Where to download old versions
-
@jimp said in Where to download old versions:
Any time we put out a release that contains security fixes, all previous releases are known to be vulnerable to the issues fixed in the latest release. There are a few minor exceptions to that like maybe one issue only affected a specific version between A and B but even so, given that each release fixes quite a large number of problems -- especially in the base OS and packages -- yes, all past releases are insecure in some way.
Thank you jimp. I appreciate the hard work of the team and I also appreciate pfSense very much.
I am pleased with keeping security standards as high as possible.
I am not sure if security is the main reason/focus for not maintaining or publishing one or two previous versions of pfSense in light of version 2.4.4. What I did understand - whilst reading the release highlights - is the upgrade to PHP version 7.2. Looking at this, it makes sense (to me) that packages have to be updated too (and that this creates a break in backward compatibility).
My guess is that the packages are being stored in en repository which is being used by the pfSense branch 2.4.x. In my opinion it is obvious that it would break backwards compatibility.
Looking at this - please correct me if I am wrong - it might have been wiser (but not intrinsically better) to have had a different branch for what currently is 2.4.4 now.
My conclusion is that we are dealing with a break in backwards compatibility and the critical remarks and posts do not surprise me at all.
What I would like to know is if my viewpoint is correct (or at least understood). I guess this matter has your attention (and the team's attention). And I also guess this has been discussed internally. But what to think about the impact? I am hearing and reading critical comments and posts with regards to 2.4.4.
I can praise you guys for all the effort put in pfSense. Thanks for your hard work again. But I am just trying to understand the whole situation and the decisions made.
-
Hi Jimp,
I would like to join bouke in thanking you and all the team for your work. I am more than happy with the wonderful pfSense product and I have not had any problem with the 2.4.4 version in the couple of upgrades that I have already made.
What I was suggesting is not to keep the full history of the project on-line. The packages are not fundamental. In an emergency during an upgrade the simple fact to be able to download and have ready an old installer image that can read and use my previous backed up configuration would be a great help to restore basic connectivity in a minimum lapse of time.
Thank you again
-
@jimp Not sure why you wouldn't keep an older version for roll back. I had tons of issues and now I can't roll back. I love pfSense and you guys are pretty awesome. This kind of thing makes me want to go to OPNSense though because I can't stay on a broken release, I have to do something, can't leave the network in the state it is in
-
@devmaybe said in Where to download old versions:
What I was suggesting is not to keep the full history of the project on-line. The packages are not fundamental. In an emergency during an upgrade the simple fact to be able to download and have ready an old installer image that can read and use my previous backed up configuration would be a great help to restore basic connectivity in a minimum lapse of time.
Thank you again
I cannot fully agree on this. You can't get packages back when you are using an old installer image. This is the whole point. It just doesn't make sense. It would be much better to be able to use one or two previous versions including the required packages. In some scenario's the packages are fundamental.
That 2.4.4 works fine for you doesn't mean it works for the rest of the world. I am sure the dev team would like to receive input and fix it... but in the meanwhile it's not acceptable to wait until such is fixed whilst it worked fine before with an older image.
-
My guess is that this has to do with the change to PHP 7.2 and in the way the packages are organized (changing over to PHP 7.2 means changes in the code base of pfSense and the packages.
-
No I am having issues probably more so related to freeBSD but the 10GB chelsio t520-so are not functioning correctly, they are not even seen as 10GB anymore, traffic shaping is broken because it's saying there's no altq driver but chelsio according to freeBSD is supported. Additionally, it brought down both firewalls in the LAN as auto negotiation for link speed and duplex broke, but only on the LAN interface. This interface is a router on a stick set up, so that may be a bug because the WAN stayed up and it's on the same pci card as the LAN. There is no option to force 10GB for the backbone as well so it's degraded. Not exactly sure what happened in this update but these are problems we didn't have until 2.4.4
-
You could have tested the development versions, or the release candidate, and reported those issue at a time where the devs could have fixed it. But if you just sit back without involving yourself, especially if you run hardware/configurations not officially supported by the devs, you simply have no right to demand anything. And don't forget, you didn't even have to pay for that update either.
-
This post is deleted! -
This post is deleted! -
This post is deleted! -
This post is deleted! -
This post is deleted! -
@bdorr1105
Well if you use a raid setup, then use a decent filesystem like zfs and do snapshots. That's even easier.Btw. I too work as a volunteer, and at a hospice that's only funded by donations. When I started to manage their network I simply donated the needed hardware from my own funds. And I'm far from being wealthy, but if I do work (paid or not) I do it right, as I am a professional.
Edit: Also I didn't address you personally in my initial post, but it seems I caught you there and hit a nerve. Think about it.
-
Locking the topic. It has outlived its usefulness and the question has been answered.
