webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-26 19:00:34 +02:00
Code Issues Packages Projects Releases Wiki Activity
14,097 Commits 2 Branches 1 Tag
c8dcd46537bebe4f59cd7c22d09c45e98bfecb1f
Commit Graph

2415 Commits

Author SHA1 Message Date
Michael Tremer
2dd5e64592 suricata: Do not always convert rules to be bi-directional 
This creates some overhead that we do not need and rules need to
be adjusted to match any direction they are supposed to match.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-23 20:18:07 +01:00
Michael Tremer
e967871e8f Update contributors 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-20 14:21:46 +01:00
Michael Tremer
08caa596fa core132: Ship WPAD/proxy changes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-20 14:20:06 +01:00
Michael Tremer
75faf7ac4f core132: Ship changed suricata configuration 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-20 14:10:47 +01:00
Michael Tremer
7af7ced6fc Start Core Update 132 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-20 14:07:43 +01:00
Arne Fitzenreiter
e91c83490b wireless-regdb: update to 2019.03.01 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-04-16 18:05:18 +02:00
Michael Tremer
e8b389e0f0 core131: Ship PTR changes in hosts.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-11 23:02:57 +01:00
Michael Tremer
32e7b93c28 udev: Rename interfaces when MACs are uppercase 
The script relied on the configuration being in lowercase.

If people manually editied their configuration file they might
not have paid attention to this and therefore this script now
also accepts uppercase MAC addresses.

Fixes: #12047
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-11 21:59:41 +01:00
Michael Tremer
2c44da1382 core131: Ship updated setup 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-11 10:29:56 +01:00
Michael Tremer
ee53381ab1 core130: Ship SSH Agent Forwarding changes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-08 21:15:35 +01:00
Arne Fitzenreiter
4f30ce49b3 rename core130 -> core131 
we need to insert a core update to fix urgent bugs

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-04-08 21:49:20 +02:00
Arne Fitzenreiter
47204d12f1 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-04-08 21:47:12 +02:00
Arne Fitzenreiter
5f9bf17d76 core130: update pakfire database after version change 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-04-08 17:31:12 +02:00
Michael Tremer
c557356ea4 core130: Ship perl-Net-SSLeay 
This was still using the old version of OpenSSL.

Instead of linking the module (which we should have found earlier)
the module uses dlopen :(

Fixes: #12044
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-08 11:56:58 +01:00
Arne Fitzenreiter
0265f51e9f core130: remove lm_sensors config 
the sensor search has to redone after boot the new kernel.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-04-07 18:19:50 +02:00
Arne Fitzenreiter
ca7af38203 core130: ship setup binary 
The setup contain a IPFire version string.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-04-07 17:24:46 +02:00
Arne Fitzenreiter
44b0afe029 core130: ship pakfire version update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-04-07 17:13:43 +02:00
Arne Fitzenreiter
83c956c3c8 core130: add kernel to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-04-07 17:01:08 +02:00
Michael Tremer
aab33d4845 core130: Do not search for sensors on AWS 
This causes some i2c drivers to load and tons of error messages
being created in syslog. So we skip searching for any sensors
that do not exist.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-04 09:05:25 +01:00
Michael Tremer
ab79dc43bf vpnmain.cgi: Set MTU to a default when editing an old connection 
This field is required and therefore we need to initialize it
for old connections. Right now, the CGI throws an error message
when editing an existing connection without the MTU being filled
in.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-04 11:53:11 +01:00
Michael Tremer
aeecc7ae10 core130: Ship updated wget 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-04 02:07:16 +01:00
Michael Tremer
0ce95859da core130: Ship updated nettle 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-04 02:06:41 +01:00
Michael Tremer
c95ba2bbcc core130: Ship updated GnuTLS 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-04 02:05:52 +01:00
Michael Tremer
ef1cb80375 core130: Ship updated apache 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-04-04 02:04:28 +01:00
Michael Tremer
b666975ec2 unbound-dhcp-leases-bridge: Replace leases file atomically 
When there is a large number of leases, writing the file may
take a long time. When unbound is re-reading its configuration
in that time, the file might syntactically incorrect.

This change writes the file first and then moves it
to the right place in one transaction.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-28 12:51:06 +00:00
Michael Tremer
abe2149852 GeoIP: Do not crash when locations database does not exist 
Fixes: #12021
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-22 02:58:57 +00:00
Michael Tremer
3210e92212 core130: Ship updated lua 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-21 20:48:39 +00:00
Michael Tremer
67b943c18a core130: Ship rrdtool and collectd 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-21 20:39:51 +00:00
Michael Tremer
b6c60092db openvpn: Remove subnet check for static pools 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-22 15:24:03 +00:00
Stefan Schantl
b60fd7a3e2 Core 130: Remove files after convert-snort has been launched 
The converter requires /etc/snort/snort.conf to grab the used rule files
(categories). After all settings have been converted, we are fine to delete all
snort related files, because none of them is needed anymore.

Also the /var/ipfire/snort directory needs to be deleted. If it will be left on the
system and at any later time a backup will get restored, the converter will be
started by the backup script, because it detects that a snort settins dir exists
and would be restore the old snort settings and replaces all current IPS settings.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-16 21:22:50 +00:00
Michael Tremer
08ded6035f dnsforward.cgi: Check DISABLE_DNSSEC checkbox when editing 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-18 15:36:04 +00:00
Michael Tremer
3b521c724f ipsec-interfaces: Apply static routes (again) after creating IPsec interfaces 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-18 15:25:48 +00:00
Michael Tremer
a46903cce3 core130: Ship updated unbound 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-16 12:32:10 +00:00
Michael Tremer
2c703afc04 core130: Ship updated ntp 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-16 12:30:22 +00:00
Stefan Schantl
9c4477d0f3 core130: Fix another error in rootfile 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-15 14:36:15 +00:00
Michael Tremer
03f68cbca9 core130: Fix errors in rootfile 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-15 13:20:23 +00:00
Michael Tremer
f9219b91a1 core130: Ship suricata 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-14 13:48:25 +00:00
Michael Tremer
c578cbd35f core130: Ship updated firewall script 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-14 13:16:33 +00:00
Michael Tremer
b450e7e3e6 Start Core Update 130 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-14 13:15:03 +00:00
Arne Fitzenreiter
668119063c u-boot: try to boot without ramdisk if the system cannot load it 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-03-13 15:17:28 +01:00
Arne Fitzenreiter
eaf004a468 knot: update to 2.8.0 and build/install only kdig 
This fix compile errors on small arm boards. (cc1 internal error)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-03-13 15:06:23 +01:00
Arne Fitzenreiter
b57220aacd groff: update to 1.22.4 
This fix compile problems on small arm boards. (cc1 internal error)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-03-13 15:04:40 +01:00
Michael Tremer
e26e86dcaa core129: Ship updated dnsforward.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-11 15:58:04 +00:00
Michael Tremer
f1042a5d44 core129: Ship updated dhcp.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-11 09:54:19 +00:00
Michael Tremer
61424e9c67 core129: Ship updated less 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-10 18:23:22 +00:00
Michael Tremer
ea9cb48ae7 core129: Ship wpa_supplicant 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-04 09:26:58 +00:00
Michael Tremer
a079f7aaee core129: Ship updated proxy.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-02 14:14:14 +00:00
Michael Tremer
3d01a8f1a6 core129: Ship updated ipset 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-02 14:12:18 +00:00
Michael Tremer
7c57cbe24b core129: Ship updated tar 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-02 14:11:02 +00:00
Michael Tremer
15c71234ca core129: Ship updated bind 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-03-02 14:10:21 +00:00