webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-25 02:12:58 +02:00
Code Issues Packages Projects Releases Wiki Activity
18,342 Commits 2 Branches 1 Tag
451cf01677c4da62dd7235ec1cfbe8b54fa8b201
Commit Graph

3338 Commits

Author SHA1 Message Date
Peter Müller
451cf01677 Core Update 166: Ship and restart strongSwan 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-21 19:04:11 +00:00
Jon Murphy
b1c25d7a84 Nano: Move nano editor from packages to core system 
- this will not change the default editor `vim`

Signed-off-by: Jon Murphy <jon.murphy@ipfire.org>
Acked-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-21 19:01:43 +00:00
Peter Müller
219a998412 Core Update 166: Drop old 2007 Pakfire key, and remove it from existing installations 
It is not necessary to have this key present on IPFire systems anymore,
since it has not been in use for years, and we can expect systems to be
sufficiently up-to-date, so they no longer need to rely on old updates
or add-ons signed with this key.

Also, given the current key was generated in 2018, we should consider a
Pakfire key rollover soon.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-21 11:46:36 +00:00
Michael Tremer
5e5ee28234 core166: Ship /etc/inittab.d 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-21 08:51:51 +00:00
Michael Tremer
bfde1c5af3 core166: Drop openvpn-ccd-convert script from all installations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-21 08:50:56 +00:00
Michael Tremer
0ad14f4d83 core166: Ship psmisc 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-20 15:21:25 +00:00
Michael Tremer
16fa9ed5e5 core166: Ship connections.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-20 15:20:13 +00:00
Michael Tremer
da4ff2f6a9 core166: Ship apache2 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-17 16:45:00 +00:00
Michael Tremer
e49e25ba69 core166: Ship openssl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-15 17:51:59 +00:00
Michael Tremer
b28f36faa5 core166: Rebuild IPS rules 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-14 15:54:04 +00:00
Michael Tremer
f5c9297fd7 core166: Ship changes files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-14 15:25:12 +00:00
Michael Tremer
b45c52760b core166: Ship dracut 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-14 15:24:19 +00:00
Michael Tremer
1b22a95ca8 core166: Ship u-boot for aarch64 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:46:13 +00:00
Michael Tremer
aee009fe23 core166: Ship wget 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:44:50 +00:00
Michael Tremer
d435669f81 core166: Ship perl-CGI 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:42:51 +00:00
Michael Tremer
817d34ecc8 core166: Ship pango 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:42:26 +00:00
Michael Tremer
6a95e9841b core166: Ship NTFS-3G 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:41:09 +00:00
Michael Tremer
13329f16f1 core166: Ship libdnet 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:40:24 +00:00
Michael Tremer
1a32c93bcf core166: Ship harfbuzz 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:39:16 +00:00
Michael Tremer
a6faddb31d core166: Ship wireless-regdb 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:38:39 +00:00
Michael Tremer
b22cec64d9 core166: Ship SQLite 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:38:04 +00:00
Michael Tremer
6410997d2a core166: Ship OpenSSH 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:37:23 +00:00
Michael Tremer
64a2131815 Start Core Update 166 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-10 10:34:48 +00:00
Michael Tremer
7f8bb55a60 core165: Ship hyperscan 
This package is being built with a different configuration.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-08 10:42:00 +00:00
Peter Müller
6fe4eb6094 Core Update 165: Rename squid-accounting add-on to proxy-accounting 
https://lists.ipfire.org/pipermail/development/2022-February/012482.html

The second version of this patch omits bogus directives for restarting a
service, which proxy-accounting is not.

Cc: Michael Tremer <michael.tremer@ipfire.org>
Cc: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-07 18:47:23 +00:00
Michael Tremer
ea04468d07 core165: Ship ids.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-07 18:46:34 +00:00
Michael Tremer
7b82d83d7e core165: Ship optionsfw.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-03-07 18:45:58 +00:00
Peter Müller
ade2424f6b Revert "Core Update 165: Ship update-ids-ruleset" 
update-ids-rulesets is relevant for Core Update 164, not Core Update 165.

This reverts commit 9713023546.
 2022-03-05 14:35:09 +00:00
Peter Müller
9713023546 Core Update 165: Ship update-ids-ruleset 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-03-05 14:30:10 +00:00
Peter Müller
82674728e3 Core Update 165: Ship vpnmain.cgi 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-23 15:54:13 +00:00
Peter Müller
2598706f23 Core Update 165: Ship dhcpcd-related changes 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-23 15:51:33 +00:00
Arne Fitzenreiter
72718c896c Merge branch 'master' into next 2022-02-22 11:40:44 +00:00
Arne Fitzenreiter
ad9d6bf585 core164: exclude boot/uEnv.txt 
uEnv.txt was destroyed on aarch64 because here a new u-boot was shipped.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2022-02-22 11:38:15 +00:00
Peter Müller
f1180ec2dc Core Update 165: Ship oci-setup initscript 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-21 21:36:18 +00:00
Peter Müller
bef6a4dccf Core Update 165: Ship wirelessclient.cgi 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-21 20:56:38 +00:00
Arne Fitzenreiter
3b45d9561b core164: add unbound initskript 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2022-02-19 15:53:54 +00:00
Peter Müller
926d840fae firewall: Make logging of conntrack INVALIDs configureable 
In theory, logging of dropped packets classified by conntrack as being
INVALID should never be disabled, since one wants to have a paper trail
of what his/her firewall is doing.

However, conntrack seems to drop a lot of (at the first glance
legitimate) packets, hence bloating the logs, making spotting the
important firewall hits more difficult.

This patch therefore adds the option to disable logging of packets being
dropped by conntrack due to INVALID state.

Please note:
- This patch does not add this category to the firewall hits graph.
- The variables in this patch ("LOGDROPCTINVALID") should make it clear
  that it is about toggling _logging_, not the actual _dropping_. Other
  variables are still in need of being renamed to clarify this, which
  will be done in a dedicated patch.
- Also, the changes made to update.sh need to take place in
  config/rootfiles/core/164/update.sh for "master", since this patch has
  been developed against "next". Kindly cherry-pick the necessary
  changes.

Partially fixes: #12778

Reported-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-19 15:37:16 +00:00
Peter Müller
cf21dcaa97 Drop ovpn-collectd-convert 
This script is orphaned: It was only used while upgrading to Core Update
89, sitting around in /usr/sbin/ doing nothing ever since.

Keeping it there won't do any harm. On the other hand, dragging an
unused script around on our installations does not make sense either.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-19 00:01:47 +00:00
Peter Müller
772d3dbd60 Core Update 165: Ship wpa_supplicant 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-18 21:57:28 +00:00
Stefan Schantl
1bd6e152c4 Core 165: Export location DB in new format. 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
 2022-02-18 09:28:44 +00:00
Peter Müller
26674f2d5c Core Update 165: Fixed symlink after renaming Perl packages 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-17 19:23:15 +00:00
Peter Müller
b84666930e Core Update 165: Ship bind 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-17 19:22:49 +00:00
Arne Fitzenreiter
10148970eb core164: fix adding additional optionfw settings 
the old code erase the settings and cannot reinstalled.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2022-02-17 17:07:28 +00:00
Peter Müller
9dd886fa57 Core Update 165: Sort filelist of rm command for better readability 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-15 18:25:18 +00:00
Peter Müller
063ec85aed Core Update 165: Delete files from xtables-addons 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-15 18:24:08 +00:00
Peter Müller
3071989cfc Core Update 165: Ship changes related to P2P block removal 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-15 18:15:53 +00:00
Peter Müller
f14000733b Core Update 165: Ship ipset-related changes and restart the firewall engine 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-15 18:11:28 +00:00
Peter Müller
28965d275b Core Update 165: Ship gdbm 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-15 18:04:48 +00:00
Peter Müller
5fd4dfe002 Core Update 165: Ship ovpnclients.dat 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-15 18:04:00 +00:00
Peter Müller
bccde9948b Core Update 165: Ship libarchive 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
 2022-02-15 16:57:00 +00:00