webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-09 18:45:54 +02:00
Code Issues Packages Projects Releases Wiki Activity
12,571 Commits 2 Branches 1 Tag
ae5b9c5ad5fafbb42e2d7f8201f4cbcc995bfcc4
Commit Graph

12571 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Tremer
ae5b9c5ad5 Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 07:03:08 +00:00
Matthias Fischer
e26a5c4885 Fix typo in 'html/cgi-bin/logs.cgi/log.dat' 
Translation string uses capital letter: 'Captive' => 'Captive Portal',

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-06 07:02:54 +00:00
Michael Tremer
e0c4ed1783 core127: Ship updated proxy.cgi and regenerate configuration 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:14:01 +01:00
Michael Tremer
ce1f04ee40 proxy: Allow selecting throttled bandwidth in MBit/s 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:10:59 +01:00
Michael Tremer
c2f1b8183c proxy: Suggest modern defaults for cache memory and disk 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:02:05 +01:00
Michael Tremer
cdd4cf4094 proxy: Drop support for throttling only certain mime types 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 16:00:05 +01:00
Michael Tremer
d68e150e86 proxy: Drop web browser check 
This is neither reliable nor up to date and is therefore removed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:54:56 +01:00
Michael Tremer
a1018d86ae proxy: Set authentication TTL for NTLM authentication also 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:49:18 +01:00
Michael Tremer
6df2d52887 proxy: Use correct authentication cache TTL for AD 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:48:32 +01:00
Michael Tremer
fa286b1330 proxy: Use entered setting for auth children for AD 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:46:20 +01:00
Michael Tremer
5c2a76f7b3 proxy: Use correct realm for AD authentication 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:44:19 +01:00
Michael Tremer
dc637f087f proxy: Remove AUTH_IPCACHE_TTL 
This is potentially dangerous to set larger than zero.

Authentication is perfomed on basis of IP addresses which is
not a good idea at all.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:39:36 +01:00
Michael Tremer
ea72700a3b proxy: Drop NTLM authentication 
This is the authentication againt NT 4.0 style domain controllers.

squid has dropped support for this in the 4.5 release and nobody
should be using these old domain controllers any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-08 15:28:46 +01:00
Michael Tremer
eedca6e36c squid: Run as many redirectors as we have CPU cores 
This makes sure that we use the optimal ratio of memory and
CPU usage.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Tested-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Tested-by: Matthias Fischer <matthias.fischer@ipfire.org>
 2019-01-08 03:33:37 +01:00
Daniel Weismüller
1a3323f2e6 BUG 11786 - squid: Remove setting for filter processes the number of Squid processes 
I added a function to determine the number of cores.
Now the number of squid processes will be equal to the number of logical cores.
Further I removed the possibility of changing the number
of squid processes in the proxy.cgi

Signed-off-by: Daniel Weismüller <daniel.weismueller@ipfire.org>
Signed-off-by: root <root@ipfire.test>
 2019-01-08 02:02:05 +01:00
Michael Tremer
79b89b90e4 Revert "core127: Ship updated tar" 
This reverts commit 9ab1c9302c.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-05 21:12:24 +00:00
Michael Tremer
d09cb651b5 Revert "tar: Update to 1.31" 
This reverts commit bb473fd1d6.

tar crashes when used with --no-overwrite-dir. See #11958.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-05 21:11:44 +00:00
Michael Tremer
0cd3eab3ae core127: Ship updated snort 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-05 21:11:14 +00:00
Matthias Fischer
d01b31914a snort: Update to 2.9.12 
For details see:

Release notes:
https://snort.org/downloads/snort/release_notes_2.9.12.txt

Changelog:
https://snort.org/downloads/snort/changelog_2.9.12.txt

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-05 15:42:34 +00:00
Arne Fitzenreiter
1338e08d0d core127: ship framebuffer.conf blacklist 
the file is generated at kernel build and in core126
the module commpression was changed to xz so the list was empty.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-06 16:31:44 +01:00
Arne Fitzenreiter
0708b3b343 core127: remove double files from armv5tel filelist 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-06 15:53:27 +01:00
Arne Fitzenreiter
5e6f343b7d python: update to 2.7.15 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-06 15:51:53 +01:00
Arne Fitzenreiter
b15309e9d1 transmission: update to 2.94 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-05 13:47:31 +01:00
Michael Tremer
9ab1c9302c core127: Ship updated tar 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-04 02:43:06 +00:00
Matthias Fischer
bb473fd1d6 tar: Update to 1.31 
For details see:
http://savannah.gnu.org/forum/forum.php?forum_id=9344

"- Fix heap-buffer-overrun with --one-top-level.
- Support for zstd compression.
- The -K option interacts properly with member names given in the command line.
- Fix CVE-2018-20482"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-04 02:42:40 +00:00
Michael Tremer
7f90513e61 Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 16:28:00 +00:00
Peter Müller
1183d50b73 fix SSH port description in WebUI again 
Fixes #11881.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 16:27:37 +00:00
Michael Tremer
2aff684f37 libvirt: The package no longer depends on jansson 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 15:12:39 +00:00
Stéphane Pautrel
3407695fbc Update of French translation 
This improves the translation and enhances consistency in
many places.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 15:02:53 +00:00
Michael Tremer
cd309fe6a2 Update translations 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 14:58:47 +00:00
Matthias Fischer
0a12cd7039 dnsforward.cgi: fix for language string 
Hi,

In https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=1a26564e95b5694337e51860544e7775d35055f3
the language string 'dnsforward forward_server' => 'DNS-Server', was deleted and replaced
by 'dnsforward forward_servers' => 'DNS-Server',

IMHO this leads to an empty string in 'dnsforward.cgi', line 223:

...
<td width='20%' class='base'>$Lang::tr{'dnsforward forward_server'}:&nbsp;<img src='/blob.gif' alt='*' /></td>
...

I changed this line...

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 14:58:26 +00:00
Matthias Fischer
6e1aa54da0 attr 2.4.47: Update for rootfile 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 14:57:00 +00:00
Michael Tremer
34ad12b165 core127: Ship updated VPN CGI files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 14:53:34 +00:00
Erik Kapfer
e6f7f8e7ba database_attribute: Deliver/create index.txt.attr 
Fixes #11904

Since OpenSSL-1.1.0x the database attribute file for IPSec and OpenVPN wasn´t created while initial PKI generation.
OpenVPN delivered an error message but IPSec did crashed within the first attempt.
This problem persists also after X509 deletion and new generation.

index.txt.attr will now be delivered by the system but also deleted and recreated while setting up a new x509.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-03 14:52:53 +00:00
Matthias Fischer
4c83d9fbdc mc: Update to 4.8.22 
For details see:
http://midnight-commander.org/wiki/NEWS-4.8.22

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-02 17:20:21 +00:00
Michael Tremer
cdaad0cdd3 libvirt: Bump package version 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-01-02 16:24:39 +00:00
Matthias Fischer
c86d893830 squid: Update to 4.5 
For details see:
http://www.squid-cache.org/Versions/v4/changesets/

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-31 00:37:51 +00:00
Michael Tremer
13827014fc core127: Ship updated wget 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-31 00:36:23 +00:00
Matthias Fischer
49deea707b wget: Update to 1.20.1 
This is a bugfix release:

"due to some privacy issues in default settings of Wget, we introduce
this bugfix release.

The --xattr option (saving original URL and Referer into extended file
attributes) was introduced and enabled by default since Wget 1.19.
It possibly saved - possibly unrecognized by the user - credentials,
access tokes etc that were included in the requested URL.

We changed three details as a countermeasure, see below in the NEWS section.

With Best Regards, Tim

...

NEWS

* Changes in Wget 1.20.1

** --xattr is no longer default since it introduces privacy issues.

** --xattr saves the Referer as scheme/host/port,
user/pw/path/query/fragment
   are no longer saved to prevent privacy issues.

   ** --xattr saves the Original URL without user/password to prevent
      privacy issues."

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-31 00:35:50 +00:00
Arne Fitzenreiter
4c76d08b2a kernel: fix generation of framebuffer blacklist 
modules are now xz compressed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-01-02 15:33:16 +01:00
Arne Fitzenreiter
67c9261257 mpd: add soxr dependency 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-28 16:05:38 +01:00
Arne Fitzenreiter
f1f40274a0 u-boot: fix x86 builds 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-23 11:12:15 +01:00
Michael Tremer
e978f0429f keepalived: Fix incorrect path in initscript 
This path to keepalived was just incorrect and therefore
the daemon could not easily be reloaded.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-19 23:38:48 +00:00
Arne Fitzenreiter
ae84d3745d u-boot: fix typo in boot.scr 
fix serial console output on RPi3 B+ at aarch64

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-12-20 08:04:22 +01:00
Michael Tremer
6f1f51ba1c core127: Ship DNS forwarding settings 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-19 21:01:20 +01:00
Michael Tremer
f33d28978d unbound: Use correct parameter for IP addresses and hostnames 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-19 21:00:21 +01:00
Michael Tremer
cb8a25e5ec DNS Forwarding: Let UI accept hostnames, too 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-19 20:47:41 +01:00
Michael Tremer
1a26564e95 DNS Forwarding: Allow passing multiple name servers (separated by comma) 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-19 20:42:46 +01:00
Michael Tremer
c9ae511ecf unbound: Allow forwarding to multiple servers at the same time 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-19 20:23:59 +01:00
Michael Tremer
086bb132ec ipvsadm: Update to 1.29 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-12-19 18:55:23 +00:00