Commit Graph

62 Commits

Author SHA1 Message Date
Michael Tremer
a0b271e474 captive: Redesign generated coupons table
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-09-22 18:56:04 +01:00
Alexander Marx
b7ab17ad83 BUG11278: It is not possible to create subnets of internal networks in firewallgroups
Fixes: #11278

When creating networks which are part of an internal network, there was an errormessage displayed and the creation was prohibited.
Now it is possible to create such subnets. This is used at own risk! Users have to take care of the firewallrule sequence.
It is possible to create situations that are not wanted.

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-06-07 17:19:30 +01:00
Michael Tremer
183b23b5ca DNS: Show DNSSEC status on index page if deavtivated
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-04-02 19:48:20 +01:00
Michael Tremer
65c3b7c913 Revert "BUG11278: enable creation from subnets of internal networks"
This reverts commit ff6cc71107.

This patch causes that no new networks can be created and
an error message is shown that the created network is the GREEN
network which is incorrect.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-03-22 11:15:44 +00:00
Alexander Marx
ff6cc71107 BUG11278: enable creation from subnets of internal networks
In firewallgroups it was not possible to create new networks that are subnets of
IPFire internal networks. Now this is possible for all internal networks.

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-01-11 17:05:53 +00:00
Alexander Marx
4f857eea41 BUG11278: Cleanup function for network check
Deleted some code which is also used in another function

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2017-01-11 17:05:12 +00:00
Heino Gutschmidt
ecc9c73bb5 BUG11131: fix errormessage when more ipsec subnets defined
When having more than one subnet in an ipsec connection it is not
possible to create a new openvpn static subnet.

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Heino Gutschmidt <heino.gutschmidt@managedhosting.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-06-03 16:19:49 +01:00
Michael Tremer
03306ff6a2 general-functions.pl: Allow underscores in domain names
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2016-05-03 22:50:53 +01:00
Alexander Marx
b00797e260 BUG10963: implement a better email verification
We now check all allowed chars in the address before the @ sign.
The domainpart after the '@' sign is just checked for valid chars, so that user@ipfire is valid, too

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2015-11-19 12:53:28 +00:00
Stefan Schantl
b013822b99 Rename Locale::Country to Locale::Codes::Country in various scripts.
The new Locale-Country version needs to be loaded and used by specifing
Locale::Codes::Country since an upstream API change. Adjusting various perl
scripts to use the module in the proper way again.
2015-04-22 18:18:38 +02:00
Stefan Schantl
1dcd87157d geoip-functions.pl: A collection of functions dealing with GeoIP. 2015-02-08 18:23:01 +01:00
Stefan Schantl
cebb1b7cb1 general-functions.pl: Add function to get full country name.
This function will return the full name a country specified by
it's country shortcut. It also will provide some additional names
which are not handled by the perl locale module but are parts of
ISO 3166.
2015-01-03 20:15:28 +01:00
Michael Tremer
c14203248c general-functions.pl: Fix perl coding error 2014-09-06 18:44:50 +02:00
Michael Tremer
da05e07629 general-functions.pl: Fix syntax error 2014-09-04 11:13:41 +02:00
Michael Tremer
6a2a62cf25 general-functions.pl: Subroutine getnetworkip() accepted multiple arguments 2014-09-03 22:23:04 +02:00
Axel Gembe
8ed77b039f general-functions.pl: validdomainname misinterprets RFC1035
The function validdomainname checks that each part of a domain name is at least
2 characters in length, but RFC1035 only makes a restriction on a "label" being
at most 63 characters in length. This change allows reverse DNS zones like
2.168.192.in-addr.arpa to be added to the DNS forward configuration, which was
incorrectly prevented before.

Signed-off-by: Axel Gembe <ago@multipixs.com>
2014-08-11 10:51:18 +02:00
Michael Tremer
4e9a2b5732 general-functions.pl: Replace lots of broken network code.
The state of some code especially in general-functions.pl
is in such a bad shape and faulty.
This is a first step that replaces some of the network
functions with those who have been tested and work for
undefined inputs.

The old functions have been left in place as stubs
and must be removed at some time.
2014-07-27 22:46:20 +02:00
Stefan Schantl
4cb523d462 general-functions.pl: Add function to get the used interface on red. 2014-07-10 12:35:05 +02:00
Michael Tremer
d6c50a8591 Merge remote-tracking branch 'amarx/10538' into next 2014-07-05 22:42:32 +02:00
Alexander Marx
1be398ae38 General-functions.pl: rewrite getnetworkip without inet_aton 2014-06-19 12:11:47 +02:00
Alexander Marx
ab92dc0c84 General-functions.pl: rewrite IpInSubnet replace inet_ntoa 2014-06-19 12:11:24 +02:00
Alexander Marx
29f238b239 BUG 10538: Routes may only added once and should not be part of an internal network 2014-06-16 09:45:59 +02:00
Alexander Marx
7490b22e9d Firewall: BUG 10528 - allow subnets greater than /8 2014-04-23 15:08:47 +02:00
Alexander Marx
4d81e0f381 VPN Checksubnets: Now the remote subnets (OpenVPN/IPSec) are checked. If they are defined elsewhere, there's a warningmessage displayed 2014-03-13 15:09:01 +01:00
Michael Tremer
a2b3eba9f5 general-functions.pl: Fix wrong perl syntax. 2014-03-01 18:23:52 +01:00
Michael Tremer
1dc4447136 general-functions.pl: Format output of age().
The output of the age() function was a bit messy with
some translations. It was now much simplified and it
now shows the time in a standardized format.
2014-01-05 02:42:21 +01:00
Alexander Marx
6ee9053548 Firewall: Fixed portfw-converter (rules where not converted correctly) And Standard network "IPsec RW" now has brackets around the Ip (when set) 2013-11-14 11:44:11 +01:00
Alexander Marx
68f6312ac5 Firewall: Show IP-Adresses in NAT-Source dropdown 2013-10-30 13:41:33 +01:00
Alexander Marx
8039a71099 Firewall: renamed forwardfwctrl to firewallctrl 2013-10-24 09:42:42 +02:00
Alexander Marx
6d8eb5dec7 Firewall: Renamed directory /var/ipfire/forward to /var/ipfire/firewall 2013-10-24 09:24:12 +02:00
Michael Tremer
0e43079789 firewall: Cleanup rules reloading.
This has been messed up a lot because there were multiple
files which indicated that a reload is needed; shell commands
were used to create and remove the indicator file; some
functions were duplicated.
2013-10-22 18:53:48 +02:00
Michael Tremer
776a1761d0 general-functions.pl: Fix overwritten substitutions. 2013-08-09 14:50:09 +02:00
Alexander Marx
1a8fde0e84 Forward Firewall: changed some names and added subnets to dropdowns 2013-08-09 14:15:30 +02:00
Alexander Marx
223d3b1dca Forward Firewall: chnaged "Internet" to "INTERNET" in dropdown (Target) 2013-08-09 14:09:17 +02:00
Alexander Marx
c7043621fc Forward Firewall: savepoint 1. Trying to add OUTGOING to the firewall.
actual working:

Create OUTGOING Rules, change external access or foward rules to outgoing ones.
Missing: rules.pl need to be updated
2013-08-09 14:08:20 +02:00
Alexander Marx
b9648e5833 Forward Firewall: added Red interface to get_std_network function 2013-08-09 14:08:08 +02:00
Michael Tremer
111c99ddfa Forward Firewall: applied all changes as diff and added new files. Also deleted c files from xtaccess and setdmzholes.
Signed-off-by: Alexander Marx <amarx@ipfire.org>

Conflicts:
	config/backup/include
	lfs/configroot
	lfs/usb-stick
2013-08-09 14:02:02 +02:00
Arne Fitzenreiter
3e862ce4f9 Merge remote-tracking branch 'stevee/proxy-squidclamav' into next
Conflicts:
	config/cfgroot/general-functions.pl
2013-07-15 20:49:23 +02:00
Arne Fitzenreiter
57097305a6 Merge remote-tracking branch 'stevee/wlan-client' into next
Conflicts:
	config/cfgroot/general-functions.pl
2013-07-06 13:43:51 +02:00
Stefan Schantl
dfee7582f9 Increase performance of the squidclamav redirector.
To boost up the performance, now we trust the proxy cache.

I add some changes to the proxy.cgi to configure the proxy and the
squidclamav in the right way.

I also add a hook that allows us to generate a new configuration
if the cgi script will be launched from the shell.

Fixes #10367.
2013-06-30 11:21:42 +02:00
Michael Tremer
057dbeebb2 Consider 100.64.0.0/10 as private address space.
http://tools.ietf.org/html/rfc6598
  http://forum.ipfire.org/index.php?topic=7504.0
2013-06-24 11:46:23 +02:00
Michael Tremer
0aa0cdcde0 DNS check: Only use the IPv4 version. 2013-06-23 22:42:04 +02:00
Michael Tremer
b2f8244ae2 DDNS: Send proper user agent. 2013-06-12 15:22:48 +02:00
Michael Tremer
5a2935b1b3 Add DDNS client for dns.lightningwirelabs.com. 2013-06-12 14:36:51 +02:00
Michael Tremer
61027579bb Implement wireless client on RED.
http://wishlist.ipfire.org/wish/wireless-client-on-red

Conflicts:
	doc/language_issues.de
	doc/language_issues.en
	doc/language_issues.es
	doc/language_issues.fr
	doc/language_issues.pl
	doc/language_issues.ru
	src/misc-progs/Makefile
2013-05-29 18:32:51 +02:00
Joern-Ingo Weigert
3687a2e2d8 Create more beautiful output for the age function. 2013-03-08 16:46:11 +01:00
Alexander Marx
ac2f710771 OpenVPN CCD: Fixes Bug when editing an IPsec Net, the ipcheck did not return a ipsecnet name. 2013-01-03 10:55:25 +01:00
Alexander Marx
f7e3d2080b OpenVPN CCD: Bugfix: when editing an IPsec Net, the ipcheck produces an error. 2013-01-03 10:55:13 +01:00
Alexander Marx
e2429e8d34 OpenVPN ccd: created subnet checkfunction in general_functions, because ipsec needs this too!
This should prevent ipsec Hosts/Nets to have same ip addresses than openvpn Hosts/Nets
2012-11-28 20:24:59 +01:00
Alexander Marx
290007b3b0 openvpn ccd: Fix subnet mask validation. 2012-11-23 12:56:54 +01:00