Commit Graph

10025 Commits

Author SHA1 Message Date
Jonatan Schlag
7b616db4e2 Network: add macvtap mode
This change make it possible to use a macvtap interface as a
standard interface (green0).
This is required by libvirt, because libvirt adds macvtap interfaces to
the physical interface, but this causes a problem. A VM  with this
configuration can communicate with the whole network,
but not with the Host (IPFire).
To solve this problem, the host interface must be also a macvtap interface.
This is achieved by:
1. In /var/ipfire/ethernet/settings the mode of a interface could set
with GREEN_MODE= ...
When the mode is macvtap the physical interface is renamed to green0phys
instead of green0. If the mode is not set the normal configuration is
applied .
2. The  network-hotplug-macvtap script checks if a physical nic ends
with "phys".
When the interface ends with "phys", the script adds a macvtap interface
to the physical nic which is named green0. The MAC address of this
interface is set to the MAC address of the physical nic. The MAC address
of the physical is set to a random value. We do this because the MAC
address of green0 should not change.
All services, IP addresses then binds to the macvatap interface, the
physical nic is not used.
PS.:  The script works also with the orange or blue interface, just
replace green with orange or blue.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:22:29 +01:00
Michael Tremer
48396bdffe buildsystem: Escape curly brackets
Newer versions of perl complain about using unescaped
left curly brackets.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:17:10 +01:00
Matthias Fischer
9b39654d9e log.dat: Added 'squid' and 'snort' plus translations
Added 'squid' and 'snort' to section dropdown in LOGS / SYSTEM LOGS,
added translations.

Added translation string for 'web proxy' in '30-network.menu'.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:16:12 +01:00
Matthias Fischer
9494c6112a log.dat: fix missing quotation marks for 'ddns'
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:16:10 +01:00
Matthias Fischer
b78a8742ae squid 3.5.19: latest patches from upstream
For details, see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:12:15 +01:00
Marcel Lorenz
7f5cdd2bfd flex: update rootfile
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-01 22:07:51 +01:00
Arne Fitzenreiter
55c645ba48 samba: import updated rpc security patchset from red hat.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-23 23:08:01 +02:00
Arne Fitzenreiter
43d91dad51 gcc: fix bootstrap with gcc-6
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-22 10:56:57 +02:00
Matthias Fischer
3fffbe09e2 dnsmasq: Update to 2.76
Final version.

For a detailed changelog, see:
http://www.thekelleys.org.uk/dnsmasq/CHANGELOG

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-19 18:25:21 +01:00
Matthias Fischer
0d9f821661 Midnight Commander: Update to 4.8.17
For Details see:
http://www.midnight-commander.org/wiki/NEWS-4.8.17

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-18 22:23:53 +01:00
Michael Tremer
15a43158ab Rootfile update
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-18 19:28:01 +01:00
Michael Tremer
1193d00f51 nfs: Bump release to install rpcbind dependency
This update will pull in rpcbind as new dependency which
will automatically remove portmap when installed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-18 16:41:51 +01:00
Michael Tremer
3fcc9b67fc squid: Fix indentation
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-18 16:17:21 +01:00
Michael Tremer
691b2836c0 squid: Kill redirector processes only after squid has stopped
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-18 16:16:12 +01:00
Matthias Fischer
6113575d81 squid: Rework initscript
The initscript now takes care that the squid proxy server process
is properly shut down. If that fails, it will remove the cache
index and let it be recreated at the next start. A warning is
shown to the user.

The "flush" command will now remove the entire proxy cache.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-18 16:12:13 +01:00
Jonatan Schlag
e93a0b06fe Replace portmap with rpcbind
Portmap is not maintained anymore that's why it is replaced by rpcbind.
Rpcbind provides also rpcinfo which is quite useful for debugging.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-17 14:08:47 +01:00
Jonatan Schlag
a1a05a444f New package libtirpc
libtirpc is a dependency of rpcbind

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-17 14:08:45 +01:00
Marcel Lorenz
cdd422b561 7zip: update to 15.14.1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-17 14:03:54 +01:00
Michael Tremer
e5158aea0a core103: Ship updated dnsmasq
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 18:02:03 +01:00
Matthias Fischer
c00aeae80f dnsmasq: Update to 2.76rc2
- Updated to 2.76rc2 and deleted obsolete patch files from 2.76rc1

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:44 +01:00
Matthias Fischer
3f877ebd25 dnsmasq: Update to 2.76rc1 - added latest patches (001-002)
Update, added latest patches and deleted obsolete patch files.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:39 +01:00
Matthias Fischer
4d36732fe2 dnsmasq: Update to 2.76test13 with latest patches (001-006)
Update from 'dnsmasq 2.76test10' to '2.76test13'

Includes latest patches (001-006) from upstream.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:04:19 +01:00
Matthias Fischer
15f37d7738 procps: Update to 3.2.8
For details see:
http://procps.sourceforge.net/changelog.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-16 16:03:08 +01:00
Matthias Fischer
bb91c2f744 squid init: small cosmetic fixes
- Deleted a few absolutely unneeded tabs.
- Inserted/deleted some needed/unnecessary line breaks.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-15 11:41:25 +01:00
Arne Fitzenreiter
ef553dccc8 linux-pae: fix typo at remove meta on non-pae systems.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-11 21:00:29 +02:00
Arne Fitzenreiter
eb797e6ec0 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-05-11 20:59:15 +02:00
Matthias Fischer
e0cba8eea9 squid 3.4: remove obsolete patch files
Obsolete, no longer needed.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-11 15:46:58 +01:00
Matthias Fischer
9a4bfe0284 squid: Update to 3.5.19
Activated 'ipv6', as discussed in ipfire-list with Michael:

"I had a look what the IPv6 switch actually changes. And that is not really much.
Essentially nothing. It just probes if the system supports IPv6 and if not it
disables it internally.

http://git.ipfire.org/?p=thirdparty%2Fsquid.git&a=search&h=refs%2Fheads%2Ftrunk&st=grep&s=USE_IPV6

I think we can as well enable this."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-11 15:46:21 +01:00
Matthias Fischer
efccb43303 squid: Update to 3.5.18
Removed unecessary quotations and two configure-options, see:
ftp://ftp.fu-berlin.de/unix/www/squid/archive/3.1/squid-3.1.0.16-RELEASENOTES.html

--with-aio
Deprecated. POSIX AIO is now auto-detected and enabled.
Use --without-aio to disable, but only if you really have to.

--with-pthreads
Deprecated. pthreads library is now auto-detected and enabled.
Use --without-pthreads to disable, but only if you really have to.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-07 13:25:18 +01:00
Michael Tremer
86eda7b552 tor: Update to 0.2.7.6
Fixes #11117

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-07 13:23:28 +01:00
Michael Tremer
fb196971e9 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2016-05-07 12:32:27 +01:00
Arne Fitzenreiter
3917eadc29 initskripts: remove obsolete checkfstab
the file update the bootdevice to uuid in fstab and grub1 config.
this is not needed since we use uuid at default and grub2

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 15:40:38 +02:00
Arne Fitzenreiter
be700f1806 core103: start
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 15:32:01 +02:00
Arne Fitzenreiter
f61b838fb0 linux-pae: prevent install on non pae systems
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 15:16:12 +02:00
Arne Fitzenreiter
4558108c4d clamav: rework initskript
display download wait, increase time to 15min and
remove tmp files at freshclam terminate.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-06 11:22:05 +02:00
Arne Fitzenreiter
fe6e5e03d5 clamav: update to 0.99.2
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-04 16:21:58 +02:00
Arne Fitzenreiter
c594bd17b1 Merge remote-tracking branch 'origin/master' into next 2016-05-04 09:14:29 +02:00
Michael Tremer
03306ff6a2 general-functions.pl: Allow underscores in domain names
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-03 22:50:53 +01:00
Arne Fitzenreiter
3af3a6c5ee core102: ship openssl and openssl updates
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-03 21:31:37 +02:00
Arne Fitzenreiter
d25d7bfccf openssl: security update to 1.0.2g
see https://www.openssl.org/news/secadv/20160503.txt for details

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-03 21:28:28 +02:00
Sascha Kilian
68aa7aa602 openssh: Update to 7.2p2
Signed-off-by: Sascha Kilian <sascha@sakisoft.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-03 11:56:19 +01:00
Arne Fitzenreiter
e78d9e4fc8 clamav: save signature database at update
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-03 11:02:18 +02:00
Arne Fitzenreiter
b5548cbb5c toolchain: enable build on aarch64 multilib hosts
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-05-01 14:20:34 +02:00
Arne Fitzenreiter
840c650aa7 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2016-04-30 09:34:16 -04:00
Arne Fitzenreiter
c356c8ce6a Revert "ncurses: update to 6.0 and rename 5.9 to ncurses-compat"
This reverts commit a420b3e7b9.

toolchain build fails on all architectures.
2016-04-30 09:25:12 -04:00
Arne Fitzenreiter
6378290f73 make-functions: enable build on aarch64 multilib
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2016-04-30 03:49:06 -04:00
Michael Tremer
1a26eca66e squid: Add forgetten patch file
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 21:59:50 +01:00
Michael Tremer
b5a50b494e rtpproxy: Add initscript
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 21:07:13 +01:00
Matthias Fischer
77d0467c05 squid: Update to 3.5.17
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 18:25:08 +01:00
Michael Tremer
3d7e6b4b61 setup: Show more than 6 NICs
http://lists.ipfire.org/pipermail/development/2016-April/002074.html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-04-29 13:23:24 +01:00