Commit Graph

10127 Commits

Author SHA1 Message Date
Stefan Schantl
06ff7e28d7 guardian.cgi: Accidently hardcoded some descriptions.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:17:55 +02:00
Stefan Schantl
7899718f04 guardian.cgi: Add dropdown to select the used loglevel.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:17:55 +02:00
Stefan Schantl
a67b3e2dc5 guardian.cgi: Remove code for options which have been dropped from guardian.
Guardian does not longer require the information for the red interface from
the configfile.

Guardian does not longer support a targetfile.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:17:55 +02:00
Stefan Schantl
26fcd31e1f guardian.cgi: Add options to enable/disable some built-in functions from guardian.
This commit allows to enable or disable the monitoring of the snort alertfile
and to switch off the blocking of SSH and HTTPD Brute-force attempts.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:17:55 +02:00
Stefan Schantl
d2fea55e09 guardian.cgi: Remove code for Blockinterfaces.
We don't need this code anymore because we dropped interface support
from guardian.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:17:55 +02:00
Stefan Schantl
1d5702a7c3 guardian.cgi: Connect subboxes with input elements to the main boxes.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:17:55 +02:00
Stefan Schantl
5f462919d9 guardian.cgi: Sort blocked IP addresses.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:17:55 +02:00
Stefan Schantl
8b8413e566 guardian.cgi: Add hyperlink to ipinfo page for blocked hosts.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:17:55 +02:00
Stefan Schantl
7f7285911c guardian.cgi: Autodetect the used interface for red.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:17:55 +02:00
Stefan Schantl
01dbccb11e guardian.cgi: New page to configure and interact with guardian.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:17:55 +02:00
Michael Tremer
0c265f5717 nginx: Update to 1.8.1
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-29 09:04:04 +01:00
Arne Fitzenreiter
de2ee80d4f kernel: update arm buildfix patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-29 07:18:37 +02:00
Arne Fitzenreiter
5a53d5947d core104: add kernel to updater
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-28 18:12:13 +02:00
Arne Fitzenreiter
bde891d1b1 kernel: update to 3.14.74
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-28 18:01:32 +02:00
Arne Fitzenreiter
c5c12c9c81 backports: add upstream driver fixes.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-28 18:00:50 +02:00
Alexander Marx
0eccc8a97c Firewall: Add Services SSMTP and submission
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-26 14:53:06 +01:00
Matthias Fischer
24159f0952 nano 2.6.1: fix in rootfile
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-25 17:24:31 +01:00
Michael Tremer
c48a24dc14 core104: Include recent changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-20 16:49:11 +01:00
Alf Høgemark
f00699e8bb Change case of the unit "bit" from "Bit" to "bit" in web UI
The correct case for "kilobit" is "kilobit", not "kiloBit".
And the same applies for Mbit, Gbit etc.
Reference is https://en.wikipedia.org/wiki/Kilobit

This commit changes the texts used in the web UI, so
that it correctly displays as "bit", "kbit", "Mbit" etc.

This fixes bugzilla item 10918.

Signed-off-by: Alf Høgemark <alf@i100.no>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-20 16:46:23 +01:00
Matthias Fischer
5261a13d3c nano: Update to 2.6.1
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-20 16:33:50 +01:00
Michael Tremer
3b7d73d1d4 Fix potential HTTPoxy vulnerability
https://httpoxy.org/

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-19 15:02:16 +01:00
Michael Tremer
71f578bbfc freeradius: New package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-19 14:54:50 +01:00
Jonatan Schlag
ccb35c191f Update qemu to version 2.6
This patch update qemu to version 2.6
For changelogs see:
http://wiki.qemu.org/ChangeLog/2.5
http://wiki.qemu.org/ChangeLog/2.6

Qemu try to built with bluez, but before version 2.6 bluez was not used
by qemu on IPFire, so I think it is better to disable bluez because
nobody needs it before version 2.6 and our bluez  is not the latest
version so I think this will cause more problems than benefits.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 11:38:39 +01:00
Jonatan Schlag
d4641215c7 Update spice to version 0.12.8
This is an security update.
Recent were 2 serious security vulnerabilities published.
This patch update spice to a version which is not vulnerable.

Changelog:

Changes in 0.12.8:

==================
* Fixes for CVE-2016-0749 and CVE-2016-2150

Changes in 0.12.7:
==================
* spice-server will now send TCP keepalive probes on the TCP connections
  it
  uses. This can prevent unwanted idle disconnections if proxies are
  used
  between the client and the host.
* Fix important memory usage when the webdav channel is used
* Do not disconnect when the client requests an unsupported compression
  type
* Fix a few race conditions
* Fix display glitch when using XSpice
* Improve help string for 'replay -s'
* Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE
  port
  configured, USB webcam redirection over a slow link)
* Fix various compilation warning when building on 32 bit machines
* Some fixes for big-endian machines, more work is likely to be needed
* Do not build static libraries by default, this can be reenabled with
  --enable-static
* Fix small leak in MJPEG code

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 11:28:57 +01:00
Michael Tremer
5fb41958ce libtiff: Bump release
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 11:24:41 +01:00
Marcel Lorenz
25bb3677e9 libtiff: update to 4.0.6
The pak version from spandsp sane and foomatic are increased by one
to ship packages build against new libtiff.

A compat is not needed

http://www.remotesensing.org/libtiff/v4.0.6.html

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 11:23:16 +01:00
Michael Tremer
035e2b4a9b core104: Ship recently updated which
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 10:57:04 +01:00
Marcel Lorenz
10f8c6f421 which: update to 2.21
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 10:53:53 +01:00
Jonatan Schlag
fb686fdef3 Update spice-protocol to 0.12.11
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-16 10:52:05 +01:00
Michael Tremer
f5194e7a38 kernel: Fix broken syntax in configuration file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-15 11:09:42 +01:00
Michael Tremer
eb03f01782 Build bzip2 before pcre
pcre is now depending on bzip2

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-15 09:55:49 +01:00
Jonatan Schlag
b61fe3f404 Fix in libvirt install.sh/uninstall.sh
The libvirt daemon was not started after installation because the
initscritp is named 'libvirtd' not like the package 'libvirt'.
The same problem appear in the uninstall.sh. The service was not
stopped.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-15 09:53:13 +01:00
Michael Tremer
19a4317093 core104: Ship recently updated packages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:36:49 +01:00
Marcel Lorenz
aa3ff233c2 acpid: update to 2.0.26
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:30:58 +01:00
Marcel Lorenz
602696704c pcre: update to 8.39
http://www.pcre.org/original/changelog.txt

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:28:39 +01:00
Marcel Lorenz
c11dfb9295 popt: update to 1.16
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:27:04 +01:00
Marcel Lorenz
2a53bafffe curl: update to 7.49.1
https://curl.haxx.se/changes.html#7_49_1

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:24:56 +01:00
Marcel Lorenz
6ec0831ae9 iputils: update to s20160308
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:22:48 +01:00
Marcel Lorenz
2249bb1d52 acl: update to 2.2.52
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 23:20:52 +01:00
Marcel Lorenz
04251def7f libcap: update to 2.25
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-14 14:00:30 +01:00
Michael Tremer
cc97d7b417 collectd: Ignore *phys, macvtap* and vnet* interfaces
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-13 16:55:29 +01:00
Matthias Fischer
a4fdc17642 dnsmasq 2.76: latest patches from upstream (004-009)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-12 14:54:19 +01:00
Matthias Fischer
754efda131 dnsmasq 2.76: latest patches from upstream (001-003)
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-12 14:54:13 +01:00
Arne Fitzenreiter
afc14499a7 p7zip: add CVE-2016-2334 and CVE-2016-2335 patches
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-11 16:27:58 +02:00
Arne Fitzenreiter
d0d869b022 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-07-11 15:39:53 +02:00
Arne Fitzenreiter
7959134a55 kernel: disable amd ccp support
ccp based trng of the apu2 produce none random data.
Aes accleration is also not used because IPFire prefere
AES-NI if this is supported.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-07-11 11:00:55 +02:00
Michael Tremer
913a442a2a Fix compound nouns for mail service feature
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-07-02 12:18:38 +02:00
Arne Fitzenreiter
795147c7d9 kernel: arm7-multi: enable ohci_hcd
needed for usb1.1 support on BananaPi

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-06-30 20:29:40 +02:00
Arne Fitzenreiter
484e62046e kernel: update to 3.14.74
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-06-29 17:04:28 +02:00
Arne Fitzenreiter
01e38218c9 backports: r8152 add lenovo and nvidia usb id
this id's are blacklisted in new cdc_ether module
because the r8152 module should used but the
3.14 module not know this id's.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-06-29 17:00:29 +02:00