Commit Graph

4252 Commits

Author SHA1 Message Date
Stefan Schantl
cc26ba71a1 header.pl: Increase maximum allowed size of hashes.
The "getcgihash" function only allowed hashes with a maximum size of 512kb, which
was to small for the new geoip-block.cgi. As a result of this some form data
were cut-off and couldn't be processed correctly.
2015-01-03 20:22:05 +01:00
Stefan Schantl
cebb1b7cb1 general-functions.pl: Add function to get full country name.
This function will return the full name a country specified by
it's country shortcut. It also will provide some additional names
which are not handled by the perl locale module but are parts of
ISO 3166.
2015-01-03 20:15:28 +01:00
Stefan Schantl
b8e0573b5c xtables-addons: New package.
The xtables-addons package provides many additional filter modules for iptables.
Currently we are only building the "geoip" module which can be used to create
firewall rules which will do actions based on the country membership of the senders/targets
address.

In order to build the required kernel modules I had to change build order for
several packages as well.
2015-01-03 14:07:49 +01:00
Stefan Schantl
72074fcdd2 perl-Text-CSV_XS: New package.
This perl module is required to convert the provided geoip databases in CSV format into
a useable binary format for the geoip module.
2015-01-03 14:03:20 +01:00
Arne Fitzenreiter
f0e77571c0 rootfile updates (kernel, glibc, newt on arm). 2014-11-30 18:43:34 +01:00
Arne Fitzenreiter
fc1e20890b kernel: rootfile updates. 2014-11-30 11:59:29 +01:00
Michael Tremer
8b48e20bb3 tzdata: Update to 2014j 2014-11-23 01:01:58 +01:00
Arne Fitzenreiter
071bb64388 u-boot: update pandaboard config. 2014-11-22 23:13:18 +01:00
Arne Fitzenreiter
be51cfd976 kernel: update multiarm config for pandaboard. 2014-11-22 23:12:28 +01:00
Michael Tremer
7764239659 core86: Do all other fancy kernel updating stuff 2014-11-16 14:09:50 +01:00
Arne Fitzenreiter
f8793c24e6 kernel: disable crashing sensor drivers on arm. 2014-11-06 20:16:24 +01:00
Arne Fitzenreiter
8f89ad6d42 kernel: arm-multi: disable hanging sunxi_ss crypto module.
udev loads the problematic module automaticly.
2014-11-05 14:26:37 +01:00
Michael Tremer
07686bd7e2 Merge remote-tracking branch 'origin/seventeen' into seventeen 2014-11-04 23:52:28 +01:00
Arne Fitzenreiter
dc3de45125 kernel: build sunxi crypto driver as module. 2014-11-04 20:24:17 +01:00
Arne Fitzenreiter
21147a00f2 kernel: readd kirkwood legacy boot code. 2014-11-04 20:21:05 +01:00
Arne Fitzenreiter
3f491bba92 kernel: enable carl97xx hwrng. 2014-11-04 20:16:17 +01:00
Arne Fitzenreiter
b3e7564c40 Merge branch 'seventeen' of git.ipfire.org:/pub/git/ipfire-2.x into seventeen 2014-11-04 20:12:50 +01:00
Michael Tremer
c172d453c1 Create Core Update 86 2014-11-03 23:41:09 +01:00
David Kleuker
6cc8832e28 fix typo 2014-11-03 21:48:55 +01:00
David Kleuker
2fa7ff4e0d use bash instead of sh 2014-11-03 21:48:55 +01:00
Arne Fitzenreiter
ec1e142186 kernel: arm multiarch: enanble xhci. 2014-11-02 21:45:03 +01:00
Arne Fitzenreiter
22820bf256 kernel: use correct external modules at initrd build. 2014-11-01 23:04:38 +01:00
Arne Fitzenreiter
932a34e57e kernel: patches and preliminary 3.14 config for arm. 2014-11-01 17:26:09 +01:00
Arne Fitzenreiter
bf65f292dd kernel: rootfile update (i586). 2014-11-01 17:19:09 +01:00
Arne Fitzenreiter
f18d70385a glibc: rootfile update (i586) 2014-11-01 17:18:43 +01:00
Arne Fitzenreiter
9f5f4957cb Merge remote-tracking branch 'origin/seventeen' into kernel-test-next 2014-10-31 17:32:58 +01:00
Erik Kapfer
940c90d098 New Addon: tmux 2014-10-30 17:52:50 +01:00
Michael Tremer
584601c70e Update some stuff for the Italian translation 2014-10-28 02:04:05 +01:00
Michael Tremer
681c9bbe61 installer: Implement option to run a postinstall script in the installer 2014-10-26 20:11:04 +01:00
Arne Fitzenreiter
9d3616dc51 kernel: update to 3.14.22 (intel only yet). 2014-10-26 16:40:04 +01:00
Arne Fitzenreiter
b76a0377be Merge branch 'kernel-test' into seventeen 2014-10-24 12:00:34 +02:00
Michael Tremer
6e0b26ba7d Merge branch 'install-raid' into seventeen
Conflicts:
	make.sh
2014-10-15 23:39:20 +02:00
Michael Tremer
38c6822d3c installer: Make restoring the backup interactive 2014-10-15 23:38:05 +02:00
Michael Tremer
dadfa436c9 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-10-15 22:55:54 +02:00
Michael Tremer
a7006325c0 apache: Disable SSLv3 by default for the IPFire webinterface 2014-10-15 22:55:26 +02:00
Arne Fitzenreiter
6c4319a1b8 openssl-compat: update to 0.9.8zc 2014-10-15 21:44:29 +02:00
Michael Tremer
11a1a874e9 Create Core Update 85 2014-10-15 19:48:16 +02:00
Michael Tremer
7d11428465 installer: Allow to start networking without ISO download 2014-10-12 14:30:51 +02:00
Michael Tremer
a3e135c8bd installer: Enable new partitioning code to be run in unattended mode
The first disk of the system will automatically be used and
a standard installation will be done. After that is done, the
system will reboot into the freshly installed system and execute
setup.
2014-10-11 18:59:31 +02:00
Arne Fitzenreiter
32f17a8e4a Merge branch 'master' into kernel-test 2014-10-11 09:11:10 +02:00
Michael Tremer
746e71a629 Merge branch 'master' of ssh://git.ipfire.org/pub/git/ipfire-2.x into install-raid 2014-10-11 07:18:03 +02:00
Arne Fitzenreiter
52dae2ba3f Merge branch 'next' 2014-10-10 18:13:13 +02:00
Arne Fitzenreiter
e3d5a18d4a core84: add update-lang-cache.
this file is missing on some machines.
2014-10-10 18:11:52 +02:00
Michael Tremer
6272b1b85e Merge branch 'master' into install-raid
Conflicts:
	config/rootfiles/common/bash
	lfs/bash
2014-10-10 14:52:30 +02:00
Michael Tremer
a21f2f6a76 firewall: Use correct interface for RED 2014-10-07 14:54:12 +02:00
Arne Fitzenreiter
522b5fbf3e Merge remote-tracking branch 'origin/master' into kernel-test 2014-10-06 10:11:13 +02:00
Arne Fitzenreiter
24d36c80a6 p2pblock: fix flush rules if all p2p's are allowed. 2014-10-05 15:12:44 +02:00
Arne Fitzenreiter
2a5b19c56f p2pblock: ipp2p must run before CONNTRACK.
And can only used for blocking, not for accept conenections bacause connections must already established for detecting protocol types.
2014-10-04 17:39:51 +02:00
Michael Tremer
791c2b45d8 firewall: fix rules.pl for old rules without ratelimiting. 2014-10-04 13:52:15 +02:00
Michael Tremer
243f8ca6e9 squid: Update to 3.4.8
Contains some security fixes:

 * CVE-2014-6270
   http://www.squid-cache.org/Advisories/SQUID-2014_3.txt
 * CVE-2014-7141
   CVE-2014-7142
   http://www.squid-cache.org/Advisories/SQUID-2014_4.txt
2014-10-02 18:21:51 +02:00