Commit Graph

6178 Commits

Author SHA1 Message Date
Alexander Marx
9dafa928db Forward Firewall: Deleted /var/ipfire/outgoing from configroot and aaded default values to /var/ipfire/optionsfw/settings 2013-08-09 14:08:08 +02:00
Alexander Marx
62fc851166 Forward Firewall: fixed 12 Bugs from forum.
1) Added more possible chars in remark: : / .
2) Added "Internet" to std networks to be able to define internetaccess
3) When renaming a custom address, the firewallrules get updated
4) Ports are now ignored when using GRE as Protocol
5) When saving a customservice, the cursor is now in first textfield
6) Added a customservices file to installation with predefined services
7) Added ESP as protocol
8) Fixed counterproblem
9) Dropdownboxes for customservices and groups now sorted
10) Firewallrules now sorted in right order
11) fixed a Bug when defining manual address in source and target, the hint message is no longer displayed
12) When defining an external access rule, the last forwardrule was deleted
2013-08-09 14:08:04 +02:00
Alexander Marx
af8bc0d0a8 Forward Firewall: added a customservices file with default values 2013-08-09 14:07:15 +02:00
Alexander Marx
fd10a52ca2 Forward firewall: commented out line in init.d/firewall that all Forward traffic from green is allowed and put it in rules.pl. Now rules.pl allows this traffic when firewall is set to Mode0 or Mode2 2013-08-09 14:07:15 +02:00
Alexander Marx
c0ec19967e Forward Firewall: fixed default entries in /var/ipfire/optionsfw/settings. 2013-08-09 14:07:15 +02:00
Alexander Marx
3d016366b8 Forward Firewall: changed languagefiles for loggingoptions in optionsfw.cgi 2013-08-09 14:07:15 +02:00
Alexander Marx
92788c464b Forward Firewall: deleted /var/ipfire/outgoing from backup 2013-08-09 14:07:12 +02:00
Alexander Marx
7f5b282069 Forward Firewall: Changed Buttons and Layout of fwhosts.cgi 2013-08-09 14:06:49 +02:00
Alexander Marx
74e7001436 Forward Firewall: Replaced 'drop output' with 'drop forward' in languagefiles. This is for the loggingoption in the firewall options. 2013-08-09 14:06:48 +02:00
Alexander Marx
6be0579b18 Forward Firewall: replaced Outgoing-Logging with ForwardFW Logging. And changed Options in optionsfw.cgi from outgoing to forward 2013-08-09 14:05:22 +02:00
Alexander Marx
e534554162 Forward Firewall: Fixed Bug: When deleting a rule, only the last entry in the list is deleted 2013-08-09 14:05:22 +02:00
Alexander Marx
9bdb6b5045 Forward Firewall: Deleted outgoingfw.cgi,outgoinggroups.cgi and xtaccess.cgi from /config/rootfils7common/apache2 2013-08-09 14:05:20 +02:00
Alexander Marx
adf41e6f37 Forward Firewall: removed outgoingfw.cgi from /config/rootfiles/core/66/filelists/files 2013-08-09 14:04:42 +02:00
Alexander Marx
c04f132d49 Forward Firewall: removed outgoingfwctrl from /config/rootfiles/misc-progs 2013-08-09 14:04:42 +02:00
Alexander Marx
231499fcc8 Forward Firewall: build iso with new firewall 2013-08-09 14:04:38 +02:00
Alexander Marx
d24a34cbdc Forward Firewall: changed remarkfield to have maximum 255 chars. Changed Layout from viewtablerule.
Signed-off-by: Alexander Marx <amarx@ipfire.org>
2013-08-09 14:02:21 +02:00
Alexander Marx
55674e0d38 Forward Firewall: fixed Typos
Signed-off-by: Alexander Marx <amarx@ipfire.org>
2013-08-09 14:02:21 +02:00
Alexander Marx
14f7cb87b9 Forward Firewall: fixed rules.pl error when using manual target address
Signed-off-by: Alexander Marx <amarx@ipfire.org>
2013-08-09 14:02:21 +02:00
Alexander Marx
2a81ab0d77 Forward Firewall: added new files 2013-08-09 14:02:21 +02:00
Michael Tremer
111c99ddfa Forward Firewall: applied all changes as diff and added new files. Also deleted c files from xtaccess and setdmzholes.
Signed-off-by: Alexander Marx <amarx@ipfire.org>

Conflicts:
	config/backup/include
	lfs/configroot
	lfs/usb-stick
2013-08-09 14:02:02 +02:00
Michael Tremer
7323724196 squid: Fix two security issues.
* CVE-2013-4115
* CVE-2013-4123

http://www.squid-cache.org/Versions/v3/3.1/changesets/
2013-08-07 22:15:31 +02:00
Arne Fitzenreiter
726a85b8c1 samba: update to 3.6.17. 2013-08-06 15:01:26 +02:00
Michael Tremer
dfdda7588d DDNS: Use HTTPS for all-inkl.com. 2013-08-03 13:36:19 +02:00
Michael Tremer
a03547fe5e tor.cgi: Always show all configuration options.
Otherwise, if tor was disable, all settings like nickname, etc.
were reset to default.
2013-08-02 13:17:54 +02:00
Michael Tremer
56bf9f2174 tor.cgi: Check for valid accounting limit. 2013-08-02 11:27:14 +02:00
Michael Tremer
bd8b033078 tor.cgi: Check for valid relay address. 2013-08-02 11:22:52 +02:00
Michael Tremer
818f47d06f tor.cgi: Check for valid port numbers. 2013-08-02 11:20:53 +02:00
Michael Tremer
b0449403e6 tor.cgi: Catch invalid characters in relay name. 2013-08-02 11:06:40 +02:00
Michael Tremer
3308f8d09f tor.cgi: Burst bandwidth may never be less than rate. 2013-08-02 10:57:01 +02:00
Michael Tremer
6eb9c49d60 tor: The slowest bandwidth rate for a relay is 20 kbyte/s. 2013-08-02 10:42:41 +02:00
Michael Tremer
9e4cb00b42 tor: Fix path to readhash in initscript. 2013-08-02 10:42:08 +02:00
Michael Tremer
52a2f02f41 Merge branch 'ddns-all-inkl' into next
Conflicts:
	config/rootfiles/core/72/filelists/files
2013-08-02 10:41:27 +02:00
Arne Fitzenreiter
45aef0dd28 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2013-08-01 22:28:32 +02:00
Arne Fitzenreiter
426270e730 tor: fix permissions. 2013-08-01 22:27:37 +02:00
Michael Tremer
592efb85b8 core72: Add strongswan update. 2013-08-01 19:42:03 +02:00
Michael Tremer
7f532e3725 strongswan: Update to 5.1.0. 2013-08-01 19:38:50 +02:00
Michael Tremer
ae99d423b9 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next 2013-08-01 18:24:03 +02:00
Michael Tremer
80002fe433 DDNS: Support for all-inkl.com.
Requested by Daniel Kovacs <daniel.kovacs@pleasuredome.org>.
2013-08-01 18:12:01 +02:00
Michael Tremer
d154ab5899 Merge remote-tracking branch 'ms/tor' into tor 2013-07-31 19:40:17 +02:00
Michael Tremer
f16bcc3e31 tor.cgi: Show number of connected relays. 2013-07-31 19:26:37 +02:00
Michael Tremer
cee75a0d96 tor: Don't ship torify.
This will need tsocks, which is not present on IPFire.
2013-07-31 19:22:00 +02:00
Michael Tremer
0830129a3c WUI: Add Tor menu entry. 2013-07-31 19:20:42 +02:00
Michael Tremer
005db20668 tor.cgi: Minor functionality fixes and layout improvements. 2013-07-31 19:11:59 +02:00
Michael Tremer
6869929e9a arm: Don't require distutils.
We don't have that module shipped and we don't really
need it for arm either.
2013-07-31 18:06:05 +02:00
Michael Tremer
ae4bf64b6a core72: Add updated firewall script. 2013-07-31 12:56:58 +02:00
Michael Tremer
d3f2ac3f5d torctrl: Add new binary to rootfiles. 2013-07-31 12:56:17 +02:00
Michael Tremer
9e7591e725 torctrl: Add stop action. 2013-07-31 12:55:08 +02:00
Michael Tremer
c60301c06a tor: Add necessary firewall rules. 2013-07-31 12:52:40 +02:00
Michael Tremer
27cb780589 tor: Add torctrl binary. 2013-07-31 12:52:26 +02:00
Michael Tremer
13b5ce6e40 tor: Import CGI script. 2013-07-30 21:53:16 +02:00