Stefan Schantl
a3afe9058f
geoip-functions.pl: Adjust location_dir
...
The data directory upstream has been moved to "/var/lib/location".
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-12 09:39:34 +01:00
Stefan Schantl
c3b612bb6c
libloc: Update to 0.9.0 (Git rev: cd022c)
...
* Includes fix for database verification
* The public gpg signing key
* Datadir has been moved to /var/lib/location
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-12 09:14:30 +01:00
Stefan Schantl
9a240b7144
update-location-database: Only reload firewall after successfull update.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-10 14:50:35 +01:00
Stefan Schantl
693b8513df
firewall/rules.pl: Only try to export locations if needed.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 18:36:54 +01:00
Stefan Schantl
c947959100
xtables-addons: Update to 3.7
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 18:36:26 +01:00
Stefan Schantl
9832997210
make.sh: Remove dropped packages from build list.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 15:56:20 +01:00
Stefan Schantl
c48a64d6f8
initscripts: Rootfile update.
2019-12-09 15:03:26 +01:00
Stefan Schantl
1eee696bb4
red.up: Download / Update location database.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 14:59:26 +01:00
Stefan Schantl
d1ca2d1fd5
GeoIP: Drop package
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 14:50:51 +01:00
Stefan Schantl
9433a59690
geoip-generator: Drop package
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 14:47:18 +01:00
Stefan Schantl
e4df56f999
Rootfile update.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 14:37:14 +01:00
Stefan Schantl
03c8f290d9
xtables-addons: Remove xt_geoip_build script
...
This script is not longer required.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 14:35:15 +01:00
Stefan Schantl
eaba273a5f
crontab: Adjust crontab to hourly launch the update-location-database
...
script.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 14:26:26 +01:00
Stefan Schantl
8aea15899b
Introduce update-location-database script.
...
This script obsoletes the old xt_geoip_update script.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 14:25:51 +01:00
Stefan Schantl
ad47d2ae80
firewall/rules.pl: Add code to collect and export all required country
...
codes.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 11:08:23 +01:00
Stefan Schantl
e758c76384
geoip-functions.pl: Add functions to export locations and to flush them.
...
The export_locations() function requires an array of country codes which
should be exported by the location-exporter script.
The flush_exported_locations() function is used to flush (delete) all
exported location files.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 11:05:31 +01:00
Stefan Schantl
f5ad4246de
firewall/rules.pl: Make geoipsettings hash and locations array
...
script-wide available.
This allows to re-use them.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-09 11:04:30 +01:00
Stefan Schantl
9b2594d8e6
geoip-functions.pl: Export variables.
...
This easily allows to use them in other perl script.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-08 18:10:12 +01:00
Stefan Schantl
6fd1d4fa23
libloc: Fix rootfile
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-06 15:31:56 +01:00
Stefan Schantl
95bb1a5c95
logs.cgi/showrequrestfromcountry.dat: Use new location lookup method.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-06 14:42:09 +01:00
Stefan Schantl
9288b11011
remote.cgi: Use new location lookup method.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-06 14:39:54 +01:00
Stefan Schantl
83ccdf7fea
openvpnmain.cgi: Use new location lookup method.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-06 14:36:48 +01:00
Stefan Schantl
bb7ba3b404
netexternal.cgi: Use new location lookup method.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-06 14:33:54 +01:00
Stefan Schantl
50494dfd6e
logs.cgi/*: Use new location lookup method.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-06 14:30:39 +01:00
Stefan Schantl
87bc6401bc
connections.cgi: Use new location lookup method.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-06 14:22:01 +01:00
Stefan Schantl
13c0fb7910
ipinfo.cgi: Use new location lookup method.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-06 14:21:08 +01:00
Stefan Schantl
8a64d10f24
geoip-functions.pl: Use libloc instead of maxmind for address lookups.
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-06 14:20:31 +01:00
Stefan Schantl
e34dbea747
geoip-locations.pl: Rework method to grab and handling GeoIP locations.
...
Now directly get the locations which are part of ISO 3166 from the perl
Locale::Country module. In case it is not listed there grab the country
code and location name from a hash.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-06 13:58:20 +01:00
Stefan Schantl
45b32f4dcf
Locale-Country: Update to 3.62
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-06 13:56:46 +01:00
Stefan Schantl
d938509ed9
libloc: New package
...
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org >
2019-12-06 13:54:59 +01:00
Arne Fitzenreiter
898dc600e6
pcengines-firmware: fix rootfile
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-06 03:18:09 +01:00
Peter Müller
f7c8d15089
Core Update 139: ship updated OpenSSH
...
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-05 18:00:26 +00:00
Peter Müller
81502fe6f3
OpenSSH: update to 8.1p1
...
Please refer to https://www.openssh.com/txt/release-8.1 for release notes.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-05 18:00:11 +00:00
Arne Fitzenreiter
43fa700e11
pcengines-firmware: update to 4.10.0.3
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-05 18:53:16 +01:00
Arne Fitzenreiter
6fb7936c16
intel-microcode: update to 20191115
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-05 12:48:13 +01:00
Arne Fitzenreiter
0894092e2c
linux-firmware: update to 20191022
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-05 12:44:45 +01:00
Arne Fitzenreiter
7ff42686ec
core139: add cpio to updater
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-02 17:11:30 +00:00
Matthias Fischer
01493f7a44
cpio: Update to 2.13
...
For details see:
https://www.gnu.org/software/cpio/
Fix CVE-2015-1197
Fix CVE-2016-2037
Fix CVE-2019-14866
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-02 17:10:15 +00:00
Matthias Fischer
9d6e22e3fc
nano: Update to 4.6
...
For details see:
https://www.nano-editor.org/news.php
... and a long list of other changes in https://www.nano-editor.org/dist/latest/ChangeLog ...
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-02 17:09:55 +00:00
Peter Müller
18f1b46e1a
spectre-meltdown-checker: update to 0.42
...
See https://github.com/speed47/spectre-meltdown-checker/releases/tag/v0.42
for release announcements.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-02 17:09:41 +00:00
Peter Müller
6d0a2f8b1e
Postfix: update to 3.4.8
...
See http://www.postfix.org/announcements/postfix-3.4.8.html for release
announcements.
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-02 17:09:09 +00:00
Peter Müller
c701ddcba5
update ca-certificates CA bundle
...
Update the CA certificates list to what Mozilla NSS ships currently.
The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-02 17:07:00 +00:00
Arne Fitzenreiter
4622af5f15
core139: add hwdata to updater
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-02 17:05:15 +00:00
Peter Müller
bf9fa6d864
hwdata: update PCI/USB databases
...
PCI IDs: 2019-11-26 03:15:03
USB IDs: 2019-11-05 20:34:06
Signed-off-by: Peter Müller <peter.mueller@ipfire.org >
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-02 17:02:20 +00:00
Arne Fitzenreiter
bedfda83c9
dhcpcd.exe: remove red.down run on "NOCARRIER"
...
after "NOCARRIER" the dhcp client always run "EXPIRE" event.
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-01 18:33:19 +01:00
Arne Fitzenreiter
941520c69c
Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next
2019-12-01 16:36:43 +01:00
Arne Fitzenreiter
d346d47467
up/down beep: move from ppp ip-up/down to general red.up/down
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-01 15:29:59 +01:00
Arne Fitzenreiter
455291f90e
70-dhcpdd.exe: don't run red.down scripts at "PREINIT"
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-01 14:43:49 +01:00
Arne Fitzenreiter
86409ab100
core139: add dhcp and network changes to updater
...
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-12-01 00:45:02 +01:00
Arne Fitzenreiter
fff96e3945
networking red: add delay to wait for carrier
...
some nic's need some time after link up to get a carrier
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org >
2019-11-30 22:26:00 +01:00