Commit Graph

8066 Commits

Author SHA1 Message Date
Axel Gembe
8ed77b039f general-functions.pl: validdomainname misinterprets RFC1035
The function validdomainname checks that each part of a domain name is at least
2 characters in length, but RFC1035 only makes a restriction on a "label" being
at most 63 characters in length. This change allows reverse DNS zones like
2.168.192.in-addr.arpa to be added to the DNS forward configuration, which was
incorrectly prevented before.

Signed-off-by: Axel Gembe <ago@multipixs.com>
2014-08-11 10:51:18 +02:00
Timo Eissler
0eba3dc448 firewall: updated rootfiles 2014-08-08 09:54:38 +02:00
Timo Eissler
4b12aa414c firewall: fix faulty masquerading packets 2014-08-08 09:53:56 +02:00
Arne Fitzenreiter
4616eccece Merge branch 'master' into next 2014-08-08 08:51:53 +02:00
Arne Fitzenreiter
2b23289ca2 core81: set need reboot flag and restart apache. 2014-08-08 08:14:29 +02:00
Michael Tremer
935c2f233b Merge remote-tracking branch 'ms/ddns.cgi-fixes' into next
Conflicts:
	html/cgi-bin/ddns.cgi
2014-08-07 21:06:13 +02:00
Stefan Schantl
4851bc81f3 ddns.cgi: Support hostname details without seperating dots.
To keep compatiblity with the settings file of the old DDNS update script
(setddns.pl) we keept the storrage of the hostname information in
two parts (hostname and domain) and connected both with a dot to get a valid
FQDN again. OpenDNS and may some other providers do not use a dotted format
for this information, so one of these two values were empty.

We now can handle such cases in a right way.
2014-08-07 21:02:10 +02:00
Michael Tremer
a6df80269b ddns.cgi: Fix CGI clearing all settings. 2014-08-07 20:58:33 +02:00
Michael Tremer
c330d115bf ddns.cgi: Fix coding style. 2014-08-07 20:40:14 +02:00
Michael Tremer
458064c519 ddns.cgi: Allow enabling/disabling entries. 2014-08-07 20:33:10 +02:00
Michael Tremer
80a5cc5609 Merge remote-tracking branch 'amarx/ACCOUNTING' into next 2014-08-07 15:11:47 +02:00
Alexander Marx
d6413caa72 squid-accounting: get trafficdata from LAST month, when month has changed 2014-08-07 15:10:11 +02:00
Michael Tremer
89e9f46e5b Merge remote-tracking branch 'amarx/ACCOUNTING' into next
Conflicts:
	make.sh
2014-08-07 14:59:17 +02:00
Michael Tremer
908555842c Merge remote-tracking branch 'ms/firewall-no-nat' into next
Conflicts:
	doc/language_issues.nl
	doc/language_issues.tr
2014-08-07 14:50:42 +02:00
Michael Tremer
f808e5891c Add batctl and libnl-3. 2014-08-07 14:49:50 +02:00
Arne Fitzenreiter
4d3e174578 core81: change updatescript for core81. 2014-08-07 04:31:58 +02:00
Arne Fitzenreiter
a0e747dafc core81: add changes to core81 updater. 2014-08-07 00:58:21 +02:00
Arne Fitzenreiter
5ecf77e730 openssl: update to 1.0.1i. 2014-08-07 00:57:23 +02:00
Arne Fitzenreiter
b0507bff11 ddns: rootfile update. 2014-08-06 20:26:08 +02:00
Arne Fitzenreiter
4c658a270e check_mk_agent: extract backup include before uninstall. 2014-08-06 18:05:14 +02:00
Alexander Marx
a5f5ccfc4f squid-accounting: create billpreview file as temporary file 2014-08-06 15:10:41 +02:00
Michael Tremer
983d471f93 firewall-no-nat: Use network masks to identify the subnets.
In the POSTROUTING chains of the NAT table, there is
no more information about on which interface the packet
has arrived (green0, etc.).
2014-08-06 14:37:21 +02:00
Alexander Marx
1cdea84a90 squid-accounting: changed permissions on acct-lib.pl 2014-08-06 13:50:42 +02:00
Alexander Marx
18a66b95df squid-accounting: change permissions and reread languagefiles on uninstall 2014-08-06 13:41:54 +02:00
Alexander Marx
f38af1a976 Per-PDF-API2: new perl module used by squid-accounting 2014-08-06 13:38:21 +02:00
Michael Tremer
9188f6142c check_mk_agent: Bump release version to 4. 2014-08-06 10:30:44 +02:00
Michael Tremer
5ffd14f140 Merge remote-tracking branch 'morlix/check_mk' 2014-08-06 10:28:57 +02:00
Arne Fitzenreiter
a0a3d81c12 Merge branch 'master' of git.ipfire.org:/pub/git/ipfire-2.x 2014-08-06 09:36:31 +02:00
Arne Fitzenreiter
b283b2cf8f lzo: Downgrade to 2.0.6 (CVE-2014-4607 patched).
openvpn fails at lzo_init with lzo-2.07 and 2.08 on armv5tel.
2014-08-06 09:35:46 +02:00
Alexander Marx
db8a01e027 Squid-accounting: new addon for measuring proxy traffic per user/ip 2014-08-06 08:58:43 +02:00
Stefan Schantl
c2f80e67a7 ddns.cgi: Fix enable/disable handling of entries.
When the "enabled" checkbox is checked a "on" will be returned,
if the box is unchecked checkboxes will return nothing.

As a result of this behaviour the ddns.conf contained entries which have been disabled in the WUI.

We now check if the checkbox returns a "on", otherwise we will set the "enabled" value to "off" to
prevent from this problem.
2014-08-05 21:24:44 +02:00
Michael Tremer
5354d0f5c9 ddns: Update to 004. 2014-08-05 19:49:28 +02:00
Arne Fitzenreiter
93899a216f firewall: add more pscan matches and filter INVALID conntrack packages. 2014-08-04 21:19:28 +02:00
Erik Kapfer
156311fbcd OpenVPN: Added a check for empty 'CERT_NAME' field.
Fixes: #10581
2014-08-04 21:18:45 +02:00
Michael Tremer
06dbe99dbb tor: Update to 0.2.4.23
http://www.heise.de/security/meldung/Erfolgreicher-Angriff-auf-Tor-Anonymisierung-2278774.html
2014-08-04 19:39:16 +02:00
Stefan Schantl
1f080b34ba ddns.cgi: Check for valid FQDN before doing nslookup.
We now check if the used hostname is a valid FQDN before doing the nslookup to
determine if a DDNS host is up do date.
2014-08-04 19:37:45 +02:00
Stefan Schantl
5fe185f83c ddns.cgi: Fix token auth for provider regfish.com.
In the past the regfish.com auth token was stored as username similar than freedns.afraid.com. We now expected
the token key stored as password, to keep compatiblity with old installations I've added some compatible code
to prevent users from various issues.
2014-08-04 12:53:59 +02:00
Erik Kapfer
194314b250 OpenVPN: Added a check for empty 'CERT_NAME' field.
Fixes: #10581
2014-07-31 15:39:49 +02:00
Michael Tremer
612ce88182 Merge remote-tracking branch 'dweismueller/owncloud-7' into next 2014-07-30 13:15:33 +02:00
Erik Kapfer
b3f401fba4 ids.cgi fix snort rules download url.
fixes: 10579
2014-07-29 22:31:26 +02:00
Arne Fitzenreiter
f0728c790f Merge remote-tracking branch 'origin/master' into next
Conflicts:
	config/cfgroot/general-functions.pl
2014-07-29 22:01:19 +02:00
Arne Fitzenreiter
dccbf1bf4e firewall: add more pscan matches and filter INVALID conntrack packages. 2014-07-29 21:57:07 +02:00
Daniel Weismüller
3bd9129df0 owncloud: updatet to version 7.0.0 2014-07-29 15:55:36 +02:00
Michael Tremer
cea4fc3aaf Revert "General-functions.pl: rewrite IpInSubnet replace inet_ntoa"
This reverts commit ab92dc0c84.

See comment in last commit
2014-07-29 12:14:23 +02:00
Michael Tremer
8df091d968 Revert "General-functions.pl: rewrite getnetworkip without inet_aton"
This reverts commit 1be398ae38.

Some users reported some issues with the generated firewall ruleset
with the new function:
  http://forum.ipfire.org/index.php?topic=11124.0
2014-07-29 12:12:38 +02:00
Michael Tremer
bc70c82737 rngd: Silence initscript when rngd is already started.
When a hardware random number generator is found by udev
it will start rngd automatically which is what we also do
by default in the initialisation sequence of the system
(e.g. for RDRAND).
The user will then see an error message that rngd has
already been started which was confusing.
2014-07-29 12:07:02 +02:00
Michael Tremer
4e9a2b5732 general-functions.pl: Replace lots of broken network code.
The state of some code especially in general-functions.pl
is in such a bad shape and faulty.
This is a first step that replaces some of the network
functions with those who have been tested and work for
undefined inputs.

The old functions have been left in place as stubs
and must be removed at some time.
2014-07-27 22:46:20 +02:00
Michael Tremer
10cd52ba8e Merge remote-tracking branch 'stevee/next-ddns-opendns.com-fix' into next 2014-07-27 12:36:11 +02:00
Stefan Schantl
dc07707153 ddns.cgi: Support hostname details without seperating dots.
To keep compatiblity with the settings file of the old DDNS update script
(setddns.pl) we keept the storrage of the hostname information in
two parts (hostname and domain) and connected both with a dot to get a valid
FQDN again. OpenDNS and may some other providers do not use a dotted format
for this information, so one of these two values were empty.

We now can handle such cases in a right way.
2014-07-27 12:06:27 +02:00
Michael Tremer
39f5352fdb Update translations. 2014-07-27 12:02:17 +02:00