I just tested the CU201 upgrade on my N100 + RPi4 test machines with keepalived.
No upgrade problems.
I tested the DNS firewall blocking on Blue only, without a proxy.
The blocking works on Windows 11 with Edge, but strangely, it’s quite poor on Firefox; some sites weren’t blocked .
It seems this is because I forgot to allow 81.3.27.55 for outbound traffic before enabling the DNS firewall.
1 - I enabled the pornography list on the Blue network before allowing 81.3.27.55 for outbound traffic.
2 - I added the rule to allow 81.3.27.55 for outbound DNS traffic.
3 - I enabled the gambling list on the Blue network.
But if I disable and re-enable the list afterward, or if I restart IPFire and clear my browser caches, it doesn’t solve the problem.
Gambling sites are blocked, but not porn sites.