maniac theme: Remove unnecessary Thumbs.db file

Reported-by: Lars Schuhmacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

url-filter: Use upstream proxy when downloading blacklists

Fixes #10690

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

connections.cgi: Fix broken NAT rules when there is an empty destination IP address

Bug introduced with e60cd3a4042e95cf2748aac2de9d991c724ef24d

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Reported-by: Daniel Weismüller <daniel.weismueller@ipfire.org>

ipsec: Allow selection of ESP group type

If a connection is edited, the IKE group types will be used instead.

Fixes #10860

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Tested-by: Wolfgang Apolinarski <wolfgang.apolinarski@web.de>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

webaccess.cgi: Fix loading language

Fixes #10879

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssl: update to 1.0.2c

fix ABI problems.

core91: rebuild grub.cfg to display new core version.

strongswan: Update to 5.3.2

This release fixes a security issue filed under CVE-2015-4171.

https://www.strongswan.org/blog/2015/06/08/strongswan-vulnerability-(cve-2015-4171).html

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge remote-tracking branch 'earl/tor' into next

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Conflicts:
lfs/tor

tor: update to 0.2.6.9

make.sh: Change PAKFIRE_CORE to 91

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core91: Require reboot

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core91: Restart IPsec

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core91: Call update-lang-cache with full path

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core91: Ship openssh after openssl has been updated

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

openssl: Update to version 1.0.2b

https://www.openssl.org/news/secadv_20150611.txt

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Update translations

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

default-pak: remove wrong tab.

paks: Remove unintentional tab

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

postfix: add backup/restore at package update.

cyrus-imapd: fix typo at backup include extraction.

Revert "Python: Update to 2.7.9"

This reverts commit 765423cebe798bb4c8db75755979ce943f484792.

build fails.

web-user-interface: fix missing graphs folder.

python: update optional sources package.

core91: Ship updated pcre package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

pcre: Update to 8.37

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

core91: Add strongswan update

strongswan: Update to 5.3.1

Fixed a denial-of-service and potential remote code execution vulnerability
triggered by IKEv1/IKEv2 messages that contain payloads for the respective
other IKE version. Such payload are treated specially since 5.2.2 but because
they were still identified by their original payload type they were used as
such in some places causing invalid function pointer dereferences.
The vulnerability has been registered as CVE-2015-3991.

https://www.strongswan.org/blog/2015/06/01/strongswan-vulnerability-%28cve-2015-3991%29.html

The increased buffer size has been fixed in bug #943 upstream
  https://wiki.strongswan.org/issues/943

core91: Add changed pppsetup.cgi and language files

Fix hardcoded strings in pppsetup.cgi

Some strings for PPTP were hardcoded instead of using i18n features.

Signed-off-by: Lars Schuhmacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

ipsec.conf: Include ipsec.user.conf and ipsec.user-post.conf

Fix bug 10869 as the code has been removed by mistake by the
previous commit dfea4f86c22c83e07d0f4a6f2a02166229ecb120.
It also includes ipsec.user.conf only when it exists.

Signed-off-by: Lars Schuhmacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

rebuildhosts: Don't break when RED not online

The hosts file was not regenerated when RED was not connected
which should not be happening.

This patch checks if the file exists. If not, the gateway
line will not be written to /etc/hosts.

rebuildhosts: Fix SEGV when not online

Fixes #10867

core91: pakfire: Add changed functions.pl to update

pakfire: Add information about probable causes when pakfire cannot connect

Add information about probable causes when pakfire cannot connect. This
includes port 11371 TCP and incorrect date/time settings.

Signed-off-by: Lars Schuhmacher <larsen007@web.de>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

core91: Ship connections.cgi because of past changes in e60cd3a4042e95cf2748aac2de9d991c724ef24d

Merge remote-tracking branch 'origin/master' into next

postfix: bump PAK_VER to fix link against new openssl.

fixes: #10864

vsftpd: bump PAK_VER to fix link angainst new openssl.

fixes: 10866

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

dhcp: Enter edit mode after adding a static lease from list

After a lease has been added from the list of leases it is often
desirable to edit it right away. It appeared that the system
was in edit mode after the lease has been added because the form
had the values of the recently added lease, but hitting the
"Add" button cause an error message that stated that this is
a duplicate entry.

This patch will switch to edit more where the user can change
the values and hit "Update". If he or she chooses to ignore
that the entry is still saved.

Merge branch 'master' into next

Conflicts:
lfs/netsnmpd

netsnmpd: bump PAK_VER.

cyrus-imapd: add backupinclude.

remove unused net-snmp pakfiles.

netsnmpd: extract backup include at update.

netsnmpd: Update to 5.7.3, include backup

Conflicts:
lfs/netsnmpd

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

netsnmpd: Update to 5.7.3, include backup

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

core91: Ship changed dhcp.cgi

Update translations

DHCP: Add search box for static leases

Merge remote-tracking branch 'origin' into next

graphs.pl: bugfixes regarding rrdtool

rrdtool: Update to 1.5.3

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

core91: Add missing newline in filelist

core91: Add updated python

Merge remote-tracking branch 'mfischer/python' into next

openssh: lfs-update

core91: Add updated slang

Merge remote-tracking branch 'mfischer/slang' into next

core91: Add updated newt

Merge remote-tracking branch 'mfischer/newt' into next

core91: Add updated libxslt

Merge remote-tracking branch 'mfischer/libxslt' into next

core91: Add updated libxml2

Merge remote-tracking branch 'mfischer/libxml2' into next

core91: Add updated libtool

Merge remote-tracking branch 'mfischer/libtool' into next

libnet: Keep the version number in source tarball filename

core91: Add changed libnet

Merge remote-tracking branch 'mfischer/libnet' into next

Start Core Update 91

sarg: Update to 2.3.9

netsnmpd: bump pak version.

web-user-interface: add missing graphs folder.

Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next

tor: update to 0.2.6.8

kernel: update to 3.14.43

Merge remote-tracking branch 'origin/core90'

dnsmasq: Apply patches from upstream

dnsmasq: Import patches from upstream

dnsmasq: Apply patches from upstream

dnsmasq: Import patches from upstream

firewall: Disable the P2P blocker by default

P2P networks have come a bit out of fashion. Disabling
the P2P blocker by default will save us some CPU cycles
for each packet that goes through the firewall.

The P2P blocker has also caused lots of false-positives
and has therefore become a bit more of a problem than
a solution.

core90: fix grub.cfg update on xen hvm installations.

linux-pae: fix grub entry for xen hvm machines.

graphs.pl: bugfixes regarding rrdtool

dnsmasq: again - latest upstream patches

core90: don't remove meta/meta-linux-pae part2.

core90: don't remove meta-linux-pae.

core90: add updated pakfire file to update.

pakfire: skip corrupt "meta-" file.

This was created by a bug in dep resolve at upgrade.

pakfire: fix dep resolve at upgrade.