Michael Tremer
31672dc8bd
DHCP: Fix error when editing a newly added fixed lease
...
They key was remembered but then the array was sorted which resulted
the key showing a wrong line.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-26 16:33:46 +00:00
Michael Tremer
4eb23a9198
DHCP: Restart server in background
...
This allows for the CGI to return quicker.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-26 10:18:33 +00:00
Michael Tremer
820ab96c69
DHCP: Escape slashes in filename
...
Fixes : #12006
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-26 10:16:21 +00:00
Michael Tremer
2f7e8b59a6
core129: Ship updated credits.cgi
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-25 02:31:23 +00:00
Michael Tremer
f6a1d9e929
Update list of contributors
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-25 02:30:56 +00:00
Michael Tremer
97499aa8a3
core129: Ship updated OpenVPN
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-25 02:29:29 +00:00
Erik Kapfer
ab83c4876a
OpenVPN: Update to version 2.4.7
...
Changelog can be found in here https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 .
Signed-off-by: Erik Kapfer <ummeegge@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-25 02:24:28 +00:00
Peter Müller
82b405615f
update Tor to 0.3.5.8
...
See https://blog.torproject.org/new-releases-tor-0402-alpha-0358-03411-and-03312
for release notes.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-25 01:03:01 +00:00
Peter Müller
0675a66d83
update metrics links in Tor WebUI
...
https://atlas.torproject.org/ is deprecated in favour of
https://metrics.torproject.org/ by now.
Fixes #11781 .
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-25 01:02:59 +00:00
Michael Tremer
cc0104dce3
core129: Ship updated libgcrypt
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-25 00:58:04 +00:00
Peter Müller
b66c2faac2
libgcrypt: update to 1.8.4
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-25 00:57:18 +00:00
Michael Tremer
07b73b195c
core129: Ship updated unbound
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-25 00:56:49 +00:00
Matthias Fischer
97a238f4bf
unbound: Update to 1.9.0
...
For details see:
https://nlnetlabs.nl/svn/unbound/tags/release-1.9.0/doc/Changelog
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-25 00:56:05 +00:00
Michael Tremer
59db01c753
core129: Ship changes from ipsec branch
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-25 00:55:31 +00:00
Michael Tremer
50d1bbf0f5
Merge branch 'ipsec' into next
2019-02-25 00:48:08 +00:00
Michael Tremer
b5ef99df2c
Start Core Update 129
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-25 00:47:28 +00:00
Michael Tremer
21eead8d17
Add script to search for missing libraries
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-24 11:45:55 +00:00
Michael Tremer
232c42e14d
core128: Drop old openssl engines
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-24 04:06:52 +00:00
Michael Tremer
001481edf3
cups: Depends on bluetooth library
...
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-24 04:04:51 +00:00
Arne Fitzenreiter
1e1273df1d
core128: add openldap to update
...
openldap was linked against old openssl lib
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-24 20:50:16 +01:00
Arne Fitzenreiter
ed971af3a4
core128: add sse2 openssl libs
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-24 17:04:44 +01:00
Arne Fitzenreiter
42e48984ad
core128: apply local sshd config
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-24 10:55:49 +01:00
Arne Fitzenreiter
c09758302b
kernel: update to 4.14.103
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-23 15:56:21 +01:00
Arne Fitzenreiter
8818db9a1c
core128: finish core128
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-22 21:33:45 +01:00
Arne Fitzenreiter
173844d352
kernel: import cve-2019-8912 patch
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-22 21:20:57 +01:00
Arne Fitzenreiter
186402fbe8
core128: stop apache before replacing files
...
apache will not restart without stopped before
the files was replaced.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-22 19:26:08 +01:00
Arne Fitzenreiter
6957b699b3
kernel: apu leds: add more id's
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-22 18:02:45 +01:00
Arne Fitzenreiter
710153a89c
partresize: add "apu1" for apus with new bios.
2019-02-22 18:01:18 +01:00
Stefan Schantl
cc636c4741
convert-snort: Try to download ruleset if none is present.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-22 10:04:27 +01:00
Arne Fitzenreiter
4a25ada199
core128: add kernel to updater
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-21 19:23:05 +01:00
Arne Fitzenreiter
a2d49659f3
kernel: cleanup unused rpi patch
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-21 19:13:27 +01:00
Arne Fitzenreiter
8c8b4b2154
kernel: update to 4.14.102
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-21 10:52:38 +01:00
Arne Fitzenreiter
8f49959d70
partresize: enable serial console on PC Engines APU
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-19 15:26:41 +01:00
Arne Fitzenreiter
17872019ba
kernel: update apu led patch for apu3 and 4
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-19 01:04:19 +01:00
Stefan Schantl
5d7d8749dc
convert-snort: Set correct ownership after modify_sids_file has been generated.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-18 13:33:41 +01:00
Stefan Schantl
d0f9526beb
ids.cgi: Add language string for ignored hosts section.
...
Fixes #12002 .
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-18 13:29:47 +01:00
Michael Tremer
06f57f7230
general-functions.pl: Only skip lines with a # at the beginning
...
This accidientially dropped all lines that include #. That resulted
in colour codes not being loaded from file any more.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-18 11:36:37 +01:00
Stefan Schantl
7c3b7cdcca
ids-functions.pl: Tune rules to always monitor in both directions.
...
This will allow to scan the traffic from an EXTERNAL_NET to the HOME_NET and from
the HOME_NET to the EXTERNAL_NET.
Reference: 10273
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-18 10:55:27 +01:00
Stefan Schantl
20b4c4d863
suricata: Swith to "16" as repeat-mark and repeat-mask.
...
Marks "1-3" are used for marking source-natted packets on the
interfaces and 4 up to 6 for TOS and QOS. The mark "32" is used by IPsec.
See commit: f5ad510e3c
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-18 10:02:29 +01:00
Michael Tremer
9bc1760052
unbound: Drop certificates for local control connection
...
These are a cause of worry because they are sometimes generated with
an invalid timestamp and therefore render unbound being unusable.
There is no strong reason to use self-signed certificates for extra
security here.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-17 13:46:51 +00:00
Matthias Fischer
256070e92f
Added 'CONFIG_X86_MSR=y for 'powertop' to i586 and x86_64 builds for fixing #11997
...
Triggered by:
https://forum.ipfire.org/viewtopic.php?f=69&t=22274
This - probably - fixes Bug #11997 .
Needs testing on 64bit installations!
Best,
Matthias
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-17 13:03:56 +00:00
Rob Brewer
34f4af78a8
Fix ownership of sendEmail script
...
The script used to be owned by a non-privileged user and it should
just be owned by root.root like any other binary.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org >
2019-02-17 13:03:30 +00:00
Arne Fitzenreiter
56ec56a819
borgbackup: fix build on armv5tel
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-16 22:49:47 +01:00
Arne Fitzenreiter
2caca41217
kernel: enable PCA953X GPIO extender for ClearFog boards
...
fixes : #12000
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-16 21:44:52 +01:00
Arne Fitzenreiter
ede9247310
kernel: update to 4.14.101
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-02-15 17:46:54 +01:00
Stefan Schantl
77c07352a5
Suricata: Start service on red.up event if requested
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-15 13:26:55 +01:00
Stefan Schantl
d215f6e980
collectd: Stop collecting process details for snort
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-15 12:39:56 +01:00
Stefan Schantl
0d8cc90f4d
services.cgi: Show status of suricata instead of snort
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-15 12:18:45 +01:00
Stefan Schantl
1ef235f08d
logrotate: Rotate suricata logs instead of snort ones
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-15 11:22:14 +01:00
Stefan Schantl
78690361ab
convert-snort: Always create directory and filelayout
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-02-14 12:37:13 +01:00