Arne Fitzenreiter
7c30831ad2
initskripts: move unbound down after network down
...
this remove a bunch of unbound errors at shutdown because
network down try to reconfigure unbond. (e.g. disable forwarders)
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-11 11:09:40 +02:00
Arne Fitzenreiter
85dfdf5d25
start core136
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-11 10:54:14 +02:00
Arne Fitzenreiter
793a273ab5
dhcpcd: add noip4ll parameter to config
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-09 12:31:46 +02:00
Arne Fitzenreiter
559e94bafb
initskripts: smt: hide error on cpu's that not support smt at all
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-09 08:14:29 +02:00
Arne Fitzenreiter
10dd2afd6d
sysctl: add seperate sysctl-x86_64.conf and move x86_64 only parameters
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-08 09:30:49 +02:00
Arne Fitzenreiter
c0f4a53034
core135: add updated leds initskript to updater
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-07 20:56:49 +00:00
Arne Fitzenreiter
236bb27320
core135: add u-boot changes to updater
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-07 20:53:58 +00:00
Arne Fitzenreiter
00d7bb9f96
core135: add missing kernel rootfiles
2019-08-07 20:52:50 +00:00
Arne Fitzenreiter
66eb3fd8b8
core135: add kernel to updater
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-08-07 20:46:07 +00:00
Arne Fitzenreiter
dc362263f4
setup: add ignore to all no nic assigned errors
2019-08-06 10:51:45 +00:00
Arne Fitzenreiter
3ec3329dff
unbound: rework dns-forwader handling
...
add check if red interface has an IPv4 address before test the servers at
red up and simply remove forwarders at down process.
This also fix the hung at dhcpd shutdown.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-07-16 19:20:48 +02:00
Peter Müller
4a46575628
unbound-dhcp-leases-bridge: handle PTR generation parameter
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Reported-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-07-15 12:22:51 +01:00
Arne Fitzenreiter
6511460487
unbound: update root.hints to 2019070301
...
IPv4 of server B has changed. Other changes are whitespace only.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-07-14 07:45:51 +02:00
Michael Tremer
d0d79462d6
core135: Ship updated squid
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-07-09 09:54:55 +01:00
Peter Müller
dd4f9a87c1
Core Update 135: ship updated tzdata
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-07-08 11:15:05 +01:00
Michael Tremer
65650ec69b
core135: Ship updated sysctl.conf
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-07-04 11:22:13 +01:00
Michael Tremer
8650d11bc3
core135: Ship forgotten ddns package
...
This was updated before, but I forgot to ship it in the updater.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-07-03 14:57:04 +01:00
Michael Tremer
2aab3e9a33
core135: Ship cloud-init changes
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-07-01 07:55:53 +01:00
Michael Tremer
7d38e8a941
core135: Ship updated packages/files
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-07-01 07:52:57 +01:00
Michael Tremer
12f462f154
Start Core Update 135
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-07-01 07:50:48 +01:00
Arne Fitzenreiter
4e69701332
intel-microcode: update to 20190618
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-06-22 21:05:21 +02:00
Michael Tremer
92f6c5ed86
core134: Ship updated firewall initscript
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-21 01:39:18 +01:00
Michael Tremer
7866fa2513
core134: Ship updated bind
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-21 01:39:18 +01:00
Arne Fitzenreiter
744f16e45a
core134: ship core133 late fixes again
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-06-21 11:58:58 +02:00
Michael Tremer
4b64da2914
core134: Ship updated vim
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-18 22:35:23 +01:00
Matthias Fischer
beac384541
Remove old vim 7.4 data
...
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-18 22:35:07 +01:00
Arne Fitzenreiter
a04eedfe7d
core134: add kernel to updater
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-06-18 18:55:11 +02:00
Michael Tremer
7516e8b7f1
core134: Ship changed general-functions.pl
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-18 09:13:21 +01:00
Michael Tremer
82899ad1ce
core134: Ship updated unbound
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-18 09:11:18 +01:00
Michael Tremer
527078e439
core134: Ship updated OpenSSL
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-12 17:25:13 +01:00
Michael Tremer
ce46df9b83
Start Core Update 134
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-12 17:18:23 +01:00
Michael Tremer
5d65813aa3
core133: Ship updated wpa_supplicant
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-11 07:00:38 +01:00
Peter Müller
8e101c0bda
ship language files in Core Update 133
...
These were missing in Core Update 132, and some strings
(especially on the "CPU vulnerabilities" page) missed translations.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-10 19:44:59 +01:00
Michael Tremer
c0fc25861f
core133: Ship updated knot package
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-07 11:13:01 +01:00
Michael Tremer
e1f8f870ea
core133: Ship snort configuration converter
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-05 12:42:53 +01:00
Michael Tremer
a40bcbb02c
core133: Ship IPS changes
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-05 12:41:37 +01:00
Tim FitzGeorge
a5ba473c15
suricata: correct rule actions in IPS mode
...
In IPS mode rule actions need to be have the action 'drop' for the
protection to work, however this is not appropriate for all rules.
Modify the generator for oinkmaster-modify-sids.conf to leave
rules with the action 'alert' here this is appropriate. Also add
a script to be run on update to correct existing downloaded rules.
Fixes #12086
Signed-off-by: Tim FitzGeorge <ipfr@tfitzgeorge.me.uk >
Tested-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-05 12:39:57 +01:00
Michael Tremer
9734a58faf
core133: Ship IDS ruleset updater
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-05 12:34:44 +01:00
Michael Tremer
dc9ac30c8d
core133: Ship updated vpnmain.cgi file and regenerate configuration
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-05 05:08:31 +01:00
Michael Tremer
c899be2fd0
core133: Ship updated dhcp.cgi
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-05 00:33:36 +01:00
Michael Tremer
0bb25a4f61
SMT: Disable when system is vulnerable to L1TF (Foreshadow)
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-04 23:55:17 +01:00
Michael Tremer
d62925de4f
core133: Ship updated PAM
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-04 23:32:35 +01:00
Michael Tremer
ba329dce8f
core133: Ship updated rrdtool
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-04 23:31:51 +01:00
Michael Tremer
f748c79450
core133: Ship updated ovpnmain.cgi
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-06-02 22:49:42 +01:00
Michael Tremer
f62f432a27
openssl: Update to 1.1.1c
...
Fixes CVE-2019-1543
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-05-29 13:51:48 +01:00
Michael Tremer
7b6d2972e3
strongswan: Update to 5.8.0
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-05-28 13:05:50 +01:00
Michael Tremer
992fdd3d07
core133: Ship toolchain changes
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-05-28 11:44:32 +01:00
Michael Tremer
fe9dbfa124
core133: Ship updated IPS ruleset sources
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-05-27 15:48:44 +01:00
Michael Tremer
f6104aa1e0
core133: Drop metadata for jansson package
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-05-27 15:42:50 +01:00
Michael Tremer
86efc510f9
core133: Ship hyperscan
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-05-27 15:40:31 +01:00