webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-27 11:13:24 +02:00
Code Issues Packages Projects Releases Wiki Activity
13,706 Commits 2 Branches 1 Tag
f7eb5925d22de4a43a64bd2e37aa4153a36093e5
Commit Graph

3557 Commits

Author SHA1 Message Date
Matthias Fischer
e2bd68dfad squid 3.5.28: latest patches (01-02) 
For details see:
http://www.squid-cache.org/Versions/v3/3.5/changesets/

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-11-01 10:29:05 +00:00
Michael Tremer
ed1349aa76 Merge remote-tracking branch 'ms/frr' into next 2018-10-31 09:31:38 +00:00
Michael Tremer
e1def10e29 frr: Set configuration file permissions correctly 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-30 17:32:48 +00:00
Michael Tremer
ebd6fe2b50 frr: Add initscript 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-30 17:27:28 +00:00
Michael Tremer
a90f7faf78 frr: Install users and make backup when package is installed/uinstalled 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-30 17:20:37 +00:00
Michael Tremer
aeefbca730 clamav: Move database directory to /var partition 
The clamav database is quite large and occupies valuable
space on the root partition that on older systems is only
2GB large. This change moves the virus definition database
to the /var partition which is larger and supposed to hold
data like this anyway.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-29 11:25:24 +00:00
Michael Tremer
3ed2de1251 Merge branch 'haproxy' into next 2018-10-29 11:59:18 +01:00
Michael Tremer
02776a0dc2 Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next 2018-10-29 10:51:44 +00:00
Michael Tremer
aba59b7c76 Merge branch 'glibc-2.28' into next 2018-10-29 10:50:56 +00:00
Arne Fitzenreiter
ca9c45b3f2 graphs: add NVMe disks 
Add NVMe disks to media and hardwaregraphs.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-10-28 17:56:37 +01:00
Arne Fitzenreiter
d823d5f072 hostapd: add switch to disable neigborhood scan 
this may violate regulatory rules because 40Mhz channels should disabled
if there are other networks but nearly every commercial router ignore this.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-10-27 16:47:12 +02:00
Michael Tremer
edacf85320 libvirt: Update to 4.6.0 
Fixes builds against glibc >= 2.28

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-24 09:25:57 +01:00
Michael Tremer
2678d600f9 parted: Fix build with glibc >= 2.28 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-24 09:15:28 +01:00
Michael Tremer
5814cf9931 syslinux: Fix build with glibc >= 2.28 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-24 09:14:43 +01:00
Arne Fitzenreiter
4d0b63baf6 installer: remove set of pmbr_boot on gpt partitions 
this fix the efi boot on hdd's larger than 2TB and raid installations.

fixes: #11890

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-10-23 18:58:58 +02:00
Michael Tremer
8d4da55a5d collectd: Fix compiling against newer xfsprogs 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-23 16:45:33 +01:00
Michael Tremer
699f0aa710 haproxy: Make /dev/log available in chroot 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-22 21:40:56 +02:00
Michael Tremer
c3f74288c7 nfs: Update to 2.3.3 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-22 19:52:23 +01:00
Michael Tremer
2557cea21c reiserfsprogs: Update to 3.6.27 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-22 10:53:18 +01:00
Michael Tremer
e28e813eeb ppp: Build against openssl 
libcrypt has been removed from glibc and openssl
can be used instead for cryptographic operations.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-21 22:03:21 +01:00
Michael Tremer
e63cc45b48 gzip: Fix build with glibc >= 2.28 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-19 14:20:48 +01:00
Michael Tremer
d1654fd000 findutils: Fix building against glibc >= 2.28 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-19 13:39:58 +01:00
Michael Tremer
68dba55dda bison: Fix building with glibc >= 2.28 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-19 09:00:04 +01:00
Michael Tremer
7b0f7a6e1d m4: Fix building with glibc >= 2.28 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-19 08:59:46 +01:00
Michael Tremer
537401bb12 gcc: Fix building with glibc >= 2.28 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-10-19 08:59:25 +01:00
Stefan Schantl
2d475a3c6c Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next-suricata 2018-09-26 14:49:34 +02:00
Stefan Schantl
82979dec36 IDS: Introduce update-ids-ruleset 
This script periodly will be called by fcron
and is responsible for downloading and altering
the ruleset, if autoupdate of the configured ruleset is
enabled.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-09-26 14:11:31 +02:00
Stefan Schantl
6ce504a2f2 suricatactrl: Add "cron" command 
This command allows to enable the automatic update
of the used IDS ruleset and to specify the update interval.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-09-26 13:54:14 +02:00
Arne Fitzenreiter
4eedf6793b rebuild-initrd: update for grub2 
this was was not used for years because we usually ship a prebuild ramdisk
so this incompatiblity was not noticed long time...

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
 2018-09-20 20:03:26 +02:00
Matthias Fischer
74189c1d55 openssh: Update to 7.8p1 
For details see:
http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/ChangeLog

I didn't find an official lfs-patch for openssl-1.1-compatibility,
so I used the patch from here:
https://git.archlinux.org/svntogit/packages.git/plain/trunk/openssl-1.1.0.patch?h=packages/openssh

Building ran without any errors.

I tested with both machines (test on Core 120 - and productive - on Core 122) and found no errors so far:

...
[root@ipfiretest ~]# ssh -V
OpenSSH_7.8p1, OpenSSL 1.1.0h  27 Mar 2018
...

...
root@ipfire: / # ssh -V
OpenSSH_7.8p1, OpenSSL 1.1.0h  27 Mar 2018
...

All ssh-connections ran fine but I'm not REALLY sure if this is sufficient for anyone else.

Could someone please check and confirm!?

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Tested-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-09-20 14:51:44 +01:00
Michael Tremer
b8fdc7398c static-routes: Make it clear that we are reloading routes 
When RED is brought down, we will reload all static routes.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-09-13 15:03:59 +01:00
Michael Tremer
fd0a0384f0 rng-tools: Update to 6.4 
Also add a patch that keeps RDRAND enabled on i586

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Fixes: #11853
 2018-09-09 17:42:17 +01:00
Michael Tremer
3da2a66193 aws: Don't update the system on first boot 
This will violate AWS policy and therefore had to be removed.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-31 11:08:53 +01:00
Stefan Schantl
21cab141ec suricata: Rule files are now located in /var/lib/suricata 
Place the rulefiles from now in "/var/lib/suricata".

Fixes #11834

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-29 12:37:44 +02:00
Michael Tremer
06d55142e5 pakfire: Remove any reference to counter.py 
The concept has been retired a very log time ago
and the web service only responds with 200 what ever
it is being sent.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-27 07:29:19 +01:00
Michael Tremer
e32591e7bf pakfire: Remove mirror health check 
This is not really necessary because pakfire will automatically
failover to the next mirror anyways and that a mirror responds
to an ICMP echo request doesn't necessarily mean that it can
deliver the requested file.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-27 07:23:03 +01:00
Stefan Schantl
e568796bb0 ids-functions.pl: Also check and fix the permissions of rulespath 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-25 15:48:58 +02:00
Stefan Schantl
68123effb8 suricatactrl: Add fix-rules-dir command 
This command is used to set the ownership and permissions
back to nobody:nobdoy which is used by the WUI to write the
ruleset.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-24 14:54:34 +02:00
Stefan Schantl
9074853d8d suricatactrl: Add reload command 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-24 14:27:01 +02:00
Stefan Schantl
5f63067385 suricata: Fix initscript when using a single core machine 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-24 10:04:33 +02:00
Michael Tremer
366b40c740 setup: Don't write any mount errors over the GUI 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-23 11:17:23 +01:00
Michael Tremer
95b87f39ac localnet: Set FQDN without using domainname command 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-23 10:18:59 +01:00
Stefan Schantl
cb52183c6a Fix merge conflicts during merge of next and the suricata branch 2018-08-23 10:34:17 +02:00
Michael Tremer
84cd9b9162 Drop the network-trigger script 
This is done at boot time and doesn't normally need to be done again.

On AWS or in the setup, renaming any network interfaces is being
handled automatically.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:05:43 +01:00
Michael Tremer
f3d59d2c94 firstsetup: There is no need to restart udev here 
All network interfaces are renamed accordingly in setup

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:02:43 +01:00
Michael Tremer
c5465a9453 aws: Let udev rename all network interfaces 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
 2018-08-22 14:00:39 +01:00
Stefan Schantl
55658ee381 suricata: Fix detection of enabled IDS on zone in initscript 
I accidently commited the wrong file in the previous commit.
This is the fixed and working version.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-17 08:45:47 +02:00
Stefan Schantl
00a031145e suricata: Give 644 permissions to the suricata pidfile 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-17 08:24:19 +02:00
Stefan Schantl
3c2c54831f suricata: Add code to create iptables rules to the initscript 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-16 18:51:13 +02:00
Stefan Schantl
7c82ee6165 firewall: Add chains for IPS (suricata) 
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
 2018-08-16 18:50:39 +02:00