Commit Graph

18816 Commits

Author SHA1 Message Date
Peter Müller
5e792900bc Core Update 168: Ship and restart Squid
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-18 21:05:49 +00:00
Matthias Fischer
f56b5ce8af squid: Update to 5.5
For details see:
http://lists.squid-cache.org/pipermail/squid-users/2022-April/024725.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-18 21:05:03 +00:00
Peter Müller
b101f8e842 Core Update 168: Ship and restart vnstat
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-18 21:04:38 +00:00
Matthias Fischer
c516ba3b01 vnstat: Update to 2.9
Triggered by Bug #12846 - in this context I noticed that vnstat had been updated to version 2.9.

For details see:
https://humdi.net/vnstat/CHANGES

"2.9 / 23-Jan-2022

 - Fixed
   - RescanDatabaseOnSave configuration option wasn't being read from the
     configuration file resulting in the feature always being enabled
   - Hourly graph image output using large fonts didn't correctly fade out
     the x-axis line for hours not having data available
 - New
   - Add --alert for producing output and/or specific exit status when
     configured condition and transfer limit is exceeded, can also be used
     for "quota remaining" type of queries depending on used parameters
   - Add configuration option InterfaceMatchMethod which allows configuring
     the possibility of specifying an interface for database queries by using
     its alias instead of system provided interface name, enabled by default
     to support case insensitive matching of the beginning of interface
     aliases (vnstat and vnstati)
   - Image output file extension allows selecting the used image file format
     as long as the used LibGD supports it, PNG is no longer the only option
   - Add configuration option HourlyGraphMode for changing the output mode
     of the graph, 0 = 24 hour sliding window (default, as in previous
     releases), 1 = graph begins from midnight
   - Add mode parameter for -hg / --hoursgraph options for overriding the
     HourlyGraphMode configuration option setting from the command line
   - Add vertical line to image output hourly graph to visualize midnight
   - Add -t / --timestamp options to daemon for enabling timestamps to prints
     when the daemon is running in the foreground attached to a terminal
   - Accept ; as comment character in configuration file in addition to #
   - Comment out keywords which are using default values with ; character in
     provided configuration file and --showconfig output

2.8 / 4-Sep-2021

 - Fixed
   - Using a combination of --live and --json wasn't flushing stdout after
     each line resulting in buffered output if the output was being piped
   - Image output would fail to show the last line bar graph in list outputs
     if EstimateStyle was 0, BarColumnShowsRate was 1 and the last line had a
     higher traffic rate than other lines
   - Image output didn't correctly horizontally align the "no data available"
     message in 5 minute graph depending on the width of the image
   - Image output related configuration warnings could get shown when image
     output wasn't being used
   - Warnings of mismatches between image output and data retention
     configuration didn't provide relevant details for solving the issues
   - BandwidthDetection was being used for tun interfaces even when the
     Linux kernel had the information hardcoded to 10 Mbit regardless of the
     used real interface, interface specific MaxBW will now be used instead
     or MaxBandwidth as fallback
   - Configured interface specific MaxBW values were getting overridden by
     BandwidthDetection when something could be detected
   - Image output horizontal rx/tx bars often had one pixel too much width in
     the tx section resulting in slightly wrong ratio getting shown
   - Top days list wasn't always sorting entries with exactly the same traffic
     sum using ascending date
   - 64bitInterfaceCounters with value -2 always assumed 32-bit on Linux
     systems until a 64-bit value was seen if kernel headers weren't available
     when binaries were built
 - New
   - Add the possibility of specifying an interface without using the
     -i / --iface options (vnstat and vnstati)
   - The daemon can discover added interfaces from the database without
     requiring a restart, configurable with option RescanDatabaseOnSave
   - Add configuration option UseUTC for using UTC as timezone for database
     entries instead of following the system timezone configuration
   - --iflist uses user configured interface specific MaxBW values in the
     output when available instead of showing only the kernel provided
     information when detected
   - Add configuration option AlwaysAddNewInterfaces to expose the daemon
     --alwaysadd command line option which gains an optional mode parameter
   - Image output uses LibGD filled arc bug workaround only for LibGD
     versions that are known to be broken
   - Image output example cgi (examples/vnstat.cgi) improvements
     - Automatically lists all monitored interfaces instead of requiring the
       list to be filled manually, server name in page title comes from
       hostname command by default
     - Provides links for most available images to more detailed or longer
       versions of each image
     - Allows direct interface specific page access with /interfacename suffix
       for the cgi if the used httpd supports PATH_INFO
     - Page auto refresh can be enabled with configurable interval"

Please note:
As mentioned above, the default values in 2.9 are commented out. I have reversed this
by adding a simple 'sed' command to the lfs file.

Another possibility would have been to extend the existing sed commands. If this
is desired differently, please report.

As - nearly - always: running here with no seen problems...

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-18 21:03:50 +00:00
Matthias Fischer
31e85ef336 rsync: Update to 3.2.4
For details see:
https://download.samba.org/pub/rsync/NEWS#3.2.4

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-18 20:55:44 +00:00
Peter Müller
c74f7aa6d9 Merge branch 'next' into temp-c168-development 2022-04-18 16:38:47 +00:00
Arne Fitzenreiter
31592610cb core167: ship elinks
elinks need to be shipped because previuos builds search the old
libidn.so.11

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-04-18 10:27:46 +02:00
Stefan Schantl
38cf581405 ids-functions.pl: Remove temporary files if the downloader aborts.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-17 16:38:21 +02:00
Stefan Schantl
eaf5364413 ids.cgi: Disable manual update button if a provider is not longer
supported.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-17 15:21:20 +02:00
Stefan Schantl
6bef05b9ed ids.cgi: Proper handle providers which are not longer supported.
They will be shown with a different background colour to get the users
attention.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-17 15:03:56 +02:00
Stefan Schantl
7c4b8df716 update-ids-ruleset: Skip unsupported providers.
In case a configured provider is not longer supported, simply skip it
and do not try to perform an update.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-17 15:02:41 +02:00
Stefan Schantl
da5c7c24f0 ids.cgi: Remove orphaned headline.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 16:02:28 +02:00
Stefan Schantl
b3dbe9ef64 backup.pl: Run convert-ids-backend-files converter.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 15:57:34 +02:00
Stefan Schantl
7bc15b982c backup: Add files for new IDS backend.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 15:54:44 +02:00
Stefan Schantl
f7eedacb43 convert-ids-backend-files: Restart suricata if the IDS is running.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 15:51:06 +02:00
Stefan Schantl
5bad33e9a4 ids.cgi: Display return code on download error, when adding a new
provider.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 15:32:27 +02:00
Stefan Schantl
00271ed769 ids.cgi: Handle "Not modified" when forcing an ruleset update.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 15:30:03 +02:00
Stefan Schantl
b645f7fc86 ids.cgi: Do not longer use hard-coded status messages in
oinkmaster_web() function.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 15:12:58 +02:00
Stefan Schantl
93af000b8b oinkmaster: Drop package.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 14:54:11 +02:00
Stefan Schantl
d2bf4d377f suricata: Rootfile update.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 14:51:48 +02:00
Stefan Schantl
0d99255c06 suricata: Create empty threshold.config file.
The file is referenced in the suricata config file and if not
present some ugly warnings will be displayed/logged during startup.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 14:49:52 +02:00
Stefan Schantl
d44d4ccf34 suricata: Create directory to store the downloaded ruleset files.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 14:48:35 +02:00
Stefan Schantl
b75baeff28 suricata: Do not longer install YAML file for default rules.
This file got obsolete, because it's content will be generated
dynamically by the backend code.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 14:42:22 +02:00
Stefan Schantl
2e558477da convert-ids-backend-files: Convert MONITOR_TRAFFIC_ONLY settings.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-16 14:39:09 +02:00
Stefan Schantl
a2c56ead73 ids-functions.pl: Remove read_enabled_disabled_sids_file() function.
Not longer needed and therefore dead code.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-15 06:02:49 +02:00
Stefan Schantl
a15c9b16b4 IDS: Move autoupdate logic to cron.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-15 05:59:33 +02:00
Stefan Schantl
c2eac6fcd4 convert-ids-backend-files: Move already downloaded files to new
location.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-15 05:52:01 +02:00
Stefan Schantl
b570d35c0a ids-functions.pl: Change location for downloaded rulesfiles to
"/var/cache/suricata/".

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-15 05:19:20 +02:00
Stefan Schantl
4f513522fe ids-functions.pl: Do not use a hard-code temporary download location.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-15 05:18:37 +02:00
Stefan Schantl
c215cfd887 convert-ids-backend-files: Remove old backend related files.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-15 05:13:23 +02:00
Stefan Schantl
70b1672d94 convert-ids-backend-files: Remove converted files.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-15 05:12:56 +02:00
Stefan Schantl
9f7702544a convert-ids-backend-files: Regenerate ruleset and used rulesets file.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-15 05:10:45 +02:00
Stefan Schantl
c00609ce56 convert-ids-backend-files: Successor of the
convert-ids-modifications-files converter.

This converter also will convert the used rulesfiles file for the
providers.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-14 06:18:56 +02:00
Stefan Schantl
2f154264a0 ids.cg: Regeneate ruleset if the ruleset action (mode) of a provider
get changed.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
2022-04-14 05:16:25 +02:00
Michael Tremer
66ff5ffec8 Merge branch 'next' 2022-04-13 14:50:07 +00:00
Peter Müller
9a271cf7a8 cdrom: Symlink /etc/mtab to /proc/self/mounts
See cad2ce78dd for details.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-13 11:39:31 +00:00
Peter Müller
74fe5c8673 libloc: Fix rootfile
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-13 11:32:48 +00:00
Peter Müller
9132bdd748 Core Update 167: Ship collectd initscript
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-13 09:24:15 +00:00
Peter Müller
c5b091fb10 Silence STDERR when calling 'sensors-detect' in collectd initscript
https://lists.ipfire.org/pipermail/development/2022-April/013189.html

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-13 09:22:58 +00:00
Michael Tremer
5bfdb4e539 Merge branch 'next' 2022-04-13 08:11:05 +00:00
Michael Tremer
cad867506d c167: Ship vnstat
vnstat is linked against libgd which has had an SO bump and therefore
needs to be shipped again.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2022-04-13 08:10:16 +00:00
Peter Müller
cad2ce78dd Core Update 167: Replace /etc/mtab by symlink to /proc/self/mounts
mount, as updated via util-linux, no longer writes /etc/mtab, causing
programs to rely on this file's content (such as the check_disk Nagios
plugin) to stop working.

/proc/self/mounts contains all the necessary information, so it is fine
to replace /etc/mtab by a symlink to it.

Fixes: #12843

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-12 14:10:08 +00:00
Peter Müller
2506def0a6 Core Update 167: Export the location database again and reload the firewall
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-12 14:05:04 +00:00
Peter Müller
e0da038fc9 Core Update 167: Ship libloc
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-12 12:53:29 +00:00
Peter Müller
0db4fbe1b5 libloc: Update to 0.9.13
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-12 12:53:03 +00:00
Peter Müller
423e2e7f92 Core Update 167: Ship accidentally deleted Perl library again
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-12 11:57:07 +00:00
Peter Müller
1e0314afdf Merge branch 'next' of ssh://people.ipfire.org/pub/git/ipfire-2.x into next 2022-04-12 11:56:18 +00:00
Peter Müller
c8d047f562 Core Update 167: Do not delete a file that should not have been deleted
My fault, again.

Fixes: #12841

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-12 11:54:27 +00:00
Arne Fitzenreiter
95229400b3 core167: add code needed for kernel update
remove the old kernel and reconfigure bootscripts for arm boards
and run user scripts to switch to a new kernel.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
2022-04-12 11:35:20 +02:00
Peter Müller
f4dca7f1af Core Update 167: Ship xz
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
2022-04-11 19:02:43 +00:00