Commit Graph

7635 Commits

Author SHA1 Message Date
Michael Tremer
057b351186 Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x 2014-04-05 17:02:33 +02:00
Arne Fitzenreiter
c926c6375d firewall: fix green only mode.
disable masquerade and green IP/NET check if internet is
connected via green.
2014-04-05 11:04:25 +02:00
Arne Fitzenreiter
fee04791f4 apache2: update to 2.2.27. 2014-04-04 21:17:08 +02:00
Arne Fitzenreiter
8e05d96896 kernel: update to 3.10.36. 2014-04-04 13:53:41 +02:00
Arne Fitzenreiter
51e7782863 kernel: update to 3.10.35. 2014-04-03 10:06:47 +02:00
Michael Tremer
4e3ce5438b glibc: Install all known locales. 2014-04-01 16:24:50 +02:00
Michael Tremer
025741919a firewall: Fix perl coding error.
Example:
	my @as = (1, 2, 3);
	foreach my $a (@as) {
		$a += 1;
		print "$a\n";
	}

$a will be a reference to the number in the array and not
copied. Therefore $a += 1 will change the numbers in the
array as well, so that after the loop the content of @as
would be (2, 3, 4).
To avoid that, the number needs to be copied into a new
variable like: my $b = $a; and we are fine.

This caused that the content of the @sources and @destinations
array has been altered for the second run of the loop and
incorrect (i.e. no) rules were created.
2014-03-31 13:16:26 +02:00
Michael Tremer
c5fb845c4e Merge branch 'kernel-layer7-oom' 2014-03-30 23:28:35 +02:00
Michael Tremer
af8c09ff38 kernel: Update layer7 patch.
Brings back the /proc interface and is supposed to
fix a memory leak.
2014-03-30 23:26:29 +02:00
Michael Tremer
c26a9ed25c firewall-policy: Clarify policy rules.
There are no functional changes here. Everything that
is not explicitely allowed is now forbidden when the
forward policy is "ALLOWED".
2014-03-30 22:33:58 +02:00
Michael Tremer
ae6ae33f84 Merge branch 'beyond-next' into next 2014-03-30 00:21:33 +01:00
Arne Fitzenreiter
8089b78d9d firewall-policy: fix drop and logging on red0; 2014-03-29 15:06:35 +01:00
Arne Fitzenreiter
ea219d3a0f set version to IPFire 2.15 rc1. 2014-03-28 18:16:31 +01:00
Michael Tremer
70c926e75b firewall: Create mangle chain NAT_DESTINATION to silence error messages when updating. 2014-03-27 15:08:17 +01:00
Alexander Marx
a3f2459f8f Firewall: fix Update from core 75 to 76 2014-03-27 15:07:41 +01:00
Michael Tremer
1e4b7130e1 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-27 15:07:26 +01:00
Michael Tremer
38ca33d110 cups: Fix rootfile.
Basically, include just everything.
2014-03-27 11:36:12 +01:00
Arne Fitzenreiter
90b0389a90 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-27 07:30:56 +01:00
Arne Fitzenreiter
82f5dd85cd rpi-firmware: update to 18a7921. 2014-03-27 07:29:19 +01:00
Arne Fitzenreiter
5734dd105c kernel: update RPi patchset to dea8280. 2014-03-27 07:25:24 +01:00
Michael Tremer
8fcb92530e ipsecctrl: Fix compiler warning. 2014-03-26 23:47:14 +01:00
Michael Tremer
41dfa08d2a Merge branch 'ppp-update' into beyond-next 2014-03-26 23:43:04 +01:00
Michael Tremer
5240f73d9c Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into beyond-next 2014-03-26 23:42:57 +01:00
Michael Tremer
93b36c3e22 ppp: Update to 2.4.6. 2014-03-26 23:42:05 +01:00
Michael Tremer
7add463e51 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-26 23:35:18 +01:00
Michael Tremer
36d809efb6 media.cgi: Fix typo 'writen'. 2014-03-26 23:34:58 +01:00
Arne Fitzenreiter
513c321ebe wlanap.cgi: fix missing line from wlan info. 2014-03-26 08:35:00 +01:00
Arne Fitzenreiter
6a79396ce6 hostapd: change setting of the regdomain.
the regdomain is only updated if it was really changed but after boot
the system believe it is "00" World but it is not correctly set at
some cards. So we set a region and set it back to "00" before the
real region was set.
2014-03-25 19:11:03 +01:00
Arne Fitzenreiter
91eb94ee2f wlanap: fix typo. 2014-03-25 13:15:43 +01:00
Arne Fitzenreiter
57c209d558 wlanap.cgi: fix detection of not useable channels. 2014-03-25 13:03:56 +01:00
Arne Fitzenreiter
5c8167f576 iwlwifi: use noibss flags only on radar detection channels. 2014-03-25 12:59:37 +01:00
Arne Fitzenreiter
f763ff3224 kernel: update to 3.10.34. 2014-03-24 13:28:29 +01:00
Arne Fitzenreiter
af433268e0 graphs.pl: fix links position in chrome for android. 2014-03-23 17:39:47 +01:00
Michael Tremer
4c7bfb1f27 Merge remote-tracking branch 'stevee/squid-zph-qos' into beyond-next 2014-03-21 14:48:22 +01:00
Michael Tremer
6bd4bcdaa1 squid: Update to 3.4.4. 2014-03-21 13:46:03 +01:00
Michael Tremer
51cf3f8be5 firewall: rules.pl: Honour time constraints for NAT rules as well. 2014-03-21 13:39:03 +01:00
Michael Tremer
f98bb538e5 firewall: rules.pl: Catch invalid configurations. 2014-03-21 13:33:08 +01:00
Michael Tremer
c0ce920610 firewall: rules.pl: Allow REDIRECT rules. 2014-03-21 13:28:00 +01:00
Alexander Marx
896eb2d693 Firewall: Allow DNAT with target firewall 2014-03-21 12:55:34 +01:00
Alexander Marx
c71499d8d9 Firewall: Rename defaultNetworks to netsettings 2014-03-21 12:51:18 +01:00
Alexander Marx
fd169d0adc Firewall: DNAT - Show right DNAT interface in ruletable
Now:
When using a hostgroup as source there are all corresponding DNAT
interfaces shown in ruletable depending on the entries in the group.

When in DNAT area "-automatic" is selected, the DNAT interfaces are
shown as IP-Addresses, else they are shown as "ORANGE","GREEN","BLUE"...

BUGFIX: When there is a MAC address used in a sourcegroup, the rules could not be set. Now MAC addresses get allways the public interface as DNAT
2014-03-21 12:51:09 +01:00
Alexander Marx
4e54e3c6f5 Firewall: Move some functions from rules.pl to firewall-lib.pl 2014-03-21 12:51:04 +01:00
Michael Tremer
d7a14d01e1 firewall: rules.pl: Fix rules with other NAT port. 2014-03-21 12:40:55 +01:00
Michael Tremer
fc84e6ec23 Merge remote-tracking branch 'alfh/feature_vnstat_1.11' into beyond-next 2014-03-20 23:16:38 +01:00
Michael Tremer
296a73a532 Merge remote-tracking branch 'alfh/feature_firewalllogcountry' into beyond-next
Conflicts:
	langs/de/cgi-bin/de.pl
2014-03-20 23:15:49 +01:00
Michael Tremer
dd29d563a6 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into beyond-next
Conflicts:
	doc/language_issues.es
	doc/language_issues.fr
	doc/language_issues.nl
	doc/language_issues.pl
	doc/language_issues.ru
	doc/language_issues.tr
	doc/language_missings
2014-03-20 23:14:13 +01:00
Michael Tremer
0d0df35ca2 Update translations. 2014-03-20 23:07:26 +01:00
Alexander Marx
95cda25924 Firewall: DNAT - always show right red address in dropdown.
Edited language String in DNAT area: external ip address is now Firewall
Interface
2014-03-20 23:06:50 +01:00
Arne Fitzenreiter
cec275c9df Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2014-03-19 19:07:27 +01:00
Arne Fitzenreiter
b3c0c61132 hostapd: enable CONFIG_ACS for dfs channels. 2014-03-19 19:03:22 +01:00