IACBOX Updates

Update 24.2.3

2026-04-08T00:00:00Z

24.2.3

This is a feature, security and bugfix update.

Security fixes

Updated PHP frameworks with security fixes See the security advisory for details

New Features

WebAdmin - Network Settings: Add UI to configure vendor/custom ports for NAT helper modules like SIP

Enhanced Features

iacbox.cloud: Increase remote access cookie expiration by 1 hour to avoid fast logouts
WebAdmin - Network Settings: Improve certificate handling and visualization (show SAN domains)
Update online manual

Bugfixes

Application Control: Ensure that all rules are assigned correctly after system reboot
DHCP: Some static leases are deactivated during DHCP migration to v24 (fixed in the v24 upgrade)
WebAdmin - Network Settings: Additional Surf-LAN IP can be deleted now
WebAdmin - Reporting: Improve stability of Ticket CSV Download for large number of tickets
WebAdmin - Network Settings: Fix a regression that prevented to set the Office-LAN subnet mask
WebAdmin - Network Settings: Correct value conversion of the global bandwidth values migrated during the v24 upgrade
WebAdmin - System Overview: The overall PMS service status is correct now for MEWS and Elektra PMS
WebAdmin - Ticket Templates: Page was unusable when all templates have been deleted
WebAdmin - Registration: Avoid long timeouts during online registration with an activated cloud connection
WebAdmin - Login: Extend the allowed length of username and passwords to 256 chars
WebAdmin - Autologin Devices: Correctly set an unlimited Session Limit when based on Ticket Defaults with unlimited volume
iacbox.cloud: Improve fail-over timeouts when switching to the next VPN node
Login Page: Autologin devices are no longer redirected to the login page

Deprecations

The separate VPN Module to establish custom OpenVPN connections is now deprecated and will be removed with the next major version v26.

Update 24.2.2

2026-03-11T00:00:00Z

24.2.2

This is a security, feature and bugfix release.

Security fixes

Update go to 1.25.7 See the security advisory for details
Update openssl to 3.5.5 See the security advisory for details

New Features

Batch-API: Add a new call that returns all child tickets for a parent ticket
Batch-API: Allow to set an Application Control Profile when adding Autologin devices

Enhanced Features

WebAdmin - System Health: Add a warning for TLS certificates that expire within 14 days
Improved automatic device detection to recognize Amazon FireTV Sticks
Login Method - Elektra PMS: Check all users per room, not only the first one
WebAdmin - DNS Filter: Search is case insensitive now

Bugfixes

Firewall - SIP/RTP: Load NAT helper module to support NATting of SIP and related RTP connections
iacbox.cloud backup job: Use a higher timeout when creating backups
Backup: Restoring a backup with deactivated DNS filter on a system with activated DNS filter leads to DNS service problems
Webhooks: Make placeholder for "room" consistent for all different PMS backends
WebAdmin: Correct reported state and max speed of the Surf-LAN interface if it's a bridge
WebAdmin - Dialogs: The title is now fully visible next to the close button
WebAdmin - Network settings: Correct handling of the global bandwidth setting
WebAdmin - Ticket Printer: Don't show deactivated languages during ticket creation
WebAdmin - Ticket Creation: Fixed errors when a ticket in Turkish was printed
WebAdmin - Online Update: Unlock WebAdmin if an update failed
WebAdmin - Notifications: Improve date/time handling which was broken for some time formats
WebAdmin - DHCP: Fix an XHR error for the static leases table
WebAdmin - Certificates: Correct key type header in the created key file to correspond with the PKCS#1 format
WebAdmin - Backups: Add missing .bkp file extension on manual backup download
WebAdmin: Translation updates
Log filter service: Avoid service crashes due to invalid regex syntax in notification rules
Core: Reduce log messages for health checks to lower log size

Update 24.2.1

2026-02-10T00:00:00Z

24.2.1

This is a bugfix release.

Bugfixes

WebAdmin - Network Settings: Changes to the global bandwidth management settings are being applied correctly again
WebAdmin - My Account: Fixed an error when accessing the page through remote access via iacbox.cloud or Central Services
WebAdmin - Login: Show the username/password equality warning only to the affected user
WebAdmin - Backup: Cleanup temporary files after a backup has been created to save hard disk space
Login Method - CampingCare: Fixed an issue where place names with special characters like umlauts led to errors on login
Login page: Location based login pages via overlapping Surf-LAN routes are selected in the correct order again (longest prefix match)
DHCP: Having multiple IP Addresses bound to the same interface no longer leads to duplicated DHCP packets
DHCP: Improved startup timing to avoid errors on interfaces that are not yet ready
DNS: Improved startup timing to avoid errors on services depending on DNS

Update 24.2.0

2026-02-02T00:00:00Z

24.2.0

This is a security, feature and bugfix release.

Security fixes

Update go to 1.25.6 - See the security advisory for details
Update PHP - See the security advisory for details
Update apache webserver to address security issues
Update Kernel

New Features

DNS: Added support for encrypted DNS transport DoT (DNS over TLS, RFC 7858) for the upstream (forwarder) to secure DNS requests
DNS: Added support for encrypted DNS transports on the guest network (Surf-LAN) via DNS over TLS (DoT, RFC 7858) and DNS over HTTPS (DoH, RFC 8484) which is on by default. This is a big win for the security for guest devices within an untrusted network. Read more about it on our blog in german or english.
DNS: Support Discovery of Designated Resolvers (DDR, RFC 9462) with which clients can discover that the DNS server supports encrypted DNS transports.
DHCP: Add DHCP option 162 to announce encrypted DNS server (DNR - Designated Network Resolver, RFC 9463)
WebAdmin - Network Tools: add a generic TCP connection test for debugging
Languages: Add Serbian and Vietnamese languages to the login page
New default domains incl. TLS certificates: *.login.fast, *.iacbox.surf, *.login.surf - These are the first short lived 90-day TLS certificates for the new Surf-LAN domains. A custom sub-domain can be set as these are wildcard certificates. Read more about the roadmap for ACME support in our blog in german or english.
iacbox.cloud: New mass rollout job: deploy terms of use
iacbox.cloud: New mass rollout job: deploy privacy policy

Enhanced Features

Backup/Restore: Backups now hold the state of the current network interface card assignment
WebAdmin - Monitoring: Do not count DNS requests from localhost and show the DNS request rate in Requests per Minute
WebAdmin - Network: Rework of the network settings page
WebAdmin PMS Settings: Introduce a slider for 'Verify characters' input field
Ticket printer: Add ticket description and mandatory fields as placeholders
Webhook Service: Add new event types: startup, shutdown, update done and update error
DHCP: Allow changing the network interface for DHCP subnets
Batch Access API: Add Parameter for Max Devices in the create ticket command
Cloud Backup: Add a retry on failed backup attempts

Bugfixes

Backup/Restore: Correctly restore the DNS filter settings
Webhook Service: Correct decoding of backend data that contains special characters
Remote Backup: Improve error handling/logging when S3 parameters are missing
Batch Access API: Re-introduce the TicketID field in the statistics export
Online check: Improve timeouts of the on/offline checks
WebAdmin - Bulk Ticket: Correct CSV parsing on import
WebAdmin: Fix connection tracking live view
WebAdmin - Ticket Overview: Correct ticket limit calculation
WebAdmin - Local Users: Add missing page numbers for the user table
WebAdmin - Online Registration: License state is now immediately shown correctly without a page refresh
WebAdmin - Online Update: Fix race condition in the Update dialog showing a wrong update state
WebAdmin - Application Log: Show the correct group if External Authentication is used and a mapping to WebAdmin groups is configured
Routing Mode: Update the Surf-LAN subnet when Routing Mode is activated
NTP: Improve daemon restarts when there are no peers
Time: Periodically update the leapseconds file
Time: Correct ordering of ntpd start and writing time to OS
ftsetup: Prevent setting subnets for Surf-LAN that overlap with IACBOX reserved networks 172.17.0.0/17
DHCP: Correct Kea config when multiple subnets are configured for the same VLAN
iacbox.cloud: Correctly close NATS connections during retries if there's no connection possible
And many small fixes

Update 24.1.5

2025-12-18T00:00:00Z

24.1.5

This is a bugfix release

Bugfixes

Webhooks: Fixed an issue where enabling ticket event webhooks caused incorrect ticket accounting after manual logout

Update 24.1.4

2025-11-17T00:00:00Z

24.1.4

This is a feature, security and bugfix release

Security fixes

Updated PHP framework with security fixes

New Features

WebAdmin - Login: Allow iacbox.cloud remote access login directly from partner portal
Login Page - Free to use (Walled Garden): Proxy unencrypted HTTP calls for clients

Enhanced Features

Batch Access API: Add ticket IDs to the return data for "get_ticket_data" command
Batch Access API: Add new filter to "get_ticket_data" command to get only tickets created with a certain ticket template
Batch Access API: Add new filter to "get_ticket_data" command to get all valid used and unused tickets

Bugfixes

WebAdmin - Login Page: Login methods added via custom extension are no longer disabled via license refresh
WebAdmin - Tickets: Fixed an issue where in some rare cases invalid tickets have not been revoked automatically by the system
WebAdmin - Application Control PRO: App extensions work correctly again after this was broken with version 24.1.3
Batch Access API: Fixed an error on ticket commands for queries without valid ticket IDs
FT-Setup: Changing from/to routing mode now sets the correct Surf-LAN IP settings

Update 24.1.3

2025-10-27T00:00:00Z

24.1.3

This is a bugfix release

Bugfixes

Application Control did not start sometimes because of a race condition at boot
Hook up TFTP NAT helper to get TFTP working again with v24 (TFTP is sometimes used during device provisioning with the DHCP option 66)
DHCP server did not start if timezone was unknown to the database (like "America/Sao_Paulo")

Update 24.1.2

2025-10-21T00:00:00Z

24.1.2

This is a bugfix update

Enhanced Features

WebAdmin - Ticket Overview: Add PMS name and room number fields to the CSV ticket export

Bugfixes

WebAdmin - Remote Backup: Increase timeout for listing backups
WebAdmin - Surf-LAN DNS: Deleting DNS bypass entries with special characters no longer fails
WebAdmin - Surf-LAN DNS: Activating or deactivating the top domains dashboard widget no longer fails with an error
DNS Service: An active top domains dashboard widget no longer causes DNS service to be unresponsive during the hourly cleanup
DHCP Service: Fixed concurrency issue to prevent DHCP service crashes under high load

Update 24.1.1

2025-10-14T00:00:00Z

24.1.1

This is a security and bugfix update

Security fixes

OS package updates
Update to go1.25.3

Bugfixes

WebAdmin - Backup: Increased remote backup timeout to avoid aborting on large backups
WebAdmin - DNS Filter: Service (re)start now correctly reloads all filter settings
WebAdmin - Webhooks: Disabling the service now correctly stops all events from being triggered
WebAdmin - Monitoring Dashboard: Top Domains widget no longer breaks when selecting a different overall timespan
FT-Setup: The optional Management-LAN interface is now correctly unassigned when deactivated

Update 24.1.0

2025-10-06T00:00:00Z

24.1.0

This is a feature, security and bugfix update

Breaking Changes

Backup/Restore: The system feature version type (Lite, Pro, Full) of the backup must match the version type of the restoring system to prevent invalid configuration. For example, a backup of a Lite system can only be restored on a Lite system. On freshly installed and unregistered systems, any backup can be restored.

Security fixes

Security updates for the Apache webserver
WebAdmin dependencies with security fixes
OpenSSL update to the next LTS version 3.5.x - See the security advisory for more details
Updated the root CAs (trust store)
go update to 1.25.x- See the security advisory for more details
Kernel update with security patches

New Features

Support for the new Feature type Pro version (in between Lite and Full)
WebAdmin - Dashboard: Added a new widget that shows the top requested domains via DNS from the past 24h
WebAdmin - Dashboard: Added a news widget to inform administrators about important updates and announcements
WebAdmin - Main Menu: Added new main menu APIs with Webhooks as the first entry
New webhook service added that allows to send events (system or ticket related events) to HTTP endpoints
WebAdmin: Added configuration page for webhook endpoints
Login method: Add support for MEWS PMS
Added support for 25GBit network cards
iacbox.cloud: Support added for the Cloud-Pro package, which provides an increasing number of mass rollout options

Enhanced Features

Application Control: Full update of the DPI engine with over 100 new rules
Application Control: Allows the administrator to ignore certain protocols/applications to prevent excessive CPU usage on rare protocols
DNS Service: Performance improvements for higher throughput on systems with many CPU cores and high traffic
iacbox.cloud: Backups can be created and restored via iacbox.cloud
iacbox.cloud: DNS Filter settings can be rolled out via iacbox.cloud
iacbox.cloud: Allow to control access for support session separately
iacbox.cloud: Add a config parameter to the install-loginpage command to keep the already present background image
PMS/WebAdmin: Support a repeat interval for PMS templates
Logging: Show only relevant DHCP events in the system log
Batch Access API: Add search_text parameter option to the get_ticket_data call
Online Manual: Add version type information to certain features that are only available in Full or Pro version
Online Manual: Add a help page for Webhooks, as well as an integration guide for Quvia 360 as example

Bugfixes

Login Page: The date selector can now handle leap years
Login Page: Fixed fallback to default page when the Route is used as Location-ID and no Login Page exists for that route
Login Method CampingCare: Adapted to API changes
Login Method SPMS MarineXchange: Corrected API calls with Booking-ID only as primary identifier
Auto Login Devices: IPs from outside the Surf-LAN subnets are allowed again
WebAdmin - External Authentication: Avoid UI freezes when connections time out
WebAdmin - Login Pages: Removed incorrect error message on extension upload
WebAdmin - Dashboard: Correct percentage values in pie charts
WebAdmin - Application Control: Insights have been inaccessible for some users after the upgrade
WebAdmin - Tickets: Reenable ticket print button for PMS tickets
WebAdmin - Updates: Allow to select only the next update
WebAdmin - Network Settings: The default bandwidth was 50 Mbit/s, even though 200 Mbit/s was visible in the UI
WebAdmin - Dashboard: Correct the User per VLAN widget that shows VLAN 0, which is not present
WebAdmin - SMS Login Method: Restructure the SMS authentication types
WebAdmin - Static autologin devices: Fix validation errors when the entry is saved again
WebAdmin - Backup: Correct the inline information about when the remote backup is made
WebAdmin - PMS Tickets: Improve handling of quotes within the name of a guest
iacbox.cloud: Remote-Connection is automatically reestablished after a reboot
iacbox.cloud: Handle race condition while connecting to the cloud
Cleanup: Fix the session file cleanup that frequently frees up disk space
DB: Dynamically raise the DB connection limit on high traffic systems
Backup: Check for running updates before restoring a backup
Backup/restore: Fix multiple issues when restoring a backup in "Keep Network Settings" mode
Batch Access API: Add missing ID in the exported Auto Login Devices list
Batch Access API: Correct the call to start the Online Update

Update 24.0.11

2025-08-05T00:00:00Z

24.0.11

This is a bugfix update.

Bugfixes

Fixed a memory leak in a core service that caused high memory consumption over days under heavy load.

Update 24.0.10

2025-07-24T00:00:00Z

24.0.10

This is a bugfix release

Bugfixes

DNS: Improve stability during log-rotation of DNS server logs

Update 24.0.9

2025-07-14T00:00:00Z

24.0.9

This is a security and bugfix release.

Security fixes

OS package update See security advisory for more details

Enhanced Features

WebAdmin - System Overview: Display all assigned Surf-LAN network interfaces and their status
WebAdmin - Network DHCP: Clearer display of expired but reserved dynamic DHCP leases
WebAdmin + Login page: More changes to harmonize bandwidth units all over the WebAdmin and login page
Login page: Improved caching to reduce overall load
Ticket Printer: Improved layout with clearer values and descriptions
iacbox.cloud: More preparations for the upcoming iacbox.cloud Pro package for mass rollouts

Bugfixes

WebAdmin - System License: Lower custom user limit works again
WebAdmin - Vendor Themes: Themes are now part of the backup to avoid inconsistent state between a backup restore and the re-license afterwards
WebAdmin - Routes: Fixed an issue where a certain Surf-LAN route led to an inconsistent state with DHCP
WebAdmin - System Backup: Connection tracking logs are no longer excluded from the backup with enabled encryption
WebAdmin - Network Settings: Re-enable the use of public IPs for the optional Management-LAN
Online Update: Minor fixes to improve overall stability of online updates
Proxy DHCP check: Avoid false-positives by ignoring the APIPA range for the check

Update 24.0.8

2025-06-23T00:00:00Z

24.0.8

This is a feature, security and bugfix release.

Security fixes

Upgrade OpenSSH package to version 10

New Features

Enhanced Features

WebAdmin Login: If a session timed out and a relogin is needed, the user is redirected to the previous page
WebAdmin - Network: Prevent configuration of own IPs as DNS forwarders
WebAdmin - DNS Filer: Support the "host" format for custom filter list on file uploads
WebAdmin and Login Page: Rename login method Microsoft Azure AD to Entra ID

Bugfixes

Login Method PMS: Fix licensing problem of ASA PMS (XML) interface after upgrade to v24
Login Page - SPMS Login: Room/cabin prefix select was too small
Login Page - Free Login: Improve error message when a login is denied because of daytime
White-label Login Pages: Correct auto rollout of centralized Login Pages
WebAdmin: Fix bandwidth unit conversion at many places (factor 1000 vs 1024)
WebAdmin - HIS: HIS connection check works again if only one HIS is licensed
WebAdmin - PMS Config: Remove restrictions for special characters in username and password
WebAdmin - Plug & Play: Fix issues with certain file formats on file upload
WebAdmin - Ticket creation: VAT calculation was wrong in some cases
WebAdmin - Application Control: Correct special characters like Umlauts on log insights page
WebAdmin - Dashboard: Correct proportions of icons on the Device Type chart
WebAdmin/Printout: Correct "unlimited" volume on ticket printouts
WebAdmin - Free Login: Correct Daytime restrictions starting/ending with non full hours
Classroom Edition: Avoid deleting present Application Control profiles during initial provisioning
DNS Filter: Removed invalid entries from filter lists in subcategory "weapons"
Core: Relax too strict timeout when downloading the updater

Update 24.0.7

2025-05-22T00:00:00Z

24.0.7

This is a security and bugfix update.

Security fixes

Package update for postgres See security advisory for more details
Package update for nagios plugins

New Features

Console Login: Added new console command "startupdate [to-version]"

Enhanced Features

Ticket Printer: Updated notes on the ticket printout
WebAdmin - Cloud Management: Improve search and sort for the cloud jobs table
WebAdmin - Free to Use: Updated service URLs for PayPal, Klarna and LinkedIn

Bugfixes

WebAdmin - Online Update: Available patchlevel updates are displayed correctly again
WebAdmin - Login Page Editor: Fixed a issue where in some cases vendor login page themes could not be updated
Login Page: Placeholders in "Redirect after Login" URLs are replaced correctly again

Update 24.0.6

2025-05-13T00:00:00Z

24.0.6

This is a feature, security and bugfix update.

Security fixes

Package update for openssl See security advisory for more details
Package update for xz/liblzma See security advisory for more details
Further OS package updates

New Features

WebAdmin - SMS Login: Add option to use Bearer Token for authentication

Enhanced Features

Online Manual: Updated to recent changes
WebAdmin - DNS Filter: Allow to upload bigger custom DNS Filter lists
WebAdmin - Surf-LAN DNS: Allow to configure cache settings for DNS requests
WebAdmin - Translations: Updated multiple texts and translations for the WebAdmin
WebAdmin - System Online Check: Improved accuracy to reduce false positives
WebAdmin - License Check: Improve check intervals to better reflect license changes on the system
WebAdmin - Login Page Editor: Allow to upload larger background image files
WebAdmin - SMS Login: Remove square brackets from our default JSON-POST example since they are not allowed for some SMS gateways
WebAdmin - Online Update: Enhanced update history logs to emphasize important information
WebAdmin - Network DHCP: Allow settings for Subnet & Ranges + Options for IACBOX LITE version
WebAdmin - 2FA: Update list of recommended 2FA apps
Login Page - PMS: The function "Set expiration of ticket to departure date" is no longer limited to max 6 months
Login Page - PMS Camping Care: Improved log messages to return more detailed information on failed login
iacbox.cloud Agent: Improved re-connection attempts after disconnect
iacbox.cloud: More preparations for the upcoming iacbox.cloud Pro package for mass rollouts

Bugfixes

WebAdmin - System Notifications: Update rules to match new and changed log entries on major version 24
WebAdmin - Autologin Devices: Deactivating an autologin device correctly revokes any associated tickets now
WebAdmin - DNS Filter: Enabling and disabling the custom exception list now works correctly
WebAdmin - Network Tools: Check for foreign DHCP server works again
WebAdmin - Backup: Restoring from a backup correctly reconfigures the DNS settings now
WebAdmin - TLS Certificate: Theme TLS certificate was not enabled correctly in some edge-cases
WebAdmin - TLS Certificate: Our default TLS certificate is no longer hidden if a theme TLS certificate is in place
WebAdmin - TLS Certificate: Custom TLS certificate upload no longer fails for domains with more than two subdomains
WebAdmin - Ticket Printer: Adding more than one ticket printer no longer triggers a permanent WebAdmin error
WebAdmin - System Overview: Re-sizing the screen no longer breaks the widget ordering
WebAdmin - System Overview: The used and total hard disk space is displayed correctly again
WebAdmin - SMS Login: Enabling and disabling the pre-shared password option now works correctly
WebAdmin - Webhooks: Running Webhooks service no longer breaks the backup restore process
WebAdmin - PMS Camping Care: Update the interface to work again with changed API endpoints
WebAdmin - Logging: The client IP address is logged again in the syslog
WebAdmin - Logging: Special characters in the application log message are displayed correctly again
Login Page: Popups are no longer cut-off on login page themes aligned to the left or right instead of the center
DNS: The service startup no longer fails due to an invalid Surf-LAN IP configuration
DHCP: Fixed parsing issue on network interface information on certain hardware types which led to inconsistent DHCP settings

Update 24.0.5

2025-05-05T00:00:00Z

24.0.5

This is a security update.

Security fixes

Update TLS certificate for the default domain hotspot.internet-for-guests.com (expires on 9 June 2025).

Deprecations

This was the last one-year certificate, as the Browser CA/Forum decided to shorten certificate lifetime. Read our english or german blog post for more information.

Update 24.0.4

2025-03-07T00:00:00Z

24.0.4

This update replaces the withdrawn update 24.0.3. This is a feature and a bugfix update

Security fixes

Kernel update
OS packages update

New Features

Online updates: Download binary updates via a CDN for faster downloads anywhere in the world
Online manual: Use a CDN for faster page delivery and higher availability
Login Page - SMS Login: Add an optional static registration password to avoid logins from unwanted users

Enhanced Features

SPMS Login MarineXchange/MXP: Add Booking-ID as single authentication field
iacbox.cloud Agent: Randomize connections to iacbox.cloud VPN nodes to distribute load
iacbox.cloud Agent: Preparations for the upcoming iacbox.cloud Pro package for mass rollouts
Introduce the magic domains http://logon, http://login and http://logoff, http://logout (without the .now top level domain)
DNS: Add a fallback config, if there are configuration problems
Logging: change many logs to "logfmt" format with key-value pairs for better parsing support if the logs are processed externally
WebAdmin - License: Inform about expiring subscription modules
WebAdmin: Deleting a dynamic autologin device can delete a static autologin ticket and vice versa
WebAdmin - Monitoring: Use a better icon for DNS requests

Bugfixes

WebAdmin - Application log: add missing IP address on logs that made config changes
WebAdmin - Add missing GDPR log when ticket details have been viewed
WebAdmin - SPMS MarineXchange/MXP: Corrected multiple issues when saving the configuration
WebAdmin - SPMS settings: Correct wrong translations
WebAdmin - Correctly inherit default ticket limits when creating manual tickets.
WebAdmin - Network: Saving the Surf-LAN settings does not overwrite custom DHCP options now
WebAdmin - DHCP: Corrected more edge cases of Static Leases
WebAdmin - DHCP: Corrected multiple issues with DHCP options
WebAdmin - Monitoring: Network traffic per VLAN is fixed
WebAdmin - Online Update: Multiple fixes for the new update popup window
WebAdmin - GDPR report: add missing translations
WebAdmin: Ensure the multi device setting "Max Devices" always has a default value
WebAdmin: Allow to set a Public IP on Office-LAN interface again
Login Page/DNS Filter: Display blocked DNS Filter entries works again
DNS: Correct inconsistency between visible Apple iCloud domains and effectively filtered domains

Update 24.0.2

2025-01-22T00:00:00Z

24.0.2

This is a security and bugfix update.

Security fixes

OS package update for rsync. See security advisory for more details
Update of third party dependencies

Enhanced Features

DNS: Change upstream selection policy from random to sequential to get the familiar primary/secondary behavior

Bugfixes

DHCP: Important fix for static leases to be persisted correctly
WebAdmin - Dashboard: Users online chart is working correctly now for unlimited licenses
WebAdmin - Monitoring: Show data on users per VLAN and network traffic per VLAN widgets
WebAdmin - Autologin Devices: Correct error handling
WebAdmin: Corrected some translations
WebAdmin - Local Users: File upload is now case insensitive when checking for duplicates
WebAdmin - Application Log: IP address is added for logins
WebAdmin - License: Correctly differentiate Application Control Pro and Basic module
WebAdmin: Fix upload of v21 login pages
WebAdmin - Create Ticket: User permissions are checked now correctly to dis/allow overwriting ticket limits
WebAdmin - Create Bulk Tickets: Multiple issues found and fixed
WebAdmin - PMS Settings: Make the PMS Deny list more clear and enable new entries by default
WebAdmin - Online Update: Make it more clear if no update was installed
WebAdmin - Online Update: Correct behavior of wait page during reboot after an update
WebAdmin - Online Update: Update popup tries harder and longer now to get a response from the server side, before showing an error
Login Page - Email login: Confirmation popup works now if the Terms of Use or Data Privacy popup was open at that moment
Login Page - SMS login: Show popup with information about the activation time slot
Connection tracking: Works after the first boot (missing dirs are created)
Restoring a backup: System version is set correctly now
Terminal prompt shows the new version now after an update was made

Update 24.0.1

2024-12-11T00:00:00Z

24.0.1

This is a bugfix release.

Enhanced Features

Connection Tracking Logs are compressed with xz now for lower disk usage
WebAdmin - ExtAuth users: Allow to delete shadow users created by external user services like Radius, LDAP, ...

Bugfixes

Core: DHCP sends a correct gateway address in unprotected mode
Core: DHCP: Static leases are reserved in any case now
Core: Add missing service names during boot
WebAdmin - DHCP: Sorting DHCP columns works now
WebAdmin - DHCP: Correct subnet when adding a static lease
LoginAPI: Correct webserver settings
Setup: Initial DB setup does not log an invalid error now
WebAdmin: Updated translations
WebAdmin: Wait screen tries harder to return to the correct page after network changes
WebAdmin - Devices online widget: avoid caching
WebAdmin - iacbox.cloud: Separately check state of messaging and VPN connection

Update 24.0.0

2025-04-01T00:00:00Z

24.0.0

This is a new major version with a lot of changes. Please read the changelog carefully and also the

Breaking Changes

Transparent HTTP Proxy was removed. In most cases this will have positive effects, as HTTP is not intercepted and the ports 8080 and 58080 are freed up and are not special anymore. But there are no separate HTTP proxy logs of port 80 anymore. But connection tracking is still available if logging is needed.
Batch-API: All downloads regarding proxy logs are removed.
Custom Login Page extensions and Login-API Code: PHP Version was upgraded to 8.2 - all your custom code needs to run with that version now. Please try that on a non-production system first.
Login Page access is now always HTTPS encrypted (no option to disable it anymore). Because most modern mobile devices talk via CAPPORT API to the IACBOX a valid HTTPS connection is mandatory.
DHCP: Removed additional DHCP ranges to avoid complexity (Exclusive DHCP ranges are still possible).
VPN Module users have to make sure that their OpenVPN configuration is compatible with the now used OpenVPN version 2.6.
PMS Login: Removed the deprecated "No charge Mode" as this can be done with free PMS ticket templates since a long time now.
Remember Me: Remove old settings "via MAC (optional)" and "via Cookie" as most Captive Browsers do not support persistent Cookies anyway.
DNS forwarders: If multiple DNS servers are configured, they are selected sequentially. Secondary DNS server is used if first one is not available.
DNS service: By default, unknown domains will return the usual NXDOMAIN response and not the SurfLAN IP as in the past. This caused a lot of traffic on the login page webserver. Since most HTTP connections are encrypted nowadays, they will end up with a certificate warning anyway, so it's better to let the client know that the requested domain was not resolvable.
DNS filter will return success and the "Null IP" 0.0.0.0 instead of NXDOMAIN for filtered domains to avoid that devices switch over to alternative DNS servers possibly bypassing the filter via encrypted transports (DoH etc.).
Payment Login - Replaced "Klarna Sofort" with "Klarna Checkout" (includes Payment via Invoice, Sofort, Credit Cards and Direct Debit). Klarna Checkout is a completely different API and Payment Provider, therefore the old API/Account data can not be migrated.
Monitoring: Removed disk speed timing/bytes charts.
SMTP Proxy got removed as any SMTP connection should be secured by TLS nowadays and so is not able to be proxied.

Security fixes

Frozentux Linux: Use new Linux LTS kernel 6.6
WebAdmin Login: Support for two factor authentication (time based TOTP for the start, more to come)
Login page and WebAdmin: Increase minimum TLS setting to 1.2. To support very old devices this was previously still TLS 1.0/1.1.
Elliptic Curve TLS certificates can now be used, while still not recommended on the Guest network
Renewed and upgraded most OS packages

New Features

IACBOX Versioning: From v24 on semantic versioning is used with the format: Major.Minor.Patch
iacbox.cloud Integration - allows centralized IACBOX management (See separate communication on this topic. Many cloud features are coming the next months).
iacbox.cloud: Auto-magic Cloud Backup for all iacbox.cloud customers. Fully encrypted backups stored on EU servers (GDPR compliant).
Fully renewed DHCP backend as good old ISC dhcpd was discontinued.
New DHCP server allows one IP Range per VLAN (in combination with deactivated NAT this allows traffic segmentation in the upstream)
Completely new DNS backend - one DNS service replacing 3 sub-components. The new DNS service is capable of encrypted DNS transport protocols like DoH (DNS over HTTP), DoT (DNS over TLS) and DoQ (DNS over Quic) which will be made available as WebAdmin settings in upcoming updates.
DNS filter list updates are made weekly now.
Support for restoring only certain parts of a backup like config without overwriting the license or network settings.
Completely new update service (server side) and update mechanism. Faster downloads will be provided via a CDN in the near future.
Login Page: added new background images for health care and cruise ship customers. Also some specific placeholder logos have been added.
Pre-Announcement: New WebHook Service added. This service can send webhook messages to HTTP endpoints on certain events (Ticket login, logout, idle-timeout, ...). WebAdmin settings page is expected to come soon with a Patchlevel update.

Enhanced Features

WebAdmin: The dashboard allows to place any monitoring tile now on the main dashboard. Chart visualization was completely renewed.
WebAdmin: Split up the PMS backends into three new main categories with their own configuration page: PMS (Hotels), SPMS (Shipboard PMS) and HIS (Hospital Information System)
WebAdmin: Allow longer passwords, mainly used in password managers.
WebAdmin: Improved caching to speed up WebAdmin
WebAdmin: Add more help links (deep links to the online manual)
WebAdmin - DHCP: Reworked DHCP option page
WebAdmin: Improve permission settings of WebAdmin user/groups.
WebAdmin: Improve TLS verification error messages.
WebAdmin - Email statistics: add an interval field (daily, weekly, monthly, yearly)
WebAdmin: Many small improvements for logins via external authentication
Login Page: Add a name field to each Login Page making it easier to find when there are a lot of pages on that system.
Login Page: Complete rework of the PMS module to support PMS groups with almost every PMS now. This also means better Free Login support for many PMS backends.
Login Page - Redirect after login: add all available placeholders to CAPPORT API venue-url (URL shown on Android devices).
Login Page: Add a new padding-left setting to the Login Page Editor for input fields.
Automatic Online Updates are now triggered every day instead of once per week. But the distribution of updates will be stretched to about 2 weeks for an average Patchlevel update.
Updated default Login Page
Remember Me: Devices are now registered for automatic re-login already with their first login.
SMTP Server: Added a sender name field
NTP: The NTP daemon is always running now. Removed the hard daily time sync.
DNS Filter: return EDNS code 17 to mark the request as "filtered".
Licensing: Removed dependency on the MAC address (licenses are checked more often now)
Core: New command service replacing old parts to increase future feature speed, reliability and security.
Free to use (Walled Garden): Add all HTTP URLs for UDP too as HTTP/3 (HTTP2 over Quic) traffic becomes more popular.
Login prompt: Add licensing state and registration number to the terminal login prompt, making it easier to identify a booted system when dealing with a lot of setups at the same time.
Auto Login Devices: Increased ticket validity from 24h to 7 days to avoid daily interruption of such devices.
NTP Servers: Use public NTP server pools to avoid a single point of failure.
VPN module: Add setting for signature algorithm selection.
Changed default values: Set DNS servers to EU DNS servers, set Global bandwidth to 200Mbit/s, increase defaults of Free Login, increase Remember-Me timeout from 3 to 14 days, updated DoS prevention limits.
Many preparations in the background for the upcoming EU CRA (Cyber Resilience Act) CE certification.

Bugfixes

Login Page: All new PMS types check first if a ticket already exists with that login-data and login the present ticket. This is important if tickets have to be bought.
Login Page: Handle edge case more efficiently when VLANs are enabled but no VLANs are added.
Login Page: Remove duplicate background definition, leading to an overlapping image on some devices.
Login Page: Preselect the set WebAdmin language in Login Page Editor as active preview language.
Payment - PayPal: Support password-only tickets.
WebAdmin - Ticket Overview: Show correct used download/upload volume in parent tickets (having multiple child tickets).
WebAdmin - Ticket Overview: Show print icon correctly for child tickets.
Auto Login Device: Remove a present ticket if an entry for an Auto Login Device gets deleted.
SNMP: Allow special chars in passwords.
And many other small bug fixes.

Deprecations

Login-API is deprecated now and will be removed with the next major version. Most of it can be done with the new Login Page introduced with v21. Please contact us if you need help migrating your existing Login Page.
Central Services will be replaced by iacbox.cloud. Current customers will be migrated to a special iacbox.cloud package "Central Services Transition" throughout 2025.
The default password for fresh setups will be removed soon. It will be replaced by a randomly generated password shown on the login prompt.