Matthias Fischer
922ddf0ef6
guardian.cgi: Use variable $pid instead of array element.
...
This will prevent from a lot of perl suggestions in the
apache error log.
Reference #10748 .
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
bfb860ceb7
guardian.cgi: Fix path to meta-owncloud.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
28981fac68
guardian.cgi: Add configure options for owncloud.
...
The related options only will be displayed when the owncloud addon
has been installed.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
36dbcf2e43
guardian.cgi: Allways read-in settings.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
c973d6da10
guardian.cgi: Some more input validation.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
473c725721
guardian.cgi: Correct indentation when writing out the config file.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
4a7fc9f634
guardian.cgi: Add dropdown for PriorityLevel selection.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
96655fa6b7
guardian.cgi: Fix and improve input validation.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
f8c3bfe050
guardian.cgi: Reload guardian if config or the ignorelist changes.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
a35a066845
guardian.cgi: Add option to configure the BlockCount.
...
Some small code fixes.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
06ff7e28d7
guardian.cgi: Accidently hardcoded some descriptions.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
7899718f04
guardian.cgi: Add dropdown to select the used loglevel.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
a67b3e2dc5
guardian.cgi: Remove code for options which have been dropped from guardian.
...
Guardian does not longer require the information for the red interface from
the configfile.
Guardian does not longer support a targetfile.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
26fcd31e1f
guardian.cgi: Add options to enable/disable some built-in functions from guardian.
...
This commit allows to enable or disable the monitoring of the snort alertfile
and to switch off the blocking of SSH and HTTPD Brute-force attempts.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
d2fea55e09
guardian.cgi: Remove code for Blockinterfaces.
...
We don't need this code anymore because we dropped interface support
from guardian.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
1d5702a7c3
guardian.cgi: Connect subboxes with input elements to the main boxes.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
5f462919d9
guardian.cgi: Sort blocked IP addresses.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
8b8413e566
guardian.cgi: Add hyperlink to ipinfo page for blocked hosts.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
7f7285911c
guardian.cgi: Autodetect the used interface for red.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Stefan Schantl
01dbccb11e
guardian.cgi: New page to configure and interact with guardian.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2016-07-29 13:17:55 +02:00
Michael Tremer
0c265f5717
nginx: Update to 1.8.1
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-29 09:04:04 +01:00
Arne Fitzenreiter
de2ee80d4f
kernel: update arm buildfix patch
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-07-29 07:18:37 +02:00
Arne Fitzenreiter
5a53d5947d
core104: add kernel to updater
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-07-28 18:12:13 +02:00
Arne Fitzenreiter
bde891d1b1
kernel: update to 3.14.74
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-07-28 18:01:32 +02:00
Arne Fitzenreiter
c5c12c9c81
backports: add upstream driver fixes.
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2016-07-28 18:00:50 +02:00
Alexander Marx
0eccc8a97c
Firewall: Add Services SSMTP and submission
...
Signed-off-by: Alexander Marx <alexander.marx@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-26 14:53:06 +01:00
Matthias Fischer
24159f0952
nano 2.6.1: fix in rootfile
...
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-25 17:24:31 +01:00
Michael Tremer
c48a24dc14
core104: Include recent changes
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-20 16:49:11 +01:00
Alf Høgemark
f00699e8bb
Change case of the unit "bit" from "Bit" to "bit" in web UI
...
The correct case for "kilobit" is "kilobit", not "kiloBit".
And the same applies for Mbit, Gbit etc.
Reference is https://en.wikipedia.org/wiki/Kilobit
This commit changes the texts used in the web UI, so
that it correctly displays as "bit", "kbit", "Mbit" etc.
This fixes bugzilla item 10918.
Signed-off-by: Alf Høgemark <alf@i100.no >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-20 16:46:23 +01:00
Matthias Fischer
5261a13d3c
nano: Update to 2.6.1
...
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-20 16:33:50 +01:00
Michael Tremer
3b7d73d1d4
Fix potential HTTPoxy vulnerability
...
https://httpoxy.org/
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-19 15:02:16 +01:00
Michael Tremer
71f578bbfc
freeradius: New package
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-19 14:54:50 +01:00
Jonatan Schlag
ccb35c191f
Update qemu to version 2.6
...
This patch update qemu to version 2.6
For changelogs see:
http://wiki.qemu.org/ChangeLog/2.5
http://wiki.qemu.org/ChangeLog/2.6
Qemu try to built with bluez, but before version 2.6 bluez was not used
by qemu on IPFire, so I think it is better to disable bluez because
nobody needs it before version 2.6 and our bluez is not the latest
version so I think this will cause more problems than benefits.
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-16 11:38:39 +01:00
Jonatan Schlag
d4641215c7
Update spice to version 0.12.8
...
This is an security update.
Recent were 2 serious security vulnerabilities published.
This patch update spice to a version which is not vulnerable.
Changelog:
Changes in 0.12.8:
==================
* Fixes for CVE-2016-0749 and CVE-2016-2150
Changes in 0.12.7:
==================
* spice-server will now send TCP keepalive probes on the TCP connections
it
uses. This can prevent unwanted idle disconnections if proxies are
used
between the client and the host.
* Fix important memory usage when the webdav channel is used
* Do not disconnect when the client requests an unsupported compression
type
* Fix a few race conditions
* Fix display glitch when using XSpice
* Improve help string for 'replay -s'
* Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE
port
configured, USB webcam redirection over a slow link)
* Fix various compilation warning when building on 32 bit machines
* Some fixes for big-endian machines, more work is likely to be needed
* Do not build static libraries by default, this can be reenabled with
--enable-static
* Fix small leak in MJPEG code
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-16 11:28:57 +01:00
Michael Tremer
5fb41958ce
libtiff: Bump release
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-16 11:24:41 +01:00
Marcel Lorenz
25bb3677e9
libtiff: update to 4.0.6
...
The pak version from spandsp sane and foomatic are increased by one
to ship packages build against new libtiff.
A compat is not needed
http://www.remotesensing.org/libtiff/v4.0.6.html
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Reviewed-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-16 11:23:16 +01:00
Michael Tremer
035e2b4a9b
core104: Ship recently updated which
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-16 10:57:04 +01:00
Marcel Lorenz
10f8c6f421
which: update to 2.21
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-16 10:53:53 +01:00
Jonatan Schlag
fb686fdef3
Update spice-protocol to 0.12.11
...
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-16 10:52:05 +01:00
Michael Tremer
f5194e7a38
kernel: Fix broken syntax in configuration file
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-15 11:09:42 +01:00
Michael Tremer
eb03f01782
Build bzip2 before pcre
...
pcre is now depending on bzip2
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-15 09:55:49 +01:00
Jonatan Schlag
b61fe3f404
Fix in libvirt install.sh/uninstall.sh
...
The libvirt daemon was not started after installation because the
initscritp is named 'libvirtd' not like the package 'libvirt'.
The same problem appear in the uninstall.sh. The service was not
stopped.
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-15 09:53:13 +01:00
Michael Tremer
19a4317093
core104: Ship recently updated packages
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-14 23:36:49 +01:00
Marcel Lorenz
aa3ff233c2
acpid: update to 2.0.26
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-14 23:30:58 +01:00
Marcel Lorenz
602696704c
pcre: update to 8.39
...
http://www.pcre.org/original/changelog.txt
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-14 23:28:39 +01:00
Marcel Lorenz
c11dfb9295
popt: update to 1.16
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-14 23:27:04 +01:00
Marcel Lorenz
2a53bafffe
curl: update to 7.49.1
...
https://curl.haxx.se/changes.html#7_49_1
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-14 23:24:56 +01:00
Marcel Lorenz
6ec0831ae9
iputils: update to s20160308
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-14 23:22:48 +01:00
Marcel Lorenz
2249bb1d52
acl: update to 2.2.52
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-14 23:20:52 +01:00
Marcel Lorenz
04251def7f
libcap: update to 2.25
...
Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2016-07-14 14:00:30 +01:00