webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-17 06:23:00 +02:00
Code Issues Packages Projects Releases Wiki Activity
14,337 Commits 2 Branches 1 Tag
c8870ddc01a16c19c01d89262906bac9216a15dd
Commit Graph

14337 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Peter Müller
c8870ddc01 Postfix: update to 3.5.0 
Please refer to http://www.postfix.org/announcements/postfix-3.5.0.html
for release announcements.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-21 15:55:30 +00:00
Peter Müller
0c92ef9ba5 Tor: update to 0.4.2.7 
Please refer to https://blog.torproject.org/new-releases-03510-0419-0427
for release announcement.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-21 15:55:19 +00:00
Arne Fitzenreiter
a945138e4d core142: add gcc, binutils and cairo to update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-21 15:53:58 +00:00
Michael Tremer
50a04f785d cairo: Update to 1.16.0 
This updates the package and adds a patch so that it compiles
with binutils 2.34.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-21 15:44:08 +00:00
Peter Müller
cfd2f07cf0 binutils: update to 2.34 
Cc: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-21 15:44:06 +00:00
Michael Tremer
067a6fd040 gcc: Update to 9.3.0 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-21 15:43:41 +00:00
Arne Fitzenreiter
592be1d206 bluetooth: drop outdated bluetooth addon 
The cgi support only rfcomm modem dialup. This is not used by modern hardware.
Also the used bluez stack version is outdated long time.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Acked-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-21 15:41:22 +00:00
Arne Fitzenreiter
e6c2265d82 core143: open core updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-21 15:38:22 +00:00
Arne Fitzenreiter
70af65df41 kernel: update to 4.14.173 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-11 22:59:38 +01:00
Arne Fitzenreiter
1c8e09379d Revert "kernel: update to 4.14.172" 
This reverts commit 1773544d02.

with 4.14.172 klogd is not updated and the firewall log/graphs are not
working

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-10 11:33:16 +00:00
Arne Fitzenreiter
57fda8c8ad suricata: use KILL is suricata not shut down normal. 
sometimes suricata hung and lock the pidfile at
suricata stop.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-09 06:41:32 +00:00
Arne Fitzenreiter
b3bc092dad core142: start suricata before unbound after update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-05 05:54:09 +00:00
Arne Fitzenreiter
233141c6c9 core142: add unbound.conf to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-04 21:49:05 +00:00
Michael Tremer
9700617aeb unbound: Disable using mixed case for DNS queries 
This seems to cause that some resolvers do not respond
to queries any more until unbound falls back.

To ensure better DNS performance, we disabled this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-04 21:47:37 +00:00
Michael Tremer
0f0f3ae7dc unbound: Only launch one process 
When unbound is running multiple threads, we have observed
that queries where sent for each thread.

Since no user should have so much DNS traffic that more than
one processor core is being saturated, this is a safe change.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-04 21:47:23 +00:00
Peter Müller
e737776db5 unbound.conf: Do not set defaults explicitly 
In order to keep configuration files small and easy to review/audit,
omitting defaults makes more sense than configure them explicitly (have
changed my mind here).

Unbound comes with a good default confiuration, and we should only make
changes when they are necessary. In addition, this patch updates the
documentation's URL to the current one.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Cc: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-04 21:46:48 +00:00
Arne Fitzenreiter
80bed5817d dns.cgi: restart suricata before unbound reload 
if unbound is reloaded it start a bunch of dns queries
so suricata needs to now which servers should used.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-04 21:38:24 +00:00
Michael Tremer
0bdb63924b backup: Fix saving DNS settings 
There was a typo in /var/ipfire/dns/servers and the settings
file was not explicitely included in the backup.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-04 11:30:31 +00:00
Arne Fitzenreiter
a344d3c902 unbound/red.up: run unbound update-forwarders after suricata init. 
The old suricata instance blocks dns requests if the red ip has changed.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-04 08:52:56 +01:00
Arne Fitzenreiter
e53c38aea1 core142: fix typo's at remove/update dns forwareders changes 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-03 13:25:17 +01:00
Arne Fitzenreiter
1773544d02 kernel: update to 4.14.172 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-03 13:23:29 +01:00
Arne Fitzenreiter
b5afe1e8d5 backup: add /var/ipfire/dns/server to include 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-02 22:25:41 +00:00
Arne Fitzenreiter
3b5131c1a3 unbound: drop remove-dns-fowarders at red.down 
this functions has only reloaded unbound config
which is useless at shutting down the red interface.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-02 17:54:48 +00:00
Arne Fitzenreiter
e1c6cd05e3 udev: build after kmod 
eudev depends on kmod to install all needed rules

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-02 08:15:00 +00:00
Arne Fitzenreiter
c8b574c307 core142: stop squid and suricata while update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-01 21:54:28 +00:00
Arne Fitzenreiter
770a1507dd unbound: speed-up remove forwarders 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-01 19:46:36 +00:00
Arne Fitzenreiter
b3ab7916e0 core142: ship unbound initskript 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-01 19:46:33 +00:00
Arne Fitzenreiter
47864e8f3d unbound: fix typo at safesearch for googe 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-01 19:46:31 +00:00
Arne Fitzenreiter
d98bbcc849 unbound: run "time-fix" before savesearch resolves 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-01 19:46:26 +00:00
Arne Fitzenreiter
605575033c unbound: update savesearch after reload configfiles 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-01 19:46:24 +00:00
Stéphane Pautrel
89440b2d0a lang: Improvements to French translation 
This patch adds translations for the new DNS part as well
as various improvements.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-01 19:46:07 +00:00
Arne Fitzenreiter
9acb792b8f core142: add kmod to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-01 19:45:30 +00:00
Michael Tremer
1ece41ec51 kmod: Update to 26 
This patch links kmod against OpenSSL which is required to
decode the kernel modules' PKCS#7 signatures.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-03-01 19:44:24 +00:00
Arne Fitzenreiter
9ff65bfac3 make.sh: add core to version string 
this make it easier to find the unstable and testing build for a core update in fireinfo.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-26 18:16:00 +00:00
Arne Fitzenreiter
5ad31551cd dnsdist: a compile thread needs two gigabyte of ram 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-25 20:38:19 +00:00
Arne Fitzenreiter
f0e61c20b1 core142: replace "pakfire remove" 
i have cut and paste this from older core but its not working

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-25 20:35:57 +00:00
Arne Fitzenreiter
46ac049864 core142: remove dropped packages 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-25 06:55:30 +00:00
Arne Fitzenreiter
1b68fc29b4 core142: fix typo 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-25 06:41:14 +00:00
Arne Fitzenreiter
712425ff0b pakfire: Re-install previous core update when in testing mode 
Fixes: #12302
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Tested-by: Michael Tremer <michael.tremer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-24 19:21:01 +00:00
Arne Fitzenreiter
6cd35da57e core142: ship updated fireinfo.cgi 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-24 19:20:12 +00:00
Stefan Schantl
fd90cadc97 fireinfo.cgi: Use pakfire lib to gather the pakfire version. 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-24 19:19:21 +00:00
Stefan Schantl
5cbcd514de ppp: Add upstream patch to fix bounds check in EAP code. 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-22 15:37:06 +00:00
Arne Fitzenreiter
8d43248794 w_scan: fix country and satalite selection menu 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-21 22:33:23 +01:00
Arne Fitzenreiter
91b4ba6d6e u-boot: split rpi aarch64 quirk into parts 
on of the changed variables was used before the old quirk.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-21 09:26:36 +01:00
Peter Müller
1eef496d47 Tor: update to 0.4.2.6 
Please refer to https://blog.torproject.org/new-releases-tor-0426-0418
for release notes.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-20 11:35:58 +00:00
Arne Fitzenreiter
c7dd86b323 core142: add changed u-boot files to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-20 11:32:43 +00:00
Arne Fitzenreiter
a62be8a2d9 u-boot: add quirk for rpi on aarch64 
the current rpi u-boot will not load the ramdisk correctly so the kernel will
crash with loaded ramdisk.
Remove ramdisk and replace root UUID by /dev/mmcblk0p3 if boot was on
armv8 and rpi.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-20 12:24:36 +01:00
Arne Fitzenreiter
777ba8192c u-boot: remove kirkwood kernel detection from bootscript 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-20 12:21:28 +01:00
Arne Fitzenreiter
8569b3e11b red.up: move update-dns-forwareders behind the firewall 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-19 14:51:48 +00:00
Arne Fitzenreiter
2b6b6df32a flash-images: update the uENV root UUID also on arch64 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2020-02-19 08:49:21 +00:00