Michael Tremer
7e7788ea0b
Merge remote-tracking branch 'amarx/BETA3' into next
2014-03-13 15:32:00 +01:00
Michael Tremer
9d870c49eb
entropy graph: Remove trend line.
2014-03-13 15:29:53 +01:00
Michael Tremer
84004f0538
Add link to entropy page and show if there is hardware support available.
2014-03-13 15:27:14 +01:00
Alexander Marx
4d81e0f381
VPN Checksubnets: Now the remote subnets (OpenVPN/IPSec) are checked. If they are defined elsewhere, there's a warningmessage displayed
2014-03-13 15:09:01 +01:00
Michael Tremer
014b284e5f
beep: Update to 1.3.
2014-03-11 18:03:59 +01:00
Michael Tremer
826c22d66c
Merge remote-tracking branch 'amarx/INDEX' into next
2014-03-10 21:35:15 +01:00
Michael Tremer
e9b5ba4179
firewall: Add auxiliary rules for firewall access.
...
Rules for accessing the firewall are added when access
to networks (GREEN, BLUE, ...) the firewall resides in is allowed.
2014-03-10 21:31:20 +01:00
Alexander Marx
e55334753d
graphs.pl : fixed layout on Nexus 7 devices "hour-Day-week-month-year" now on top of graph
2014-03-10 12:54:06 +01:00
Michael Tremer
d7050fc04a
ipsec: Allow to create firewall rules for IPsec input as well.
2014-03-08 20:55:32 +01:00
Michael Tremer
32c6ebdced
firewall: Make ICMP ratelimiting a bit saner again.
2014-03-05 12:31:36 +01:00
Michael Tremer
fa8229546b
firewall: Extend rate limiting for ICMP error messages.
...
Fixes #10489 .
2014-03-04 14:14:54 +01:00
Michael Tremer
8225c4fc98
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
2014-03-04 14:14:36 +01:00
Michael Tremer
0bda23f5a1
firewall: Add chain name to logged rules.
...
This helps us to debug faster where a packet has been dropped.
2014-03-04 12:38:13 +01:00
Michael Tremer
3bb4bb3fa1
firewall: Add rate limiting for LOG messages.
...
Fixes #10488 .
2014-03-04 12:36:52 +01:00
Arne Fitzenreiter
36c92ab00d
kernel: arm-multi: add marvel and allwinner support.
2014-03-04 07:07:31 +01:00
Michael Tremer
c39413f2d5
vdr: Add eepg plugin.
2014-03-03 16:41:13 +01:00
Michael Tremer
d1dee6c1a1
vdr: Add DVBAPI plugin.
2014-03-03 16:31:59 +01:00
Michael Tremer
824dc93601
firewall: Add a trailing space to all log prefixes for better readability.
2014-03-02 22:50:29 +01:00
Michael Tremer
9f80e81072
firewall: rules.pl: Remove unused variable $time_constraints.
2014-03-02 22:46:17 +01:00
Michael Tremer
d98aa95a55
firewall: rules.pl: Replace some hardcoded chain names.
2014-03-02 22:44:26 +01:00
Michael Tremer
7bb66417fa
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
2014-03-02 22:38:09 +01:00
Michael Tremer
1c3044d72c
firewall: Resurrect port forwardings with different external ports.
2014-03-02 22:35:27 +01:00
Michael Tremer
292cad90f7
firewall: Telnet uses TCP
2014-03-02 20:48:58 +01:00
Michael Tremer
0e53d8a991
firewall: Make OpenVPN access also possible when INPUT policy is REJECT.
2014-03-02 20:40:00 +01:00
Michael Tremer
6e87f0aa53
firewall: Allow accessing port forwardings from internal networks.
2014-03-02 20:37:44 +01:00
Arne Fitzenreiter
cbc492f516
apache2: update to 2.2.26.
2014-03-02 19:44:26 +01:00
Arne Fitzenreiter
239f8188e2
rootfile updates.
2014-03-02 19:39:42 +01:00
Michael Tremer
8f4f4634df
firewall: rules.pl: Refactored entire script.
2014-03-02 18:23:28 +01:00
Michael Tremer
b05ec50ac9
firewall: rules.pl: Cleanup time constraints generation.
2014-03-01 20:20:56 +01:00
Michael Tremer
6178953be5
firewall: rules.pl: Cleanup rule generation.
...
Various perl coding errors that have been suppressed by "no warnings uninitialized"
have been fixed and lots of helper variables have been introduced to make
it much more clearer what the code is actually doing.
2014-03-01 19:54:14 +01:00
Michael Tremer
a2b3eba9f5
general-functions.pl: Fix wrong perl syntax.
2014-03-01 18:23:52 +01:00
Michael Tremer
1f9e7b53b7
firewall: rules.pl: Remove $command and introduce $IPTABLES.
2014-03-01 18:19:09 +01:00
Michael Tremer
8531b94ae0
firewall: rules.pl: Remove command line args parsing and rest from old debugging mode.
2014-03-01 18:07:39 +01:00
Michael Tremer
68d1eb1017
firewall: rules.pl: Introduce a more slink debugging mode.
2014-03-01 18:04:40 +01:00
Michael Tremer
97ab0569bd
firewall: rules.pl: Fix some coding style.
2014-03-01 17:54:22 +01:00
Michael Tremer
b57edbd8ec
firewall: rules.pl: Remove totally bloated debug mode.
2014-03-01 17:49:22 +01:00
Michael Tremer
2513ae737d
firewall: Allow access to the entire GREEN/BLUE/ORANGE subnets.
...
This includes the firewall itself as well.
2014-03-01 16:04:01 +01:00
Michael Tremer
60fb533157
firewall: rules.pl: Don't reload custom firewall rules here.
2014-03-01 15:01:58 +01:00
Arne Fitzenreiter
82a4a102f3
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
2014-02-28 07:04:45 +01:00
Arne Fitzenreiter
6887597c04
kernel: enable rts5139 driver.
2014-02-28 07:02:14 +01:00
Alexander Marx
800077a689
Firewall: Skip rules on boot when red has no ip
2014-02-27 19:42:47 +01:00
Michael Tremer
b18dba57de
Merge remote-tracking branch 'alfh/feature_graph_constant_color' into next
2014-02-27 13:37:53 +01:00
Michael Tremer
df6b9ebfbc
openvpn: Provide a basic set of configuration settings.
...
These are the defaults as in the CGI script, but when you don't
set up the roadwarrior server, the configuration file remains
empty and the openvpnctrl binary will end itself because it cannot
read a proper configuration.
2014-02-27 13:32:13 +01:00
Michael Tremer
c9cd26f200
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
2014-02-27 13:14:02 +01:00
Michael Tremer
a8d1d049c6
Revert "Firewall: Fix errormessages on rulecreation when red has no IP"
...
This reverts commit f942937c29 .
This completely destroys external access rules and is therefore
reverted.
2014-02-26 20:02:24 +01:00
Alf Høgemark
e06986e853
qos and process graphs: avoid random colors
...
For the graphs for qos classes, and for process
count and memory usage, the colors change on
each page reload, since the colors are currently
totally random.
This change uses defined color indexes, 15 different
ones, that should be enough for qos at least, and is
enough for processes on my setup. This makes
the colors consistent between page loads, so it makes
it easier to monitor changes.
Perhaps one should define 30 different colors meant
to be used for graphing, then one could avoid random
colors also for the sensor graphs, and make it less
likely to get color collision for the process graphs
as well. Defining 30 such colors is not part of this
change.
2014-02-26 18:48:05 +01:00
Arne Fitzenreiter
329e9c465a
kernel: enable cgroups and fix some accounting settings.
2014-02-26 18:06:49 +01:00
Arne Fitzenreiter
ce81f1eb3e
kernel: enable pci modules in arm multiarch kernel.
2014-02-26 18:00:44 +01:00
Arne Fitzenreiter
adce3f96fc
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
2014-02-26 17:59:53 +01:00
Michael Tremer
69776cc42f
apache: Update cipher suite that is used for the web user interface.
...
Taken from here with exception of RC4.
https://wiki.mozilla.org/Security/Server_Side_TLS#Apache
2014-02-26 15:01:29 +01:00