TurrisOS 3.9.4 is out!

Dear Turris user,

we just released Turris OS 3.9.4. It contains various security fixes but the main feature of this release is updated and much more robust HaaS integration. Full release notes are the following:

  • haas: update to the latest version
  • haas: more robust registration
  • kernel: update to the latest version, Sierra Wireless EM7565 drivers
  • nextcloud: update to the latest version
  • poco, mariadb, curl, unbound, bind: security updates

Happy routing!

3 Likes

Great, thank you! Any idea when this will be in the repositories? Latest tag I can find ATM is still v3.9.3.

After last updates I have some errors in SYSLOG like
SERVER_UPLINK Failed to get registration code
and
TURRIS-FIREWALL-RULES (v63) Failed to download https://api.turris.cz/firewall/turris-ipsets.gz.sign

Yesterday update ? Still version 3.9.3 ?

Install libcurl 7.58.0-1
 • Install kernel 4.4.113-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nf-ipt 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nf-conntrack 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nf-nat 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nf-nathelper 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-base 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-core 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-uhci 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb3 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-cfg80211 4.4.113+2017-01-31-4-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-mac80211 4.4.113+2017-01-31-4-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ath 4.4.113+2017-01-31-4-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ath10k 4.4.113+2017-01-31-4-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ath9k-common 4.4.113+2017-01-31-4-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ath9k 4.4.113+2017-01-31-4-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-libphy 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-swconfig 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-switch-mvsw61xx 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-i2c-core 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-i2c-mv64xxx 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-serial 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-serial-wwan 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-serial-qualcomm 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-hwmon-core 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-thermal 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-thermal-armada 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-mmc 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-mvsdio 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-wdt-orion 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ledtrig-default-on 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ledtrig-gpio 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ledtrig-heartbeat 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ledtrig-morse 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ledtrig-netdev 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ipt-core 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ledtrig-netfilter 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ledtrig-oneshot 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ledtrig-timer 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ledtrig-transient 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ledtrig-usbdev 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install libunbound 1.6.8-1
 • Install kmod-ipt-nat 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ipt-conntrack 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-llc 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-stp 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-bridge 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ebtables 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install curl 7.58.0-1
 • Install kmod-lib-crc-ccitt 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-slhc 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ppp 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-pppox 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-pppoe 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nf-conntrack6 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nf-ipt6 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ip6tables 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install bind-libs 9.11.2-P1-1
 • Install bind-client 9.11.2-P1-1
 • Install bind-dig 9.11.2-P1-1
 • Install server-uplink 4
 • Install kmod-ipt-conntrack-extra 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ipt-ipopt 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ifb 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-sched-core 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-sched 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install foris-common 96.10-1
 • Install foris-config 96.10-1
 • Install foris-wizard 96.10-1
 • Install foris 96.10-1
 • Install foris-l10n-cs 96.10-1
 • Install turris-version 3.9.4
 • Install kmod-nfnetlink 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nf-conntrack-netlink 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install python-requests 2.7.0-1
 • Install python3-base 3.5.2-4
 • Install python3-light 3.5.2-4
 • Install python-cachetools 2.0.1-1
 • Install haas-proxy 1.4-3
 • Install kmod-tun 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-atm 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-pppoa 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-pcompress 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-hash 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-null 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-aead 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-manager 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-ecb 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-sha1 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-mppe 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-iptunnel 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-gre 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-iptunnel6 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ip6-tunnel 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-iptunnel4 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-sit 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-lib-textsearch 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nf-nathelper-extra 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-mii 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-net 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-net-cdc-ether 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-net-rndis 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-wdm 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-net-qmi-wwan 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-serial-option 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-scsi-core 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ata-core 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ata-ahci 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-fscache 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-dnsresolver 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-fcrypt 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-pcbc 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-rxrpc 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-afs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-autofs4 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-lib-xor 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-lib-raid6 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-lib-zlib 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-lib-lzo 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-crc32c 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-lib-crc32c 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-btrfs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-sha256 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-des 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-md4 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-md5 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-hmac 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-cifs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-configfs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-cramfs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-exfat 4.4.113+git-20151121-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-exportfs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-lib-crc16 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-ext4 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-f2fs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-hfs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-utf8 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-hfsplus 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-isofs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-jfs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-minix 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-vfat 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-msdos 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-nfs-common 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-nfs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-lib-oid-registry 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-nfs-common-v4 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-nfsd 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-ntfs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-lib-crc-itu-t 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-udf 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fs-xfs 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-cp1250 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-cp1251 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-cp437 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-cp775 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-cp850 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-cp852 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-cp862 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-cp864 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-cp866 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-cp932 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-iso8859-1 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-iso8859-13 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-iso8859-15 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-iso8859-2 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-iso8859-6 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-iso8859-8 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nls-koi8r 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-md-mod 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-md-linear 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-md-multipath 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-md-raid0 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-md-raid1 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-md-raid10 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-md-raid456 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-storage 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb-storage-extras 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-usb2 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ata-ahci-platform 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ata-mvebu-ahci 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-marvell-cesa 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-dm 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-fuse 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-input-core 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-sound-core 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-authenc 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-cryptodev 4.4.113+1.8-mvebu-2
 • Install kmod-crypto-user 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-cbc 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-wq 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-rng 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-iv 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-seqiv 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-ctr 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-gf128 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-xts 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-cmac 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-sha512 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-ccm 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-crypto-deflate 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-veth 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install luci-app-statistics git-17.212.24321-49c3edd-3
 • Install luci-i18n-statistics-en git-17.212.24321-49c3edd-3
 • Install luci-i18n-statistics-cs git-17.212.24321-49c3edd-3
 • Install kmod-nfnetlink-log 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ipt-nflog 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nfnetlink-nfacct 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ipt-ipset 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-nf-nat6 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ipt-nat6 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-ipt-tproxy 4.4.113+1-1-1e4a549d177ab3da12b2052fba6a4dd5-1
 • Install kmod-sched-cake 4.4.113+2016-12-19-70c8eb766d5afcf3cf187594b7cd776da92bee3c-1-1e4a549d177ab3da12b2052fba6a4dd5-1

TurrisOS 3.9.4 (update was 30 Jan 2018 13:21)
Previously (on version 3.9.3) only entries like
TURRIS-FIREWALL-RULES (v63) Failed to download https://api.turris.cz/firewall/turris-ipsets.gz.sign

Seems like 3.9.4 to me :wink:

Looks like api.turris.cz has an invalid SSL certificate, which causes these issues.

It doesn’t have invalid certificate. It has certificate from selfsign authority (look to it, it’s called emergency certificate). We are slowly deprecating api.turris.cz in favor of specialized servers (for ex. repo.turris.cz for repositories) because the only acceptable certificate we can provide for it is our emergency one.

HAAS still not working for me. Seeing no data.

When did you install HaaS? Did you try to log into the honeypot? How long is HaaS running?
Can you check if you have registration token in /etc/config/haas which should be equal to token, which you see on HaaS website?

I am not sure if it is related to last version but the sync code provided by Netmetr is not recognized on Netmetr website. It used to work earlier.

Whatever I do - actually today ??? Maybe I’m there, but I don 't know

Login to Foris, go to Updater tab and press on Save changes. It will call updater on the background.
(This case will work if you have only automatic updates) otherwise you will have approval.
And this update 3.9.4 requires restart.

Yeah , I do, but … on the main page Foris (http://192.168.2.1/foris/config/main/) I have no avizo.

That I wouldn 't praise the first avizo, maybe?
After restart to 3.9.4 is port 22 no opened. I must uninstall and install Haas (Foris - Updater)

HAAS is not working fro me.

I can connect via SSH to external-ip:22 with root and using a fake password & it lets me into the honeypot.

I have checked the token in https://haas.nic.cz and via uci show haas, and they’re the same.

I upgraded to 3.9.4 some 30h ago.

If I use cat /var/log/messages | grep haas, it get only two distinct messages:

2018-01-31T22:09:14+00:00 info twisted: [haas_proxy.proxy.ProxySSHFactory] disabling non-fixed-group key exchange algorithms because we cannot find moduli file
2018-01-31T22:10:01+00:00 info /usr/sbin/cron[26780]: (root) CMD (/etc/init.d/haas-proxy enabled && /etc/init.d/haas-proxy check_fw)

If I use cat /var/log/messages | grep ssh, it get this over, and over again:

2018-01-31T22:10:39+00:00 info twisted: [SSHService ssh-connection on SSHServerTransport,1179,5.188.87.53] got channel direct-tcpip request
2018-01-31T22:10:39+00:00 alert twisted: [SSHService ssh-connection on SSHServerTransport,1179,5.188.87.53] channel open failed
2018-01-31T22:10:39+00:00 alert twisted: [SSHService ssh-connection on SSHServerTransport,1179,5.188.87.53] Traceback (most recent call last):
2018-01-31T22:10:39+00:00 alert twisted: [SSHService ssh-connection on SSHServerTransport,1179,5.188.87.53] Failure: twisted.conch.error.ConchError: (3, ‘unknown channel’)

and cat /var/log/messages | grep ssh | grep auth | grep trying gives:

2018-01-31T20:18:02+00:00 info twisted: [SSHService ssh-userauth on SSHServerTransport,1126,5.188.87.49] 0101 trying auth password
2018-01-31T20:30:02+00:00 info twisted: [SSHService ssh-userauth on SSHServerTransport,1145,5.188.87.49] 0101 trying auth password
2018-01-31T20:30:58+00:00 info twisted: [SSHService ssh-userauth on SSHServerTransport,1146,222.220.93.66] root trying auth password
2018-01-31T20:36:31+00:00 info twisted: [SSHService ssh-userauth on SSHServerTransport,1149,5.188.10.179] 0101 trying auth password
2018-01-31T20:42:03+00:00 info twisted: [SSHService ssh-userauth on SSHServerTransport,1153,5.188.87.49] 0101 trying auth password
2018-01-31T20:42:03+00:00 info twisted: [SSHService ssh-userauth on SSHServerTransport,1152,103.99.0.187] admin trying auth password
2018-01-31T21:09:53+00:00 info twisted: [SSHService ssh-userauth on SSHServerTransport,1162,5.196.76.41] user trying auth none

Which looks like suspicious activity?

@Pepe On Haas, I think the problem may be at haas.nic.cz. The “My Honeypot” page for me shows no attempts to hit the honeypot since Jan. 30, 2018, 10:59 p.m although I know from logs on the router there have been accesses to the honeypot since then. My token in /etc/config/haas matches the one on the website.

Also, the global stats for Haas at https://haas.nic.cz/stats/ show no sessions for either today, or this month. This seems odd although it could be because it is first of the month?

I have written to haas@nic.cz but if there’s anything else you can suggest, would appreciate it.

Hi,
I’ve the same issue. Last session was on 30-JAN-2018 11:25. According to Pepe, there is some issue with web view which they are working on.

Since 30. 1. 2018 when upgrage to Turris OS 3.9.4 has been made I have no records on Haas. Before there were recorded tons of “empty sessions”, now there is complete “radio silence” - probably hackers are afraid of NIC Haas
:slight_smile: