Commit Graph

15337 Commits

Author SHA1 Message Date
Michael Tremer
4744e4f00a hostapd: Import default configuration from hostapd 2.9
This change removes a couple of removed options and adds
new ones. Notable changes are:

* Enable SAE (for WPA3)
* Enable Airtime Policy
* Enable Client Taxonomy
* Enable using the new getrandom() syscall
* Enable using epoll instead of select

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:55:59 +00:00
Michael Tremer
f832c7581f hostapd: Add WPA3 authentication to the web UI
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:55:57 +00:00
Michael Tremer
c472a30f30 core153: Ship suricata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:52:48 +00:00
Stefan Schantl
aa90ed9c20 ruleset-sources: Update snort dl urls.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:51:05 +00:00
Stefan Schantl
0937bd9c01 suricata: Automatically enable JA3 fingerprinting.
Enable JA3 fingerprinting if any rules are enabled which are using this
kind of feature.

Fixes #12507.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:51:00 +00:00
Stefan Schantl
0cdb151831 suricata: Update to 6.0.0.
* Enable RDP and SIP parsers.
* Enable new introduced parsers for RFB and DCERPC.

Because HTTP2 support and parser currently is experimental the suricata
developers decided to disable it at default - we keep this default
setting for now.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:50:56 +00:00
Michael Tremer
150378eae9 Start Core Update 153
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:50:10 +00:00
Michael Tremer
74fd04c335 samba: Bump package release
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:44:34 +00:00
Michael Tremer
a63fe65a2f samba: Make changing shares taking effect immediately
The action was performed after the table has already been
rendered which required reloading the page to show a new
share.

This has now been moved to the top so that new changes
will be shown immediately.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-27 11:37:03 +00:00
Peter Müller
ed3ed3d723 mtr: update to 0.94
Complete changelog since version 0.93:

V0.94
   Aaron Lipinski (10):
         gtk_menu_append -> gtk_menu_shell_append
         GTK_OBJECT -> G_OBJECT
         gtk_button_new_from_stock -> gtk_button_new_with_label
         gtk3
         hbox/vbox -> gtk_box_new
         gtk_menu_popup -> gtk_menu_popup_at_pointer
         show resolved hostname in raw dnsline
         rely on final return NULL
         introduce libasan
         avoid stack use after scope

   Alejandro Leal (2):
         few updates to manual page and README.md
         Updating some comments

   Chongyu Zhu (1):
         probe: fix find_source_addr

   Konrad Bucheli (1):
         fix segmentation fault if there is no IP address on an interface (fixes #320)

   Kulemin Alexander (1):
         report: json: reworked with libjansson

   Mark Egan-Fuller (1):
         Add display of destination.

   Markus Kötter (6):
         simplification - remove sockaddrtop
         simplification - remove addrcpy
         simplification - remove rsa{4,6}
         simplification - address addrcmp
         simplification - improve readability
         ip6 udp - fix probes with local or remote port

   R.E. Wolff (29):
         fix warning on recent compilers.
         Merge branch 'master' of github.com:traviscross/mtr
         net find local address fix by meingtsla
         proposed patch for bsd compile error
         fix closing brace
         Added include errno --obouizi
         Merge branch 'master' of github.com:traviscross/mtr
         More compilation warning fixes from obouizi
         Added extra help text to configure --yvs
         Changed MAXPATH to MAX_PATH for AIX compatibility. -- aixtools
         make the code for gtk2/3 a bit nicer.
         Merge branch 'gtk3_with_fallback' of https://github.com/krisl/mtr
         Merge branch 'master' of github.com:traviscross/mtr
         in hindsight my previous patch wasn't so nice. And nobody told me.

   Sean Wei (1):
         Fix parameter in ui/net.c

   Siyuan Miao (1):
         show mpls information in raw output

   atib (1):
         Added code to print multiple addresses regitered on the same hop count

   atibdialpad (2):
         Change TTL dynamically to adjust for path changes
         TODO list changes

   meingtsla (2):
         asn_{open,close}: Always initialize ipinfo hash table
         Merge branch 'master' of https://github.com/traviscross/mtr into asn-open-always-hcreate

In addition, the "bootstrap.sh" script no longer exists and has
therefore been removed from the LFS file.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-23 17:27:58 +00:00
Peter Müller
ffad9c5560 Tor: update to 0.4.4.5
Please refer to
https://gitweb.torproject.org/tor.git/plain/ChangeLog?h=tor-0.4.4.5 for
the changelog of this release.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-23 17:20:11 +00:00
Michael Tremer
d4afeb5250 core152: Ship CA certificates
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-23 15:52:18 +00:00
Peter Müller
b3d8161b88 update ca-certificates CA bundle
Update the CA certificates list to what Mozilla NSS ships currently.

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-23 15:51:54 +00:00
Michael Tremer
82e2a565bb Update credits.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-23 10:08:07 +00:00
Michael Tremer
21b4b0c78b Update languages
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-23 10:07:37 +00:00
Leo-Andres Hofmann
c27b8825be Improve DHCP dynamic leases list usability. Active and expired leases are now grouped and the list is divided by a horizontal line. Sorting and creating static leases remains unchanged.
Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-23 10:07:08 +00:00
Leo-Andres Hofmann
934a376918 Improve indentation and HTML output of PrintActualLeases & leasesort
Signed-off-by: Leo-Andres Hofmann <hofmann@leo-andres.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-23 10:07:03 +00:00
Michael Tremer
449b1aeea7 core152: Ship proxy.cgi
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-19 09:26:17 +00:00
Steffen Klammer
badd010f86 modified proxy.cgi to make it possible that all subnets declared in "network access control" will be translated from cidr to subnet notation in proxy.pac
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-19 09:25:53 +00:00
Michael Tremer
7ad39d931a core152: Ship suricata
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-15 15:35:13 +00:00
Stefan Schantl
97fbbaa333 suricata: Update to 5.0.4
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-15 15:34:39 +00:00
Michael Tremer
488f36e446 core152: Ship libhtp
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-15 15:34:25 +00:00
Stefan Schantl
2570253104 libhtp: Update to 0.5.35
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-15 15:34:09 +00:00
Michael Tremer
43e1c88ea4 core152: Ship yaml
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-15 15:33:59 +00:00
Stefan Schantl
d95cc821e7 yaml: Update to 0.2.5
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-15 15:33:44 +00:00
Michael Tremer
cbd0df20ed Merge branch 'master' into next 2020-10-14 10:35:41 +00:00
Michael Tremer
c69c820025 firewall: Filter only on RED and exclude any private address space
Since libloc is built as a tree we cannot simply exclude any address
space in the middle of it. Therefore we create some firewall rules
which simply avoid checking non-globally routable address space.

Fixes: #12499
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-14 11:32:05 +01:00
Michael Tremer
64c8811dee samba: Update rootfiles
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-14 09:53:30 +00:00
Michael Tremer
0ccb2c1d15 samba: Drop default printer configuration
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-14 09:51:27 +00:00
Michael Tremer
a5aba922a8 samba: Bump package version
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:07:07 +01:00
Michael Tremer
42772dcb4f samba: Allow rewriting configuration from CLI
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:19 +01:00
Michael Tremer
e768aab5ad samba: Remove unused INTERFACES setting
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:19 +01:00
Michael Tremer
8468cf0489 samba: Use the same delete icon as everywhere else
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:19 +01:00
Michael Tremer
36bcdbf7e4 samba: Refactor user management
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:19 +01:00
Michael Tremer
1bd80edc1d samba: Set a useful default workgroup
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
8649e14977 samba: Remove tbl class from join form
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
33637fc047 samba: Automatically migrate role setting
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
f94e17c7c2 samba: Replace security setting with server role
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
8936e2d21b samba: Change share template to something more safe
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
2fa655aec6 samba: Add recycle extension, too
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
bd28bfd9d3 samba: Drop choice to enable/disable wide links/UNIX extensions
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
03e7f9719b samba: Enable support for Apple's OS X by default
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
2d952a57d8 samba: Use full page width for all tables
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
1aa4ecb130 samba: Refactor status area
There is no need to double-wrap the status output in tables.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
98e11f47ac samba: Refactor shares section
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
bdd97e5a50 samba: Remove unused anchors
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
211105897d samba: Remove more legends
These are not helpful and any documentation should be living in the wiki

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
e92b5a0435 samba: Replace save icon with a button and remove legend
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:18 +01:00
Michael Tremer
42ebeaa88e samba: Re-indent global settings table
No functional changes

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:17 +01:00
Michael Tremer
e1e399fb10 samba: Replace icons on top of page with buttons
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2020-10-13 17:06:17 +01:00