Commit Graph

7474 Commits

Author SHA1 Message Date
Michael Tremer
91dd042b20 gpl.cgi: Fix proper redirection so that the agreement has only to be accepted once. 2014-03-05 23:53:21 +01:00
Michael Tremer
63f2fb7fda firewall: Filter logging of broadcasts from the internal networks. 2014-03-05 14:09:56 +01:00
Michael Tremer
323923d912 firewall: Allow remarks in Unicode. 2014-03-05 13:59:28 +01:00
Michael Tremer
32c6ebdced firewall: Make ICMP ratelimiting a bit saner again. 2014-03-05 12:31:36 +01:00
Michael Tremer
6e9cf9ad86 Merge remote-tracking branch 'amarx/beta3' into next 2014-03-05 12:25:12 +01:00
Alexander Marx
65c9b3a508 Firewall: Remarkcheck should now support old firewallrules from converter 2014-03-05 08:13:04 +01:00
Alexander Marx
2610f3930a Firewall: When no manual ip is given on rulecreation and rule is added, there's automatically std_networks "ALL" selected 2014-03-05 08:05:52 +01:00
Michael Tremer
b062a11bbe firewall: Don't colourise MAC addresses.
Fixes #10491.
2014-03-05 08:05:52 +01:00
Michael Tremer
13e3cf285e firewall: Extend rate limiting for ICMP error messages.
Fixes #10489.
2014-03-05 08:05:52 +01:00
Michael Tremer
179deb37d0 firewall: Add chain name to logged rules.
This helps us to debug faster where a packet has been dropped.
2014-03-05 08:05:52 +01:00
Michael Tremer
5f050d607c firewall: Add rate limiting for LOG messages.
Fixes #10488.
2014-03-05 08:05:52 +01:00
Alexander Marx
9c3bcb9f00 Firewall: Now it is possible to just change the remark in input and outgoing 2014-03-04 20:43:06 +01:00
Alexander Marx
9556a0fb95 Firewall: When no manual ip is given, standard networks "all" is selected 2014-03-04 16:11:35 +01:00
Alexander Marx
5a09c99a89 Firewall: Now it is possible to just change the remark in input and outgoing 2014-03-04 16:00:14 +01:00
Alexander Marx
abb3cfcc9e Firewall: FIX allowed chars in remark 2014-03-04 15:44:02 +01:00
Michael Tremer
2ed474684d Merge remote-tracking branch 'amarx/beta3' into next 2014-03-04 14:54:06 +01:00
Alexander Marx
90c2ce0c20 Firewall: get rid of /32 subnetz when using manual ip addresses 2014-03-04 14:51:20 +01:00
Alexander Marx
40962f9760 Firewall: Bugfix - when creating a new hostgroup, the system checked for existing name in servicegroups instead of hostgroups 2014-03-04 14:40:59 +01:00
Michael Tremer
0ba66e9293 firewall: Don't colourise MAC addresses.
Fixes #10491.
2014-03-04 14:27:36 +01:00
Michael Tremer
fa8229546b firewall: Extend rate limiting for ICMP error messages.
Fixes #10489.
2014-03-04 14:14:54 +01:00
Michael Tremer
fbd8ac3c8c Merge remote-tracking branch 'amarx/beta3' into next 2014-03-04 14:14:45 +01:00
Michael Tremer
8225c4fc98 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-04 14:14:36 +01:00
Alexander Marx
7429ee78b6 Firewall: Fix oversized Textfields 2014-03-04 14:07:04 +01:00
Michael Tremer
0bda23f5a1 firewall: Add chain name to logged rules.
This helps us to debug faster where a packet has been dropped.
2014-03-04 12:38:13 +01:00
Michael Tremer
3bb4bb3fa1 firewall: Add rate limiting for LOG messages.
Fixes #10488.
2014-03-04 12:36:52 +01:00
Alexander Marx
f620fa34df Firewall: Fix Bug 10490 and broken colorization of tables in firewall groups 2014-03-04 11:37:58 +01:00
Arne Fitzenreiter
36c92ab00d kernel: arm-multi: add marvel and allwinner support. 2014-03-04 07:07:31 +01:00
Michael Tremer
c39413f2d5 vdr: Add eepg plugin. 2014-03-03 16:41:13 +01:00
Michael Tremer
d1dee6c1a1 vdr: Add DVBAPI plugin. 2014-03-03 16:31:59 +01:00
Michael Tremer
ece4c8cdc3 vdr: Update to 2.0.5.
Stupid outdated websites...
2014-03-03 16:28:51 +01:00
Michael Tremer
fa49910fa8 vdr: Update to 2.0.4. 2014-03-03 13:50:37 +01:00
Michael Tremer
fb5132aa57 strongswan: Update to 5.1.2.
http://www.strongswan.org/blog/2014/03/03/strongswan-5.1.2-released.html
2014-03-03 12:27:09 +01:00
Michael Tremer
824dc93601 firewall: Add a trailing space to all log prefixes for better readability. 2014-03-02 22:50:29 +01:00
Michael Tremer
9f80e81072 firewall: rules.pl: Remove unused variable $time_constraints. 2014-03-02 22:46:17 +01:00
Michael Tremer
d98aa95a55 firewall: rules.pl: Replace some hardcoded chain names. 2014-03-02 22:44:26 +01:00
Michael Tremer
7bb66417fa Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-02 22:38:09 +01:00
Michael Tremer
1c3044d72c firewall: Resurrect port forwardings with different external ports. 2014-03-02 22:35:27 +01:00
Michael Tremer
292cad90f7 firewall: Telnet uses TCP 2014-03-02 20:48:58 +01:00
Michael Tremer
0e53d8a991 firewall: Make OpenVPN access also possible when INPUT policy is REJECT. 2014-03-02 20:40:00 +01:00
Michael Tremer
6e87f0aa53 firewall: Allow accessing port forwardings from internal networks. 2014-03-02 20:37:44 +01:00
Arne Fitzenreiter
cbc492f516 apache2: update to 2.2.26. 2014-03-02 19:44:26 +01:00
Arne Fitzenreiter
239f8188e2 rootfile updates. 2014-03-02 19:39:42 +01:00
Michael Tremer
8f4f4634df firewall: rules.pl: Refactored entire script. 2014-03-02 18:23:28 +01:00
Michael Tremer
b05ec50ac9 firewall: rules.pl: Cleanup time constraints generation. 2014-03-01 20:20:56 +01:00
Michael Tremer
6178953be5 firewall: rules.pl: Cleanup rule generation.
Various perl coding errors that have been suppressed by "no warnings uninitialized"
have been fixed and lots of helper variables have been introduced to make
it much more clearer what the code is actually doing.
2014-03-01 19:54:14 +01:00
Michael Tremer
a2b3eba9f5 general-functions.pl: Fix wrong perl syntax. 2014-03-01 18:23:52 +01:00
Michael Tremer
1f9e7b53b7 firewall: rules.pl: Remove $command and introduce $IPTABLES. 2014-03-01 18:19:09 +01:00
Michael Tremer
8531b94ae0 firewall: rules.pl: Remove command line args parsing and rest from old debugging mode. 2014-03-01 18:07:39 +01:00
Michael Tremer
68d1eb1017 firewall: rules.pl: Introduce a more slink debugging mode. 2014-03-01 18:04:40 +01:00
Michael Tremer
97ab0569bd firewall: rules.pl: Fix some coding style. 2014-03-01 17:54:22 +01:00