Commit Graph

6478 Commits

Author SHA1 Message Date
Alexander Marx
0c2cf9e214 Forward Firewall: BUGFIX: when having more than 10 hosts/networks in a firewall-groups group, the table was not shown correctly 2013-08-14 09:06:38 +02:00
Alexander Marx
f195a8d763 Forward Firewall: BUG: when creating a new group in firewall-groups with the same name as an existing group, the line "no rule defined" was added.
BUG: THe line "no rules defined" is now "no entries in this group".
2013-08-13 16:00:32 +02:00
Alexander Marx
4f585d559f Forward Firewall: Modified the Message to reread firewallrules in p2p-block.cgi. This is now the same as in forwardfw.cgi and fwhost.cgi 2013-08-13 13:58:48 +02:00
Alexander Marx
5bee9a9df5 Forward Firewall: edited GPL-header 2013-08-13 13:47:27 +02:00
Alexander Marx
dc21519f68 Forward Firewall: added GPL header to all files 2013-08-13 12:44:01 +02:00
Alexander Marx
caca013c11 Forward Firewall: added /var/ipfire/forward/bin to backup-exclude script 2013-08-12 15:53:16 +02:00
Michael Tremer
3027c6bb96 initscripts: Reset links that reload the firewall after RED connected. 2013-08-12 14:45:07 +02:00
Michael Tremer
8c60701a4f forwardctrl: Remove unused and possibly dangerous flush option.
Also remove unused header files.
2013-08-12 14:42:16 +02:00
Michael Tremer
f78d627af3 Firewall: Fix spelling of service names in custom services. 2013-08-12 14:39:34 +02:00
Alexander Marx
debe3af564 Merge remote-tracking branch 'ms/firewall-new' into firewall 2013-08-12 13:30:45 +02:00
Arne Fitzenreiter
9e78ce6142 Merge remote-tracking branch 'origin/next' 2013-08-11 11:51:40 +02:00
Arne Fitzenreiter
028c88f46f close core72. 2013-08-11 11:50:50 +02:00
Arne Fitzenreiter
0251dca9e8 core72: start ipsec only if enabled after update. 2013-08-11 09:46:16 +02:00
Arne Fitzenreiter
bdc9033f08 core72: allow to update "ovpn verify script".
Don't forget to readd this exclude to next core updater to prevent overwrite
the user ca at a openvpn update.
2013-08-11 09:40:54 +02:00
Arne Fitzenreiter
9d838dad03 core72: add ovpnmain.cgi to update. 2013-08-11 09:40:03 +02:00
Arne Fitzenreiter
93443c472f core72: stop/start squid while update. 2013-08-11 09:34:52 +02:00
Arne Fitzenreiter
b9c6c0ecd3 core72: add language files to update. 2013-08-11 09:33:25 +02:00
Arne Fitzenreiter
f2665db1ad snort: update to 2.9.5.3. 2013-08-10 20:10:00 +02:00
Arne Fitzenreiter
7bcfd0dd83 daq: update to 2.0.1. 2013-08-10 20:09:03 +02:00
Arne Fitzenreiter
ba47633494 snort: enable non-ether-decoder for ppp support. 2013-08-10 18:48:16 +02:00
Michael Tremer
919a50208b tor.cgi: Remove NoAdvertise option.
This does not make much sense with our setup.
2013-08-10 12:14:29 +02:00
Michael Tremer
bfcb3212dc OpenVPN verify: Fix login for RW clients with >= 2 spaces in name.
http://forum.ipfire.org/index.php?topic=8702.0
2013-08-10 11:10:39 +02:00
Michael Tremer
34aa915f08 Update translations. 2013-08-09 14:50:50 +02:00
Michael Tremer
776a1761d0 general-functions.pl: Fix overwritten substitutions. 2013-08-09 14:50:09 +02:00
Alexander Marx
9168da6fcc Forward Firewall: deleted unused warning message regarding mac addresses 2013-08-09 14:50:09 +02:00
Michael Tremer
29ae57a7fe firewall: Language updates (English and German). 2013-08-09 14:50:03 +02:00
Michael Tremer
987b75bcd4 firewall: Add TOR chains. 2013-08-09 14:49:35 +02:00
Alexander Marx
ab4fe66fc9 Forward Firewall: Network addresses are now allowed as source and the ip addressfield has now size 18. 2013-08-09 14:49:35 +02:00
Alexander Marx
43215686ce Forward Firewall: changed rule coloring. Now whole field is colored instead of just borders. Back Button in firewall groups /hostgroups showed a white site 2013-08-09 14:49:35 +02:00
Alexander Marx
93c2de1c66 Forward Firewall: Bugfix: ICMP rules where applied double 2013-08-09 14:49:35 +02:00
Alexander Marx
653a71b951 Forward FIrewall: Bugfix: When using predefined services in rulecreation, the rule was not applied. Bugfix: when in rulecreationpage and pressing "back" the site gets white. 2013-08-09 14:49:35 +02:00
Alexander Marx
6143bc300e Forward FIrewall: BUGFIX: when setting outgoing to blocked and creating a rule, the last rule changes to "accept" 2013-08-09 14:49:35 +02:00
Alexander Marx
357b3fe80d Forward Firewall: renamed IPFire to Firewall in SNAT area 2013-08-09 14:49:35 +02:00
Alexander Marx
4affc3e889 Forward Firewall: show default rule when input is empty 2013-08-09 14:16:42 +02:00
Alexander Marx
cb051c577c Forward Firewall: language fixes on last rule in ruletable 2013-08-09 14:16:42 +02:00
Alexander Marx
34f30c5f92 Forward Firewall: set default options for optionsfw and minor change on optionsfw.cgi 2013-08-09 14:16:42 +02:00
Alexander Marx
2e99ab8bf8 Forward Firewall: added some javascript to automatically select radiobuttons when dropdowns are changed 2013-08-09 14:16:42 +02:00
Alexander Marx
b88c88291b Forward Firewall: added some java Script to automatically select radiobuttons when dropdowns are changed. Some cleanup of the code 2013-08-09 14:16:40 +02:00
Alexander Marx
1ca546126e Forward Firewall: deleted configfile "nat" in ovpnmain.cgi for portfw check. File "nat" no longer exists. Now the portfw rules are in file "config" 2013-08-09 14:15:33 +02:00
Alexander Marx
6584a984a0 Forward Firewall: just increased version number 2013-08-09 14:15:33 +02:00
Alexander Marx
595a90f003 Forward Firewall: The default rule table (at the end of Forward) shows only default values depending on the network configuration 2013-08-09 14:15:33 +02:00
Alexander Marx
f8bf364f0d Forward Firewall: fixed check for already existing rules. 2013-08-09 14:15:33 +02:00
Alexander Marx
e1efb8199d Forward Firewall: deleted postrouting block in firewall (not used anywhere) 2013-08-09 14:15:33 +02:00
Michael Tremer
bb12dd7b69 iptables: Cleanup creating SNAT/DNAT chains. 2013-08-09 14:15:33 +02:00
Michael Tremer
47cd046aed iptables: Remove OPENSSL{PHYSICAL,VIRTUAL} chains which are unused. 2013-08-09 14:15:33 +02:00
Michael Tremer
d5f1422d81 iptables: Jump into the firewall rulesets after everything else has been done. 2013-08-09 14:15:33 +02:00
Michael Tremer
51ab1de143 iptables: Create OVPNNAT chain after CUSTOM* chains. 2013-08-09 14:15:32 +02:00
Michael Tremer
815eaff433 iptables: Create guardian's chains after the CUSTOM* chains. 2013-08-09 14:15:32 +02:00
Michael Tremer
1e55533052 iptables: Cleanup creating the OVPNBLOCK chain.
This should happen after the CUSTOM* chains.
2013-08-09 14:15:32 +02:00
Michael Tremer
3b9a23ce07 iptables: Block all loopback packets on non-loopback interfaces. 2013-08-09 14:15:32 +02:00