webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-05-10 09:18:25 +02:00
Code Issues Packages Projects Releases Wiki Activity
15,573 Commits 2 Branches 1 Tag
5b4e33bc3b754dd14ecc279bc421ec232a489507
Commit Graph

7888 Commits

Author SHA1 Message Date
Matthias Fischer
6008ea4e2c libpng: Update to 1.6.37 
For details see:
http://www[dot]libpng[dot]org/pub/png/libpng[dot]html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-26 07:29:59 +00:00
Arne Fitzenreiter
0c30bb30b8 netpbm: remove WANT_SSE = Y from config.mk 
SSE is not available on armv5tel,aarch64 and i586 so we
cannot general enable it.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-25 16:03:04 +02:00
Arne Fitzenreiter
0f48fc827e core145: add libjpeg 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-25 09:39:34 +00:00
Matthias Fischer
6d6b668b0d libjpeg: Update to 2.0.4 
For details see:
https://sourceforge.net/projects/libjpeg-turbo/files/2.0.4/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-25 09:05:28 +00:00
Matthias Fischer
64ac07fabc cmake: Update to 3.17.0 
For details see:
https://cmake.org/cmake/help/v3.17/release/3.17.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-25 09:05:11 +00:00
Matthias Fischer
b4bbe8edd9 netpbm: Update to 10.73.31 
For details see:
https://sourceforge.net/p/netpbm/code/HEAD/tree/super_stable/doc/HISTORY

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-25 09:04:24 +00:00
Matthias Fischer
dde398983e faad2: Update to 2.8.8 
For details see:
https://www.audiocoding.com/archive.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-25 09:03:59 +00:00
Erik Kapfer
31166ecf7f strace: Update to version 5.5 
The version jump from 4.7 to 5.5 includes several bugfixes and improvements.
For a full overview --> https://github.com/strace/strace/releases .

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-25 09:03:26 +00:00
Arne Fitzenreiter
656abbc6d4 start core145 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-25 08:55:14 +00:00
Arne Fitzenreiter
7ae36c0fd9 core144: add calamaris 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-23 19:57:01 +02:00
Arne Fitzenreiter
bc18b7aabb Merge remote-tracking branch 'origin/master' into next 2020-04-22 10:17:05 +00:00
Arne Fitzenreiter
1bba20a985 bind: update rootfile 2020-04-22 02:41:49 +02:00
Arne Fitzenreiter
715b841e5b core144: restart squid 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-21 19:16:53 +00:00
Arne Fitzenreiter
c24bb323e1 core144: add bind 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-21 19:14:58 +00:00
Arne Fitzenreiter
2d52362dcb core144: add squid 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-21 19:13:33 +00:00
Arne Fitzenreiter
2399b70dc2 openssl: update rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-21 16:51:53 +02:00
Arne Fitzenreiter
a95c8b9781 core144: ship /etc/os-release 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-21 13:52:01 +00:00
Arne Fitzenreiter
83cee5f02e core144: add openssl 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-21 13:50:43 +00:00
Arne Fitzenreiter
88ba9a2480 core144: remove gcc go binary and libs 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:41:09 +00:00
Michael Tremer
20253656fc Add /etc/os-release 
This file is being read by some packages to find out on what
distribution they are running on.

This file needs to be included in every Core Update.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:27:50 +00:00
Michael Tremer
6b75121120 gcc: Drop Go on i586 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:25:51 +00:00
Michael Tremer
6d5e9f40f8 gcc: Drop Go on armv5tel 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:25:42 +00:00
Michael Tremer
c22cee9288 gcc: Drop Go on aarch64 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:25:34 +00:00
Michael Tremer
d2315d00c2 Package the official Go compiler 
Since Go has a horrible build system which requires a Go
compiler to build the Go compiler and takes a very long
time to compile, we are following Rust and are using the
"official" pre-compiled release tarball.

We no longer ship the Go runtime, which mitigates the
risk of shipping any malware.

Because we currently only have one package using this
and which is only being compiled for x86_64, we are
only making Go available on this architecture.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:24:51 +00:00
Michael Tremer
eed179acdc gcc: Drop support for Go 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:24:38 +00:00
Arne Fitzenreiter
7f4780ba71 core144: add apache 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:22:57 +00:00
Matthias Fischer
fb241a29c5 apache: Update to 2.4.43 
For details see:
http://mirror.dkd.de/apache//httpd/CHANGES_2.4.43

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-20 15:19:25 +00:00
Arne Fitzenreiter
34b7b98616 core144: add dhcpcd initskript and user 
this commit also re/create the user after backup restore.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-19 17:39:47 +00:00
Arne Fitzenreiter
533c4312fa dhcpcd: create dhcpcd user and chroot folder 
dhcpcd 9.x adds privelege seperation by creating a chroot
and running parts of the client not as root.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-19 17:27:23 +00:00
Arne Fitzenreiter
651fa25f8f haproxy: update config file 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-14 15:30:51 +00:00
Arne Fitzenreiter
b5fe45bbbc core143: disable vnstat ramdisk before clean tag file 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-14 09:55:29 +00:00
Arne Fitzenreiter
296675c9ee Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2020-04-12 08:25:40 +02:00
Arne Fitzenreiter
f5dba19edf core144: add dhcpcd 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-12 08:18:51 +02:00
Arne Fitzenreiter
b3e2c3ce26 dhcpcd: update to 9.00 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-12 08:16:28 +02:00
Arne Fitzenreiter
89445161b0 core144: start update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-12 08:14:26 +02:00
Arne Fitzenreiter
975bd8bc17 Revert "Revert "OpenSSH: update to 8.2p1"" 
This reverts commit e7fcf874e7.
 2020-04-10 16:23:09 +02:00
Arne Fitzenreiter
e7fcf874e7 Revert "OpenSSH: update to 8.2p1" 
ssh skips login before asking for credentials at i586.

This reverts commit 3fd3f4de44.
 2020-04-09 20:26:33 +00:00
Arne Fitzenreiter
551bc48940 suricata: disable dns flood protection 
this causes errors in unbound and also other linux clients if
a dns rule triggers.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-08 15:48:20 +00:00
Arne Fitzenreiter
b8fcb49567 suricata: update ET rulesets sources for suricata 5 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-08 15:43:35 +00:00
Arne Fitzenreiter
e049d6fcbe core143: touch need reboot flag 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-08 07:43:50 +02:00
Arne Fitzenreiter
9246069398 pcengines-apu-firmware: update rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 15:14:39 +02:00
Arne Fitzenreiter
21be3871b9 core143: add zoneconf.cgi 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 08:59:32 +00:00
Arne Fitzenreiter
cce7aa9bb8 core143: add unbmound initskript 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 08:57:50 +00:00
Arne Fitzenreiter
e4013c9dab core143: add suricata http port changes 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-07 08:54:27 +00:00
Stefan Schantl
e698090e7f IDS: Dynamically generate and import the HTTP ports. 
With this commit suricata reads the HTTP port declarations from a newly
introduced external file
(/var/ipfire/suricata/suricata-http-ports.yaml).

This file dynamically will be generated. HTTP ports always are the
default port "80" and "81" for update Accelerator and HTTP access to the
WUI. In case the Web-proxy is used, the configured proxy port and/or Transparent
Proxy port also will be declared as a HTTP port and written to that file.

In case one of the proxy ports will be changed, the HTTP port file will
be re-generated and suricate restarted if launched. Also if an old
backup with snort will be restored the convert script handles the
generation of the HTTP ports file.

Finally the suricata-generate-http-ports-file as a tiny script which
simply generates the http ports file and needs to be launched during the
installation of a core update. (The script will no be required
anymore, so it could be deleted afterwards.)

Fixes #12308.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-06 14:04:00 +00:00
Stefan Schantl
6084e66e70 suricata.yaml: Re-add EVE log section. 
Hopefully the EVE log will display some more content when trying to
debug suricata events and rules.

Fixes #12315.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-06 14:03:26 +00:00
Arne Fitzenreiter
b563d5bd69 core143: add backup include and ids-functions 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-05 07:58:07 +00:00
Stefan Schantl
7b97359b99 IDS: Add GREEN and BLUE addresses to the list of DNS servers. 
Fixes #12349.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-05 07:35:08 +00:00
Stefan Schantl
92206da35a Backup: Add idsrules tarball. 
The tarball is required to generate and restore the IDS ruleset.

Fixes #12319.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-05 07:34:07 +00:00
Stefan Schantl
00a083aaf2 Backup: Add suricata rules-settings file. 
This file contains the configured ruleset and oinkcode settings and
therefore needs to be backuped and restored.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-04-05 07:33:45 +00:00