webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-10 02:55:55 +02:00
Code Issues Packages Projects Releases Wiki Activity
10,676 Commits 2 Branches 1 Tag
0628d956a7cc1d952b236494de0559cbea52c0ff
Commit Graph

121 Commits

Author SHA1 Message Date
Michael Tremer
0628d956a7 WiFi: Show EAP status on wireless client page 
This patch adds some status information so that we know what
authentication an access point is using.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-05-16 15:05:25 +02:00
Michael Tremer
19f0fa5694 wlan client: Allow configuration of EAP-PEAP and EAP-TTLS on web user interface 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-05-05 11:17:06 +01:00
Michael Tremer
1fab4edfa6 IPsec: Show status in WUI when VPN is connecting 
This is helpful when debugging on-demand connections
when you can see if strongswan tries to connect or is
still idle.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-20 13:00:42 +01:00
Michael Tremer
c94d1976d3 IPsec: Mark MODP<=1024 and MD5 as broken and SHA1 as weak 
Since we somehow have to support these algorithms this patch
adds some information for the user that it is very strongly
discouraged to use them in production.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-20 12:53:53 +01:00
Michael Tremer
183b23b5ca DNS: Show DNSSEC status on index page if deavtivated 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-04-02 19:48:20 +01:00
Michael Tremer
8057ab15b9 Show better connection information for on-demand IPsec connections 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2017-02-15 12:15:42 +00:00
Michael Tremer
dcb406cc67 IPsec: Allow to create on-demand connections 
This will create IPsec VPN connections with auto=route set
instead of auto=start which will cause the connection being
created, but not brought up yet.

As soon as the first packet is received, the connection will
be established and data will be passed through it.

This allows IPFire to handle more VPN connections on weaker
systems and avoids negotiating many connections which are
rarely used.

Suggested-by: Tom Rymes <tomvend@rymes.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Fixes: #10733
 2017-02-15 10:11:58 +00:00
Michael Tremer
adb11e90df Always enable asynchronous logging 
This patch always enables asynchronous logging which slows
down the system a lot on slow storage and some virtual environments.

It also removes the configuration options in the web
user interface, since this is not configurable any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-11-29 12:18:41 +00:00
Michael Tremer
350e29c26f Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-03 12:13:43 +01:00
Michael Tremer
5edc06b701 Remove IPAC stuff 
This is unused for a very very very long time and serves
no purpose any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-10-02 15:13:55 +01:00
Michael Tremer
f62bd2742c Update translation 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-08-02 12:18:45 +01:00
Michael Tremer
20b27af863 Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2016-01-22 00:55:46 +00:00
Michael Tremer
8a1a3bf393 Merge remote-tracking branch 'ms/iptables-conntrack' into next 2016-01-22 00:54:14 +00:00
Michael Tremer
e46f7c44ca Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-12-04 22:22:55 +00:00
Michael Tremer
aaf67a64c3 Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-11-23 13:42:08 +00:00
Michael Tremer
364452506f Merge remote-tracking branch 'ms/dhcp-rfc2136-broken-down' into next 2015-10-21 13:50:31 +01:00
Michael Tremer
49c64a0993 Update translation 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-09-10 13:38:43 +01:00
Michael Tremer
f6529a04a3 IPsec: Add option to force using MOBIKE 
Some peers that are behind a NAT router that fails
to properly forward IKE packets on UDP port 500 cannot
establish an IPsec connection. MOBIKE tries to solve that
by sending these packets to UDP port 4500 instead.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-09-10 13:35:24 +01:00
Michael Tremer
6b86307cac firewall options: Fix translation and spelling of new ALG section 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-08-20 23:05:40 +01:00
Michael Tremer
4b02b4045b ipsec: Allow selection of ESP group type 
If a connection is edited, the IKE group types will be used instead.

Fixes #10860

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Tested-by: Wolfgang Apolinarski <wolfgang.apolinarski@web.de>
 2015-06-15 22:33:28 +02:00
Michael Tremer
aec0c3102e Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-06-11 14:44:52 +02:00
Michael Tremer
1e23f7cf48 Update translations 2015-05-28 14:50:16 +02:00
Michael Tremer
0389942c2b Update translations 2015-04-18 16:16:01 +02:00
Arne Fitzenreiter
30986dbf03 Merge remote-tracking branch 'origin/master' into next 2015-04-14 20:26:21 +02:00
Michael Tremer
c023275154 Update translations 2015-04-14 20:06:19 +02:00
Michael Tremer
ca6be40f92 Update translations 2015-04-04 13:17:34 +02:00
Stefan Schantl
b510e12ac1 DHCP: Allow DNS Update configuration in the web user interface 2015-03-16 00:54:20 +01:00
Michael Tremer
97af8b2b85 Update translations 2015-01-13 17:37:41 +01:00
Michael Tremer
136193280b Update translations 2014-12-08 19:12:59 +01:00
Ersan Yildirim
95a1679c6b Update Turkish translation 2014-10-13 10:19:45 +02:00
Michael Tremer
2fc5124b7e proxy: Allow HTTP Basic authentication against Active Directory servers 
Some clients may not support NTLMv2. Basic authentication can
now be activated. This is dangerous as it sends the credentials
in cleartext to the proxy server.
 2014-08-11 11:49:56 +02:00
Michael Tremer
908555842c Merge remote-tracking branch 'ms/firewall-no-nat' into next 
Conflicts:
	doc/language_issues.nl
	doc/language_issues.tr
 2014-08-07 14:50:42 +02:00
Michael Tremer
39f5352fdb Update translations. 2014-07-27 12:02:17 +02:00
Michael Tremer
2deb75c0f3 Merge remote-tracking branch 'ms/squid-ad' into next 2014-07-27 12:01:50 +02:00
Michael Tremer
83ef9c40ef firewall: Allow to disable masquerading. 2014-07-18 17:15:29 +02:00
Michael Tremer
ff5e4ef871 netexternal.cgi: Show DNSSEC status 
The netexternal.cgi has been extended to show what type
of DNSSEC support the upstream nameservers offer.
 2014-07-14 13:42:24 +02:00
Michael Tremer
dc74d0fd94 Update translations. 
Add some missing strings that have been accidentially
been removed when a commit was reverted.
 2014-07-10 11:27:34 +02:00
Michael Tremer
4cb7c9b47f Update translations. 2014-06-17 19:48:34 +02:00
Michael Tremer
b56746432b proxy: Add option to require a certain group for Internet access. 2014-06-12 11:29:18 +02:00
Michael Tremer
0274b14c5e squid: Rename "Windows" authentication to what it really is. 
Remove language strings from languages I don't speak so
that they use the English term.
 2014-06-10 20:16:10 +02:00
Michael Tremer
603248db53 squid: Add NTLM authentication against Windows Active Directory servers. 2014-06-10 20:15:58 +02:00
Michael Tremer
0ffbb688d3 samba: Add GUI functionality to join a domain. 2014-06-10 20:15:32 +02:00
Arne Fitzenreiter
6335e4a605 langs: add monitor port text. 2014-06-06 17:20:52 +02:00
Erik Kapfer
f7fb5bc5c9 openvpn: Added DH parameter to CA chart. 
Added also a 'Default' mark in N2N cipher menu for AES-256-CBC.

(cherry picked from commit c16d97c617)
 2014-05-28 20:24:28 +02:00
Erik Kapfer
f527e53f54 ovpn_fixes: Fixed some typos and strcture. 
Fixes #10462#c21.

Conflicts:
	html/cgi-bin/ovpnmain.cgi
	langs/de/cgi-bin/de.pl
	langs/en/cgi-bin/en.pl
 2014-05-14 21:26:42 +02:00
Michael Tremer
661cd276b6 Merge remote-tracking branch 'ummeegge/openvpn' into next 
Conflicts:
	html/cgi-bin/ovpnmain.cgi
	langs/de/cgi-bin/de.pl
	langs/en/cgi-bin/en.pl
 2014-05-11 18:47:11 +02:00
Michael Tremer
b2e75449a9 Revert "OpenVPN:Add HMAC, cipher 'n2n' and DH key selection. Fixes and new design." 
This reverts commit c2b5d12b34.

Conflicts:
	langs/de/cgi-bin/de.pl
	langs/en/cgi-bin/en.pl
 2014-05-11 18:34:34 +02:00
Michael Tremer
03d0b8c7e8 Merge branch 'master' into next 
Conflicts:
	doc/language_issues.nl
	doc/language_issues.tr
 2014-05-09 01:31:43 +02:00
Michael Tremer
91812c575f Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x 2014-04-29 14:37:58 +02:00
Michael Tremer
742c334a5b entropy.cgi: Show status of rngd. 2014-04-29 13:09:42 +02:00