Commit Graph

6193 Commits

Author SHA1 Message Date
Alexander Marx
d1f01304ff Forward Firewall: Added AH Protocol and fixed a bug 2013-08-09 14:08:10 +02:00
Alexander Marx
e44fa0792b Forward Firewall: BUGFIX: When editing a rule and changing position, no other changes where saved.
added the DMZHOLES Rule to init.d/firewall (but chnaged DMZHOLES to FORWARDFW
2013-08-09 14:08:10 +02:00
Alexander Marx
02da9f7baf Forward Firewall: refined routine to check if an existing rule is equal to a new one 2013-08-09 14:08:10 +02:00
Alexander Marx
68ae5e591c Forward Firewall: fixed routine for rulepositioning 2013-08-09 14:08:09 +02:00
Alexander Marx
992394d55c Forward Firewall: changed hash sorting to get right ruleorder in Iptables 2013-08-09 14:08:09 +02:00
Alexander Marx
275a92e800 Forward Firewall: hopefully fixed delte-bug. When deleting a rule, it was possible that the rulenumbers get "holes" 2013-08-09 14:08:09 +02:00
Alexander Marx
1aec05a64e Forward Firewall: when adding custom hosts or networks the cursor is now in first textfield 2013-08-09 14:08:09 +02:00
Alexander Marx
2da264ec63 Forward Firewall: added possibility to change ruleposition 2013-08-09 14:08:09 +02:00
Alexander Marx
8dc23ff4fc Forward Firewall: adapted initscripts/firewall and wirelessctrl.c
Now the Wirelesschains should work with new firewall.
2013-08-09 14:08:09 +02:00
Alexander Marx
8139398721 Forward Firewall: edited /src/initscripts/init.d/firewall and misc-progs/wirelessctrl.c
added WIRELESSFORWARD to FORWARDFW (instead of FORWARD) so that rules work
commented out DMZHOLES lines in wirelessctrl.c to get rid of booterrormessages (There's no DMZHOLES anymore)
2013-08-09 14:08:09 +02:00
Alexander Marx
54cb7ff019 Forward Firewall: added check for mac rules 2013-08-09 14:08:08 +02:00
Alexander Marx
b526909163 Forward Firewall: BUGFIX: MAC source addresses where not created as rules 2013-08-09 14:08:08 +02:00
Alexander Marx
b9648e5833 Forward Firewall: added Red interface to get_std_network function 2013-08-09 14:08:08 +02:00
Alexander Marx
485aac6395 Forward Firewall: Deleted /var/ipfire/outgoing from /config/rootfiles/common/configroot 2013-08-09 14:08:08 +02:00
Alexander Marx
bbc14c234d Forward Firewall: Deleted config/cfgroot/p2protocols 2013-08-09 14:08:08 +02:00
Alexander Marx
9dafa928db Forward Firewall: Deleted /var/ipfire/outgoing from configroot and aaded default values to /var/ipfire/optionsfw/settings 2013-08-09 14:08:08 +02:00
Alexander Marx
62fc851166 Forward Firewall: fixed 12 Bugs from forum.
1) Added more possible chars in remark: : / .
2) Added "Internet" to std networks to be able to define internetaccess
3) When renaming a custom address, the firewallrules get updated
4) Ports are now ignored when using GRE as Protocol
5) When saving a customservice, the cursor is now in first textfield
6) Added a customservices file to installation with predefined services
7) Added ESP as protocol
8) Fixed counterproblem
9) Dropdownboxes for customservices and groups now sorted
10) Firewallrules now sorted in right order
11) fixed a Bug when defining manual address in source and target, the hint message is no longer displayed
12) When defining an external access rule, the last forwardrule was deleted
2013-08-09 14:08:04 +02:00
Alexander Marx
af8bc0d0a8 Forward Firewall: added a customservices file with default values 2013-08-09 14:07:15 +02:00
Alexander Marx
fd10a52ca2 Forward firewall: commented out line in init.d/firewall that all Forward traffic from green is allowed and put it in rules.pl. Now rules.pl allows this traffic when firewall is set to Mode0 or Mode2 2013-08-09 14:07:15 +02:00
Alexander Marx
c0ec19967e Forward Firewall: fixed default entries in /var/ipfire/optionsfw/settings. 2013-08-09 14:07:15 +02:00
Alexander Marx
3d016366b8 Forward Firewall: changed languagefiles for loggingoptions in optionsfw.cgi 2013-08-09 14:07:15 +02:00
Alexander Marx
92788c464b Forward Firewall: deleted /var/ipfire/outgoing from backup 2013-08-09 14:07:12 +02:00
Alexander Marx
7f5b282069 Forward Firewall: Changed Buttons and Layout of fwhosts.cgi 2013-08-09 14:06:49 +02:00
Alexander Marx
74e7001436 Forward Firewall: Replaced 'drop output' with 'drop forward' in languagefiles. This is for the loggingoption in the firewall options. 2013-08-09 14:06:48 +02:00
Alexander Marx
6be0579b18 Forward Firewall: replaced Outgoing-Logging with ForwardFW Logging. And changed Options in optionsfw.cgi from outgoing to forward 2013-08-09 14:05:22 +02:00
Alexander Marx
e534554162 Forward Firewall: Fixed Bug: When deleting a rule, only the last entry in the list is deleted 2013-08-09 14:05:22 +02:00
Alexander Marx
9bdb6b5045 Forward Firewall: Deleted outgoingfw.cgi,outgoinggroups.cgi and xtaccess.cgi from /config/rootfils7common/apache2 2013-08-09 14:05:20 +02:00
Alexander Marx
adf41e6f37 Forward Firewall: removed outgoingfw.cgi from /config/rootfiles/core/66/filelists/files 2013-08-09 14:04:42 +02:00
Alexander Marx
c04f132d49 Forward Firewall: removed outgoingfwctrl from /config/rootfiles/misc-progs 2013-08-09 14:04:42 +02:00
Alexander Marx
231499fcc8 Forward Firewall: build iso with new firewall 2013-08-09 14:04:38 +02:00
Alexander Marx
d24a34cbdc Forward Firewall: changed remarkfield to have maximum 255 chars. Changed Layout from viewtablerule.
Signed-off-by: Alexander Marx <amarx@ipfire.org>
2013-08-09 14:02:21 +02:00
Alexander Marx
55674e0d38 Forward Firewall: fixed Typos
Signed-off-by: Alexander Marx <amarx@ipfire.org>
2013-08-09 14:02:21 +02:00
Alexander Marx
14f7cb87b9 Forward Firewall: fixed rules.pl error when using manual target address
Signed-off-by: Alexander Marx <amarx@ipfire.org>
2013-08-09 14:02:21 +02:00
Alexander Marx
2a81ab0d77 Forward Firewall: added new files 2013-08-09 14:02:21 +02:00
Michael Tremer
111c99ddfa Forward Firewall: applied all changes as diff and added new files. Also deleted c files from xtaccess and setdmzholes.
Signed-off-by: Alexander Marx <amarx@ipfire.org>

Conflicts:
	config/backup/include
	lfs/configroot
	lfs/usb-stick
2013-08-09 14:02:02 +02:00
Michael Tremer
7323724196 squid: Fix two security issues.
* CVE-2013-4115
* CVE-2013-4123

http://www.squid-cache.org/Versions/v3/3.1/changesets/
2013-08-07 22:15:31 +02:00
Arne Fitzenreiter
726a85b8c1 samba: update to 3.6.17. 2013-08-06 15:01:26 +02:00
Michael Tremer
dfdda7588d DDNS: Use HTTPS for all-inkl.com. 2013-08-03 13:36:19 +02:00
Michael Tremer
a03547fe5e tor.cgi: Always show all configuration options.
Otherwise, if tor was disable, all settings like nickname, etc.
were reset to default.
2013-08-02 13:17:54 +02:00
Michael Tremer
56bf9f2174 tor.cgi: Check for valid accounting limit. 2013-08-02 11:27:14 +02:00
Michael Tremer
bd8b033078 tor.cgi: Check for valid relay address. 2013-08-02 11:22:52 +02:00
Michael Tremer
818f47d06f tor.cgi: Check for valid port numbers. 2013-08-02 11:20:53 +02:00
Michael Tremer
b0449403e6 tor.cgi: Catch invalid characters in relay name. 2013-08-02 11:06:40 +02:00
Michael Tremer
3308f8d09f tor.cgi: Burst bandwidth may never be less than rate. 2013-08-02 10:57:01 +02:00
Michael Tremer
6eb9c49d60 tor: The slowest bandwidth rate for a relay is 20 kbyte/s. 2013-08-02 10:42:41 +02:00
Michael Tremer
9e4cb00b42 tor: Fix path to readhash in initscript. 2013-08-02 10:42:08 +02:00
Michael Tremer
52a2f02f41 Merge branch 'ddns-all-inkl' into next
Conflicts:
	config/rootfiles/core/72/filelists/files
2013-08-02 10:41:27 +02:00
Arne Fitzenreiter
45aef0dd28 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2013-08-01 22:28:32 +02:00
Arne Fitzenreiter
426270e730 tor: fix permissions. 2013-08-01 22:27:37 +02:00
Michael Tremer
592efb85b8 core72: Add strongswan update. 2013-08-01 19:42:03 +02:00