Commit Graph

7812 Commits

Author SHA1 Message Date
Michael Tremer
0bda23f5a1 firewall: Add chain name to logged rules.
This helps us to debug faster where a packet has been dropped.
2014-03-04 12:38:13 +01:00
Michael Tremer
3bb4bb3fa1 firewall: Add rate limiting for LOG messages.
Fixes #10488.
2014-03-04 12:36:52 +01:00
Alexander Marx
f620fa34df Firewall: Fix Bug 10490 and broken colorization of tables in firewall groups 2014-03-04 11:37:58 +01:00
Arne Fitzenreiter
36c92ab00d kernel: arm-multi: add marvel and allwinner support. 2014-03-04 07:07:31 +01:00
Michael Tremer
c39413f2d5 vdr: Add eepg plugin. 2014-03-03 16:41:13 +01:00
Michael Tremer
d1dee6c1a1 vdr: Add DVBAPI plugin. 2014-03-03 16:31:59 +01:00
Michael Tremer
ece4c8cdc3 vdr: Update to 2.0.5.
Stupid outdated websites...
2014-03-03 16:28:51 +01:00
Michael Tremer
fa49910fa8 vdr: Update to 2.0.4. 2014-03-03 13:50:37 +01:00
Michael Tremer
fb5132aa57 strongswan: Update to 5.1.2.
http://www.strongswan.org/blog/2014/03/03/strongswan-5.1.2-released.html
2014-03-03 12:27:09 +01:00
Michael Tremer
824dc93601 firewall: Add a trailing space to all log prefixes for better readability. 2014-03-02 22:50:29 +01:00
Michael Tremer
9f80e81072 firewall: rules.pl: Remove unused variable $time_constraints. 2014-03-02 22:46:17 +01:00
Michael Tremer
d98aa95a55 firewall: rules.pl: Replace some hardcoded chain names. 2014-03-02 22:44:26 +01:00
Michael Tremer
7bb66417fa Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-02 22:38:09 +01:00
Michael Tremer
1c3044d72c firewall: Resurrect port forwardings with different external ports. 2014-03-02 22:35:27 +01:00
Michael Tremer
292cad90f7 firewall: Telnet uses TCP 2014-03-02 20:48:58 +01:00
Michael Tremer
0e53d8a991 firewall: Make OpenVPN access also possible when INPUT policy is REJECT. 2014-03-02 20:40:00 +01:00
Michael Tremer
6e87f0aa53 firewall: Allow accessing port forwardings from internal networks. 2014-03-02 20:37:44 +01:00
Arne Fitzenreiter
cbc492f516 apache2: update to 2.2.26. 2014-03-02 19:44:26 +01:00
Arne Fitzenreiter
239f8188e2 rootfile updates. 2014-03-02 19:39:42 +01:00
Michael Tremer
8f4f4634df firewall: rules.pl: Refactored entire script. 2014-03-02 18:23:28 +01:00
Michael Tremer
b05ec50ac9 firewall: rules.pl: Cleanup time constraints generation. 2014-03-01 20:20:56 +01:00
Michael Tremer
6178953be5 firewall: rules.pl: Cleanup rule generation.
Various perl coding errors that have been suppressed by "no warnings uninitialized"
have been fixed and lots of helper variables have been introduced to make
it much more clearer what the code is actually doing.
2014-03-01 19:54:14 +01:00
Michael Tremer
a2b3eba9f5 general-functions.pl: Fix wrong perl syntax. 2014-03-01 18:23:52 +01:00
Michael Tremer
1f9e7b53b7 firewall: rules.pl: Remove $command and introduce $IPTABLES. 2014-03-01 18:19:09 +01:00
Michael Tremer
8531b94ae0 firewall: rules.pl: Remove command line args parsing and rest from old debugging mode. 2014-03-01 18:07:39 +01:00
Michael Tremer
68d1eb1017 firewall: rules.pl: Introduce a more slink debugging mode. 2014-03-01 18:04:40 +01:00
Michael Tremer
97ab0569bd firewall: rules.pl: Fix some coding style. 2014-03-01 17:54:22 +01:00
Michael Tremer
b57edbd8ec firewall: rules.pl: Remove totally bloated debug mode. 2014-03-01 17:49:22 +01:00
Michael Tremer
13585cc922 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-01 16:59:32 +01:00
Michael Tremer
5c3de120aa openvpnctrl: Allow ICMP error messages to pass the transfer net. 2014-03-01 16:51:03 +01:00
Michael Tremer
a0a5c14f85 firewall: Make sure that only packets that go through the tunnel are passing OVPNBLOCK. 2014-03-01 16:44:05 +01:00
Michael Tremer
2513ae737d firewall: Allow access to the entire GREEN/BLUE/ORANGE subnets.
This includes the firewall itself as well.
2014-03-01 16:04:01 +01:00
Arne Fitzenreiter
d0ff84a675 red: change mac address of nas0 device.
Traverse Technology has reported that ppp over atm-bridge is not working
because there is a bogus mac address at the virtual nas0 device.
2014-03-01 16:01:11 +01:00
Michael Tremer
bb3834231e firewall: Sort order in which chains are initialized.
This has been some real trouble because multiple rules could
not be properly inserted into the rule chains in the kernel
because the chains did not exist, yet.
2014-03-01 15:02:42 +01:00
Michael Tremer
60fb533157 firewall: rules.pl: Don't reload custom firewall rules here. 2014-03-01 15:01:58 +01:00
Alf Høgemark
fff2be22a4 firewalllogcountry.dat: Fix filename for piechart image 2014-03-01 15:00:51 +01:00
Alf Høgemark
06f320318f firewalllogcountry.dat: Simplify code for table background color 2014-03-01 14:59:19 +01:00
Alf Høgemark
fde47f5aef firewalllogcountry.dat: Show green0,blue0, and orange0 as countries
It makes sense to see how many fire wall logs entries are dropped
from the interfaces green0, blue0, and orange0, so this is
displayed as a country. The showrequestfromcountry.dat also
supports filtering based on the interface.
2014-03-01 14:59:18 +01:00
Alf Høgemark
c438fb070e en.pl: Trivial sorting of a key 2014-03-01 14:59:18 +01:00
Alf Høgemark
bde7a7d296 showrequestfromcountry.dat: Use language string, and fix links
Define language key for input field.
Fix links for older and newer links.
Indentation fixes.

The code is a copy from showrequestfromip.dat, ideally
we should have merged all three showrequestfrom*.dat files
into one file, but I do not do that now, because it would
really require a rewrite of most of the logic, and I understand
that one does not want to do such changes in 2.x.
2014-03-01 14:59:18 +01:00
Alf Høgemark
f424897557 firewalllogcountry.dat: Use language strings and add to menu
Add some language strings for the new firewalllogport.dat, and
include html fixes done in firewalllogip.dat, which this file
is based on.

Also try to add the menu item to the sub menu, but that is
currently not working.
2014-03-01 14:59:18 +01:00
Alf Høgemark
e4aac47370 logs.cgi: Add files for showing firewall blocks by country
Add similair functionality as firewalllogip.dat and
firewalllogport.dat, by listing the number of blocks
per country, and provide a details link to show only
the blocked ip addresses from the country.

This is a preliminary prototype.
2014-03-01 14:59:17 +01:00
Alf Høgemark
a5ecf5f031 vnstat: Update to 1.11
Update vnstat to version 1.11, which also contains
the vnstati binary, for making graphs.

Remove the separate vnstati package.

This commit does not contain anything for doing
backups before upgrading, since I do not know
how that works.

The source for vnstat-1.11 has been downloaded from :
http://humdi.net/vnstat/vnstat-1.11.tar.gz
The changelog for vnstat-11 is here :
http://humdi.net/vnstat/CHANGES
2014-03-01 14:51:17 +01:00
Alf Høgemark
326a764de6 firewalllog*.cgi and country.cgi: Use language strings, and align graphs
Put the piechart for firewalllog* in the center of the page horisontally,
this looks visually better. Add language string for count and details
submit button.

Add language strings for country.cgi.
Make html validate for country.cgi.
2014-03-01 14:32:52 +01:00
Michael Tremer
1db04adbef Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2014-03-01 14:19:26 +01:00
Arne Fitzenreiter
c6f96750ba ffmpeg: prevent executable stack. 2014-02-28 16:09:45 +01:00
Arne Fitzenreiter
26685b0742 libmad: prevent executable stack. 2014-02-28 16:09:04 +01:00
Arne Fitzenreiter
82a4a102f3 Merge branch 'next' of git.ipfire.org:/pub/git/ipfire-2.x into next 2014-02-28 07:04:45 +01:00
Arne Fitzenreiter
6887597c04 kernel: enable rts5139 driver. 2014-02-28 07:02:14 +01:00
Michael Tremer
3e5e8a4a88 firewall: Fix firewall policy table if only RED, GREEN + BLUE are present. 2014-02-27 20:53:25 +01:00