Commit Graph

82 Commits

Author SHA1 Message Date
Stefan Schantl
85a62b0523 IDS: Install snort to suricata converter
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2019-01-29 08:26:15 +01:00
Stefan Schantl
c1a3401235 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata 2019-01-21 13:04:13 +01:00
Michael Tremer
d68e150e86 proxy: Drop web browser check
This is neither reliable nor up to date and is therefore removed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-08 15:54:56 +01:00
Erik Kapfer
e6f7f8e7ba database_attribute: Deliver/create index.txt.attr
Fixes #11904

Since OpenSSL-1.1.0x the database attribute file for IPSec and OpenVPN wasn´t created while initial PKI generation.
OpenVPN delivered an error message but IPSec did crashed within the first attempt.
This problem persists also after X509 deletion and new generation.

index.txt.attr will now be delivered by the system but also deleted and recreated while setting up a new x509.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2019-01-03 14:52:53 +00:00
Stefan Schantl
a13ddf04d9 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-12-12 09:27:59 +01:00
Michael Tremer
77729e5be8 nfs: Install configuration in package
This was lost in the last update

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-11-28 19:02:53 +00:00
Stefan Schantl
72b2109c72 configroot: Move from snort to suricata
Create /var/ipfire/suricata and /var/ipfire/suricata/settings instead of
/var/ipfire/snort and /var/ipfire/snort/settings.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-08-02 15:47:31 +02:00
Stefan Schantl
8dcebe5342 IDS: Introduce ids-functions.pl.
This library will contain a set of functions used by the IDS CGI script
and the planned update script for auto-updating the snort ruleset.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2018-07-26 11:54:25 +02:00
Michael Tremer
dc845b6c81 AWS: Hide certain things on the web UI
Those are practically unusable on AWS.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-07-01 12:15:00 +01:00
Michael Tremer
f4a91e23d9 Drop noip updater
This package is unused since we introduced ddns. Dropped.

Fixes: #11708
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2018-04-24 11:04:34 +01:00
Michael Tremer
f339af2704 Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-22 18:54:45 +01:00
Alexander Marx
47406df0fe Captive-Portal: fix some rootfiles
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
2017-09-22 18:54:03 +01:00
Alexander Marx
c04d2de74e Captive-Portal: add files to configroot rootfile
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
2017-09-22 18:54:03 +01:00
Michael Tremer
e65d5a0061 imspector: Drop package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-05-22 20:03:01 +01:00
Michael Tremer
5edc06b701 Remove IPAC stuff
This is unused for a very very very long time and serves
no purpose any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-10-02 15:13:55 +01:00
Stefan Schantl
a11aaa91b3 guardian: Update to 2.0.
Update guardian to the re-written version.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2016-07-29 13:19:14 +02:00
Michael Tremer
32d91ecad8 conntrack: Remove old disable_nf_sip indicator file
This is not used any more and not needed either.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-20 16:23:22 +01:00
Michael Tremer
2b163f4497 Drop tripwire
This add-on is likely to be unused

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-12-04 22:18:27 +00:00
Stefan Schantl
b8fe6ca756 Roofile updates for GeoIP related files. 2015-04-16 19:40:53 +02:00
Michael Tremer
584601c70e Update some stuff for the Italian translation 2014-10-28 02:04:05 +01:00
Michael Tremer
4e9a2b5732 general-functions.pl: Replace lots of broken network code.
The state of some code especially in general-functions.pl
is in such a bad shape and faulty.
This is a first step that replaces some of the network
functions with those who have been tested and work for
undefined inputs.

The old functions have been left in place as stubs
and must be removed at some time.
2014-07-27 22:46:20 +02:00
Michael Tremer
c5e3d520e9 Add modem status page.
On this page, much useful information is displayed about
the hardware and the status of an LTE/3G or other kinds
of modems that respond to AT commands.
2014-04-16 16:05:12 +02:00
Alexander Marx
a3f2459f8f Firewall: fix Update from core 75 to 76 2014-03-27 15:07:41 +01:00
Michael Tremer
73372ed4e6 firewall: Move scripts from /var/ipfire/firewall/bin to /usr/lib/firewall. 2014-01-28 20:48:24 +01:00
Arne Fitzenreiter
30f68903d3 Merge remote-tracking branch 'origin/next' into fifteen 2013-12-21 10:05:39 +01:00
Michael Tremer
dfb1bfaf7b Always create squid.conf.
In some cases, /var/ipfire/proxy/squid.conf does not belong to
nobody:nobody, so we do this explicitely.
2013-12-11 21:59:22 +01:00
Michael Tremer
9659f59a86 configroot: Fix recursively including /var/ipfire/backup.
This issue has been introduced in a72fac88.
2013-11-14 11:40:36 +01:00
Alexander Marx
84ac1131b1 Firewall: remove /var/ipfire/portfw as it is not used anymore 2013-11-08 13:39:38 +01:00
Alexander Marx
6d8eb5dec7 Firewall: Renamed directory /var/ipfire/forward to /var/ipfire/firewall 2013-10-24 09:24:12 +02:00
Michael Tremer
d02853e73c Create /etc/system-release in stage2. 2013-09-30 21:16:03 +02:00
Michael Tremer
e2eb09157e Remove /var/ipfire/firebuild.
This file provides lots of bogous information and information
about the build system that is not of much interest.
2013-09-30 21:00:15 +02:00
Michael Tremer
a72fac881b More rootfiles fixes for configroot files. 2013-09-02 22:28:07 +02:00
Michael Tremer
d5a11b8405 Fix rootfile: /var/ipfire/forward and /var/ipfire/fwhosts were not writable. 2013-09-02 22:16:30 +02:00
Arne Fitzenreiter
daa3a95004 configroot: fix merge problem. 2013-09-01 20:52:06 +02:00
Michael Tremer
26f185ecc1 Update rootfiles. 2013-08-28 16:08:10 +02:00
Alexander Marx
be9be7cb5b Forward Firewall: enabled /var/ipfire/optionsfw/settings in configroot 2013-08-09 14:13:10 +02:00
Alexander Marx
bc912c6e0c Forward Firewall: Version 0.9.9.2
1) Some changes in en.pl
2) DNAT now supports REJECT/DROP rules
3) Bugfix: comma in remark customservicegroup
4) improved installer
2013-08-09 14:12:39 +02:00
Alexander Marx
a60dbb4b6a Forward Firewall: added dmz-converter.
Also extended backup.pl script to support old backups. Now it is possible to restore old backups into new firewall. On restore, all config files of new firewall will be destroyed and the 4 converters will recreate them.
2013-08-09 14:12:37 +02:00
Alexander Marx
5aa8edf6f7 Forward Firewall: some changes for ISO 2013-08-09 14:09:12 +02:00
Alexander Marx
7f9d1c3969 Forward Firewall: added p2protocols to /var/ipfire/forward/ for p2pblocking options 2013-08-09 14:08:10 +02:00
Alexander Marx
485aac6395 Forward Firewall: Deleted /var/ipfire/outgoing from /config/rootfiles/common/configroot 2013-08-09 14:08:08 +02:00
Alexander Marx
231499fcc8 Forward Firewall: build iso with new firewall 2013-08-09 14:04:38 +02:00
Michael Tremer
111c99ddfa Forward Firewall: applied all changes as diff and added new files. Also deleted c files from xtaccess and setdmzholes.
Signed-off-by: Alexander Marx <amarx@ipfire.org>

Conflicts:
	config/backup/include
	lfs/configroot
	lfs/usb-stick
2013-08-09 14:02:02 +02:00
Michael Tremer
0830129a3c WUI: Add Tor menu entry. 2013-07-31 19:20:42 +02:00
Arne Fitzenreiter
9c55c65e05 dnsforward: add config to iso and updater. 2013-07-16 22:58:13 +02:00
Arne Fitzenreiter
3033567376 wireless-client: add wireless cfg to iso, backup and core71. 2013-07-06 19:49:59 +02:00
Ersan Yildirim
910193da52 Add Turkish translation. 2013-05-19 14:56:19 +02:00
Arne Fitzenreiter
707ca1fb84 configroot: rootfile update. 2013-02-05 23:33:43 +01:00
Michael Tremer
51379603c8 openvpn ccd: Multiple installation fixes. 2012-12-16 21:07:07 +01:00
Arne Fitzenreiter
f5dc4b2b2f configroot: fix rootfile again. 2012-09-03 09:02:26 +02:00