Welcome to the IPFire Wiki

This wiki is a community-maintained resource about everything there is to know about IPFire. Join us and help us improving it!

Looking for something?

Use the search and find answers to everything about IPFire. If you cannot find what you are looking for, join our community and talk to fellow IPFire users, developers and everybody else involved in the project.

IPFire Community

Differences in Revisions: Add-ons

punctuation / typos.
# Add-ons
IPFire is a security platform (router and firewall) which can easily be extended and further hardened with Add-ons Through these addons a basic IPFire install can be quickly scaled up to a much more complex and customizable system.
IPFire is a security platform (router and firewall) which can easily be extended and further hardened with Add-ons. Through these addons a basic IPFire install can be quickly scaled up to a much more complex and customizable system.
IPFire has an easy to use package system called [](../configuration/ipfire/pakfire) which is used to manage updates and addons.
## Major IPFire Addons
### Anonymity
* Use [Tor](./tor) to browse the internet anonymously
### File Server
* [Samba](./samba) is a file server for Microsoft Windows or heterogeneous networks
* [NFS](./nfs) is a file server for Linux and UNIX systems
* [Tftpd](./tftpd) adds a tftp server
### WiFi access point
* Add [](./wireless) functionatlity to IPFire
* Add [](./wireless) functionality to IPFire
### Printing and Scanning
* [CUPS](./cups) is a standard, open source, printing system over the network
* [foomatic](./foomatic) is for integrating software printer drivers with common spoolers
* [gutenprint](./gutenprint) is a package of high quality printer drivers for Linux
* [Sane](./sane) allows you to scan documents over the network with a webinterface
## Backup*Complex IPFire addons which turn your IPFire system in to a backup server.*
* [BackupPC](./backuppc) provides a network backup solution with web interface
* [Dirvish](./dirvish) is a backup script for IPFire with significant functionality
* [Bacula](./bacula) is a set of tools to manage backup, recovery, and verification of computer data
* [](./borgbackup) is a deduplicating backup program
## Communications
* [mdns-repeater](./mdns-repeater) - mDNS repeater daemon
### Mail Server
* The [Mailserver](./mailserver) used in IPFire is a mixture of Cyrus-IMAPd, Postfix and [Openmailadmin](./mail).
* You can also add: Fetchmail, Spamassassin and [ClamAV](./clamav) or other virus scanners.
### Peer-to-Peer-Clients
* [Transmission](./transmission), a BitTorrent client with web interface
### Voice over IP
* [Asterisk](./asterisk) is an excellent Voice over IP (VoIP) exchange.
## Multimedia
* [MPFire](./mpfire) adds jukebox features to IPfire.
* [Icecast](./icecast) streams the output of [MPFire](./mpfire) to the network.
* [Gnump3d](./gnump3d) is a server for streaming MP3- and OGG-files.
* [Video Disc Recorder / VDR](./vdr) is a video recording / streaming server for digital TV cards.
* [miniupnpd](./miniupnpd) is a lightweight implementation of a UPnP IGD daemon.
* [MiniDLNA/ReadyMedia](./minidlna) is a simple media server software, with the aim of being fully compliant with DLNA/UPnP-AV clients.
* [](./ffmpeg) is a tool for handling video, audio, and other multimedia files and streams
* [](./shairport) is an AirPlay audio player
## Security
* [Guardian](./guardian) transforms the default Snortnetwork intrusion detection system (IDS) to a network intrusion prevention system (IPS)
* [Lynis](./lynis) is a Commandline Auditing Tool for a local scan of system and software
* [mdadm](./mdadm) makes it possible to create software RAID devices
* [Freeradius](./freeradius) is a multi protocol policy [authentication server](https://freeradius.org/)
* [](./spectre-meltdown-checker) allows users to test their hardware for vulnerabilities
## Shell tools*Tools for the IPFire Console or to use through a SSH connection*
### Network tools
* [bwm-ng](./bwm-ng) is a bandwidth monitor
* [fping](./fping) works like ping, but can be used eg. for scanning of complete networks
* [](./haproxy)
* [](./iftop) is a realtime bandwidth monitor
* [](./iperf) allows you to test your network speed (LAN or WLAN)
* [iptraf-ng](./iptraf-ng) is a console based network statistic monitoring utility.
* [keepalived](./keepalived) can be used for virtual services and 1st hop redundancy (VRRP)
* [mtr](./mtr) combines the functions of traceroute and ping in one tool
* [](./multicat) collection of tools to work on and manipulate multicast streams
* [nmap](./nmap) is a versatile (and powerful) IP/port scanner
* [nginx](/nginx) is an HTTP and reverse proxy server, as well as a mail proxy server
* [](./stunnel)
* [tcpdump](./tcpdump) is a tool to watch and control your network connections
* [traceroute](./traceroute) is a network tool used to follow your packets through the internet
* [tshark](./tshark) is a network protocol analyzer and the terminal oriented version of wireshark
* [netcat](./netcat) is a network tool for reading and writing to network connections using TCP/UDP
* [](./avahi) is a system which facilitates service discovery via the mDNS/DNS-SD protocol suite
* [](./dehydrated) is a client for signing certificates with a Let’s Encrypt server
* [frr](./frr) (FRRouting) is an IP routing protocol suite
* [](./bird) is an Internet Routing Daemon with support of all modern routing protocols
* [](./speedtest-cli) is a command line interface for testing internet bandwidth **← NEW**
### Other tools*Tools to be used on the IPFire Console or through a Secure Shell connection.*
* [](./htop) is a process viewer similar to "top" but with many more features
* [](./igmpproxy) is a simple multicast routing daemon based on mrouted
* [](./lcd4linux) grabs information and displays it on an external liquid crystal display
* [](./mc) the good old Midnight Commander; an easy to use file manager
* [](./nano) is a text editor, much easier to use than VI
* [](./net-snmp) is a snmp implementation amd more advanced than the basic snmpd
* [](./rsync) is a file copying and backup utility
* [](./tmux) is a terminal multiplexer for the console
* [](./7zip) is a file archiver with a high compression ratio
* [](./ghostscript) is a Postscript interpreter, PDF interpreter and rendering engine
* [joe](./joe) is a full featured terminal-based screen editor
* [](./minicom) is a text-based modem control and terminal emulation program for serial communications
* [telnet](./telnet) is used for interactive communicate with another host using the TELNET protocol
* [](./powertop) is a tool to diagnose issues with power consumption and power management
* [](./ddrescue) is a data recovery tool
* [](./wavemon) is a wireless network monitor
* [](./sysbench) is a system evaluation benchmark
* [](./flashrom) is a utility to detect, read, write, verify and erase flash chips
## System Monitoring
* [swatch](./swatch) is a simple log watcher. It analyzes log files and can trigger email alerts
* [Check_mk](./check_mk) General purpose Nagios/Icinga plugin for retrieving data
* [watchdog](./watchdog) is a service which can automatically restart IPFire in the event of a failure
* [Monit](./monit) is a small utility for managing and monitoring Unix systems
* [](./nagios-nrpe) - Set up and configure NRPE server on IPFire
* [](./zabbix_agentd) is the agent for monitoring a host by Zabbix
* [](./cpufrequtils) monitors the speed of the processor via CPU Graph
* [](./icinga) is a monitoring system checking hosts and services
* [](./iotop) is a utility, similar to top command, that monitors disk I/O usage
* [](./mcelog) decodes the kernel machine check log on x86 machines
* [WIO](./wio) (Who Is Online?) is a builtin monitoring service for the local network showing connected devices
* [](./observium-agent) is a client for the Observium network monitoring platform
### Proxy enhancements
* [Sarg](./sarg) A graffical analysis tool for proxy reports, which can be used over the webinterface.
* [Squid-accounting](./squid-accounting) A graphical webinterface for measuring traffic per host/user and the ability to generate bills.
### UPS tools*Software to gracefully shut down IPFire if a connected UPS runs low on power.*
* [Apcupsd](./apcupsd) used for APC-branded uninterruptible Power Supplies
* [NUT](./nut) (Network UPS Tools) provides monitoring and control of many uninterruptible power supplies (UPSs)
## User Interface Changes
* [SideMenu EX](./sidemenu_ex) is a complex extension of IPFire's Side menus
## Virtualization
### IPFire as virtualization host
* [Qemu](./qemu) provides virtualization for IPFire, so that it can host guest OSses.
* [libvirt](./libvirt) a toolkit to manage VMs on IPFire