webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-13 12:32:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
13,381 Commits 2 Branches 1 Tag
40407aee99546b4f25632bcaeb796d2a53cb1bcb
Commit Graph

13381 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Arne Fitzenreiter
ad62fda0ad core127: add general-functions.pl to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-18 13:53:06 +01:00
Arne Fitzenreiter
9918b6f40d core127: fix updater for aarch64 and armv5tel 
if a arch specific filelist has the same name as the common the common filelist was ignored

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-18 07:52:17 +01:00
Michael Tremer
93d516bd70 Revert "Disable Path MTU discovery" 
This reverts commit 1c0cfaa594.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 19:24:46 +00:00
Peter Müller
47051c2a0a drop orphaned OpenSSL patches 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 14:42:37 +00:00
Michael Tremer
8f095fb287 core128: Remove openssl-compat package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 14:41:54 +00:00
Peter Müller
63cf6d5cef drop openssl-compat package 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 14:41:07 +00:00
Michael Tremer
ac520af837 core128: Ship recently updated openssl and apache 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 14:39:14 +00:00
Michael Tremer
5a39464754 Start Core Update 128 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 14:38:01 +00:00
Peter Müller
535dab60d6 httpd: include TLS 1.3 cipher suites 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Cc: Erik Kapfer <erik.kapfer@ipfire.org>
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 14:34:00 +00:00
Erik Kapfer
32ba431458 openssl: Update to version 1.1.1a 
Disabled MD2 and Aria cipher.

TLSv1.3 is now available with:

TLS_CHACHA20_POLY1305_SHA256 TLSv1.3
TLS_AES_256_GCM_SHA384  TLSv1.3
TLS_AES_128_GCM_SHA256  TLSv1.3

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 14:33:20 +00:00
Arne Fitzenreiter
06ac824331 core127: set pakfire version to 127 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-16 22:31:43 +01:00
Michael Tremer
f0092a6e3e keepalived: Move change of conntrack sysctl option into package 
The setting cannot be set on the default system because the ip_vs
module is not loaded by default and there is no reason to load it
just because we would be able to set the setting.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-13 12:50:26 +01:00
Michael Tremer
d499e86b16 GeoIP: Add accidentially removed paths to database 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-13 12:28:10 +01:00
Michael Tremer
5cf83d56fa firewall-lib.pl: Fix incorrect path to geoip-functions.pl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-13 11:53:41 +01:00
Arne Fitzenreiter
f622fd8ed0 linux-initrd: fix build of uInit on aarch64 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-12 20:01:00 +01:00
Arne Fitzenreiter
00f9dcd91d core127: fix xtables kmod rootfiles for arm32 builds 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-12 09:04:23 +01:00
Matthias Fischer
f69aca76ea xtables 3.2: Fix for rootfile 
Found during the test builds...

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-11 02:00:11 +00:00
Stefan Schantl
0ca3baedfc Revert "geoip-functions.pl: Re-write code to lookup the iso country code of a given IP-address." 
Enhanching the code to fix the lookup will rapidely slow down the lookup speed. Because using
the GeoIP2 module is no option ( the reasons have been described in the commit message which will
now reverted), we have decided to temporary switch back to the old module until a nice solution has
been found.

This reverts commit ff21ff90d2.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-11 00:09:04 +00:00
Stefan Schantl
f107bb39c5 Revert "GeoIP: Drop legacy GeoIP perl module." 
This reverts commit 9d1708e081.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-11 00:08:54 +00:00
Matthias Fischer
035f6c75ae xtables-addons: Fix typo in lfs 
Just some typos...

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-11 00:08:46 +00:00
Michael Tremer
01db691a1e Bump kernel version to ship a new PAE kernel 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-10 22:48:25 +00:00
Michael Tremer
06fd3467d1 core127: Ship updated kernel modules for xtables 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-10 22:47:43 +00:00
Michael Tremer
a04ec92389 core127: Ship updated firewall functions library 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-10 22:43:45 +00:00
Stefan Schantl
8ff42d82c4 firewall-lib.pl: Use get_geoip_locations from geoip-functions.pl 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-10 22:43:00 +00:00
Stefan Schantl
30c59cbb0b geoip-locations.pl: Add get_geoip_locations(). 
This function is used to get all available GeoIP locations.

The functions returns them as array, sorted in alphabetical order.

Reference #11959

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-10 22:42:52 +00:00
Matthias Fischer
e3429b4aad clamav: Update to 0.101.1 
For details see:
https://blog.clamav.net/2019/01/clamav-01011-patch-has-been-released.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:33:05 +00:00
Michael Tremer
11de35622f core127: Ship updated tar 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:32:46 +00:00
Matthias Fischer
042a5fe60a tar: Update to 1.31, including fix for bug #11958 
For details see:

http://savannah.gnu.org/forum/forum.php?forum_id=9344

"- Fix heap-buffer-overrun with --one-top-level.
- Support for zstd compression.
- The -K option interacts properly with member names given in the command line.
- Fix CVE-2018-20482"

This patch was reverted because 'tar 1.31' crashed when installing PakFire packages
with the option '--no-overwrite-dir'.
See: https://bugzilla.ipfire.org/show_bug.cgi?id=11958

Included is now a patch from https://savannah.gnu.org/bugs/?55413, which seems to fix this issue.
The test cases given in https://savannah.gnu.org/bugs/?55413#comment1 ran without problems.

As always, please check and confirm.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:31:43 +00:00
Michael Tremer
d381c56dc8 core127: Ship updated GeoIP functions 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:28:38 +00:00
Stefan Schantl
ff21ff90d2 geoip-functions.pl: Re-write code to lookup the iso country code of a given IP-address. 
Drop the usage of the old legacy GeoIP perl module which was not able to handle the
new GeoLite2 databases.

Write some code to directly access the databases and extract the required data.

Usage of the GeoIP2 perl module would provide a lot of more functionality which is not
used/needed. Unfortunately ir requires at lot of additional perl modules which are
not available on IPFire and would only be build and shipped for this module. Buildig all
of them will slow down the entire build process, mess up the system and requires a lot
more space on disk.

Fixes #11962.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:21:48 +00:00
Stefan Schantl
9d1708e081 GeoIP: Drop legacy GeoIP perl module. 
The legacy GeoIP perl module cannot handle the new GeoLite2 databases
provided from maxmind and therefore needs to be dropped.

Reference #11960

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:21:27 +00:00
Stefan Schantl
b76a8a008d xt_geoip_update: Adjust script to download and use the GeoLite2 database 
Fixes #11961.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:21:01 +00:00
Stefan Schantl
a77870146f xtables-addons: Use shipped xt_geoip_build 
Use the shipped xt_geoip_build directly instead of holding a copy in our GIT.

Reference #11959

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:20:22 +00:00
Stefan Schantl
9f6849b3ad xtables-addons: Update to 3.2 
Reference #11959

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 00:35:16 +00:00
Michael Tremer
4ed2162324 perl-Net-CIDR-Lite: Make rootfile work on other arches 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 00:34:30 +00:00
Michael Tremer
045d54c324 perl-Net-CIDR-Lite: Fix whitespace 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 00:31:46 +00:00
Stefan Schantl
985741db61 perl-Net-CIDR-Lite: New package. 
This is a runtime dependency of the xt_geoip_build perl script
shipped by xtables-addons in version 3.2.

Reference #11960.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 00:30:49 +00:00
Michael Tremer
af2cc3be64 IPVS: Enable connection tracking by default 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 21:33:43 +00:00
Stefan Schantl
b749416ad7 ids-functions.pl: Downloader should reads settings from correct file 
In commit ea5c8eeb83 the taken settings
for the ruleset have been stored into an own file.

The Downloader now uses this file to read-in which ruleset should be used
and downloaded.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2019-01-06 14:11:30 +01:00
Michael Tremer
5321fcbff3 Backup conntrackd's configuration file 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 09:01:38 +00:00
Michael Tremer
7d5caee6bd Add initscript for conntrackd 
The daemon will be started by default when a configuration
file exists.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 08:59:25 +00:00
Michael Tremer
ae5b9c5ad5 Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 07:03:08 +00:00
Matthias Fischer
e26a5c4885 Fix typo in 'html/cgi-bin/logs.cgi/log.dat' 
Translation string uses capital letter: 'Captive' => 'Captive Portal',

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 07:02:54 +00:00
Michael Tremer
e0c4ed1783 core127: Ship updated proxy.cgi and regenerate configuration 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:14:01 +01:00
Michael Tremer
ce1f04ee40 proxy: Allow selecting throttled bandwidth in MBit/s 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:10:59 +01:00
Michael Tremer
c2f1b8183c proxy: Suggest modern defaults for cache memory and disk 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:02:05 +01:00
Michael Tremer
cdd4cf4094 proxy: Drop support for throttling only certain mime types 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:00:05 +01:00
Michael Tremer
d68e150e86 proxy: Drop web browser check 
This is neither reliable nor up to date and is therefore removed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:54:56 +01:00
Michael Tremer
a1018d86ae proxy: Set authentication TTL for NTLM authentication also 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:49:18 +01:00
Michael Tremer
6df2d52887 proxy: Use correct authentication cache TTL for AD 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:48:32 +01:00