webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-09 18:45:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

Clean up whatever remained from ALGs in userspace

Browse Source 
This patch removes translations, directives in LFS files, and ALG shared
object files which all became orphaned after we disabled ALGs due to NAT
Slipstreaming vulnerability in Core Update 155.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Peter Müller
2021-06-02 21:37:55 +02:00
committed by Michael Tremer
parent 2c8a20af47
commit 3e60ed14e2
7 changed files with 10 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
config/rootfiles/common/conntrack-tools
View File

@@ -1,24 +1,24 @@
#usr/lib/conntrack-tools
#usr/lib/conntrack-tools/ct_helper_amanda.la
usr/lib/conntrack-tools/ct_helper_amanda.so
#usr/lib/conntrack-tools/ct_helper_amanda.so
#usr/lib/conntrack-tools/ct_helper_dhcpv6.la
#usr/lib/conntrack-tools/ct_helper_dhcpv6.so
#usr/lib/conntrack-tools/ct_helper_ftp.la
usr/lib/conntrack-tools/ct_helper_ftp.so
#usr/lib/conntrack-tools/ct_helper_ftp.so
#usr/lib/conntrack-tools/ct_helper_mdns.la
usr/lib/conntrack-tools/ct_helper_mdns.so
#usr/lib/conntrack-tools/ct_helper_mdns.so
#usr/lib/conntrack-tools/ct_helper_rpc.la
usr/lib/conntrack-tools/ct_helper_rpc.so
#usr/lib/conntrack-tools/ct_helper_rpc.so
#usr/lib/conntrack-tools/ct_helper_sane.la
usr/lib/conntrack-tools/ct_helper_sane.so
#usr/lib/conntrack-tools/ct_helper_sane.so
#usr/lib/conntrack-tools/ct_helper_slp.la
usr/lib/conntrack-tools/ct_helper_slp.so
#usr/lib/conntrack-tools/ct_helper_slp.so
#usr/lib/conntrack-tools/ct_helper_ssdp.la
usr/lib/conntrack-tools/ct_helper_ssdp.so
#usr/lib/conntrack-tools/ct_helper_ssdp.so
#usr/lib/conntrack-tools/ct_helper_tftp.la
usr/lib/conntrack-tools/ct_helper_tftp.so
#usr/lib/conntrack-tools/ct_helper_tftp.so
#usr/lib/conntrack-tools/ct_helper_tns.la
usr/lib/conntrack-tools/ct_helper_tns.so
#usr/lib/conntrack-tools/ct_helper_tns.so
usr/sbin/conntrack
usr/sbin/conntrackd
usr/sbin/nfct

1
config/rootfiles/core/158/update.sh
View File

@@ -36,6 +36,7 @@ rm -vrf \
/etc/rc.d/init.d/upnpd \
/etc/rc.d/init.d/networking/red.down/10-miniupnpd \
/etc/rc.d/init.d/networking/red.up/10-miniupnpd \
/usr/lib/conntrack-tools \
/usr/lib/libixml.so.* \
/usr/lib/libupnp.so.* \
/var/ipfire/upnp

1
langs/de/cgi-bin/de.pl
View File

@@ -437,7 +437,6 @@
'alt vpn' => 'VPNs',
'and' => 'Und',
'apcupsd' => 'APC-UPS Status',
'application layer gateways' => 'Application-Layer-Gateways',
'apply' => 'Jetzt anwenden',
'april' => 'April',
'archive not exist' => 'Konfigurationsarchiv existiert nicht',

1
langs/en/cgi-bin/en.pl
View File

@@ -436,7 +436,6 @@
'and' => 'And',
'ansi t1.483' => 'TO BE REMOVED',
'apcupsd' => 'APC-UPS status',
'application layer gateways' => 'Application Layer Gateways',
'apply' => 'Apply now',
'april' => 'April',
'archive not exist' => 'Configuration archive does not exist',

1
langs/fr/cgi-bin/fr.pl
View File

@@ -442,7 +442,6 @@
'alt vpn' => 'VPNs',
'and' => 'Et',
'apcupsd' => 'Statut UPS-APC',
'application layer gateways' => 'Passerelles de couche d\'application',
'apply' => 'Appliquer maintenant',
'april' => 'Avril',
'archive not exist' => 'L\'archive de configuration n\'existe pas',

1
langs/tr/cgi-bin/tr.pl
View File

@@ -424,7 +424,6 @@
'and' => 've',
'ansi t1.483' => 'KALDIRILACAK',
'apcupsd' => 'APC-UPS durumu',
'application layer gateways' => 'Uygulama Katmanı Ağ Geçitleri',
'apply' => 'Şimdi uygula',
'april' => 'Nisan',
'archive not exist' => 'Yapılandırma arşivi yok',

5
lfs/configroot
View File

@@ -138,11 +138,6 @@ $(TARGET) :
cp $(DIR_SRC)/config/suricata/convert-snort /usr/sbin/convert-snort
cp $(DIR_SRC)/config/suricata/convert-ids-modifysids-file /usr/sbin/convert-ids-modifysids-file
# Add conntrack helper default settings
for proto in AMANDA FTP H323 IRC PPTP SIP TFTP; do \
echo "CONNTRACK_$${proto}=off" >> $(CONFIG_ROOT)/optionsfw/settings; \
done
# set converters executable
chmod 755 /usr/sbin/convert-*