webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-22 00:42:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
13,754 Commits 2 Branches 1 Tag
80d5bb76dda19a338bd4635d5e4be0737a1abe8c
Commit Graph

6864 Commits

Author SHA1 Message Date
Matthias Fischer
80d5bb76dd iproute2: Update to 5.3.0 
For details see:
https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/?h=v5.3.0

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:37:03 +00:00
Arne Fitzenreiter
563ac9b13e core137: ship knot 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:36:24 +00:00
peter.mueller@ipfire.org
a85a7a60fc firewall: raise log rate limit for user generated rules, too 
Having raised the overall log rate limit to 10 packet per second
in Core Update 136, this did not affected rules generated by the
user. In order to stay consistent, this patch also raises log rate
limit for these.

In order to avoid side effects on firewalls with slow disks, it
was probably better touch these categories separately, so testing
users won't be DoSsed instantly. :-)

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:30:31 +00:00
Arne Fitzenreiter
e60dde5f53 core137: ship Net_SSLeay 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:26:22 +00:00
Erik Kapfer
24f9c830eb Net-SSLeay: Update to version 1.88 
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:24:32 +00:00
Arne Fitzenreiter
0e081a25f7 core137: ship libssh 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:21:17 +00:00
Michael Tremer
1df47cc9ee libssh: New package 
This is required by Bird to support RPKI.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:19:33 +00:00
Arne Fitzenreiter
dcf1a61f5b core137: ship updated logrotate.conf 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:17:44 +00:00
Matthias Fischer
686ada3158 Added Mail log file to '/etc/logrotate.conf' 
Fixes Bug #12155: logrotate wasn't set up to rotate this file.

For details see:
https://bugzilla.ipfire.org/show_bug.cgi?id=12155

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:17:06 +00:00
Arne Fitzenreiter
dbcb1c99d2 core137: ship tzdata 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:14:43 +00:00
Arne Fitzenreiter
c9ef22a019 core137: ship wpa_supplicant 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:10:23 +00:00
Arne Fitzenreiter
6499bd0d50 core137: ship bind 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:08:04 +00:00
Matthias Fischer
5121f35be3 bind: Update to 9.11.11 
For details see:
https://downloads.isc.org/isc/bind9/9.11.11/RELEASE-NOTES-bind-9.11.11.html

"Security Fixes

   A race condition could trigger an assertion failure when a large
   number of incoming packets were being rejected. This flaw is disclosed
   in CVE-2019-6471. [GL #942]

...

Bug Fixes

   Glue address records were not being returned in responses to root priming
   queries; this has been corrected. [GL #1092]

   Interaction between DNS64 and RPZ No Data rule (CNAME *.) could cause
   unexpected results; this has been fixed. [GL #1106]

   named-checkconf now checks DNS64 prefixes to ensure bits 64-71 are zero.
   [GL #1159]

   named-checkconf could crash during configuration if configured to use "geoip
   continent" ACLs with legacy GeoIP. [GL #1163]

   named-checkconf now correctly reports missing dnstap-output option when dnstap
   is set. [GL #1136]

   Handle ETIMEDOUT error on connect() with a non-blocking socket. [GL #1133]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:06:58 +00:00
Arne Fitzenreiter
2a0edc08bf core137: ship changed ovpnmain.cgi 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:06:13 +00:00
Arne Fitzenreiter
5907bc5d5e core137: add pcre 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:02:23 +00:00
Matthias Fischer
57354c8187 pcre: Update to 8.43 
For details see:
http://www.pcre.org/original/changelog.txt

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 18:01:13 +00:00
Arne Fitzenreiter
c0fe5525ce core137: add dhcpcd 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 17:59:39 +00:00
Arne Fitzenreiter
6c84c53803 core137: add iproute2 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 17:57:32 +00:00
Matthias Fischer
5551237b1a iproute2: Update to 5.2.0 
For details see:
https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 17:56:02 +00:00
Arne Fitzenreiter
6bc008fc8f core137: add iptables and collectd 
collectd is linked to libip4tc so we need to ship this also

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 17:53:36 +00:00
Matthias Fischer
7a03d4b08a iptables: Update to 1.8.3 
For details see:
https://www.netfilter.org/projects/iptables/files/changes-iptables-1.8.3.txt

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 17:51:19 +00:00
Arne Fitzenreiter
4e6c66b525 core137: add libnetfilter_queue 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 17:49:09 +00:00
Stefan Schantl
deb594c1b6 libnetfilter_queue: Update to 1.0.4 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 17:47:26 +00:00
Arne Fitzenreiter
968af91f62 core137: add libhtp 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-10-08 17:46:29 +00:00
Arne Fitzenreiter
69cf4f3065 kernel: update to 4.14.146 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-21 20:44:52 +02:00
Arne Fitzenreiter
593a9326d8 start core137 and add kernel and IO-Socket-SSL to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-21 09:52:02 +00:00
Erik Kapfer
639ce4545d IO-Socket-SSL: Update to version 2.066 
Fix for "Undefined subroutine &IO::Socket::SSL::set_client_defaults called at /usr/libexec/git-core/git-send-email" problem.

Signed-off-by: Erik Kapfer <ummeegge@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-18 16:24:22 +00:00
Arne Fitzenreiter
d952d6d735 core136: apply local sshd config and restart sshd at update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-14 18:13:21 +00:00
Arne Fitzenreiter
4f84bf4074 core136: fix typo at GeoIP update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-14 16:20:27 +00:00
Arne Fitzenreiter
9ab4e56aa9 core136: ship perl-CGI and perl-Switch 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-14 15:21:41 +00:00
Arne Fitzenreiter
f7eb5925d2 core136: ship updated perl scripts 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-14 15:18:29 +00:00
Arne Fitzenreiter
43be529d2d core136: ship updated zoneconf.cgi 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-12 10:20:45 +00:00
Arne Fitzenreiter
ece63aa950 openssl: update to 1.1.1d 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-12 05:52:47 +00:00
Arne Fitzenreiter
d3d959851a core136: update logwatch crontab entry 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-11 17:38:32 +00:00
Matthias Fischer
7ca4deda49 BUG 12036: logwatch now starts at 00:05am to avoid conflicts with logrotate 
Problem:
Every once in a while 'logwatch' creates an empty log file with 0 Bytes.

Probably 'logwatch' conflicts with the logrotate job which is
launched at the same time.

To avoid this in the future, the start of logwatch was postponed for
four minutes.

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-11 16:59:27 +00:00
Arne Fitzenreiter
be8c539905 core136: ship logrotate 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-11 16:57:20 +00:00
Arne Fitzenreiter
a86febdc22 core136: ship changed log.dat 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-11 16:52:23 +00:00
Arne Fitzenreiter
81d5af569b core136: ship openssh 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-11 16:46:19 +00:00
Arne Fitzenreiter
bd44f7b763 core136: ship usb_modswitch and data 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-04 14:17:19 +00:00
Arne Fitzenreiter
f3158de0b8 usb-modeswitch-data: fix rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-04 14:15:35 +00:00
Arne Fitzenreiter
8b200f9c7e Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2019-09-03 11:33:06 +00:00
Ramax Lo
46b457393d usb_modeswitch_data: update to 20170806 
Signed-off-by: Ramax Lo <ramaxlo@gmail.com>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-02 20:42:50 +00:00
Arne Fitzenreiter
136ade454b core136: ship unbound 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-02 20:21:27 +00:00
Matthias Fischer
d0fc3b2008 unbound: Update to 1.9.3 
For details see:
https://nlnetlabs.nl/pipermail/unbound-users/2019-August/011765.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-02 20:19:33 +00:00
Alex Koch
62f98a58b2 zabbix_agentd: Update to 4.2.6 
Release Notes: https://www.zabbix.com/rn/rn4.2.6

Signed-off-by: Alex Koch <ipfire@starkstromkonsument.de>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-02 20:19:02 +00:00
Michael Tremer
cf572f2064 Revert "freeradius: Build without SSL" 
This reverts commit 071d7754f7.

Fixes: #12139

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-02 20:18:45 +00:00
Michael Tremer
e301592fbe freeradius: Update to 3.0.19 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-02 20:18:43 +00:00
Arne Fitzenreiter
8b626630dc pcengines-apu-firmware: rootfile update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-09-01 17:07:14 +01:00
Arne Fitzenreiter
438edc646a perl-Net-LibIDN: add module for Amavisd 
fixes: #12138

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-31 11:08:07 +02:00
Matthias Fischer
cf2aa683a9 bind: Update to 9.11.10 
For details see:
https://downloads.isc.org/isc/bind9/9.11.10/RELEASE-NOTES-bind-9.11.10.html

"Security Fixes

A race condition could trigger an assertion failure when a large
number of incoming packets were being rejected.
This flaw is disclosed in CVE-2019-6471. [GL #942]"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-28 08:16:48 +00:00