webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-23 17:32:57 +02:00
Code Issues Packages Projects Releases Wiki Activity
12,621 Commits 2 Branches 1 Tag
6f1aa31f01ed3e4a6cf59823f40405f5437c8c21
Commit Graph

4950 Commits

Author SHA1 Message Date
Arne Fitzenreiter
9b86a7ec28 Merge remote-tracking branch 'origin/master' into next 2019-01-19 19:58:48 +01:00
Arne Fitzenreiter
f29ff21cd6 core127: run xt_geoip_update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-19 17:24:47 +01:00
Arne Fitzenreiter
2092280a3a core127: ovpn ca index.txt is also missing on some installations 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-19 17:20:51 +01:00
Arne Fitzenreiter
4cba04ce28 core127: fix typo 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-19 12:08:07 +01:00
Arne Fitzenreiter
3d476ab017 core127: add ovpn ca changes to update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-19 10:02:17 +01:00
Arne Fitzenreiter
a58c5ca1f2 core127: add xt_geoip_update to update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-19 10:01:40 +01:00
Arne Fitzenreiter
a6c298b540 core127: add bind to update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-19 10:00:54 +01:00
Arne Fitzenreiter
99549950fa core127: set reboot needed flag 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-18 13:53:39 +01:00
Arne Fitzenreiter
ad62fda0ad core127: add general-functions.pl to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-18 13:53:06 +01:00
Arne Fitzenreiter
9918b6f40d core127: fix updater for aarch64 and armv5tel 
if a arch specific filelist has the same name as the common the common filelist was ignored

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-18 07:52:17 +01:00
Michael Tremer
93d516bd70 Revert "Disable Path MTU discovery" 
This reverts commit 1c0cfaa594.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 19:24:46 +00:00
Michael Tremer
8f095fb287 core128: Remove openssl-compat package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 14:41:54 +00:00
Peter Müller
63cf6d5cef drop openssl-compat package 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 14:41:07 +00:00
Michael Tremer
ac520af837 core128: Ship recently updated openssl and apache 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 14:39:14 +00:00
Michael Tremer
5a39464754 Start Core Update 128 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 14:38:01 +00:00
Erik Kapfer
32ba431458 openssl: Update to version 1.1.1a 
Disabled MD2 and Aria cipher.

TLSv1.3 is now available with:

TLS_CHACHA20_POLY1305_SHA256 TLSv1.3
TLS_AES_256_GCM_SHA384  TLSv1.3
TLS_AES_128_GCM_SHA256  TLSv1.3

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-17 14:33:20 +00:00
Arne Fitzenreiter
f622fd8ed0 linux-initrd: fix build of uInit on aarch64 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-12 20:01:00 +01:00
Arne Fitzenreiter
00f9dcd91d core127: fix xtables kmod rootfiles for arm32 builds 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-12 09:04:23 +01:00
Matthias Fischer
f69aca76ea xtables 3.2: Fix for rootfile 
Found during the test builds...

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-11 02:00:11 +00:00
Stefan Schantl
f107bb39c5 Revert "GeoIP: Drop legacy GeoIP perl module." 
This reverts commit 9d1708e081.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-11 00:08:54 +00:00
Michael Tremer
06fd3467d1 core127: Ship updated kernel modules for xtables 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-10 22:47:43 +00:00
Michael Tremer
a04ec92389 core127: Ship updated firewall functions library 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-10 22:43:45 +00:00
Matthias Fischer
e3429b4aad clamav: Update to 0.101.1 
For details see:
https://blog.clamav.net/2019/01/clamav-01011-patch-has-been-released.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:33:05 +00:00
Michael Tremer
11de35622f core127: Ship updated tar 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:32:46 +00:00
Michael Tremer
d381c56dc8 core127: Ship updated GeoIP functions 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:28:38 +00:00
Stefan Schantl
9d1708e081 GeoIP: Drop legacy GeoIP perl module. 
The legacy GeoIP perl module cannot handle the new GeoLite2 databases
provided from maxmind and therefore needs to be dropped.

Reference #11960

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:21:27 +00:00
Michael Tremer
4ed2162324 perl-Net-CIDR-Lite: Make rootfile work on other arches 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 00:34:30 +00:00
Stefan Schantl
985741db61 perl-Net-CIDR-Lite: New package. 
This is a runtime dependency of the xt_geoip_build perl script
shipped by xtables-addons in version 3.2.

Reference #11960.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 00:30:49 +00:00
Michael Tremer
af2cc3be64 IPVS: Enable connection tracking by default 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 21:33:43 +00:00
Michael Tremer
5321fcbff3 Backup conntrackd's configuration file 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 09:01:38 +00:00
Michael Tremer
7d5caee6bd Add initscript for conntrackd 
The daemon will be started by default when a configuration
file exists.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 08:59:25 +00:00
Michael Tremer
e0c4ed1783 core127: Ship updated proxy.cgi and regenerate configuration 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:14:01 +01:00
Michael Tremer
d68e150e86 proxy: Drop web browser check 
This is neither reliable nor up to date and is therefore removed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:54:56 +01:00
Michael Tremer
79b89b90e4 Revert "core127: Ship updated tar" 
This reverts commit 9ab1c9302c.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-05 21:12:24 +00:00
Michael Tremer
0cd3eab3ae core127: Ship updated snort 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-05 21:11:14 +00:00
Arne Fitzenreiter
1338e08d0d core127: ship framebuffer.conf blacklist 
the file is generated at kernel build and in core126
the module commpression was changed to xz so the list was empty.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-06 16:31:44 +01:00
Arne Fitzenreiter
0708b3b343 core127: remove double files from armv5tel filelist 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-06 15:53:27 +01:00
Arne Fitzenreiter
5e6f343b7d python: update to 2.7.15 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-06 15:51:53 +01:00
Michael Tremer
9ab1c9302c core127: Ship updated tar 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-04 02:43:06 +00:00
Matthias Fischer
6e1aa54da0 attr 2.4.47: Update for rootfile 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 14:57:00 +00:00
Michael Tremer
34ad12b165 core127: Ship updated VPN CGI files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 14:53:34 +00:00
Erik Kapfer
e6f7f8e7ba database_attribute: Deliver/create index.txt.attr 
Fixes #11904

Since OpenSSL-1.1.0x the database attribute file for IPSec and OpenVPN wasn´t created while initial PKI generation.
OpenVPN delivered an error message but IPSec did crashed within the first attempt.
This problem persists also after X509 deletion and new generation.

index.txt.attr will now be delivered by the system but also deleted and recreated while setting up a new x509.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 14:52:53 +00:00
Matthias Fischer
4c83d9fbdc mc: Update to 4.8.22 
For details see:
http://midnight-commander.org/wiki/NEWS-4.8.22

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-02 17:20:21 +00:00
Michael Tremer
13827014fc core127: Ship updated wget 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-31 00:36:23 +00:00
Arne Fitzenreiter
f1f40274a0 u-boot: fix x86 builds 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-23 11:12:15 +01:00
Arne Fitzenreiter
ae84d3745d u-boot: fix typo in boot.scr 
fix serial console output on RPi3 B+ at aarch64

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-20 08:04:22 +01:00
Michael Tremer
6f1f51ba1c core127: Ship DNS forwarding settings 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-19 21:01:20 +01:00
Michael Tremer
4af8d6964b pcre: Enable JIT 
This is now possible because we no longer run grsecurity-enabled
kernels. The performance of PCRE increases dramatically and applications
like the IDS benefit hugely:

  https://blog.inliniac.net/2011/10/12/suricata-and-pcre-performance/

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-19 15:44:32 +00:00
Jonatan Schlag
909549b1d6 Update libvirt to version 4.10 
This partially fixes #11941 as libvirt now states clearly that seccomp
needs to be disabled

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-18 22:33:07 +00:00
Michael Tremer
452e537092 core127: Ship updated squid 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-18 22:32:07 +00:00