Commit Graph

7577 Commits

Author SHA1 Message Date
Alexander Marx
1ccfb89eab Firewall: fix coloring of internet hosts 2014-04-07 16:53:01 +02:00
Alexander Marx
6effa000ec Firewall: Fix source preselection of alias when Firewall is selected 2014-04-07 16:52:55 +02:00
Alexander Marx
747d030a24 Firewall: BUGFIX 10505 2014-04-07 16:52:49 +02:00
Alexander Marx
476b122fa8 Firewall: BUGFIX 10507 2014-04-07 16:52:42 +02:00
Michael Tremer
2250019f7d Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x 2014-04-07 16:49:33 +02:00
Arne Fitzenreiter
1e7a2feaeb glibc: rootfile update (arm). 2014-04-07 00:35:31 +02:00
Arne Fitzenreiter
b3c0ff6239 kernel-header: rootfile update. 2014-04-06 23:34:32 +02:00
Michael Tremer
6cf0f959f0 media.cgi: Fix typo once again. 2014-04-06 17:24:13 +02:00
Ersan Yildirim
8824d89482 Update Turkish translation. 2014-04-06 17:22:31 +02:00
Michael Tremer
888911ed57 core76: Include changed /etc/sysctl.conf in update. 2014-04-06 12:53:30 +02:00
Arne Fitzenreiter
68561214b3 glibc: fix image, updater and filecount in installer.
switch from locale-archive to normale locales add est. 5000 files.
todo: arm-rootfile.
2014-04-06 10:29:27 +02:00
Michael Tremer
085a20ec8b firewall: Fix using aliases.
Fix coding errors, actually read aliases configuration
and fall back to default RED IP address if no suitable
alias was found.
2014-04-05 17:09:56 +02:00
Michael Tremer
1d9c1c3079 convert-portfw: Fix converting aliases.
ALL is not suitable as it is not a valid configuration value.
2014-04-05 17:08:17 +02:00
Michael Tremer
057b351186 Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x 2014-04-05 17:02:33 +02:00
Arne Fitzenreiter
c926c6375d firewall: fix green only mode.
disable masquerade and green IP/NET check if internet is
connected via green.
2014-04-05 11:04:25 +02:00
Arne Fitzenreiter
fee04791f4 apache2: update to 2.2.27. 2014-04-04 21:17:08 +02:00
Arne Fitzenreiter
8e05d96896 kernel: update to 3.10.36. 2014-04-04 13:53:41 +02:00
Arne Fitzenreiter
51e7782863 kernel: update to 3.10.35. 2014-04-03 10:06:47 +02:00
Michael Tremer
4e3ce5438b glibc: Install all known locales. 2014-04-01 16:24:50 +02:00
Michael Tremer
025741919a firewall: Fix perl coding error.
Example:
	my @as = (1, 2, 3);
	foreach my $a (@as) {
		$a += 1;
		print "$a\n";
	}

$a will be a reference to the number in the array and not
copied. Therefore $a += 1 will change the numbers in the
array as well, so that after the loop the content of @as
would be (2, 3, 4).
To avoid that, the number needs to be copied into a new
variable like: my $b = $a; and we are fine.

This caused that the content of the @sources and @destinations
array has been altered for the second run of the loop and
incorrect (i.e. no) rules were created.
2014-03-31 13:16:26 +02:00
Michael Tremer
c5fb845c4e Merge branch 'kernel-layer7-oom' 2014-03-30 23:28:35 +02:00
Michael Tremer
af8c09ff38 kernel: Update layer7 patch.
Brings back the /proc interface and is supposed to
fix a memory leak.
2014-03-30 23:26:29 +02:00
Michael Tremer
c26a9ed25c firewall-policy: Clarify policy rules.
There are no functional changes here. Everything that
is not explicitely allowed is now forbidden when the
forward policy is "ALLOWED".
2014-03-30 22:33:58 +02:00
Arne Fitzenreiter
8089b78d9d firewall-policy: fix drop and logging on red0; 2014-03-29 15:06:35 +01:00
Arne Fitzenreiter
ea219d3a0f set version to IPFire 2.15 rc1. 2014-03-28 18:16:31 +01:00
Michael Tremer
70c926e75b firewall: Create mangle chain NAT_DESTINATION to silence error messages when updating. 2014-03-27 15:08:17 +01:00
Alexander Marx
a3f2459f8f Firewall: fix Update from core 75 to 76 2014-03-27 15:07:41 +01:00
Michael Tremer
1e4b7130e1 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-27 15:07:26 +01:00
Michael Tremer
38ca33d110 cups: Fix rootfile.
Basically, include just everything.
2014-03-27 11:36:12 +01:00
Arne Fitzenreiter
90b0389a90 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-27 07:30:56 +01:00
Arne Fitzenreiter
82f5dd85cd rpi-firmware: update to 18a7921. 2014-03-27 07:29:19 +01:00
Arne Fitzenreiter
5734dd105c kernel: update RPi patchset to dea8280. 2014-03-27 07:25:24 +01:00
Michael Tremer
8fcb92530e ipsecctrl: Fix compiler warning. 2014-03-26 23:47:14 +01:00
Michael Tremer
7add463e51 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-26 23:35:18 +01:00
Michael Tremer
36d809efb6 media.cgi: Fix typo 'writen'. 2014-03-26 23:34:58 +01:00
Arne Fitzenreiter
513c321ebe wlanap.cgi: fix missing line from wlan info. 2014-03-26 08:35:00 +01:00
Arne Fitzenreiter
6a79396ce6 hostapd: change setting of the regdomain.
the regdomain is only updated if it was really changed but after boot
the system believe it is "00" World but it is not correctly set at
some cards. So we set a region and set it back to "00" before the
real region was set.
2014-03-25 19:11:03 +01:00
Arne Fitzenreiter
91eb94ee2f wlanap: fix typo. 2014-03-25 13:15:43 +01:00
Arne Fitzenreiter
57c209d558 wlanap.cgi: fix detection of not useable channels. 2014-03-25 13:03:56 +01:00
Arne Fitzenreiter
5c8167f576 iwlwifi: use noibss flags only on radar detection channels. 2014-03-25 12:59:37 +01:00
Arne Fitzenreiter
f763ff3224 kernel: update to 3.10.34. 2014-03-24 13:28:29 +01:00
Arne Fitzenreiter
af433268e0 graphs.pl: fix links position in chrome for android. 2014-03-23 17:39:47 +01:00
Michael Tremer
51cf3f8be5 firewall: rules.pl: Honour time constraints for NAT rules as well. 2014-03-21 13:39:03 +01:00
Michael Tremer
f98bb538e5 firewall: rules.pl: Catch invalid configurations. 2014-03-21 13:33:08 +01:00
Michael Tremer
c0ce920610 firewall: rules.pl: Allow REDIRECT rules. 2014-03-21 13:28:00 +01:00
Alexander Marx
896eb2d693 Firewall: Allow DNAT with target firewall 2014-03-21 12:55:34 +01:00
Alexander Marx
c71499d8d9 Firewall: Rename defaultNetworks to netsettings 2014-03-21 12:51:18 +01:00
Alexander Marx
fd169d0adc Firewall: DNAT - Show right DNAT interface in ruletable
Now:
When using a hostgroup as source there are all corresponding DNAT
interfaces shown in ruletable depending on the entries in the group.

When in DNAT area "-automatic" is selected, the DNAT interfaces are
shown as IP-Addresses, else they are shown as "ORANGE","GREEN","BLUE"...

BUGFIX: When there is a MAC address used in a sourcegroup, the rules could not be set. Now MAC addresses get allways the public interface as DNAT
2014-03-21 12:51:09 +01:00
Alexander Marx
4e54e3c6f5 Firewall: Move some functions from rules.pl to firewall-lib.pl 2014-03-21 12:51:04 +01:00
Michael Tremer
d7a14d01e1 firewall: rules.pl: Fix rules with other NAT port. 2014-03-21 12:40:55 +01:00