]> git.ipfire.org Git - ipfire-2.x.git/log
ipfire-2.x.git
10 years agoclose core72.
Arne Fitzenreiter [Sun, 11 Aug 2013 09:50:50 +0000 (11:50 +0200)] 
close core72.

10 years agocore72: start ipsec only if enabled after update.
Arne Fitzenreiter [Sun, 11 Aug 2013 07:46:16 +0000 (09:46 +0200)] 
core72: start ipsec only if enabled after update.

10 years agocore72: allow to update "ovpn verify script".
Arne Fitzenreiter [Sun, 11 Aug 2013 07:40:54 +0000 (09:40 +0200)] 
core72: allow to update "ovpn verify script".

Don't forget to readd this exclude to next core updater to prevent overwrite
the user ca at a openvpn update.

10 years agocore72: add ovpnmain.cgi to update.
Arne Fitzenreiter [Sun, 11 Aug 2013 07:40:03 +0000 (09:40 +0200)] 
core72: add ovpnmain.cgi to update.

10 years agocore72: stop/start squid while update.
Arne Fitzenreiter [Sun, 11 Aug 2013 07:34:52 +0000 (09:34 +0200)] 
core72: stop/start squid while update.

10 years agocore72: add language files to update.
Arne Fitzenreiter [Sun, 11 Aug 2013 07:33:25 +0000 (09:33 +0200)] 
core72: add language files to update.

10 years agosnort: update to 2.9.5.3.
Arne Fitzenreiter [Sat, 10 Aug 2013 18:10:00 +0000 (20:10 +0200)] 
snort: update to 2.9.5.3.

10 years agodaq: update to 2.0.1.
Arne Fitzenreiter [Sat, 10 Aug 2013 18:09:03 +0000 (20:09 +0200)] 
daq: update to 2.0.1.

10 years agosnort: enable non-ether-decoder for ppp support.
Arne Fitzenreiter [Sat, 10 Aug 2013 16:48:16 +0000 (18:48 +0200)] 
snort: enable non-ether-decoder for ppp support.

10 years agotor.cgi: Remove NoAdvertise option.
Michael Tremer [Sat, 10 Aug 2013 10:14:29 +0000 (12:14 +0200)] 
tor.cgi: Remove NoAdvertise option.

This does not make much sense with our setup.

10 years agoOpenVPN verify: Fix login for RW clients with >= 2 spaces in name.
Michael Tremer [Sat, 10 Aug 2013 09:08:25 +0000 (11:08 +0200)] 
OpenVPN verify: Fix login for RW clients with >= 2 spaces in name.

http://forum.ipfire.org/index.php?topic=8702.0

10 years agosquid: Fix two security issues.
Michael Tremer [Wed, 7 Aug 2013 20:15:31 +0000 (22:15 +0200)] 
squid: Fix two security issues.

* CVE-2013-4115
* CVE-2013-4123

http://www.squid-cache.org/Versions/v3/3.1/changesets/

10 years agosamba: update to 3.6.17.
Arne Fitzenreiter [Tue, 6 Aug 2013 13:01:26 +0000 (15:01 +0200)] 
samba: update to 3.6.17.

10 years agoDDNS: Use HTTPS for all-inkl.com.
Michael Tremer [Sat, 3 Aug 2013 11:36:19 +0000 (13:36 +0200)] 
DDNS: Use HTTPS for all-inkl.com.

10 years agotor.cgi: Always show all configuration options.
Michael Tremer [Fri, 2 Aug 2013 11:17:54 +0000 (13:17 +0200)] 
tor.cgi: Always show all configuration options.

Otherwise, if tor was disable, all settings like nickname, etc.
were reset to default.

10 years agotor.cgi: Check for valid accounting limit.
Michael Tremer [Fri, 2 Aug 2013 09:27:14 +0000 (11:27 +0200)] 
tor.cgi: Check for valid accounting limit.

10 years agotor.cgi: Check for valid relay address.
Michael Tremer [Fri, 2 Aug 2013 09:22:52 +0000 (11:22 +0200)] 
tor.cgi: Check for valid relay address.

10 years agotor.cgi: Check for valid port numbers.
Michael Tremer [Fri, 2 Aug 2013 09:20:53 +0000 (11:20 +0200)] 
tor.cgi: Check for valid port numbers.

10 years agotor.cgi: Catch invalid characters in relay name.
Michael Tremer [Fri, 2 Aug 2013 09:06:40 +0000 (11:06 +0200)] 
tor.cgi: Catch invalid characters in relay name.

10 years agotor.cgi: Burst bandwidth may never be less than rate.
Michael Tremer [Fri, 2 Aug 2013 08:57:01 +0000 (10:57 +0200)] 
tor.cgi: Burst bandwidth may never be less than rate.

10 years agotor: The slowest bandwidth rate for a relay is 20 kbyte/s.
Michael Tremer [Fri, 2 Aug 2013 08:42:41 +0000 (10:42 +0200)] 
tor: The slowest bandwidth rate for a relay is 20 kbyte/s.

10 years agotor: Fix path to readhash in initscript.
Michael Tremer [Fri, 2 Aug 2013 08:42:08 +0000 (10:42 +0200)] 
tor: Fix path to readhash in initscript.

10 years agoMerge branch 'ddns-all-inkl' into next
Michael Tremer [Fri, 2 Aug 2013 08:41:27 +0000 (10:41 +0200)] 
Merge branch 'ddns-all-inkl' into next

Conflicts:
config/rootfiles/core/72/filelists/files

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Thu, 1 Aug 2013 20:28:32 +0000 (22:28 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

10 years agotor: fix permissions.
Arne Fitzenreiter [Thu, 1 Aug 2013 20:27:37 +0000 (22:27 +0200)] 
tor: fix permissions.

10 years agocore72: Add strongswan update.
Michael Tremer [Thu, 1 Aug 2013 17:41:21 +0000 (19:41 +0200)] 
core72: Add strongswan update.

10 years agostrongswan: Update to 5.1.0.
Michael Tremer [Thu, 1 Aug 2013 17:38:50 +0000 (19:38 +0200)] 
strongswan: Update to 5.1.0.

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next
Michael Tremer [Thu, 1 Aug 2013 16:24:03 +0000 (18:24 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next

10 years agoDDNS: Support for all-inkl.com.
Michael Tremer [Thu, 1 Aug 2013 15:38:12 +0000 (17:38 +0200)] 
DDNS: Support for all-inkl.com.

Requested by Daniel Kovacs <daniel.kovacs@pleasuredome.org>.

10 years agoMerge remote-tracking branch 'ms/tor' into tor
Michael Tremer [Wed, 31 Jul 2013 17:40:17 +0000 (19:40 +0200)] 
Merge remote-tracking branch 'ms/tor' into tor

10 years agotor.cgi: Show number of connected relays.
Michael Tremer [Wed, 31 Jul 2013 17:26:37 +0000 (19:26 +0200)] 
tor.cgi: Show number of connected relays.

10 years agotor: Don't ship torify.
Michael Tremer [Wed, 31 Jul 2013 17:22:00 +0000 (19:22 +0200)] 
tor: Don't ship torify.

This will need tsocks, which is not present on IPFire.

10 years agoWUI: Add Tor menu entry.
Michael Tremer [Wed, 31 Jul 2013 17:20:42 +0000 (19:20 +0200)] 
WUI: Add Tor menu entry.

10 years agotor.cgi: Minor functionality fixes and layout improvements.
Michael Tremer [Wed, 31 Jul 2013 17:11:59 +0000 (19:11 +0200)] 
tor.cgi: Minor functionality fixes and layout improvements.

10 years agoarm: Don't require distutils.
Michael Tremer [Wed, 31 Jul 2013 16:06:05 +0000 (18:06 +0200)] 
arm: Don't require distutils.

We don't have that module shipped and we don't really
need it for arm either.

10 years agocore72: Add updated firewall script.
Michael Tremer [Wed, 31 Jul 2013 10:56:58 +0000 (12:56 +0200)] 
core72: Add updated firewall script.

10 years agotorctrl: Add new binary to rootfiles.
Michael Tremer [Wed, 31 Jul 2013 10:56:17 +0000 (12:56 +0200)] 
torctrl: Add new binary to rootfiles.

10 years agotorctrl: Add stop action.
Michael Tremer [Wed, 31 Jul 2013 10:55:08 +0000 (12:55 +0200)] 
torctrl: Add stop action.

10 years agotor: Add necessary firewall rules.
Michael Tremer [Wed, 31 Jul 2013 10:52:40 +0000 (12:52 +0200)] 
tor: Add necessary firewall rules.

10 years agotor: Add torctrl binary.
Michael Tremer [Wed, 31 Jul 2013 10:52:26 +0000 (12:52 +0200)] 
tor: Add torctrl binary.

10 years agotor: Import CGI script.
Michael Tremer [Tue, 30 Jul 2013 19:53:16 +0000 (21:53 +0200)] 
tor: Import CGI script.

10 years agotor: Configuration file updates.
Michael Tremer [Tue, 30 Jul 2013 19:39:50 +0000 (21:39 +0200)] 
tor: Configuration file updates.

10 years agoarm: New package.
Michael Tremer [Fri, 19 Jul 2013 12:34:14 +0000 (14:34 +0200)] 
arm: New package.

Resource monitor for tor.

10 years agotor: New package.
Michael Tremer [Fri, 19 Jul 2013 09:40:14 +0000 (11:40 +0200)] 
tor: New package.

10 years agovpnmain.cgi: Use MODP groups with smaller key lengths by default.
Michael Tremer [Thu, 25 Jul 2013 14:46:54 +0000 (16:46 +0200)] 
vpnmain.cgi: Use MODP groups with smaller key lengths by default.

https://bugzilla.ipfire.org/show_bug.cgi?id=10396

10 years agoipsecctrl: Re-read everything when configuration is reloaded.
Michael Tremer [Tue, 16 Jul 2013 10:04:29 +0000 (12:04 +0200)] 
ipsecctrl: Re-read everything when configuration is reloaded.

10 years agonetwork: red: Remove duplicate MRU option.
Michael Tremer [Sun, 21 Jul 2013 18:33:36 +0000 (20:33 +0200)] 
network: red: Remove duplicate MRU option.

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next
Michael Tremer [Sat, 20 Jul 2013 16:48:29 +0000 (18:48 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next

10 years agoAdd IPsec ECP changes to core update 72.
Michael Tremer [Sat, 20 Jul 2013 16:47:51 +0000 (18:47 +0200)] 
Add IPsec ECP changes to core update 72.

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Sat, 20 Jul 2013 16:47:36 +0000 (18:47 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

10 years agoipsec: Add ECP cryptography.
Michael Tremer [Sat, 20 Jul 2013 10:49:46 +0000 (12:49 +0200)] 
ipsec: Add ECP cryptography.

Allow selecting ECDH for IPsec VPN connections.

10 years agostrongswan: Update to 5.1.0rc1.
Michael Tremer [Sat, 20 Jul 2013 15:35:53 +0000 (17:35 +0200)] 
strongswan: Update to 5.1.0rc1.

10 years agoMerge remote-tracking branch 'ms/strongswan-next' into strongswan-next
Michael Tremer [Sat, 20 Jul 2013 10:54:31 +0000 (12:54 +0200)] 
Merge remote-tracking branch 'ms/strongswan-next' into strongswan-next

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next
Michael Tremer [Sat, 20 Jul 2013 10:51:26 +0000 (12:51 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next

10 years agoipsec: Add ECP cryptography.
Michael Tremer [Sat, 20 Jul 2013 10:49:46 +0000 (12:49 +0200)] 
ipsec: Add ECP cryptography.

Allow selecting ECDH for IPsec VPN connections.

10 years agoMerge remote-tracking branch 'stevee/ovpnmain.cgi-fixes' into next
Michael Tremer [Sat, 20 Jul 2013 09:08:56 +0000 (11:08 +0200)] 
Merge remote-tracking branch 'stevee/ovpnmain.cgi-fixes' into next

10 years agoovpnmain.cgi: Allow to keep the Remote field empty for N2N connections.
Stefan Schantl [Wed, 17 Jul 2013 20:30:29 +0000 (22:30 +0200)] 
ovpnmain.cgi: Allow to keep the Remote field empty for N2N connections.

* It's now possible to keep the Remote Host/IP field empty.
* Cleaned up code.

Fixes #10392.

10 years agotransmission: update to 2.81.
Arne Fitzenreiter [Fri, 19 Jul 2013 16:19:40 +0000 (18:19 +0200)] 
transmission: update to 2.81.

10 years agostart core72.
Arne Fitzenreiter [Fri, 19 Jul 2013 08:03:22 +0000 (10:03 +0200)] 
start core72.

10 years agostrongswan: Update rootfile.
Michael Tremer [Thu, 18 Jul 2013 19:22:10 +0000 (21:22 +0200)] 
strongswan: Update rootfile.

10 years agovdr: Add /etc/sysconfig/vdr to backup.
Michael Tremer [Thu, 18 Jul 2013 11:10:22 +0000 (13:10 +0200)] 
vdr: Add /etc/sysconfig/vdr to backup.

10 years agovdr: Disable debugging logging.
Michael Tremer [Thu, 18 Jul 2013 11:06:42 +0000 (13:06 +0200)] 
vdr: Disable debugging logging.

3 is default and includes a lot of debugging output which
leads to really heavy IO with installations with a lot of
channels (satellite mainly).

http://www.vdr-wiki.de/wiki/index.php/VDR_Optionen

10 years agoovpnmain.cgi: Set mtu-disc to off if not configured.
Stefan Schantl [Wed, 17 Jul 2013 19:01:14 +0000 (21:01 +0200)] 
ovpnmain.cgi: Set mtu-disc to off if not configured.

Fixes #10391.

10 years agoovpnmain.cgi: Add check for a valid N2N network.
Stefan Schantl [Wed, 17 Jul 2013 17:58:20 +0000 (19:58 +0200)] 
ovpnmain.cgi: Add check for a valid N2N network.

Fixes #10390.

10 years agoopenvpnctrl: Save the binary from crashing with wrong input.
Michael Tremer [Wed, 17 Jul 2013 16:53:13 +0000 (18:53 +0200)] 
openvpnctrl: Save the binary from crashing with wrong input.

See #10390.

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next
Michael Tremer [Wed, 17 Jul 2013 15:45:40 +0000 (17:45 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Tue, 16 Jul 2013 21:05:00 +0000 (23:05 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

10 years agodnsforward: add config to iso and updater.
Arne Fitzenreiter [Tue, 16 Jul 2013 20:58:13 +0000 (22:58 +0200)] 
dnsforward: add config to iso and updater.

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next
Michael Tremer [Tue, 16 Jul 2013 20:00:14 +0000 (22:00 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next

10 years agoipsecctrl: Re-read everything when configuration is reloaded.
Michael Tremer [Tue, 16 Jul 2013 10:04:29 +0000 (12:04 +0200)] 
ipsecctrl: Re-read everything when configuration is reloaded.

10 years agostrongswan: Enable EAP authentication algorithms.
Michael Tremer [Tue, 16 Jul 2013 18:54:28 +0000 (20:54 +0200)] 
strongswan: Enable EAP authentication algorithms.

10 years agosquidclamav: Fix indentation of update script.
Michael Tremer [Tue, 16 Jul 2013 17:46:29 +0000 (19:46 +0200)] 
squidclamav: Fix indentation of update script.

10 years agosquidclamav: Fix permissions of /etc/squidclamav.conf.
Michael Tremer [Tue, 16 Jul 2013 17:42:53 +0000 (19:42 +0200)] 
squidclamav: Fix permissions of /etc/squidclamav.conf.

The file must not be executable, but writeable by anybody
in the group nobody.

10 years agoproxy.cgi: Re-apply accidentially removed changes.
Michael Tremer [Tue, 16 Jul 2013 17:38:54 +0000 (19:38 +0200)] 
proxy.cgi: Re-apply accidentially removed changes.

Removed in dfee7582f9b386126fcaa6c8cdcb98677e34f5b4,
originally introduced in 49c7cb232870cce6986f93bb6fc3b6dbf643ec07.

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next
Michael Tremer [Tue, 16 Jul 2013 10:04:00 +0000 (12:04 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Tue, 16 Jul 2013 06:36:54 +0000 (08:36 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

10 years agoclose core71.
Arne Fitzenreiter [Tue, 16 Jul 2013 06:35:28 +0000 (08:35 +0200)] 
close core71.

10 years agousb-modeswitch-data: update to 20130610.
Arne Fitzenreiter [Mon, 15 Jul 2013 22:57:33 +0000 (00:57 +0200)] 
usb-modeswitch-data: update to 20130610.

10 years agousb-modeswitch: update to 1.2.6.
Arne Fitzenreiter [Mon, 15 Jul 2013 22:56:17 +0000 (00:56 +0200)] 
usb-modeswitch: update to 1.2.6.

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Michael Tremer [Mon, 15 Jul 2013 20:05:12 +0000 (22:05 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

10 years agosquid: Allow to set more FDs in CGI.
Michael Tremer [Mon, 15 Jul 2013 20:04:59 +0000 (22:04 +0200)] 
squid: Allow to set more FDs in CGI.

10 years agomisc-progs: rootfile updates.
Arne Fitzenreiter [Mon, 15 Jul 2013 19:56:56 +0000 (21:56 +0200)] 
misc-progs: rootfile updates.

10 years agomisc-progs: fix typo in Makefile.
Arne Fitzenreiter [Mon, 15 Jul 2013 19:53:47 +0000 (21:53 +0200)] 
misc-progs: fix typo in Makefile.

10 years agocore71: add proxy-squidclam changes to updater.
Arne Fitzenreiter [Mon, 15 Jul 2013 18:51:42 +0000 (20:51 +0200)] 
core71: add proxy-squidclam changes to updater.

10 years agoMerge remote-tracking branch 'stevee/proxy-squidclamav' into next
Arne Fitzenreiter [Mon, 15 Jul 2013 18:49:23 +0000 (20:49 +0200)] 
Merge remote-tracking branch 'stevee/proxy-squidclamav' into next

Conflicts:
config/cfgroot/general-functions.pl

10 years agocore71: add dnsforward to updater.
Arne Fitzenreiter [Mon, 15 Jul 2013 18:42:59 +0000 (20:42 +0200)] 
core71: add dnsforward to updater.

10 years agoMerge remote-tracking branch 'stevee/dnsforward' into next
Arne Fitzenreiter [Mon, 15 Jul 2013 18:38:27 +0000 (20:38 +0200)] 
Merge remote-tracking branch 'stevee/dnsforward' into next

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Mon, 15 Jul 2013 18:36:53 +0000 (20:36 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

10 years agosnort: update to 2.9.5.
Arne Fitzenreiter [Mon, 15 Jul 2013 15:05:44 +0000 (17:05 +0200)] 
snort: update to 2.9.5.

add VRT/GPLv2 community rules.
fix wrong oinkcode warning if no oinkcode is needed.

10 years agooinkmaster: add vrt community-rules support.
Arne Fitzenreiter [Mon, 15 Jul 2013 15:03:53 +0000 (17:03 +0200)] 
oinkmaster: add vrt community-rules support.

10 years agosquid: Increase FDs to 65536 (#10387).
Michael Tremer [Mon, 15 Jul 2013 12:35:07 +0000 (14:35 +0200)] 
squid: Increase FDs to 65536 (#10387).

10 years agodnsmasq: Add feature to forward domains to certain DNS servers.
Stefan Schantl [Sun, 14 Jul 2013 09:55:29 +0000 (11:55 +0200)] 
dnsmasq: Add feature to forward domains to certain DNS servers.

Fixes #10369.

10 years agoCleanup in 30-network.menu.
Stefan Schantl [Sun, 14 Jul 2013 11:01:13 +0000 (13:01 +0200)] 
Cleanup in 30-network.menu.

* Removed entry for non existing upload.cgi.
* Fix indentation for several menu points.

10 years agostrongswan: Update to 5.1.0dr2.
Michael Tremer [Sun, 14 Jul 2013 10:58:38 +0000 (12:58 +0200)] 
strongswan: Update to 5.1.0dr2.

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next
Michael Tremer [Sun, 14 Jul 2013 10:48:29 +0000 (12:48 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into strongswan-next

10 years agoGeoIP: update database to 2013-07-02.
Arne Fitzenreiter [Sun, 14 Jul 2013 09:33:54 +0000 (11:33 +0200)] 
GeoIP: update database to 2013-07-02.

10 years agohwdata: update ids: pci 2013-07-14, usb 2013-05-24.
Arne Fitzenreiter [Sun, 14 Jul 2013 09:22:54 +0000 (11:22 +0200)] 
hwdata: update ids: pci 2013-07-14, usb 2013-05-24.

10 years agomc: update to 4.8.9.
Arne Fitzenreiter [Fri, 12 Jul 2013 14:24:30 +0000 (16:24 +0200)] 
mc: update to 4.8.9.

10 years agoMerge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
Arne Fitzenreiter [Tue, 9 Jul 2013 18:08:40 +0000 (20:08 +0200)] 
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

10 years agofunctions.network: change "Not running" message.
Arne Fitzenreiter [Tue, 9 Jul 2013 17:09:39 +0000 (19:09 +0200)] 
functions.network: change "Not running" message.

Now it looks like other initskripts.