webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-14 21:12:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
12,864 Commits 2 Branches 1 Tag
8076deba79f9bbd4e551fdfe1eb49e8a77b2c19e
Commit Graph

12864 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Stefan Schantl
0ca3baedfc Revert "geoip-functions.pl: Re-write code to lookup the iso country code of a given IP-address." 
Enhanching the code to fix the lookup will rapidely slow down the lookup speed. Because using
the GeoIP2 module is no option ( the reasons have been described in the commit message which will
now reverted), we have decided to temporary switch back to the old module until a nice solution has
been found.

This reverts commit ff21ff90d2.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-11 00:09:04 +00:00
Stefan Schantl
f107bb39c5 Revert "GeoIP: Drop legacy GeoIP perl module." 
This reverts commit 9d1708e081.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-11 00:08:54 +00:00
Matthias Fischer
035f6c75ae xtables-addons: Fix typo in lfs 
Just some typos...

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-11 00:08:46 +00:00
Michael Tremer
01db691a1e Bump kernel version to ship a new PAE kernel 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-10 22:48:25 +00:00
Michael Tremer
06fd3467d1 core127: Ship updated kernel modules for xtables 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-10 22:47:43 +00:00
Michael Tremer
a04ec92389 core127: Ship updated firewall functions library 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-10 22:43:45 +00:00
Stefan Schantl
8ff42d82c4 firewall-lib.pl: Use get_geoip_locations from geoip-functions.pl 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-10 22:43:00 +00:00
Stefan Schantl
30c59cbb0b geoip-locations.pl: Add get_geoip_locations(). 
This function is used to get all available GeoIP locations.

The functions returns them as array, sorted in alphabetical order.

Reference #11959

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-10 22:42:52 +00:00
Matthias Fischer
e3429b4aad clamav: Update to 0.101.1 
For details see:
https://blog.clamav.net/2019/01/clamav-01011-patch-has-been-released.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:33:05 +00:00
Michael Tremer
11de35622f core127: Ship updated tar 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:32:46 +00:00
Matthias Fischer
042a5fe60a tar: Update to 1.31, including fix for bug #11958 
For details see:

http://savannah.gnu.org/forum/forum.php?forum_id=9344

"- Fix heap-buffer-overrun with --one-top-level.
- Support for zstd compression.
- The -K option interacts properly with member names given in the command line.
- Fix CVE-2018-20482"

This patch was reverted because 'tar 1.31' crashed when installing PakFire packages
with the option '--no-overwrite-dir'.
See: https://bugzilla.ipfire.org/show_bug.cgi?id=11958

Included is now a patch from https://savannah.gnu.org/bugs/?55413, which seems to fix this issue.
The test cases given in https://savannah.gnu.org/bugs/?55413#comment1 ran without problems.

As always, please check and confirm.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:31:43 +00:00
Michael Tremer
d381c56dc8 core127: Ship updated GeoIP functions 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:28:38 +00:00
Stefan Schantl
ff21ff90d2 geoip-functions.pl: Re-write code to lookup the iso country code of a given IP-address. 
Drop the usage of the old legacy GeoIP perl module which was not able to handle the
new GeoLite2 databases.

Write some code to directly access the databases and extract the required data.

Usage of the GeoIP2 perl module would provide a lot of more functionality which is not
used/needed. Unfortunately ir requires at lot of additional perl modules which are
not available on IPFire and would only be build and shipped for this module. Buildig all
of them will slow down the entire build process, mess up the system and requires a lot
more space on disk.

Fixes #11962.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:21:48 +00:00
Stefan Schantl
9d1708e081 GeoIP: Drop legacy GeoIP perl module. 
The legacy GeoIP perl module cannot handle the new GeoLite2 databases
provided from maxmind and therefore needs to be dropped.

Reference #11960

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:21:27 +00:00
Stefan Schantl
b76a8a008d xt_geoip_update: Adjust script to download and use the GeoLite2 database 
Fixes #11961.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:21:01 +00:00
Stefan Schantl
a77870146f xtables-addons: Use shipped xt_geoip_build 
Use the shipped xt_geoip_build directly instead of holding a copy in our GIT.

Reference #11959

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 01:20:22 +00:00
Stefan Schantl
9f6849b3ad xtables-addons: Update to 3.2 
Reference #11959

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 00:35:16 +00:00
Michael Tremer
4ed2162324 perl-Net-CIDR-Lite: Make rootfile work on other arches 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 00:34:30 +00:00
Michael Tremer
045d54c324 perl-Net-CIDR-Lite: Fix whitespace 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 00:31:46 +00:00
Stefan Schantl
985741db61 perl-Net-CIDR-Lite: New package. 
This is a runtime dependency of the xt_geoip_build perl script
shipped by xtables-addons in version 3.2.

Reference #11960.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-07 00:30:49 +00:00
Michael Tremer
af2cc3be64 IPVS: Enable connection tracking by default 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 21:33:43 +00:00
Stefan Schantl
b749416ad7 ids-functions.pl: Downloader should reads settings from correct file 
In commit ea5c8eeb83 the taken settings
for the ruleset have been stored into an own file.

The Downloader now uses this file to read-in which ruleset should be used
and downloaded.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2019-01-06 14:11:30 +01:00
Michael Tremer
5321fcbff3 Backup conntrackd's configuration file 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 09:01:38 +00:00
Michael Tremer
7d5caee6bd Add initscript for conntrackd 
The daemon will be started by default when a configuration
file exists.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 08:59:25 +00:00
Michael Tremer
ae5b9c5ad5 Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 07:03:08 +00:00
Matthias Fischer
e26a5c4885 Fix typo in 'html/cgi-bin/logs.cgi/log.dat' 
Translation string uses capital letter: 'Captive' => 'Captive Portal',

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 07:02:54 +00:00
Michael Tremer
e0c4ed1783 core127: Ship updated proxy.cgi and regenerate configuration 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:14:01 +01:00
Michael Tremer
ce1f04ee40 proxy: Allow selecting throttled bandwidth in MBit/s 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:10:59 +01:00
Michael Tremer
c2f1b8183c proxy: Suggest modern defaults for cache memory and disk 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:02:05 +01:00
Michael Tremer
cdd4cf4094 proxy: Drop support for throttling only certain mime types 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:00:05 +01:00
Michael Tremer
d68e150e86 proxy: Drop web browser check 
This is neither reliable nor up to date and is therefore removed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:54:56 +01:00
Michael Tremer
a1018d86ae proxy: Set authentication TTL for NTLM authentication also 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:49:18 +01:00
Michael Tremer
6df2d52887 proxy: Use correct authentication cache TTL for AD 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:48:32 +01:00
Michael Tremer
fa286b1330 proxy: Use entered setting for auth children for AD 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:46:20 +01:00
Michael Tremer
5c2a76f7b3 proxy: Use correct realm for AD authentication 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:44:19 +01:00
Michael Tremer
dc637f087f proxy: Remove AUTH_IPCACHE_TTL 
This is potentially dangerous to set larger than zero.

Authentication is perfomed on basis of IP addresses which is
not a good idea at all.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:39:36 +01:00
Michael Tremer
ea72700a3b proxy: Drop NTLM authentication 
This is the authentication againt NT 4.0 style domain controllers.

squid has dropped support for this in the 4.5 release and nobody
should be using these old domain controllers any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:28:46 +01:00
Michael Tremer
eedca6e36c squid: Run as many redirectors as we have CPU cores 
This makes sure that we use the optimal ratio of memory and
CPU usage.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Tested-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Tested-by: Matthias Fischer <matthias.fischer@ipfire.org>
 2019-01-08 03:33:37 +01:00
Daniel Weismüller
1a3323f2e6 BUG 11786 - squid: Remove setting for filter processes the number of Squid processes 
I added a function to determine the number of cores.
Now the number of squid processes will be equal to the number of logical cores.
Further I removed the possibility of changing the number
of squid processes in the proxy.cgi

Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: root <root@ipfire.test>
 2019-01-08 02:02:05 +01:00
Michael Tremer
79b89b90e4 Revert "core127: Ship updated tar" 
This reverts commit 9ab1c9302c.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-05 21:12:24 +00:00
Michael Tremer
d09cb651b5 Revert "tar: Update to 1.31" 
This reverts commit bb473fd1d6.

tar crashes when used with --no-overwrite-dir. See #11958.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-05 21:11:44 +00:00
Michael Tremer
0cd3eab3ae core127: Ship updated snort 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-05 21:11:14 +00:00
Matthias Fischer
d01b31914a snort: Update to 2.9.12 
For details see:

Release notes:
https://snort.org/downloads/snort/release_notes_2.9.12.txt

Changelog:
https://snort.org/downloads/snort/changelog_2.9.12.txt

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-05 15:42:34 +00:00
Arne Fitzenreiter
1338e08d0d core127: ship framebuffer.conf blacklist 
the file is generated at kernel build and in core126
the module commpression was changed to xz so the list was empty.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-06 16:31:44 +01:00
Arne Fitzenreiter
0708b3b343 core127: remove double files from armv5tel filelist 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-06 15:53:27 +01:00
Arne Fitzenreiter
5e6f343b7d python: update to 2.7.15 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-06 15:51:53 +01:00
Arne Fitzenreiter
b15309e9d1 transmission: update to 2.94 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-05 13:47:31 +01:00
Michael Tremer
9ab1c9302c core127: Ship updated tar 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-04 02:43:06 +00:00
Matthias Fischer
bb473fd1d6 tar: Update to 1.31 
For details see:
http://savannah.gnu.org/forum/forum.php?forum_id=9344

"- Fix heap-buffer-overrun with --one-top-level.
- Support for zstd compression.
- The -K option interacts properly with member names given in the command line.
- Fix CVE-2018-20482"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-04 02:42:40 +00:00
Michael Tremer
7f90513e61 Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 16:28:00 +00:00