webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-16 22:13:01 +02:00
Code Issues Packages Projects Releases Wiki Activity
12,251 Commits 2 Branches 1 Tag
e32591e7bfa07c5d72688cf37d86df0bea6740f6
Commit Graph

12251 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Tremer
e32591e7bf pakfire: Remove mirror health check 
This is not really necessary because pakfire will automatically
failover to the next mirror anyways and that a mirror responds
to an ICMP echo request doesn't necessarily mean that it can
deliver the requested file.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-27 07:23:03 +01:00
Michael Tremer
973ffc2987 core124: Ship updated ntp package 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-24 12:25:59 +01:00
Matthias Fischer
db5360ee9a ntp: Update to 4.2.8p12 
For details see:
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-24 12:17:57 +01:00
Michael Tremer
b31d55a79d core124: Ship updated fwhosts.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-24 11:45:44 +01:00
Alexander Marx
2754623fa9 BUG11825: firewall: Renaming a network/host group doesn't update rules 
Code only changed field 6 of hash (target group) and not field 4 (source group).
Also if using geoip it was only field 4 of hash (source group) and not field 6 of hash (target group)
Added new code that changes both fields to reflect the change in the firewallrules immediately.

fixes: #11825

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-24 11:44:45 +01:00
Michael Tremer
aec1925bea IPsec: Show connected status for waiting connections that are active 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-23 17:34:50 +01:00
Michael Tremer
366b40c740 setup: Don't write any mount errors over the GUI 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-23 11:17:23 +01:00
Michael Tremer
95b87f39ac localnet: Set FQDN without using domainname command 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-23 10:18:59 +01:00
Michael Tremer
702f0ba835 core124: Ship updated firewall.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:46:53 +01:00
Alexander Marx
d303638793 BUG11805: Firewall rule with source orange and target firewall-interface-orange not possible 
Now its possible to create a rule with orange source and target orange interface of the firewall.

Fixes: #11805

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:46:10 +01:00
Michael Tremer
7141cb1ee4 core124: Fix typo in rootfile 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:17:15 +01:00
Michael Tremer
8e11e1e869 core124: Ship updated AWS setup scripts 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:06:53 +01:00
Michael Tremer
84cd9b9162 Drop the network-trigger script 
This is done at boot time and doesn't normally need to be done again.

On AWS or in the setup, renaming any network interfaces is being
handled automatically.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:05:43 +01:00
Michael Tremer
f3d59d2c94 firstsetup: There is no need to restart udev here 
All network interfaces are renamed accordingly in setup

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:02:43 +01:00
Michael Tremer
c5465a9453 aws: Let udev rename all network interfaces 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:00:39 +01:00
Matthias Fischer
caf5dcb1e7 nano: Update to 2.9.8 
For details see:
https://www.nano-editor.org/news.php

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-21 19:50:02 +01:00
Michael Tremer
0ff9099443 core124: Ship updated backup include/exclude files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-21 15:06:22 +01:00
Michael Tremer
f868ccb763 backup: Add root's SSH keys and settings 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-21 15:05:40 +01:00
Michael Tremer
9b0618c09f backup: Add custom squid configuration files 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-21 15:05:13 +01:00
Michael Tremer
7486e30eeb backup: Order incldue/exclude alphabetically 
Nothing has been added or removed

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-21 11:32:04 +01:00
Arne Fitzenreiter
3b81e38a08 gcc: x86_64 add libspp to rootfile 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-08-20 17:38:31 +02:00
Matthias Fischer
943cfcc311 bind: Update to 9.11.4-P1 
Fixes CVE-2018-5740 and CVE-2018-5738.

For details see:
http://ftp.isc.org/isc/bind9/9.11.4-P1/RELEASE-NOTES-bind-9.11.4-P1.html

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 20:11:39 +01:00
Michael Tremer
c6b97a0681 core124: Ship updated pciutils 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 18:55:49 +01:00
Peter Müller
70e4a5b276 pciutils: update to 3.5.6 
The third version of this patch superseds the first and
second one which were broken due to bugs in the MUAs GPG
implementation.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 18:55:13 +01:00
Michael Tremer
c708276290 core124: Ship updated ids.cgi 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 18:54:41 +01:00
Peter Müller
5ed6cdd920 download ET IDS rules via HTTPS 
The Emerging Threats ruleset server supports HTTPS. It should
be used for downloading the ruleset in IPFire, too.

This also needs to be applied on the upcoming ids.cgi file for Suricata
which I will do in a second patch.

The third version of this patch superseds the first and
second one which were broken due to bugs in the MUAs GPG
implementation.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 18:54:06 +01:00
Peter Müller
f0d62e2f53 Postfix: update to 3.3.1 
This updates Postfix to recent 3.3.x series, which contains
some new features. Release announcement available at
http://www.postfix.org/announcements/postfix-3.3.1.html

The third version of this patch superseds the first and
second one which were broken due to bugs in the MUAs GPG
implementation.

Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 18:53:48 +01:00
Michael Tremer
8098a76b52 core124: Ship updated bind 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 13:05:47 +01:00
Matthias Fischer
d8106d993d bind: Update to 9.11.4 
For details see:
http://ftp.isc.org/isc/bind9/9.11.4/RELEASE-NOTES-bind-9.11.4.html

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 13:05:32 +01:00
Michael Tremer
1233d81f21 core124: Don't re-generate the initrd 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 13:02:56 +01:00
Michael Tremer
4c01f489f6 core124: Re-install bootloader during update 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 13:02:37 +01:00
Michael Tremer
de0566323f core124: Ship EFI changes 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 13:01:42 +01:00
Michael Tremer
046ef135e6 Merge remote-tracking branch 'origin/efi' into next 2018-08-16 12:49:13 +01:00
Michael Tremer
d5461580a5 core124: Ship update localnet init script 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 12:47:55 +01:00
Michael Tremer
264f34546f Start Core Update 124 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 12:47:06 +01:00
Michael Tremer
242cfc3395 localnet: Properly format and quote variables 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 12:42:25 +01:00
Michael Tremer
5b9f387d59 localnet: Correctly set domain name 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-16 12:41:52 +01:00
Arne Fitzenreiter
b211357dae core123: ship updated unbound initskript 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-08-15 13:30:07 +02:00
Michael Tremer
96422f85b6 aws: Hide pakfire update output 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-15 11:51:53 +01:00
Michael Tremer
40436fa149 aws: Write user-data log to file only 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-15 11:51:53 +01:00
Michael Tremer
281d75c945 aws: Execute reboot when an update requires one 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-15 11:51:53 +01:00
Michael Tremer
3eeff87fe6 Fix typo in unbound initscript 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-15 11:51:53 +01:00
Michael Tremer
9ae73c3090 aws: Set PATH to search in /usr/local/(s)bin 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-15 11:51:53 +01:00
Michael Tremer
6cf586436b aws: Import pakfire keys before the first launch 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-15 11:51:53 +01:00
Michael Tremer
bd7d957fae aws: Log output of user-data script to /root/user-data.log 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-15 11:51:53 +01:00
Arne Fitzenreiter
f3d23ae0ff core123: ship updated logs.cgi/ids.dat 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-08-15 12:19:29 +02:00
Michael Tremer
0ed9b77099 aws: Install all available updates first 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-15 10:11:08 +01:00
Michael Tremer
647ca912a2 aws: Setup DNS during init phase 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-15 10:10:13 +01:00
Arne Fitzenreiter
1e1806adce core123: set pakfire version 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-08-15 07:30:53 +02:00
Michael Tremer
06966f3613 core123: Ship updated backup.pl 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-14 20:39:17 +01:00