Stefan Schantl
2e3cb8edbc
stage2: Rootfile update.
2015-02-14 19:18:27 +01:00
Stefan Schantl
bc9446c65f
Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x into seventeen-geoip
...
Conflicts:
make.sh
2015-02-14 12:34:31 +01:00
Stefan Schantl
1dcd87157d
geoip-functions.pl: A collection of functions dealing with GeoIP.
2015-02-08 18:23:01 +01:00
Michael Tremer
f1ce93f422
setup: Better not include the language directories recursively
2015-02-04 19:51:30 +01:00
Michael Tremer
6726595aa5
installer+setup: Rootfile update
2015-02-04 19:49:51 +01:00
Michael Tremer
b6301464d4
openvpn certificate generation: Update openssl config file
...
This was not correctly updated with Core Update 79 because
of the exclude file.
Bug #10741
2015-02-04 13:21:43 +01:00
Arne Fitzenreiter
92b6fbcf20
kernel: update to 3.14.31.
2015-02-03 20:43:32 +01:00
root
93cad66b4e
core87: serial console update part 2.
2015-02-02 14:38:16 +01:00
Arne Fitzenreiter
db5b0f9693
core87: fix stay on serial console at update.
2015-02-02 10:58:19 +01:00
Arne Fitzenreiter
7e6be0de5b
firmwares: add Banana Pro and Wandboard wlan NVRAM files.
2015-01-30 18:09:21 +01:00
Arne Fitzenreiter
e21cef2784
kernel: update banana pi, lamobo-r1 and add banana pro dtb.
2015-01-30 00:09:00 +01:00
Arne Fitzenreiter
8d903f6db9
core87: work arround u-boot folder detection bug.
...
some u-boot version seems only scan the first directory entries for
folders and not find the dtb's if the folder are created to late.
2015-01-29 20:54:42 +01:00
Arne Fitzenreiter
026413980f
core87: remove linux-xen code from updater.
2015-01-29 08:37:59 +01:00
Arne Fitzenreiter
40a8ea817a
core87: remove old dtb's and backup uEnv.txt at update.
2015-01-29 08:36:26 +01:00
Arne Fitzenreiter
4165a41e84
kernel: update to 3.14.30.
2015-01-29 07:47:16 +01:00
Arne Fitzenreiter
ffeb717f2d
add swconfig for lamobo-r1 switch setup.
2015-01-27 20:21:17 +01:00
Arne Fitzenreiter
7726e3a66b
kernel: add support for lamobo-r1.
2015-01-27 19:11:57 +01:00
Michael Tremer
1b34f6cd64
firewall: Fix SNAT rules that use a default network as source
...
In the POSTROUTING chain using -i intf0 does not work at all.
We now only use the -s parameter to figure out if the rule applied.
The filter chain still uses -i and -o to match patches not only
by the network address, but also by the incoming/outgoing interface.
2015-01-22 16:06:25 +01:00
Michael Tremer
7ae2d8a2a4
util-linux: Ship tailf
2015-01-21 14:24:06 +01:00
Arne Fitzenreiter
893ef99ed4
collectd: fix disable swap plugin if no swap exist.
2015-01-21 13:16:09 +01:00
Arne Fitzenreiter
a5b2c82327
core87: remove useless and time/memory consuming backup.
...
nearly no user can rollback with this tar.xz because bootloader is changed.
2015-01-20 22:04:12 +01:00
Arne Fitzenreiter
a762fcd037
modprobe.d: blacklist btmrvl_sdio.
2015-01-20 09:14:23 +01:00
Arne Fitzenreiter
7db4c67f81
kernel: arm7-multi: enable RTC_DRV_MV.
2015-01-18 21:36:16 +01:00
Arne Fitzenreiter
d595016bfb
leds: add mirabox support.
2015-01-18 21:32:15 +01:00
Arne Fitzenreiter
d47c2aaec8
core87: don't reset timeserver setting at update.
2015-01-14 17:40:59 +01:00
Arne Fitzenreiter
b3a774e2f6
kernel: arm-multi: compile mvneta ethernet driver into kernel.
...
This is needed for mirabox to take over the mac address from bootloader.
2015-01-14 07:49:10 +01:00
Arne Fitzenreiter
2fdba16c88
rootfile updates (crda, arm kernel).
2015-01-14 07:46:53 +01:00
Arne Fitzenreiter
511f9a88e7
kernel: update config files.
2015-01-11 11:55:25 +01:00
Arne Fitzenreiter
35086a2db4
backports: more module fixes.
2015-01-11 00:39:35 +01:00
Arne Fitzenreiter
c0bf6eadf0
backports: fix module kernel config.
2015-01-10 10:22:21 +01:00
Arne Fitzenreiter
fb90bce89b
backports: fix module cflags for arm.
2015-01-09 23:34:56 +01:00
Michael Tremer
08e5991c36
openssl: Update to 1.0.1k and 0.9.8zd
...
https://www.openssl.org/news/secadv_20150108.txt
2015-01-08 18:28:48 +01:00
Arne Fitzenreiter
97c73abc88
hostapd/wpa_supplicant: update to 2.3.
2015-01-04 20:26:59 +01:00
Arne Fitzenreiter
2bb836df11
hostapd: change default channel to 6.
2015-01-04 20:17:26 +01:00
Arne Fitzenreiter
c3408c01a1
wireless-regdb: update to 2014.11.18.
2015-01-04 18:21:06 +01:00
Arne Fitzenreiter
ba2a22487a
crda: update 3.13.
2015-01-04 18:20:08 +01:00
Stefan Schantl
192a8266e2
geoip-block.cgi: Requires firewall-lib.pl.
2015-01-04 14:07:06 +01:00
Stefan Schantl
e497310ee0
Add "GeoIP Block" to firewall menu.
2015-01-04 13:51:28 +01:00
Stefan Schantl
0909c0d150
Automatically download and update GeoIP Databases.
2015-01-04 13:40:34 +01:00
Stefan Schantl
58c74d0787
lfs/stage2: Add directory for geoip databases.
2015-01-04 13:36:06 +01:00
Stefan Schantl
f2d941436b
Rootfile update.
2015-01-04 08:23:53 +01:00
Stefan Schantl
211694e588
firewall: Add support for geoipblock to rules.pl.
2015-01-04 01:05:45 +01:00
Stefan Schantl
593c32275a
Move "sub get_geoip_locations" to firewall-lib.
2015-01-04 01:03:21 +01:00
Stefan Schantl
484e01fc37
Add default config file for geoipblock.
2015-01-04 00:56:00 +01:00
Stefan Schantl
cc26ba71a1
header.pl: Increase maximum allowed size of hashes.
...
The "getcgihash" function only allowed hashes with a maximum size of 512kb, which
was to small for the new geoip-block.cgi. As a result of this some form data
were cut-off and couldn't be processed correctly.
2015-01-03 20:22:05 +01:00
Stefan Schantl
cebb1b7cb1
general-functions.pl: Add function to get full country name.
...
This function will return the full name a country specified by
it's country shortcut. It also will provide some additional names
which are not handled by the perl locale module but are parts of
ISO 3166.
2015-01-03 20:15:28 +01:00
Stefan Schantl
b8e0573b5c
xtables-addons: New package.
...
The xtables-addons package provides many additional filter modules for iptables.
Currently we are only building the "geoip" module which can be used to create
firewall rules which will do actions based on the country membership of the senders/targets
address.
In order to build the required kernel modules I had to change build order for
several packages as well.
2015-01-03 14:07:49 +01:00
Stefan Schantl
72074fcdd2
perl-Text-CSV_XS: New package.
...
This perl module is required to convert the provided geoip databases in CSV format into
a useable binary format for the geoip module.
2015-01-03 14:03:20 +01:00
Arne Fitzenreiter
33e2ee618b
core86: remove not changed firmwares from updater.
...
This save 20MB updater size.
2015-01-03 00:00:38 +01:00
Michael Tremer
3bb9a745b5
Ship bash with Core Update 86 again
...
It seems that some systems installed some pre-versions
of the distribution which came with an outdated version
of bash. Since this update uses some scripts that use
bash-4-isms, we ship the shell once again.
An other reason is that there have been security fixes
in the shell which should be fixed on all systems.
2015-01-02 14:44:55 +01:00
