for filters now available on SoHo
Filter timeout control now available on SoHo
SYN, bypass and end-log filter options now available on SoHo
Changed UI to non frames, and stylesheets - now works from a P800 - please let me have comments
Added some colour selection to the UI settings allowing the main background to be selected (per user)
Changed so that re-route on profiles clears and FB initiated UDP sessions such as tunnels.
Changed portmap so that if there is a port, but no protocol specific, then the packet has to be TCP or UDP. Previously another protocol other than UDP or TCP would ignore the port and hence match the portmap.
Added second pseudo address to allow bonded uplink as well as load balanced NATing downlink. If using bonded uplink already, set the pseudo address the same as your gateway.
Reversed In/Out for speed lanes on SNMP to be a bit more logical overall.
1.17.235 (Vivian) Beta
Profiles can now be dependant on another profile (AND/OR)
Adjusted default master speed lane to 1250KB/s limit
Complete rewrite of SNMP. Now includes responses with correct types for all of the "interfaces" group. snmpwalk is happy. cfgmaker is happy. Please test and advise any problems.
Minor changes to improve speed of software upload on LAN
1.17.190 (Terry) Beta
Changed web log output to cater for <, >, and & in the log, e.g. from login attempts (shows as -)
Changes to live sessions talking to/from the FireBrick are dropped if the IP in use changes (for tunnels and DHCP)
Changes of IP on subnets now cause the FireBrick to send a self ARP query to help detect duplicate IPs
Changed email from FireBrick to include text of first email log line at end of subject (also included in body as before) - ideal for SMS'd subjects
Some tunnel and dhcp logging made "events" not "debug", and "debug" entries removed.
Basic SNMP (read only) operation, compatible with mrtg, allowing monitoring of WAN, LAN and speed lanes. Please advise any incompatibility issues.
Profiles can now be set to be dependant on another profile (or not a profile) being active. Ideal for multiple fallback routing.
1.17.084 (Sandra) Beta
Slight change for ATE operation.
Interface swap option to setup screen so LAN on left and WAN on 4 port hub
Factory reset changed, using port 2 sets DHCP client/server and LAN/WAN reverse, port 3 sets non DHCP and LAN/WAN reverse.
1.17.066 (Rick) Beta
New bonded uplink feature designed for ADSL line use. See manual for details.
No longer treating the "network" address as a broadcast on the LAN. Ideal as pseudo gateway for bonded uplink feature.
1.17.060 (Patricia) Beta
Incorrect tunnel name for source tunnel traffic on session table, fixed
COrrect time zone on "last login" on users list, was UTC
1.17.058 (Olaf) Beta
Changed source port for time setting to 1024 not 2 as low source ports caused problems on some firewalls, leased lines and even current linux releases.
Changed default time servers (for factory default)
1.17.055 (Nora) Beta
Slight change to "Fast/TOS" mode. TOS with it 4 or 7 are treated as "priority"
Summer/winter time control only applies if time is actualy set - was creating otherwise spurious log entries.
Changed default TTL from 64 to 100 as some people run tunnels over very strange internet links.
1.17.050 (Marty) Beta
DHCP server will send SMTP server address if requested by client
TCP SYN+FIN or SYN+RST will now be put through default filter/logging
1.17.044 (Linda) Beta
Added low level interrupt load control for rare cases of stupidly high volume LAN/LAN traffic
Added Fast TOS to speed lanes - making packets with TOS 0x10 (low latency) are not delayed by that speed lane.
Changed tunnel code to preserve TOS of contained packet allowing Fast TOS to be used on tunnelled VoIP traffic.
Changed login slightly to avoid showing username/password in location bar on some broswers.
Fixed bug where LAN and WAN are both DHCP client, but no server on WAN, took ages for LAN to get address.
1.17.028 (Kevin) Beta
DHCP restrict only applies if restricted subnet is in enabled profile
Further tidy of DHCP server to avoid messy duplicate MACs in allocation in some obscure circumstances where previous entry is now invalid.
Added some extra debug logging to DHCP server for when IP allocations change.
Made DHCP server debug messages a bit more consistent.
DHCP status page now allows manual naming of clients which do not send a name - type name and press return.
1.17.018 (Jimena) Beta
DHCP server sends lease time even if not in list of requested options as linux does not ask for it then assumes 0, duh!!
1.17.017 (Ignacio) Beta
DHCP server now only fields requested in options in request. If no options requested then everything possible is sent.
DHCP server bootp options now server IP and file, not server name.
1.17.011 (Hilda) Beta
Changed behaviour of DHCP Restrict option - now means that if a name matches any resticted subnet then it can only have IPs from that subnet. Still means names that do not match cannot have IPs from restricted subnets, as before.
Fixed log of refused DHCP request to show IP requested not one being offer instead
Fixed DHCP removal existing IP if out of range IP requested (e.g. laptop moving between sites)
1.17.005 (Guillermo) Beta
Added bootp server name (sname) and filename (file) options to subnets.
1.17.283 (Estelle) Beta
Default IMAP filter changed for IMAP4 (port 143)
It appears that moving filters, or routes, etc, left the firebrick in a state where a reboot would lose the config.
1.17.281 (Celia) Beta
Fixed "Clear alert" on Setup.
Changed to link from login as this affected customers using other ports than port 80
Added tunnel source IP address option (useful when using multiple backup routes)
1.17.274 (Blas) Beta
Minor corrections to user interface - do not use Agatha
1.17.273 (Agatha) Beta
SNMP now reports interface speed for a speed lane as the highest of the rate *or* cap on a speed lane, as rate alone could be too low and so ignored by mrtg.
Changes to internal operation of user interface - please advise if any problems
Profiles were not being set in some options (e.g. subnet) in SoHo, fixed
Full protocol selection (e.g. GRE, IPSec) now available in SoHo
Bonded uplink now available on SoHo (but not ping scanning or fallback)
Load balanced routing now available in SoHo, but cannot put after subnets like the Plus
Bounce mode for filters now available on SoHo
Filter timeout control now available on SoHo
SYN, bypass and end-log filter options now available on SoHo
Changed UI to non frames, and stylesheets - now works from a P800 - please let me have comments
Added some colour selection to the UI settings allowing the main background to be selected (per user)
Changed so that re-route on profiles clears and FB initiated UDP sessions such as tunnels.
Changed portmap so that if there is a port, but no protocol specific, then the packet has to be TCP or UDP. Previously another protocol other than UDP or TCP would ignore the port and hence match the portmap.
Added second pseudo address to allow bonded uplink as well as load balanced NATing downlink. If using bonded uplink already, set the pseudo address the same as your gateway.
Reversed In/Out for speed lanes on SNMP to be a bit more logical overall.
1.17.235 (Vivian) Beta
Profiles can now be dependant on another profile (AND/OR)
Adjusted default master speed lane to 1250KB/s limit
Complete rewrite of SNMP. Now includes responses with correct types for all of the "interfaces" group. snmpwalk is happy. cfgmaker is happy. Please test and advise any problems.
Minor changes to improve speed of software upload on LAN
1.17.190 (Terry) Beta
Changed web log output to cater for <, >, and & in the log, e.g. from login attempts (shows as -)
Changes to live sessions talking to/from the FireBrick are dropped if the IP in use changes (for tunnels and DHCP)
Changes of IP on subnets now cause the FireBrick to send a self ARP query to help detect duplicate IPs
Changed email from FireBrick to include text of first email log line at end of subject (also included in body as before) - ideal for SMS'd subjects
Some tunnel and dhcp logging made "events" not "debug", and "debug" entries removed.
Basic SNMP (read only) operation, compatible with mrtg, allowing monitoring of WAN, LAN and speed lanes. Please advise any incompatibility issues.
Profiles can now be set to be dependant on another profile (or not a profile) being active. Ideal for multiple fallback routing.
1.17.084 (Sandra) Beta
Slight change for ATE operation.
Interface swap option to setup screen so LAN on left and WAN on 4 port hub
Factory reset changed, using port 2 sets DHCP client/server and LAN/WAN reverse, port 3 sets non DHCP and LAN/WAN reverse.
1.17.066 (Rick) Beta
New bonded uplink feature designed for ADSL line use. See manual for details.
No longer treating the "network" address as a broadcast on the LAN. Ideal as pseudo gateway for bonded uplink feature.
1.17.060 (Patricia) Beta
Incorrect tunnel name for source tunnel traffic on session table, fixed
COrrect time zone on "last login" on users list, was UTC
1.17.058 (Olaf) Beta
Changed source port for time setting to 1024 not 2 as low source ports caused problems on some firewalls, leased lines and even current linux releases.
Changed default time servers (for factory default)
1.17.055 (Nora) Beta
Slight change to "Fast/TOS" mode. TOS with it 4 or 7 are treated as "priority"
Summer/winter time control only applies if time is actualy set - was creating otherwise spurious log entries.
Changed default TTL from 64 to 100 as some people run tunnels over very strange internet links.
1.17.050 (Marty) Beta
DHCP server will send SMTP server address if requested by client
TCP SYN+FIN or SYN+RST will now be put through default filter/logging
1.17.044 (Linda) Beta
Added low level interrupt load control for rare cases of stupidly high volume LAN/LAN traffic
Added Fast TOS to speed lanes - making packets with TOS 0x10 (low latency) are not delayed by that speed lane.
Changed tunnel code to preserve TOS of contained packet allowing Fast TOS to be used on tunnelled VoIP traffic.
Changed login slightly to avoid showing username/password in location bar on some broswers.
Fixed bug where LAN and WAN are both DHCP client, but no server on WAN, took ages for LAN to get address.
1.17.028 (Kevin) Beta
DHCP restrict only applies if restricted subnet is in enabled profile
Further tidy of DHCP server to avoid messy duplicate MACs in allocation in some obscure circumstances where previous entry is now invalid.
Added some extra debug logging to DHCP server for when IP allocations change.
Made DHCP server debug messages a bit more consistent.
DHCP status page now allows manual naming of clients which do not send a name - type name and press return.
1.17.018 (Jimena) Beta
DHCP server sends lease time even if not in list of requested options as linux does not ask for it then assumes 0, duh!!
1.17.017 (Ignacio) Beta
DHCP server now only fields requested in options in request. If no options requested then everything possible is sent.
DHCP server bootp options now server IP and file, not server name.
1.17.011 (Hilda) Beta
Changed behaviour of DHCP Restrict option - now means that if a name matches any resticted subnet then it can only have IPs from that subnet. Still means names that do not match cannot have IPs from restricted subnets, as before.
Fixed log of refused DHCP request to show IP requested not one being offer instead
Fixed DHCP removal existing IP if out of range IP requested (e.g. laptop moving between sites)
1.17.005 (Guillermo) Beta
Added bootp server name (sname) and filename (file) options to subnets.
FireBrick SoHo/Plus