avahi-remove: bump mpd version.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core110: remove avahi startlinks

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

avahi-remove: bump package versions to remove avahi dep

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core110: remove avahi from system and pakfire db

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

cups-filters: Fix for lfs-file (dropped avahi package)

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

avahi: Drop package

The daemon locks up when starting up in avahi_log_info() and
probably the other logging functions, too.

Since avahi is not really used a lot in the distribution,
has been in testing for four years and has virtually no users
I am going to drop it instead of wasting time on fixing this.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

graphs.pl: Fix HTML syntax error

The missing ' caused that a different URL was called

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

attr: rootfile update

there must be a problem at log generation. sometimes
some manpages are not listed in the log.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

mpd: disable smbclient

because it has many dependencies and spit allot of error messages.

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

core110: fix legacy theme css path

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge remote-tracking branch 'origin/master' into core110

core110: Ship updated legacy style CSS

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pakfire: Fix dependency resolver

The old algorithm could potentially lock itself in an endless
recursion when there were packages with circular dependencies.

This version does not do this and is also faster.

Reported-by: Arne Fitzenreiter <arne.fitzenreiter@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

attr: update rootfile

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

mpd: back to 0.19.19 because 0.20.x not work on arm softfloat

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge remote-tracking branch 'origin/master' into core110

openssh: Remove deprecated configuration options

This was used for SSH version 1 which is not supported
any more

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

apache only supports MaxClients up to 256

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mpd: mpd needs opus libs

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mpd: mpd needs opus libs

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

Merge branch 'next'

core110: finish update

Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

squid: Update to 3.5.25

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid 3.5.24: latest patches (14149-14153)

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid 3.5.24: latest patches (14144-14148)

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

squid 3.5.24: latest patch (14143)

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

DNS: Show DNSSEC status on index page if deavtivated

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core110: Ship updated ntp package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ntp: Update to 4.2.8p10

"It addresses 6 medum- and 5 low-severity security issues, 4 informational security topics,
15 bugfixes, and contains other improvements over 4.2.8p9."

For a complete list, see:
http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mpd 0.20.6: fixes for lfs-file

Package refused to build without initscript.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

motion 4.0.1: suggested new rootfile

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

motion: Update to 4.0.1

'ffmpeg' seems to need this update.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

network: Create route to gateway

Some hosters have their gateway in a different subnet than
the RED interface is to save IPv4 address space.

This patch sets a host route to that gateway so that
IPFire can be installed in data centres that use such
technique.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

setup: Allow setting netmask to 255.255.255.255

Some hosters require that the subnet mask of the RED network
is set to 255.255.255.255. This was not possible to save before.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

unbound: Increase memory size on even larger systems

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

unbound: Double buffer size

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

unbound: Increase size of send/receive buffers

This will allow to not drop any packets when there is a
peak in queries

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

unbound: Re-use UDP sockets

This will make UDP queries faster

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

unbound: Increase number of parallel queries

The parameters are the recommended values for libevent

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

mpd: update to 0.20.6

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ipsec: Do not reject connections in on-demand mode

When an on-demand VPN connection is not up, the packets will
traverse the firewall and be rejected by the IPSECBLOCK chain
which will cause that an ICMP error message will be sent to
the client. If that does not happen and the packet is being
silently dropped, the client will retransmit and by then
the VPN connection will hopefully be up.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Fix updated graphs in legacy theme

The images are now a little bigger and will be scaled down
here, but the iframe box never grows bigger than the max.
size of the container.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ffmpeg and ffmpeg-libs: update to 3.2.4

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Revert "BUG11278: enable creation from subnets of internal networks"

This reverts commit ff6cc71107ae50e913c87a9bc77b3af4b31ec932.

This patch causes that no new networks can be created and
an error message is shown that the created network is the GREEN
network which is incorrect.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Improve graphs

The graphs are using an iframe and PNG images where the resolution
did often not fit and the browser had to resize the image. That
led to blurred fonts and hard to read graphs.

This patch increases the size of the box and the image. With that
higher resolution resizing should not be too much of an issue, but
since the sizes of the iframe and image have been aligned should
not even be necessary.

Reported-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

strongswan: Disable IPv6 by default

IPFire 2 does not have IPv6 connectivity with exception of a
few systems for testing where IPsec connections become a little
bit unstable when trying to connect over IPv6.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

apcupsd: update to 3.14.14

Signed-off-by: Marcel Lorenz <marcel.lorenz@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Disable netfilter on all bridges per default

Fixes: #11301
Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

xinetd: fix the call of INSTALL_INITSCRIPT

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Fix rootfile of keepalived after initscript changes

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Midnight Commander: Update to 4.8.19

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'initscripts-cleanup' of git://git.ipfire.org/people/jschlag/ipfire-2.x into next

Move the position of the initscripts lfs in the build process

We need the directory /etc/rc.d/init.d earlier in the build process
because the initscripts are copied in the lfs files like in lfs/mysql

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

Strongswan: Remove unnecessary commands concern initscripts

It is not necessary to copy the init scripts and remove the symlinks for
runnlevel interaction.

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

core110: Ship updated conntrack-tools

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core110: Ship updated nettle

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

nettle: Update to 3.3

Added '--disable-documentation' because we don't need this.

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

conntrack-tools: Update to 1.4.4

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Remove unused applejuice script

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

cyrus-sasl: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

miniupnpd: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

minidlna: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

miau: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

cyrus-imapd: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

monit: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

mediatomb: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

imspector: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

gnump3d: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

vsftpd: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

lcd4linux: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

netsnmpd: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

dbus: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

lcdproc: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

vdradmin: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

vdr: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

Merge branch 'next' into initscripts-cleanup

BUG11296: Fix build on EFI systems

fixes: #11296

Signed-off-by: Alexander Marx <alexander.marx@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

sslh: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

mpd: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

spamassassin: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

lcr: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

fetchmail: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

rtpproxy: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

tftpd: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

core110: Ship updated lm_sensors

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

lm_sensors: Update to 3.4.0

For details see:
https://github.com/groeck/lm-sensors/blob/master/CHANGES

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

apache: Allow more processes/connections as the same time

In large networks, when ever multiple clients connect at the
same time and request the proxy.pac configuration file, apache
rate-limited requests so that some clients did not get a response
and therefore could not connect to the Internet.

This allows apache to handle more connections at the same time.

Suggested-by: Thoralf Söldenwagner <soeldenwagner@brecht-schule.hamburg>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

DNS: Fall back to permissive mode if recursor mode is unavailable

The tests when assigning DNS name servers has been extended so that
if no working forwarder can be found, we will test if the local recursor
mode is an option.

If not, we will configure unbound's validator module into permissive
mode so that at least some DNS functionality is available.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Start Core Update 110

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssh: Update to 7.4p1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Rootfile updates

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

avahi: Update to 0.6.32

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ghostscript: Update to 9.20

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

cups: Use avahi and DBUS

These services are quite handy to make the printing
capabilities available to the network.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

unbound depends on expat

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

postfix: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

client175: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

amavisd: move initscript to src/initscripts/packages and use new macro

Signed-off-by: Jonatan Schlag <jonatan.schlag@ipfire.org>

gnutls: New package

Another TLS library that is required by CUPS for SSL support

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

epson-inkjet-printer-escpr: Update to 1.6.12

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>