webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-19 15:32:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
13,618 Commits 2 Branches 1 Tag
f3900bc44b10c8592ad12ab8d4fec811d55ed5fa
Commit Graph

13618 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Peter Müller
f3900bc44b Postfix: update to 3.4.6 
See http://www.postfix.org/announcements/postfix-3.4.6.html
for release notes.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:36:26 +00:00
Peter Müller
6fd6ab5e6f patch: update to 2.7.6 
Note: This does not fix CVE-2019-13636 and CVE-2019-13638
as fixes did not make it into upstream vanilla patch, yet.

See also: https://www.debian.org/security/2019/dsa-4489

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:36:19 +00:00
Peter Müller
8de132b53d update ca-certificates CA bundle 
Update the CA certificates list to what Mozilla NSS ships currently.

The original file can be retrieved from:
https://hg.mozilla.org/mozilla-central/raw-file/tip/security/nss/lib/ckfw/builtins/certdata.txt

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:35:54 +00:00
Arne Fitzenreiter
70571361da core136: Ship updated firewall script 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:23:34 +00:00
Peter Müller
8ee3a13552 firewall: raise log rate limit to 10 packets per second 
Previous setting was to log 10 packets per minute for each
event logging is turned on. This made debugging much harder,
as the limit was rather strict and chances of dropping a
packet without logging it were good.

This patch changes the log rate limit to 10 packets per
second per event, to avoid DoS attacks against the log file.
I plan to drop log rate limit entirely in future changes,
if a better solution for this attack vector is available.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Cc: Tim FitzGeorge <ipfr@tfitzgeorge.me.uk>
Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:22:48 +00:00
Michael Tremer
d111587cc3 gcc: Build the Go compiler 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-20 17:21:08 +00:00
Michael Tremer
c4ab9992c0 freeradius: Update rootfile 
This removes all SSL modules.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-18 17:55:35 +01:00
Michael Tremer
f53d80f60d tshark: Fix parallel build 
The variable name was incorrect and therefore a parallel
build was never attempted.

This this package already takes a lot of time to build, even
more is being saved now.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-18 17:54:01 +01:00
Michael Tremer
071d7754f7 freeradius: Build without SSL 
The version check is entirely broken.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-10 03:48:49 +01:00
Michael Tremer
6580bdeb6b freeradius: Build package without generating certificates 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-10 03:12:04 +01:00
Michael Tremer
a0cc5faf71 freeradius: Disable openssl version check 
freeradius seems to care about which version it has been
compiled with and refuses to start. This switch disables
this behaviour.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-10 03:12:04 +01:00
Michael Tremer
1282a2e1af keepalived: Enable auto-start 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-10 03:12:04 +01:00
Michael Tremer
4a53156001 keepalived: Backup the whole configuration directory 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-08-10 03:12:04 +01:00
Arne Fitzenreiter
fa8b3ea7d3 installer: fix grub.conf root uuid entry 
grub-mkconfig has written the device name instead of uuid's
because the /dev/disk-by-uuid node of the new filesystem was missing
run "udevadm trigger" to create this nodes before install grub.

fixes: #12116

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-13 15:21:02 +02:00
Arne Fitzenreiter
7c30831ad2 initskripts: move unbound down after network down 
this remove a bunch of unbound errors at shutdown because
network down try to reconfigure unbond. (e.g. disable forwarders)

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-11 11:09:40 +02:00
Arne Fitzenreiter
85dfdf5d25 start core136 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-11 10:54:14 +02:00
Arne Fitzenreiter
be60bc8914 close core135 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-09 23:50:15 +02:00
Arne Fitzenreiter
520e6a1dd4 kernel: update to 4.14.138 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-09 23:47:55 +02:00
Arne Fitzenreiter
793a273ab5 dhcpcd: add noip4ll parameter to config 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-09 12:31:46 +02:00
Arne Fitzenreiter
559e94bafb initskripts: smt: hide error on cpu's that not support smt at all 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-09 08:14:29 +02:00
Arne Fitzenreiter
99f2c69511 partresize: check for apu only if dmi is present 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-09 08:02:19 +02:00
Arne Fitzenreiter
10dd2afd6d sysctl: add seperate sysctl-x86_64.conf and move x86_64 only parameters 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-08 09:30:49 +02:00
Arne Fitzenreiter
c0f4a53034 core135: add updated leds initskript to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-07 20:56:49 +00:00
Arne Fitzenreiter
236bb27320 core135: add u-boot changes to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-07 20:53:58 +00:00
Arne Fitzenreiter
00d7bb9f96 core135: add missing kernel rootfiles 2019-08-07 20:52:50 +00:00
Arne Fitzenreiter
66eb3fd8b8 core135: add kernel to updater 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-07 20:46:07 +00:00
Arne Fitzenreiter
3b415347bb kernel: update to 4.14.137 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-07 20:38:25 +00:00
Arne Fitzenreiter
c934c5ff19 clamav: update to 0.101.3 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-07 22:16:46 +02:00
Arne Fitzenreiter
dc362263f4 setup: add ignore to all no nic assigned errors 2019-08-06 10:51:45 +00:00
Arne Fitzenreiter
6836e528e5 u-boot-friendlyarm: add u-boot for nanopi-r1 to boot from eMMC 
this is a heavy patched version and should replaced when stock
u-boot is able to boot from h3 eMMC.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-06 04:32:22 +00:00
Arne Fitzenreiter
e47e01f60c u-boot: enable boot from additional mmc device 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-04 13:43:44 +00:00
Arne Fitzenreiter
fd9fa1d894 u-boot: switch default sunxi dtb to nanopi-r1 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-01 07:22:04 +00:00
Arne Fitzenreiter
ca75ec5278 led initskript: add nanopi-r1 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-01 07:18:20 +00:00
Arne Fitzenreiter
fa5e921ccb partresize: add copy of broadcom firmware settings for nanopi-r1 
I added this to partresize like the APU scon enable because this
is the only script that runs on flashimage at first boot only and
remount root writeable.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-08-01 07:09:34 +00:00
Arne Fitzenreiter
a6859d889e rpi-firmware: create copy of RPI3 brcm 43430 configfile. 
the AP21xx need a different config so store the rpi version as backup.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-31 11:03:33 +00:00
Arne Fitzenreiter
2e65d316a7 kernel: remove old modules folder before kernel build 
the build fails at creating source symlinks for external
modules build if it already exists.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-30 18:28:57 +00:00
Arne Fitzenreiter
53ece8f1f7 kernel: update arm-multi patchset 
this add FriendlyElec nanopi-r1 devicetree file.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-30 18:27:43 +00:00
Arne Fitzenreiter
1fd34bd2ec pcenginges-firmware: skip build on arm 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-24 12:37:10 +02:00
Michael Tremer
efc5cb1d34 bird: Update to 2.0.4 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-07-22 21:12:20 +01:00
Arne Fitzenreiter
c7ad4315ea pcengines-firmware: rootfile update 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-17 17:19:01 +02:00
Arne Fitzenreiter
eb5cd9fa57 pcengines-firmware: update to 4.9.0.7 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-17 17:16:25 +02:00
Arne Fitzenreiter
de8810fbaa iperf3: update to 3.7 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-17 13:15:33 +02:00
Arne Fitzenreiter
e4e1b8718e iperf: update to 2.0.13 
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-17 13:15:01 +02:00
Arne Fitzenreiter
fd7c2f3a9e initskripts: fix i586 rootfile 2019-07-17 13:12:46 +02:00
Arne Fitzenreiter
3ec3329dff unbound: rework dns-forwader handling 
add check if red interface has an IPv4 address before test the servers at
red up and simply remove forwarders at down process.

This also fix the hung at dhcpd shutdown.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-16 19:20:48 +02:00
Peter Müller
4a46575628 unbound-dhcp-leases-bridge: handle PTR generation parameter 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Reported-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-07-15 12:22:51 +01:00
Arne Fitzenreiter
6511460487 unbound: update root.hints to 2019070301 
IPv4 of server B has changed. Other changes are whitespace only.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2019-07-14 07:45:51 +02:00
Michael Tremer
d0d79462d6 core135: Ship updated squid 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-07-09 09:54:55 +01:00
Matthias Fischer
61e1ad2703 squid: Update to 4.8 
Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-07-09 09:49:47 +01:00
Peter Müller
dd4f9a87c1 Core Update 135: ship updated tzdata 
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2019-07-08 11:15:05 +01:00