Commit Graph

7993 Commits

Author SHA1 Message Date
Arne Fitzenreiter
b283b2cf8f lzo: Downgrade to 2.0.6 (CVE-2014-4607 patched).
openvpn fails at lzo_init with lzo-2.07 and 2.08 on armv5tel.
2014-08-06 09:35:46 +02:00
Arne Fitzenreiter
93899a216f firewall: add more pscan matches and filter INVALID conntrack packages. 2014-08-04 21:19:28 +02:00
Erik Kapfer
156311fbcd OpenVPN: Added a check for empty 'CERT_NAME' field.
Fixes: #10581
2014-08-04 21:18:45 +02:00
Michael Tremer
06dbe99dbb tor: Update to 0.2.4.23
http://www.heise.de/security/meldung/Erfolgreicher-Angriff-auf-Tor-Anonymisierung-2278774.html
2014-08-04 19:39:16 +02:00
Stefan Schantl
1f080b34ba ddns.cgi: Check for valid FQDN before doing nslookup.
We now check if the used hostname is a valid FQDN before doing the nslookup to
determine if a DDNS host is up do date.
2014-08-04 19:37:45 +02:00
Stefan Schantl
5fe185f83c ddns.cgi: Fix token auth for provider regfish.com.
In the past the regfish.com auth token was stored as username similar than freedns.afraid.com. We now expected
the token key stored as password, to keep compatiblity with old installations I've added some compatible code
to prevent users from various issues.
2014-08-04 12:53:59 +02:00
Erik Kapfer
b3f401fba4 ids.cgi fix snort rules download url.
fixes: 10579
2014-07-29 22:31:26 +02:00
Michael Tremer
cea4fc3aaf Revert "General-functions.pl: rewrite IpInSubnet replace inet_ntoa"
This reverts commit ab92dc0c84.

See comment in last commit
2014-07-29 12:14:23 +02:00
Michael Tremer
8df091d968 Revert "General-functions.pl: rewrite getnetworkip without inet_aton"
This reverts commit 1be398ae38.

Some users reported some issues with the generated firewall ruleset
with the new function:
  http://forum.ipfire.org/index.php?topic=11124.0
2014-07-29 12:12:38 +02:00
Michael Tremer
bc70c82737 rngd: Silence initscript when rngd is already started.
When a hardware random number generator is found by udev
it will start rngd automatically which is what we also do
by default in the initialisation sequence of the system
(e.g. for RDRAND).
The user will then see an error message that rngd has
already been started which was confusing.
2014-07-29 12:07:02 +02:00
Michael Tremer
5b861b0545 Revert "firewall: Filter logging of broadcasts from the internal networks."
This reverts commit 63f2fb7fda.
2014-07-26 21:23:55 +02:00
Arne Fitzenreiter
cb8a29b10b core80: fix permissions before config update. 2014-07-26 21:23:46 +02:00
Michael Tremer
fffc646e74 logs: Add dynamic DNS logging section. 2014-07-24 13:35:22 +02:00
Arne Fitzenreiter
7535861c50 stage2: rootfile update. 2014-07-18 22:32:41 +02:00
Michael Tremer
13eef3ba74 ddns: Update to version 003. 2014-07-18 15:31:15 +02:00
Michael Tremer
89066697c4 gmp: Ship MMX/SSE/SSE2 enabled version. 2014-07-18 15:21:34 +02:00
Michael Tremer
94abd48b1c Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x 2014-07-18 14:55:47 +02:00
Arne Fitzenreiter
b8cee3bb81 gmp: fix build on Intel buildmachines.
on newer Intel buildsystems the gmp configure script enables some
sse2 optimizations that not work on old cpu's (ALIX, K6 ...)
2014-07-18 12:52:20 +02:00
Michael Tremer
da3dbb2a42 buildsystem: Explicitely compile with -mtune=generic 2014-07-18 10:20:41 +02:00
Michael Tremer
0f860889ab core80: Fix configuration update and resurrect permissions. 2014-07-17 21:03:53 +02:00
Arne Fitzenreiter
5b71042c54 cleanfs: repair /var/run symlink to /run if it not exist. 2014-07-17 16:03:08 +02:00
Arne Fitzenreiter
e055b1105a rootfiles: remove /var/run/... from packages.
this will destroy a symlink to /run and is a ramdisk so
content is removed on every boot and it make no sense to
package it.
2014-07-17 15:54:35 +02:00
Arne Fitzenreiter
261624fb99 checkwronglinks: add a check for var/run/* in rootfiles. 2014-07-17 06:59:37 +02:00
Michael Tremer
3a99677dd6 Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x 2014-07-16 23:25:20 +02:00
Michael Tremer
ed94927d20 netexternal.cgi: Fix font colour on yellow background. 2014-07-16 23:25:06 +02:00
Michael Tremer
e3c3a6ba5b Merge remote-tracking branch 'morlix/check_mk' 2014-07-16 20:58:41 +02:00
Michael Tremer
d88845890c core80: Add proxy.cgi. 2014-07-16 20:54:56 +02:00
Timo Eissler
a945fa225d check_mk_agent: fix DL_FROM 2014-07-16 17:27:01 +02:00
Arne Fitzenreiter
b21618696d webif: hide main-menu if gpl was not accepted. 2014-07-16 17:26:14 +02:00
Arne Fitzenreiter
903c6825aa core80: add proxy.cgi to update. 2014-07-16 17:24:41 +02:00
Timo Eissler
dfabfbedca check_mk_agent: increase PAK_VER 2014-07-15 20:45:02 +02:00
Timo Eissler
9c6be5543e check_mk_agent: update to 1.2.4p5 2014-07-15 20:36:23 +02:00
Michael Tremer
960e969ca1 Merge remote-tracking branch 'stevee/ddns-new-providers' 2014-07-14 14:12:31 +02:00
Stefan Schantl
4fb763ff6e ddns.cgi: Add handling for entrydns and opendns. 2014-07-14 14:09:23 +02:00
Michael Tremer
a78470dc17 Merge remote-tracking branch 'amarx/openvpn' 2014-07-14 14:02:57 +02:00
Michael Tremer
ff5e4ef871 netexternal.cgi: Show DNSSEC status
The netexternal.cgi has been extended to show what type
of DNSSEC support the upstream nameservers offer.
2014-07-14 13:42:24 +02:00
Alexander Marx
5b942f7f3b OpenVPN: change sortorder of client status and control. Now every network is sorted and displayed in a group 2014-07-14 11:48:36 +02:00
Arne Fitzenreiter
e351c1e090 ddns: don't use forced update. 2014-07-13 13:07:00 +02:00
Arne Fitzenreiter
e611222f41 ddns.cgi: fix convert at update. 2014-07-13 12:46:41 +02:00
Michael Tremer
44dcf63498 core80: Add ddns to updater. 2014-07-13 10:13:21 +02:00
Arne Fitzenreiter
d7636b6fa3 core80: finished. 2014-07-12 18:47:56 +02:00
Arne Fitzenreiter
724912e6fd core80: stop/start strongswan at update. 2014-07-12 18:47:03 +02:00
Arne Fitzenreiter
f4d8425493 hostapd: update to 2.2. 2014-07-12 18:40:02 +02:00
Arne Fitzenreiter
cd5f645968 wpa_supplicant: update to 2.2. 2014-07-12 18:39:34 +02:00
Michael Tremer
449adc2a7b ddns: Update to 002. 2014-07-11 15:49:17 +02:00
Michael Tremer
35ef18de77 Add /etc/logrotate.d to backup. 2014-07-10 22:06:53 +02:00
Michael Tremer
06fb88bc1d ddns.cgi: Remove an other unknown function call. 2014-07-10 20:39:56 +02:00
Michael Tremer
9a33b04f13 ddns.cgi: Hide listing if no entries exist.
Also remove call of unknown function.
2014-07-10 20:26:02 +02:00
Michael Tremer
c61ac6e80e ddns.cgi: Move enabled checkbox a bit up. 2014-07-10 20:03:21 +02:00
Michael Tremer
4576afc5d8 ddns.cgi: Fix superfluous colon. 2014-07-10 20:01:06 +02:00