Commit Graph

930 Commits

Author SHA1 Message Date
Vincent Li
8cb4ea1e31 firewall: Add WireGuard RW to the UI
commit 5a1c02df8973b3acc5c3101a94e86fe6df4b43b6
Author: Michael Tremer <michael.tremer@ipfire.org>
Date:   Thu Sep 12 19:39:26 2024 +0200

    firewall: Add WireGuard RW to the UI

    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
2025-06-27 08:28:11 -07:00
Vincent Li
f4c22fcd54 wireguard.cgi: Add CGI to configure wireguard
commit 06dbc836a47160d51ab10f8b9d4ca356beaa7cdb
Author: Michael Tremer <michael.tremer@ipfire.org>
Date:   Tue Apr 16 18:06:47 2024 +0200

    wireguard.cgi: Add a basic CGI to configure the global settings

    Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
2025-06-26 15:18:50 -07:00
Vincent Li
07fa3e0edf firewall: add firewall bridge netfilter UI
add UI to enable netfilter/firewall function
for firewall in bridge mode

Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
2025-04-17 09:13:50 -07:00
Vincent Li
cb07f32583 firewall: add firewall bridge IP for UI access
when firewall switched to bridge mode, we want to
have WebUI access to manage the firewall, allow user
setup IP address on the firewall bridge interface through
the UI.

Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
2025-04-17 09:13:50 -07:00
Vincent Li
57bafb9410 firewall: add UI for firewall bridge mode
Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
2025-04-17 09:13:50 -07:00
Vincent Li
76a3e13006 tcp ddos: add XDP TCP DDoS UI
Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
2025-04-17 09:13:38 -07:00
Vincent Li
6ff3d8e48e Firewall UI: Add iptables rules for XDP SYNPROXY
Add firewall WebUI and firewall iptables rules
for XDP SYNPROXY

Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
2025-03-27 19:24:05 -07:00
Vincent Li
b4ffafc531 XDP UI: add XDP DNS monitor block logging
Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
2025-01-11 10:19:34 -08:00
Vincent Li
ec28da3453 XDP UI: add UI for XDP TLS SNI logging
Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
2025-01-11 10:13:54 -08:00
Vincent Li
3aea115577 langs: Add UI Chinese language
Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
2024-12-23 13:59:15 -08:00
Adolf Belka
5fd4ca19a8 mpfire: removal as discussed in Conf call 7th Oct
- removal of lfs, rootfile, backup, paks, misc-progs, mpfire perl, language file
   content, mpfire.cgi, mpfire menu references and files, mpfire specific image,
   web-user-interface references and references in manualpages.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-10-09 18:25:53 +00:00
Michael Tremer
6ca5fb74ab Merge branch 'master' into next 2024-09-24 08:54:50 +00:00
Michael Tremer
5da15c5d3b suricata: Track whitelisted traffic and add it to the IPS graph
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-09-24 08:44:18 +00:00
Michael Tremer
4721fac3c8 IPS: Ada a graph that shows the IPS throughput
This graph is split into three parts. One shows bypassed packets, the
next one shows the actually scanned packets and lastly we show the total
throughput.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-09-24 08:44:12 +00:00
Michael Tremer
119cb83706 ids.cgi: Use new style tables for rulesets
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-09-24 08:43:11 +00:00
Michael Tremer
1b7d1abdf0 suricata: Add option to scan WireGuard
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-09-24 08:42:59 +00:00
Adolf Belka
e627de73d1 en.pl: Update to explicitly mention single quotation mark being invalid
- As all characters, except for the single quotation mark, are now allowed in the PSK
   with the base64 encoding implemented then the error message in the English Lang file
   has been changed to explicitly mention the single quotation mark rather than characters
   as a generic message.

Fixes: Bug13029
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-09-22 14:23:41 +00:00
Michael Tremer
9f30d83f50 wlanap.cgi: Change broadcast SSID to hide SSID
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-09-20 13:55:40 +02:00
Michael Tremer
cc0304b7bd index.cgi: Improve the warning box
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-21 15:47:08 +02:00
Michael Tremer
9b1225603f wlanap.cgi: Refactor the entire thing
This went really bad with the latest CSS changes. So this is a
refactor/rewrite of the CGI without many modifications.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-16 15:10:29 +00:00
Michael Tremer
9f3c37ab0c ovpnmain.cgi: Unify the error message box
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-14 16:53:54 +00:00
Michael Tremer
185f0a9b40 langs: Add translation for WireGuard
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-07 14:32:55 +02:00
Michael Tremer
dd66b39d6b connections.cgi: Make it clearer which direction traffic is flowing
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-07 14:28:03 +02:00
Michael Tremer
0b16963484 web: Create a function to show the service status
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-06 17:08:40 +02:00
Michael Tremer
f0bf243193 langs: Add translations for the systems graphs
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-06 16:57:41 +02:00
Michael Tremer
ad03130f24 firewall.cgi: Add a checkbox to enable SYN flood protection
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-07-02 09:30:28 +00:00
Peter Müller
658e1675f7 langs: Update Spamhaus DROP URL
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2024-04-21 20:06:52 +00:00
Arne Fitzenreiter
0a201087fc Merge remote-tracking branch 'origin/master' into next 2024-03-27 18:27:30 +01:00
Michael Tremer
9dd2a4635f IPS: Fix how we show EOL providers
There is no need to add a legend as I find it confusing. The change that
people are using an EOL is rather slim and so I don't to waste space.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-26 15:23:08 +00:00
Arne Fitzenreiter
46a9e7a0a4 Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-24 08:48:51 +01:00
Stefan Schantl
cf6eaba833 ids.cgi: Adjust code for marking unsupported providers
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-22 15:18:41 +00:00
Arne Fitzenreiter
24d23a7053 vulnerabilities.cgi: add RFDS (CVE-2ß23-28746) to list
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2024-03-21 19:13:45 +01:00
Michael Tremer
16492046bc time.cgi: Add German translation
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-14 18:49:51 +00:00
Jon Murphy
f561899b54 time.cgi: add current date-time to this WebGUI page
- added words and date-time format to english (en.pl)
- other languages are needed
- seconds included since time is accurate to < .1s
https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=2234e8aacac2e0d0b06dac4513585c15c2b3b440

Code-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Jon Murphy <jon.murphy@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-03-14 18:45:17 +00:00
Adolf Belka
ee2072fd20 en.pl: Correct typo of marsians instead of martians
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-29 10:20:53 +00:00
Stéphane Pautrel
4d7023105d lang: Update French translation
- Added strings concerning extrahd, hostile network logs and ids, Reiserfs deletion notification
- improvement of various existing strings

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-19 10:52:18 +00:00
Michael Tremer
9f01011570 vpnmain.cgi: Add option to regenerate the host certificate
This is necessary since we now have a much shorter lifetime for the host
certificate. However, it is complicated to do this is which is why we
are copying the previous certificate and generate a new CSR. This is
then signed.

A caveat of this patch is that we do not rollover the key.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-07 11:08:51 +00:00
Michael Tremer
3dfc748946 firewall: Improve labelling of hostile networks hits
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-07 11:02:53 +00:00
Michael Tremer
7c9a6cf163 firewall: graphs: Add a line for the total number of hostile hits
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-07 11:02:41 +00:00
Adolf Belka
6aa450ec3b en.pl: Fixes bug12981 - adds english language input for choice of drop hostile logging
- In this v3 version have added translations for hostile networks in and hostile
   networks out and log drop hostile in and log drop hostile out.

Fixes: bug12981
Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-02-07 11:02:18 +00:00
Adolf Belka
58543d54c6 connections.cgi: Fix Expires time Heading in Connections cgi page
- The Expires time heading for the Connections WUI page has seconds listed. However the
   code is converting the seconds to hours:minutes:seconds.
- This patch is changing the heading to H:M:S in English and the equivalent in the other
   languages. I have basewd this on the initial letter for Hours, Minutes & Seconds in
   each of the languages.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2023-11-24 13:12:19 +00:00
Adolf Belka
37678a4f82 en.pl: Correction of typo
- This error means that a section in extrahd.cgi about the mount path being incorrect
   does not get shown for users with english language selected.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: bbitsch@ipfire.org
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-10-20 08:41:46 +00:00
Adolf Belka
475fd9e73a nl.pl: Change language text for secure icon wording
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-09-28 09:33:21 +00:00
Adolf Belka
e0efec97ca en.pl: Change language text for secure icon wording
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-09-28 09:33:21 +00:00
Adolf Belka
b725a6990f de.pl: Change language text for secure icon wording
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-09-28 09:33:21 +00:00
Adolf Belka
9149276b65 index.cgi: Add warning about reiserfs deprecation and removal if reiserfs used
- Reiserfs was stopped in IPFire in Core Update 167. It has been announced that reiserfs
   will be removed from the kernel in 2025.
- This patch gives a warning about this deprecation and removal if reiserfs is used. The
   warning also requests that the user does a re-installation using either ext4 or xfs
   filesystems.
- Tested out on a vm installation with reiserfs, ext4 and xfs. Messgae shown on system
   with reiserfs filesystem but nopt on the other two.
- Warning message added into the English language file and ./make.sh lang run.

Tested-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-21 09:25:34 +00:00
Michael Tremer
51203f20cc Run "./make.sh lang"
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 16:49:12 +00:00
Peter Müller
edc78459ef vulnerabilities.cgi: Add English and German translations for new flaws
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-15 16:48:55 +00:00
Michael Tremer
357984289d langs: Add translation for fixed lease in dynamic range warning
Reported-by: Peer Dietzmann <dietzmann@brecht-schule.hamburg>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Bernhard Bitsch <bbitsch@ipfire.org>
2023-08-07 09:22:40 +00:00
Stefan Schantl
72dfa1b097 extrahd.cgi: Add missing translation strings
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2023-08-02 09:11:57 +00:00