Commit Graph

9540 Commits

Author SHA1 Message Date
Dirk Wagner
4bb2df502d monit addon: Upgrade to 5.14
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-10-18 00:31:06 +01:00
Dirk Wagner
187154380c asterisk addon: Update to 11.20.0
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-10-18 00:31:04 +01:00
Michael Tremer
f439097499 core95: Ship ddns update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-10-17 01:27:07 +01:00
Stefan Schantl
a9929e324f ddns: Update to 009
This update contains the latest upstream changes which are
a better SSL error handling and support for desec.io.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-10-17 01:26:46 +01:00
Michael Tremer
075b6e10db core95: Ship IPsec blocking changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-10-15 22:46:33 +01:00
Michael Tremer
80fbd89949 ipsec: Add block rules to avoid conntrack entries
If an IPsec VPN connections is not established, there are
rare cases when packets are supposed to be sent through
that said tunnel and incorrectly handled.

Those packets are sent to the default gateway an entry
for this connection is created in the connection tracking
table (usually only happens to UDP). All following packets
are sent the same route even after the tunnel has been
brought up. That leads to SIP phones not being able to
register among other things.

This patch adds firewall rules that these packets are
rejected. That will sent a notification to the client
that the tunnel is not up and avoid the connection to
be added to the connection tracking table.

Apart from a small performance penalty there should
be no other side-effects.

Fixes: #10908

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Cc: tomvend@rymes.com
Cc: daniel.weismueller@ipfire.org
Cc: morlix@morlix.de
Reviewed-by: Timo Eissler <timo.eissler@ipfire.org>
2015-10-15 22:44:47 +01:00
Larsen
2158e11ba9 IPSec VPN: Add "required" marker for "organization name"
IPSec VPN: Add "required" marker for "organization name"

Fixes https://bugzilla.ipfire.org/show_bug.cgi?id=10846

Signed-off-by: Lars Schuhmacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-10-15 15:44:56 +01:00
Larsen
cffa84a64e Translation improvements
Translation improvements

Signed-off-by: Lars Schuhmacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-10-15 15:43:59 +01:00
Stefan Schantl
a9a28430b5 tor.cgi: Fix missing country flag icons.
The CGI now is using the GeoIP::get_flag_icon function provided by the
geoip-functions.pl, which takes care of the changed flag icons shipped
by core update 90.

Fixes #10919.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Tested-by: Jan Paul Tuecking <jan.paul.tuecking@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-10-15 15:42:44 +01:00
Michael Tremer
a18b5b4f4d Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2015-10-15 11:59:44 +01:00
Arne Fitzenreiter
0171486695 sox: Disable parallel build
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-10-04 16:01:33 +02:00
Michael Tremer
4504c412af procps: Ship pgrep
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-10-03 19:53:57 +01:00
Michael Tremer
8235f17df5 strongswan: Update to 5.3.3
ChaCha is disabled since our kernel does not support it yet

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-10-03 19:17:01 +01:00
Michael Tremer
75ccb6a693 krb5: Disable parallel build
Builds of this package crash randomly on all architectures
which might be related to the parallel build.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-10-02 19:00:13 +01:00
Arne Fitzenreiter
1f011c6594 backports: add Tevii S482 patch
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-10-01 11:14:58 +02:00
Michael Tremer
26e91280ea Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-28 20:14:42 +01:00
Arne Fitzenreiter
16016ff2b0 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2015-09-28 18:42:57 +02:00
Arne Fitzenreiter
95b09c86d6 Merge remote-tracking branch 'origin/master' into next 2015-09-28 18:40:32 +02:00
Arne Fitzenreiter
db151fde63 igb: update to 5.3.3.2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-09-28 18:39:26 +02:00
Arne Fitzenreiter
1d664fe1db e1000e: update to 3.2.4.2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-09-28 18:38:55 +02:00
Arne Fitzenreiter
c5a5e4abb0 core94: restart init after glibc update.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-09-28 16:58:58 +02:00
Michael Tremer
55eb745e65 core95: Ship changed files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-28 14:35:54 +01:00
Michael Tremer
dfe630f77c Merge remote-tracking branch 'ms/experimental-vlan-hotplugging' into next 2015-09-28 14:33:49 +01:00
Michael Tremer
c400bc2d7d core95: Ship changed files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-28 14:25:53 +01:00
Michael Tremer
c6fba315ec connections.cgi: Support multiple subnets for IPsec
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-28 14:24:44 +01:00
Michael Tremer
b1881251d6 Merge remote-tracking branch 'ms/ipsec-subnets' into next 2015-09-28 14:21:18 +01:00
Michael Tremer
4b046d735d Start Core Update 95
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-28 14:08:27 +01:00
Michael Tremer
d86694ad1f Merge branch 'master' into next 2015-09-28 14:05:26 +01:00
Lars Schuhmacher
624615ee07 vpnmain.cgi - Replace spaces with tab characters and fix indentation
Replaced spaces with tab characters. Fixed indentation.

This is based on http://patchwork.ipfire.org/patch/88/ so that patch must be applied before.

Signed-off-by: Lars Schuhmacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-28 14:05:06 +01:00
Lars Schuhmacher
ed1d0fbdbe IPsec: Remove GUI option for "Roadwarrior virtual IP"
This setting stems from IPCop (and probably Openswan) and causes a problem.

Fixes bug #10496.

Signed-off-by: Lars Schuhmacher <larsen007@web.de>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-28 14:04:40 +01:00
Michael Tremer
9dd14089ce core94: Fix dead symlinks in filelist
The rootfiles have been renamed, but not the symlinks
were not.

Fixes #10931

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-28 11:59:20 +01:00
Arne Fitzenreiter
c9f0174979 kernel: update to 3.14.53
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-09-27 12:58:22 +02:00
Arne Fitzenreiter
1f2bda9ba3 backports: enable build on x86_64.
backports 4.1.1-1 is not stable so we need to stay on the older version.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-09-27 11:27:40 +02:00
Arne Fitzenreiter
8f1fe7c531 core94: fix chrontab modification check for dma.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-09-27 10:56:34 +02:00
Arne Fitzenreiter
ccb8e47d0e core94: allow rootlogin only if the user has not blocked it before.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-09-27 10:42:38 +02:00
Arne Fitzenreiter
d82c564b23 core94: fix sed syntax.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-09-27 10:42:01 +02:00
Arne Fitzenreiter
02626065a8 finish core94.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-09-24 19:16:56 +02:00
Michael Tremer
7c8e022c4b firewall: Support multiple subnets per IPsec tunnel
Fixes #10929

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-22 00:26:37 +01:00
Michael Tremer
ed5fee308f core94: Ship changed CGI files
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-21 16:46:21 +01:00
Lars Schuhmacher
e3edceeb7a Mark required input fields with a star
Mark required input fields with a star as nowadays this is
the de-facto default. Before, it was the other way around and
optional fields were marked.

Signed-off-by: Lars Schumacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-21 16:40:41 +01:00
Michael Tremer
b1fb211827 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2015-09-21 16:12:25 +01:00
Arne Fitzenreiter
1f4fea71a6 make-functions: check working binfmt_misc and add x86_64 helper.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-09-20 17:06:59 +02:00
Michael Tremer
34ca230867 core94: Ship changed setup package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-20 13:31:58 +01:00
Osmar Gonzalez
0a39488e4a Corrected typo in networking.c
Corrected "Misssing" to "Missing".

Signed-off-by: Osmar Gonzalez <mibs510@gmail.com>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-20 13:31:15 +01:00
Arne Fitzenreiter
01d61d1549 network_functions.pl: fix ip_address_in_network for x86_64
calculation of last address must use only 32bit of inverted netmask.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-09-20 13:03:34 +02:00
Arne Fitzenreiter
4d4f36ef55 kernel: Update pcengines apu led patch for x86_64
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2015-09-20 12:46:12 +02:00
Michael Tremer
83490805a4 core94: Ship updated initscripts
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-19 18:51:38 +01:00
Matthias Fischer
7f263dc736 Fixed some typos in initscript
"Createing= => "Creating"...

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-19 18:50:54 +01:00
Michael Tremer
048c2ff77d core94: Ship updated iproute2 package
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-19 18:50:14 +01:00
Matthias Fischer
9b3ffc7457 iproute2: Update to 4.2.0
List of changes can be seen at
http://git.kernel.org/cgit/linux/kernel/git/shemminger/iproute2.git/log/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-09-19 18:49:24 +01:00