Michael Tremer
3ddad158cd
unbound: Allow recursion from everywhere
...
Users use the IPFire DNS service from VPNs and other
routed networks.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-11-04 17:08:13 +00:00
Michael Tremer
a6dcc5bb77
unbound: Fix for DNS forwarding of .local zones
...
These are traditionally used for Windows domains and should not
be used for that. However if they are used like this, DNSSEC
validation cannot be used.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-11-02 15:51:49 +00:00
Arne Fitzenreiter
38183e52dd
start core107 updater
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-27 21:07:55 +02:00
Arne Fitzenreiter
5a2ebd32c0
Merge branch 'master' into next
2016-10-22 10:33:46 +02:00
Michael Tremer
96473f525d
Revert "setup: Store passwords in SHA format"
...
This reverts commit eef9b2529c .
It appears that htpasswd is not salting any passwords that are
stored with the SHA (-s) algorithm. MD5 passwords however are
salted.
That leads us to the conclusion that the "MD5 algorithm" in htpasswd
is more secure than the "SHA algorithm" although the hash function
itself should be stronger.
With a rainbow table, cracking "SHA" is easily done.
A rainbow table for "MD5" + salt would be way too large to be
efficiently stored.
Hence this commit is reverted to old behaviour to avoid the clear
failure of design in SHA.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org >
2016-10-15 22:38:01 +01:00
Marcel Lorenz
894fea37d4
netpbm: update to 10.47.61
...
To keep the files in the right place, the files are installed into the build directory
and only the files which are useful are copied to the usual places in /usr.
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-14 00:05:55 +01:00
Marcel Lorenz
71a95ee330
libjpeg: update to 1.5.1
...
The old libjpeg is renamed to libjpeg-compat
The compat makes the old libs maintainable
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-14 00:05:55 +01:00
Marcel Lorenz
1cd30812d6
texinfo: update to 6.3
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-14 00:05:55 +01:00
Matthias Fischer
b06187f5b6
Midnight Commander: Update to 4.8.18
...
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-12 22:35:50 +01:00
Arne Fitzenreiter
693928d781
unbound: start prior network
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-12 23:01:51 +02:00
Arne Fitzenreiter
0fa8a4e98e
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
2016-10-12 22:52:34 +02:00
Arne Fitzenreiter
11ecfb92a0
backup: add unbound config
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-12 22:51:35 +02:00
Daniel Weismüller
d653b433ec
drop of the obsolete and deprecated vdr addon vdr_vnsiserver3
...
Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-12 11:21:24 +01:00
Matthias Fischer
5eeea64237
guardian 2.0: fixes for rootfile
...
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-10 12:08:33 +01:00
Michael Tremer
3a52755b97
core106: Ship changed pakfire.cgi
...
This was actually changed over a year ago, but was
never shipped in an update.
Commit 212fd689a3
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-10 12:05:01 +01:00
Michael Tremer
b32a8aefa2
core106: Ship updated iptables.cgi file
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-10 12:04:24 +01:00
Arne Fitzenreiter
0807ce69ee
setclock: prevent time bacjump by empty rtc batteries
...
This is a work around to prevent not working dns
resolution if the time jumps before the DNSSec signing key.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-08 15:43:54 +02:00
Michael Tremer
71cf56fe53
core106: Restart DHCP server to import leases into DNS
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-06 10:41:54 +01:00
Michael Tremer
eef9b2529c
setup: Store passwords in SHA format
...
htpasswd doesn't protect passwords very well. MD5 was used
before and now any newly created passwords will use the
SHA format.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-04 22:41:48 +01:00
Arne Fitzenreiter
e3a90a5736
Revert "core106: Add DNS root key to exclude list"
...
This reverts commit f58002a83f .
2016-10-04 22:05:26 +02:00
Michael Tremer
52587edac4
core106: Ship updated libidn
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-03 11:45:36 +01:00
Matthias Fischer
64602fdf7d
libidn: Update to 1.33
...
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-03 11:40:40 +01:00
Arne Fitzenreiter
642b831b72
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
2016-10-02 16:36:57 +02:00
Arne Fitzenreiter
e24d6112bb
index.cgi: display unbound dns servers
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-02 16:35:50 +02:00
Michael Tremer
5edc06b701
Remove IPAC stuff
...
This is unused for a very very very long time and serves
no purpose any more.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-02 15:13:55 +01:00
Arne Fitzenreiter
cc60329d88
Add search domain to /etc/resolv.conf at boot time
...
unbound does not append the local domain to the request
any more (like dnsmasq did). Therefore, the client needs
to do that if desired.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-02 15:32:14 +02:00
Arne Fitzenreiter
f58002a83f
core106: Add DNS root key to exclude list
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-02 13:36:07 +02:00
Arne Fitzenreiter
9f50355a8c
unbound: Update to 1.5.10
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-02 13:35:45 +02:00
Michael Tremer
a1de9f6fc9
core106: Ship updated /etc/login.defs
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-10-01 18:56:42 +01:00
Arne Fitzenreiter
60fc489b04
attr: rootfile update
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-10-01 15:17:37 +02:00
Arne Fitzenreiter
829435bea3
ntp: fix wait for red if dhcp or wpasupplicant is running.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-27 20:15:53 +02:00
Arne Fitzenreiter
b547554aea
core106: ship mt7601u firmware.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-27 19:20:14 +02:00
Arne Fitzenreiter
dee3be75f9
mpfr: fix missing eof in rootfile.
...
this is the reason for missing mt7601u firmware.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-27 19:18:21 +02:00
Michael Tremer
92aebbcddd
Revert "libjpeg: update to 1.4.2"
...
This reverts commit feba68e4af .
Breaks building netpbm
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-27 09:44:49 +01:00
Arne Fitzenreiter
01176164b5
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
2016-09-26 23:18:30 +02:00
Arne Fitzenreiter
de48b89ca1
Revert "Revert "tcl: update to 8.6.6""
...
with new krb5 also the tcl update works.
This reverts commit 053c554822 .
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-26 23:17:08 +02:00
Michael Tremer
e26a93322d
core106: Add recently updated packages, etc.
...
This update removes dnsmasq and replaces it with unbound.
Also many packages are updated and shipped.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-26 21:03:33 +01:00
Michael Tremer
59bddc7989
Start Core Update 106
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-26 20:25:22 +01:00
Marcel Lorenz
feba68e4af
libjpeg: update to 1.4.2
...
The old libjpeg is renamed to libjpeg-compat
The compat makes the old libs maintainable
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-26 20:18:25 +01:00
Arne Fitzenreiter
b8987235d2
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
2016-09-26 18:53:49 +02:00
Arne Fitzenreiter
724c0b8e4b
attr: rootfile update.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-26 18:51:27 +02:00
Jonatan Schlag
4141e0aad1
Update krb5 to 1.14.4
...
This commit updates krb5 to version 1.14.4
The patch is removed, because he is upstream since 1.12.2.
The samba version is incremented, to link samba against the new krb5
version. Otherwise samba for example is linked against
/usr/lib/libkdb5.so.7 but the current version is /usr/lib/libkdb5.so.8
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-26 14:42:08 +01:00
Arne Fitzenreiter
def1ad3e94
rootfile updates: attr, ed, gawk
...
Check rootfiles before commit !!!
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-26 13:08:02 +02:00
Arne Fitzenreiter
053c554822
Revert "tcl: update to 8.6.6"
...
breaks kerberos (krb5) build.
This reverts commit 282dfe0bb9 .
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-26 07:17:04 +02:00
Arne Fitzenreiter
e70d2dc27d
transmission: update to 2.92
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-09-24 16:44:47 +02:00
Marcel Lorenz
1031bcee20
iproute2: update to 4.7.0
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:11:30 +01:00
Marcel Lorenz
54a59fd892
usb_modeswitch_data: update to 20160803
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:08:57 +01:00
Marcel Lorenz
3fc734f0f9
libmnl: update to 1.0.
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:07:13 +01:00
Marcel Lorenz
0e7699cbb5
libnetfilter_conntrack: update to 1.0.6
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:06:53 +01:00
Marcel Lorenz
087fee9c6a
attr: update to 2.4.47
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-09-24 13:05:38 +01:00