Commit Graph

3860 Commits

Author SHA1 Message Date
Arne Fitzenreiter
af433268e0 graphs.pl: fix links position in chrome for android. 2014-03-23 17:39:47 +01:00
Michael Tremer
51cf3f8be5 firewall: rules.pl: Honour time constraints for NAT rules as well. 2014-03-21 13:39:03 +01:00
Michael Tremer
f98bb538e5 firewall: rules.pl: Catch invalid configurations. 2014-03-21 13:33:08 +01:00
Michael Tremer
c0ce920610 firewall: rules.pl: Allow REDIRECT rules. 2014-03-21 13:28:00 +01:00
Alexander Marx
c71499d8d9 Firewall: Rename defaultNetworks to netsettings 2014-03-21 12:51:18 +01:00
Alexander Marx
fd169d0adc Firewall: DNAT - Show right DNAT interface in ruletable
Now:
When using a hostgroup as source there are all corresponding DNAT
interfaces shown in ruletable depending on the entries in the group.

When in DNAT area "-automatic" is selected, the DNAT interfaces are
shown as IP-Addresses, else they are shown as "ORANGE","GREEN","BLUE"...

BUGFIX: When there is a MAC address used in a sourcegroup, the rules could not be set. Now MAC addresses get allways the public interface as DNAT
2014-03-21 12:51:09 +01:00
Alexander Marx
4e54e3c6f5 Firewall: Move some functions from rules.pl to firewall-lib.pl 2014-03-21 12:51:04 +01:00
Michael Tremer
d7a14d01e1 firewall: rules.pl: Fix rules with other NAT port. 2014-03-21 12:40:55 +01:00
Arne Fitzenreiter
cec275c9df Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2014-03-19 19:07:27 +01:00
Arne Fitzenreiter
b3c0c61132 hostapd: enable CONFIG_ACS for dfs channels. 2014-03-19 19:03:22 +01:00
Arne Fitzenreiter
dea9e7193c core76: add wpa_supplicant to update. 2014-03-19 09:05:37 +01:00
Arne Fitzenreiter
ece72ab98f Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2014-03-19 07:23:40 +01:00
Arne Fitzenreiter
f89678de2f hostapd: update to 2.1. 2014-03-19 07:22:49 +01:00
Michael Tremer
b0d9fad3f9 firewall: rules.pl: Add support for auto selection of NAT addresses. 2014-03-18 23:49:23 +01:00
Arne Fitzenreiter
be0d1005fd core76: add tzdata to update. 2014-03-18 07:28:13 +01:00
Arne Fitzenreiter
4f92fd2aeb tzdata: fix rootfile. 2014-03-18 07:20:41 +01:00
Arne Fitzenreiter
607c9d3ae0 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2014-03-18 00:22:24 +01:00
Arne Fitzenreiter
e583643a25 kernel: add pcengines apu led support. 2014-03-18 00:21:38 +01:00
Michael Tremer
da7a2208d3 firewall: rules.pl: Code cleanup. 2014-03-17 18:03:00 +01:00
Michael Tremer
5cf8c8c123 firewall: Fix DNAT rules between internal zones. 2014-03-17 17:39:47 +01:00
Michael Tremer
c2a1af7545 firewall: rules.pl: Sanitise source and destination IP addresses.
Those variables are now empty if source or destination are
unspecified.
2014-03-17 16:24:23 +01:00
Michael Tremer
2a07aa9d9c dialctrl: Remove defunct script. 2014-03-17 14:17:44 +01:00
Michael Tremer
835a1e2863 tzdata: Update to 2014a. 2014-03-16 16:02:18 +01:00
Michael Tremer
d5e94f72f6 sudo: Update to 1.8.10p1. 2014-03-15 15:08:37 +01:00
Michael Tremer
7e7788ea0b Merge remote-tracking branch 'amarx/BETA3' into next 2014-03-13 15:32:00 +01:00
Michael Tremer
9d870c49eb entropy graph: Remove trend line. 2014-03-13 15:29:53 +01:00
Michael Tremer
84004f0538 Add link to entropy page and show if there is hardware support available. 2014-03-13 15:27:14 +01:00
Alexander Marx
4d81e0f381 VPN Checksubnets: Now the remote subnets (OpenVPN/IPSec) are checked. If they are defined elsewhere, there's a warningmessage displayed 2014-03-13 15:09:01 +01:00
Michael Tremer
014b284e5f beep: Update to 1.3. 2014-03-11 18:03:59 +01:00
Michael Tremer
826c22d66c Merge remote-tracking branch 'amarx/INDEX' into next 2014-03-10 21:35:15 +01:00
Michael Tremer
e9b5ba4179 firewall: Add auxiliary rules for firewall access.
Rules for accessing the firewall are added when access
to networks (GREEN, BLUE, ...) the firewall resides in is allowed.
2014-03-10 21:31:20 +01:00
Alexander Marx
e55334753d graphs.pl : fixed layout on Nexus 7 devices "hour-Day-week-month-year" now on top of graph 2014-03-10 12:54:06 +01:00
Michael Tremer
d7050fc04a ipsec: Allow to create firewall rules for IPsec input as well. 2014-03-08 20:55:32 +01:00
Michael Tremer
32c6ebdced firewall: Make ICMP ratelimiting a bit saner again. 2014-03-05 12:31:36 +01:00
Michael Tremer
fa8229546b firewall: Extend rate limiting for ICMP error messages.
Fixes #10489.
2014-03-04 14:14:54 +01:00
Michael Tremer
8225c4fc98 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-04 14:14:36 +01:00
Michael Tremer
0bda23f5a1 firewall: Add chain name to logged rules.
This helps us to debug faster where a packet has been dropped.
2014-03-04 12:38:13 +01:00
Michael Tremer
3bb4bb3fa1 firewall: Add rate limiting for LOG messages.
Fixes #10488.
2014-03-04 12:36:52 +01:00
Arne Fitzenreiter
36c92ab00d kernel: arm-multi: add marvel and allwinner support. 2014-03-04 07:07:31 +01:00
Michael Tremer
c39413f2d5 vdr: Add eepg plugin. 2014-03-03 16:41:13 +01:00
Michael Tremer
d1dee6c1a1 vdr: Add DVBAPI plugin. 2014-03-03 16:31:59 +01:00
Michael Tremer
824dc93601 firewall: Add a trailing space to all log prefixes for better readability. 2014-03-02 22:50:29 +01:00
Michael Tremer
9f80e81072 firewall: rules.pl: Remove unused variable $time_constraints. 2014-03-02 22:46:17 +01:00
Michael Tremer
d98aa95a55 firewall: rules.pl: Replace some hardcoded chain names. 2014-03-02 22:44:26 +01:00
Michael Tremer
7bb66417fa Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-02 22:38:09 +01:00
Michael Tremer
1c3044d72c firewall: Resurrect port forwardings with different external ports. 2014-03-02 22:35:27 +01:00
Michael Tremer
292cad90f7 firewall: Telnet uses TCP 2014-03-02 20:48:58 +01:00
Michael Tremer
0e53d8a991 firewall: Make OpenVPN access also possible when INPUT policy is REJECT. 2014-03-02 20:40:00 +01:00
Michael Tremer
6e87f0aa53 firewall: Allow accessing port forwardings from internal networks. 2014-03-02 20:37:44 +01:00
Arne Fitzenreiter
cbc492f516 apache2: update to 2.2.26. 2014-03-02 19:44:26 +01:00