webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-10 19:15:54 +02:00
Code Issues Packages Projects Releases Wiki Activity
15,056 Commits 2 Branches 1 Tag
111bbcb3ada255b73d8ddfab1052e030d402aeff
Commit Graph

107 Commits

Author SHA1 Message Date
Michael Tremer
8ffdc78c49 web UI: Add graph for connection tracking 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-09-19 19:13:10 +00:00
Michael Tremer
fa8edb9bd7 index.cgi: Show a note to people who are running IPFire on i?86 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2020-08-17 10:08:23 +00:00
Michael Tremer
c0fe5ea579 index.cgi: Drop Reiser4 warning 
We have dropped Reiser4 in 2013. There won't be any systems out there
any more running it. We can safely drop this warning.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2020-08-17 10:08:22 +00:00
Stéphane Pautrel
cd6bd02f53 fr: Update French translation 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-07-27 18:09:27 +00:00
Stefan Schantl
af7f9fc43d :xMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-switch-to-libloc 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2020-07-03 18:48:30 +02:00
Arne Fitzenreiter
96253783d4 update credits.cgi and langs doku 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-07-02 11:22:17 +00:00
Peter Müller
0f8251fe64 Revert "proxy: Remove AUTH_IPCACHE_TTL" 
This reverts commit dc637f087f.

Rationale: "authenticate_ip_ttl" can be safely used as it does not
introduces an authentication bypass, but saves relationships between
successfully authenticated users and their IP addresses.

"max_user_ip" depends on such an authentication cache, so credential
sharing between several IPs (on purpose or by chance) can be detected
properly. This is useful in case of crompromised machines and/or
attackers in internal networks having stolen proxy authentication
credentials.

Quoted from squid.conf.documented or man 5 squid.conf:

>       acl aclname max_user_ip [-s] number
>         # This will be matched when the user attempts to log in from more
>         # than <number> different ip addresses. The authenticate_ip_ttl
>         # parameter controls the timeout on the ip entries. [fast]
>         # If -s is specified the limit is strict, denying browsing
>         # from any further IP addresses until the ttl has expired. Without
>         # -s Squid will just annoy the user by "randomly" denying requests.
>         # (the counter is reset each time the limit is reached and a
>         # request is denied)
>         # NOTE: in acceleration mode or where there is mesh of child proxies,
>         # clients may appear to come from multiple addresses if they are
>         # going through proxy farms, so a limit of 1 may cause user problems.

Fixes: #11994

Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-07-01 12:08:10 +00:00
Michael Tremer
af6aedb6d3 location: Remove "GeoIP" from the UI 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2020-06-12 16:12:06 +02:00
Stéphane Pautrel
1a2cc05fef fr: Add missing strings 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-05-18 20:08:33 +00:00
Michael Tremer
abeb95489d Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-05-09 12:01:55 +00:00
Michael Tremer
f61be862c6 pakfire.cgi: Add UI to select repository 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-15 11:08:43 +00:00
Michael Tremer
351ad526b2 dns.cgi: Show recursor mode message even when we have some servers to show 
The message was not shown when we have received DNS servers from the
provider.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2020-01-29 11:40:59 +01:00
Stéphane Pautrel
bcf318fbd0 Many improvements for the French translation 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-01-16 18:21:53 +00:00
Michael Tremer
0fa6bde78a Update English translation 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2020-01-07 10:53:34 +00:00
Stéphane Pautrel
1ec1e499d0 Update of French translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-12-29 08:50:52 +00:00
Michael Tremer
afe23fbb52 QoS: Drop support for subclasses 
This feature was never properly implemented and the UI was dead

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-21 18:58:12 +00:00
Arne Fitzenreiter
50e97cd55f Revert "QoS: Drop support for subclasses" 
This reverts commit bc4d4da870.
 2019-10-20 20:18:00 +00:00
Michael Tremer
bc4d4da870 QoS: Drop support for subclasses 
This feature was never properly implemented and the UI was dead

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-14 18:04:39 +00:00
Michael Tremer
6d653734fb Update German translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-05-22 15:18:31 +01:00
Michael Tremer
1cbcd044af SMT: Show status on vulnerabilities.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-05-20 21:54:05 +01:00
Michael Tremer
6f626b9ba0 Add the new vulnerabilities CGI file to the System menu 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-05-20 21:38:20 +01:00
Michael Tremer
65871d1a0c Add new CGI file to show CPU vulnerability status 
This is supposed to help users to have an idea about
the status of the used hardware.

Additionally, it allows users to enable/disable SMT.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-05-20 21:17:17 +01:00
Michael Tremer
4d497f8ea0 Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-05-20 10:55:02 +01:00
Michael Tremer
88e4e3d3ad Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-05-20 10:51:09 +01:00
Michael Tremer
045ea1d013 Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-05-17 23:36:53 +01:00
Michael Tremer
6b2801d62e URL Filter: Drop Safe Search feature 
This is not working for quite some time now because all search
engines have moved over to HTTPS. Therefore we no longer can
manipulate the URL query string.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-05-11 04:16:39 +01:00
Michael Tremer
d21b86b6c3 zoneconf: Fix spelling 
This patch mainly changes "Macvtap" to the branded spelling and removes
short forms as well as hyphenation in German compound nouns.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-05-09 17:13:52 +02:00
Florian Bührle
1dcf513a41 webif: Add a GUI for configuring VLAN interfaces 
This patch adds a new CGI file which allows users to edit the
VLAN configuration as well as configuring zones as bridges.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-05-08 12:15:27 +01:00
Michael Tremer
c721714036 hostap: Translate configuration settings 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-24 11:31:28 +01:00
Michael Tremer
37a83c83cd hostap: Enable option to force clients to use 802.11w 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-24 10:39:25 +01:00
Michael Tremer
ea10f1a0b5 hostap: Allow to use Automatic Channel Selection (ACS) 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-24 10:12:29 +01:00
Michael Tremer
e24daa08fa Update translation 
Fix some apostrophe and spelling errors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-20 14:18:17 +01:00
Michael Tremer
0851afba33 remote.cgi: Move SSH Agent Forwarding to the top 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-11 23:24:54 +01:00
Michael Tremer
5b2ec053c2 Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-11 22:58:35 +01:00
Michael Tremer
3657df4ea3 DHCP: Remove double colon 
In some languages, there were double colons in the DNS Update section

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-22 03:29:01 +00:00
Michael Tremer
ceaf0ef008 dnsforward.cgi: Add DNSSEC option to legend 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-18 17:26:16 +00:00
Michael Tremer
710afa00c6 Update IPS translation 
* Fix typos
* Fix compound nouns (especially in German)
* Remove unused strings

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-14 17:18:21 +00:00
Michael Tremer
cdfbdd1ada Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-14 13:20:22 +00:00
Michael Tremer
025d8e6318 DNS Forwarding: Add UI to Allow to disable DNSSEC for a zone 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-05 16:10:17 +00:00
Michael Tremer
41f3351320 Drop "OpenVPN" part from VPN N2N stats page 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-02-04 18:20:36 +00:00
Michael Tremer
1e2b257789 Add routed IPsec connections to traffic graphs section 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-02-04 18:20:36 +00:00
Michael Tremer
26c2cc580b ipsec: Add translation strings for recent changes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-02-04 18:20:36 +00:00
Michael Tremer
7e25093d42 ipsec: Don't allow to select VTI in transport mode 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-02-04 18:20:36 +00:00
Michael Tremer
216bd9b389 vpnmain.cgi: Move advanced IPsec settings to connection page 
This is required to make the initial setup easier for GRE/VTI connections

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-02-04 18:20:36 +00:00
Michael Tremer
55842dda69 IPsec: Add UI for set interface MTU 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-02-04 18:20:36 +00:00
Michael Tremer
7464131706 IPsec: Add option to configure IP address for tunnel interface 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-02-04 18:20:36 +00:00
Michael Tremer
cae1f4a7a8 IPsec: Add dropdown to select tunnel interface mode 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-02-04 18:20:36 +00:00
Michael Tremer
29f5e0e2b9 IPsec: Add selection for transport/tunnel mode 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-02-04 18:20:36 +00:00
Michael Tremer
ae5b9c5ad5 Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 07:03:08 +00:00
Michael Tremer
cdd4cf4094 proxy: Drop support for throttling only certain mime types 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:00:05 +01:00