webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-11 03:25:54 +02:00
Code Issues Packages Projects Releases Wiki Activity
9,600 Commits 2 Branches 1 Tag
28bee14eccbc3e2cada73cbbe84634e070c8c8bc
Commit Graph

4110 Commits

Author SHA1 Message Date
Arne Fitzenreiter
c88002c48b ipset: fix build om arm. 
Never hardcode KVER-ipfire in any patches because on arm there is no KVER-ipfire kernel.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-11-07 09:11:27 +01:00
Arne Fitzenreiter
ea2b8089e6 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2015-11-05 21:39:39 +01:00
Erik Kapfer
63cbd2c1df ipset: New package 
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-11-05 11:47:14 +00:00
Arne Fitzenreiter
89f7654673 openvmtools: enable build on x86_64 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-11-05 11:40:06 +01:00
Matthias Fischer
b6f571fa88 snort: Update to 2.9.7.6 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-11-04 21:18:56 +00:00
Erik Kapfer
6411f1baa6 lzo: Update to version 2.09 
Signed-off-by: Erik Kapfer <erik.kapfer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-11-04 21:11:07 +00:00
Matthias Fischer
93a08fe261 dma: Update to 0.10 
Sorry, I borked the PATCH from yesterday...second try:

dma: Update to 0.10
Changes: dns.c, do not treat unreachable DNS server as permanent error
See: 1a1306df01 (diff-8e1267319329e5ee7e6a92fb2aa01c6b)

Deleted unnecessary blank lines in 'mail.cgi'

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-11-04 21:10:04 +00:00
Michael Tremer
c98981ae3d Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2015-10-29 23:25:45 +00:00
Arne Fitzenreiter
5215a0f2c1 e1000e: update to 3.2.7.1 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-10-28 19:36:22 +01:00
Arne Fitzenreiter
8d4cae8736 kernel: update to 3.14.56 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-10-27 17:31:51 +01:00
Arne Fitzenreiter
e0d5c35122 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2015-10-27 17:31:19 +01:00
Arne Fitzenreiter
bd64e2a02a kernel: genksyms fix empty symbol crc. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-10-27 16:57:24 +01:00
Matthias Fischer
c267b2da2d snort 2.9.7.6: removed unrecognized configure options in lfs file 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-10-27 14:37:56 +00:00
Matthias Fischer
6e11539dc2 ntp: Update to 4.2.8p4 
ntp-Update to 4.2.8p4, regarding "13 low- and medium-severity vulnerabilities".

For a complete list, see: http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-10-26 13:08:53 +00:00
Arne Fitzenreiter
a14e8d0256 Merge remote-tracking branch 'origin/master' into next 2015-10-25 09:21:12 +01:00
Arne Fitzenreiter
3a6784c065 ssh: preferre ecdsa cipher again. 
Previous we had not configured it so the ssh default order was used.
Now we define it to disable dsa so we had to give the correct order but
in the example cfg rsa is prefered.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-10-24 12:07:29 +02:00
Arne Fitzenreiter
038169b894 kernel: uppdate to 3.14.55 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-10-23 11:00:03 +02:00
Arne Fitzenreiter
159c9eb9b1 Merge remote-tracking branch 'origin/master' into next 2015-10-22 13:11:17 +02:00
Arne Fitzenreiter
d7b82e7cce openssh: disable dsa key usage. 
fixes #10934

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-10-22 13:08:27 +02:00
Arne Fitzenreiter
52daacc5c4 kernel: update to 3.14.54 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-10-21 18:48:32 +02:00
Dirk Wagner
4bb2df502d monit addon: Upgrade to 5.14 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-10-18 00:31:06 +01:00
Dirk Wagner
187154380c asterisk addon: Update to 11.20.0 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-10-18 00:31:04 +01:00
Stefan Schantl
a9929e324f ddns: Update to 009 
This update contains the latest upstream changes which are
a better SSL error handling and support for desec.io.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-10-17 01:26:46 +01:00
Michael Tremer
80fbd89949 ipsec: Add block rules to avoid conntrack entries 
If an IPsec VPN connections is not established, there are
rare cases when packets are supposed to be sent through
that said tunnel and incorrectly handled.

Those packets are sent to the default gateway an entry
for this connection is created in the connection tracking
table (usually only happens to UDP). All following packets
are sent the same route even after the tunnel has been
brought up. That leads to SIP phones not being able to
register among other things.

This patch adds firewall rules that these packets are
rejected. That will sent a notification to the client
that the tunnel is not up and avoid the connection to
be added to the connection tracking table.

Apart from a small performance penalty there should
be no other side-effects.

Fixes: #10908

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Cc: tomvend@rymes.com
Cc: daniel.weismueller@ipfire.org
Cc: morlix@morlix.de
Reviewed-by: Timo Eissler <timo.eissler@ipfire.org>
 2015-10-15 22:44:47 +01:00
Stefan Schantl
a9a28430b5 tor.cgi: Fix missing country flag icons. 
The CGI now is using the GeoIP::get_flag_icon function provided by the
geoip-functions.pl, which takes care of the changed flag icons shipped
by core update 90.

Fixes #10919.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Tested-by: Jan Paul Tuecking <jan.paul.tuecking@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-10-15 15:42:44 +01:00
Arne Fitzenreiter
0171486695 sox: Disable parallel build 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-10-04 16:01:33 +02:00
Michael Tremer
8235f17df5 strongswan: Update to 5.3.3 
ChaCha is disabled since our kernel does not support it yet

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-10-03 19:17:01 +01:00
Michael Tremer
75ccb6a693 krb5: Disable parallel build 
Builds of this package crash randomly on all architectures
which might be related to the parallel build.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-10-02 19:00:13 +01:00
Arne Fitzenreiter
1f011c6594 backports: add Tevii S482 patch 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-10-01 11:14:58 +02:00
Arne Fitzenreiter
16016ff2b0 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2015-09-28 18:42:57 +02:00
Arne Fitzenreiter
db151fde63 igb: update to 5.3.3.2 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-09-28 18:39:26 +02:00
Arne Fitzenreiter
1d664fe1db e1000e: update to 3.2.4.2 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-09-28 18:38:55 +02:00
Michael Tremer
dfe630f77c Merge remote-tracking branch 'ms/experimental-vlan-hotplugging' into next 2015-09-28 14:33:49 +01:00
Arne Fitzenreiter
c9f0174979 kernel: update to 3.14.53 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-09-27 12:58:22 +02:00
Arne Fitzenreiter
1f2bda9ba3 backports: enable build on x86_64. 
backports 4.1.1-1 is not stable so we need to stay on the older version.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-09-27 11:27:40 +02:00
Michael Tremer
ed5fee308f core94: Ship changed CGI files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-09-21 16:46:21 +01:00
Arne Fitzenreiter
4d4f36ef55 kernel: Update pcengines apu led patch for x86_64 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-09-20 12:46:12 +02:00
Matthias Fischer
9b3ffc7457 iproute2: Update to 4.2.0 
List of changes can be seen at
http://git.kernel.org/cgit/linux/kernel/git/shemminger/iproute2.git/log/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-09-19 18:49:24 +01:00
Arne Fitzenreiter
6d7aff4a53 qemu: some features need disabled PaX RANDMMAP. 2015-09-18 19:23:56 +02:00
Arne Fitzenreiter
d2d9172b75 qemu: disable PaX mProtect on more binaries. 2015-09-17 19:17:44 +02:00
Arne Fitzenreiter
7f16eac4a4 qemu: update to 2.4.0 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-09-17 12:57:31 +02:00
Arne Fitzenreiter
40baf26143 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2015-09-16 20:28:53 +02:00
Arne Fitzenreiter
c97dda34de qemu: enabled x86_64 for build and as target. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-09-16 20:27:52 +02:00
Arne Fitzenreiter
0d77b70188 memtest: use precompiled memtest binary on x86_64 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-09-15 20:58:24 +02:00
Arne Fitzenreiter
bfc3e1f340 Revert "cdrom: Disable memtest on x86_64" 
This reverts commit 5d1c3aca0a.
 2015-09-15 20:46:37 +02:00
Michael Tremer
1ca232eb4c Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2015-09-14 23:32:51 +01:00
Matthias Fischer
f62ac3224c dnsmasq: latest upstream patches 
dnsmasq: latest upstream patches

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-09-14 23:30:32 +01:00
Arne Fitzenreiter
d9c6f56c2e pakfire: use correct tree on x86_64. 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2015-09-14 19:50:13 +02:00
Michael Tremer
1e4dbfbdf9 dma: Remove package variables since dma is not a package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-09-14 13:49:40 +01:00
Alexander Marx
37b2466d2b DMA: add empty mail.conf needed by WIO 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2015-09-14 13:49:29 +01:00