Development July 2018

development@lists.ipfire.org

14 participants
32 discussions

[PATCH] BUG11695: Adding/editing rules with preset broken
by Alexander Marx 15 Jul '21

15 Jul '21

added another check to fill same ports in source and destination when a custom service is selected. Signed-off-by: Alexander Marx <alexander.marx(a)ipfire.org> Reported-by: erik(a)vanlinsteeict.nl --- html/cgi-bin/firewall.cgi | 1 + 1 file changed, 1 insertion(+) diff --git a/html/cgi-bin/firewall.cgi b/html/cgi-bin/firewall.cgi index 499f279..d17afab 100644 --- a/html/cgi-bin/firewall.cgi +++ b/html/cgi-bin/firewall.cgi @@ -757,6 +757,7 @@ sub checkrule } } if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'dnatport'} eq ''){$fwdfwsettings{'dnatport'}=$custsrvport;} + if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'grp3'} eq 'cust_srv'){$fwdfwsettings{'dnatport'}=$custsrvport;} } #check if DNAT port is multiple if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'dnatport'} ne ''){ -- 2.7.4

3 2

[Fwd: Re: request for info: unbound via https / tls]
by Paul Simmons 13 Dec '18

13 Dec '18

Forgot the list cc :-(.

4 27

[PATCH] Fix hook for static address configuration.
by Stefan Schantl 15 Sep '18

15 Sep '18

Add the required hook_new function and "id" information which have been introduced in earlier commits to make this hook work again. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/hooks/configs/static | 26 +++++++++++++++++++++++++- 1 file changed, 25 insertions(+), 1 deletion(-) diff --git a/src/hooks/configs/static b/src/hooks/configs/static index 91bba8a..37f3d32 100644 --- a/src/hooks/configs/static +++ b/src/hooks/configs/static @@ -52,6 +52,8 @@ hook_check_config_settings() { hook_parse_cmdline() { local protocol + local id="${1}" + shift while [ $# -gt 0 ]; do case "${1}" in @@ -153,12 +155,34 @@ hook_parse_cmdline() { fi # Check any conflicts - if zone_config_check_same_setting "${zone}" "static" "ADDRESS" "${ADDRESS}"; then + if zone_config_check_same_setting "${zone}" "static" "${id}" "ADDRESS" "${ADDRESS}"; then error "A static configuration with the same address is already configured" return ${EXIT_CONF_ERROR} fi } +hook_new() { + local zone="${1}" + shift + + if zone_config_hook_is_configured ${zone} "static"; then + log ERROR "You can configure the static hook only once for a zone" + return ${EXIT_ERROR} + fi + + local id=$(zone_config_get_new_id ${zone}) + log DEBUG "ID for the config is: ${id}" + + if ! hook_parse_cmdline "${id}" "$@"; then + # Return an error if the parsing of the cmd line fails + return ${EXIT_ERROR} + fi + + zone_config_settings_write "${zone}" "${HOOK}" "${id}" + + exit ${EXIT_OK} +} + hook_up() { local zone="${1}" local config="${2}" -- 2.17.1

3 5

Re: ARM 64?
by Mathew McBride 20 Aug '18

20 Aug '18

Hi Michael, >From the software side, the support in the kernel is fairly good, mainline 4.15 and later works. We (Traverse) only maintain a patchset for some small drivers (such as hwmon sensors not yet in the kernel - not required to boot) and other minor fixes not yet applied upstream. If you build an image that uses UEFI boot it will work on both our hardware (bare metal), as a VM and on the ARM64 server platforms (Ampere/XGene, Centriq, ThunderX), or even our competitors (MacchiatoBin etc.) The big difference is that we use u-boot and it's EFI implementation - and that is improving at a rate that we don't feel it necessary to port TianoCore to our board. The board Guy linked (LS1043-S) is our OEM/volume product, and he can brief you on the pricing off-list. We also have a 'hacker' oriented product in the pipeline (Five64 - https://traverse.com.au/products/five64-arm64-platform/ ) - which is currently in the PCB layout phase. This one has a wider feature set (NVMe SSD, ATX PSU on/off, ability to 'debrick' the flash and control via a separate BMC board). This is one we intend to be available to everyone (through CrowdSupply - via the campaign and beyond), which addresses the channel 'accessibility' issue (in terms of individuals and small operators being able to buy them). It's pricing will be similar to the other boards (Omnia, Novena, Atom C2000/C3000). Regards, Matt -------- Forwarded Message -------- Subject: Re: ARM 64? Date: Wed, 23 May 2018 10:58:00 +0100 From: Michael Tremer mailto:michael.tremer@ipfire.org To: mailto:guy@traverse.com.au, mailto:development@lists.ipfire.org Hello Guy, thank you very much for getting in touch. Yes, we are working on an ARM 64 port, but so far we have not seen any hardware that was worth doing the port for. All those small and cheap single-board computers lack power, the bigger systems are basically unavailable and way too expensive. This board is way different though. CPU, Memory and especially the NICs are something that are way better sized and make a nice small appliance for bigger SOHOs or small to medium-sized offices. Not entirely sure why there is only one 10G port. Usually where 10G goes in, it has to go out somewhere else again... The big question is what software support is like in the Linux kernel for this. I have seen the patches linked on the product page and can only defer to Arne to have a look at it. My question would now be: What is the desired RRP for this or wholesale? I am just curious to find out if it is competitive or if people would find it too expensive and buy Intel again. Then we shouldn't really bother with putting the time into a port. If you are not comfortable sharing prices on the list, please feel free to email me in private about this. About the sponsorship. Thank you very much for considering us. I would be happy to have a closer look. Would you be able to ship this into the UK or Germany? Best, -Michael On Wed, 2018-05-23 at 12:46 +1000, Guy Ellis wrote: > Dear list, > > Just wondering if there is any interest in supporting ARM 64 hardware > moving forward? > > We can assist with donated hardware and support if there is interest. > https://traverse.com.au/products/ls1043s-router-board/ > > Regards, > - Guy. > >

3 15

[PATCH] bind: Update to 9.11.4
by Matthias Fischer 16 Aug '18

16 Aug '18

For details see: http://ftp.isc.org/isc/bind9/9.11.4/RELEASE-NOTES-bind-9.11.4.html Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/bind | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/bind b/lfs/bind index 35f76443e..7a14a245a 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@ include Config -VER = 9.11.3 +VER = 9.11.4 THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 4ed2a3f235595eadbd763b7ecb687ca0 +$(DL_FILE)_MD5 = 9b4834d78f30cdb796ce437262272a36 install : $(TARGET) -- 2.18.0

2 1

Research survey: Impact of Microsoft Acquisition of GitHub
by Asavaseri Natnaree 06 Aug '18

06 Aug '18

Dear IPFire developers, I am Natnaree Asavaseri and currently undertaking a research internship at Nara Institute of Science and Technology, Japan. Note that we are not biased to either GitHub or Microsoft, and this is purely from an empirical research perspective. As a part of my research in the field of Software Engineering (SE), my professors and I are analyzing the impact of Microsoft's acquisition of GitHub. The main purpose of my survey is understanding how developers perceive the Microsoft's acquisition of GitHub, especially from contributors to Linux distributions and BSD families. If the survey is successful, we will publish our findings at SE academic venues (journals or conference). So please consider voicing your opinion by allowing us up to 5 minutes to complete my short survey. https://goo.gl/forms/lbIL5qsinDRQyTaK2 We would like to remind you that participation in this survey is completely voluntary and your identity is hidden for anonymity. Thank you for your time in advance. Best regards, Natnaree (cc Shade, Raula, Hideaki) Nara Institute of Science and Technology, Japan

1 1

81.3.27.54 => rDNS => Reverse lookup failed
by Matthias Fischer 05 Aug '18

05 Aug '18

Hi! Since both DNS.WATCH-Servers are unavailable since today... => https://forum.ipfire.org/viewtopic.php?f=27&t=20253&p=117259#p117259 ...I switched to Lightning Wire Labs (81.3.27.54). 'unbound' says that everything is OK, DNSSEC is OK, testing is OK. But IPFire-GUI tells me that for 'rDNS' "Reverse lookup failed". Can anyone confirm? Reason? Best, Matthias

3 10

Re: Core 121: Checking diskspace on root fails
by Michael Tremer 31 Jul '18

31 Jul '18

On Mon, 2018-07-30 at 20:50 -0400, Tom Rymes wrote: > Also, I have found that log files can be a major contributor to disk space issues. Yes indeed. Also SARG can use a lot of disk space and the RRD files for the graphs when many OpenVPN connections exist. Best, -Michael > > On Jul 30, 2018, at 4:54 PM, Michael Tremer <michael.tremer(a)ipfire.org> wrote: > > > > Hello, > > > > Arne has already reacted to the forum thread, but nevertheless I wanted > > to give to protocol that some installations have very little disk space > > and the update is quite large. > > > > So if there is not enough disk space, the updater will fail with that > > error code. > > > > Best, > > -Michael > > > > > On Mon, 2018-07-30 at 20:55 +0200, Matthias Fischer wrote: > > > > On 30.07.2018 20:31, Matthias Fischer wrote: > > > > Hi, > > > > > > > > could someone please have a look at this: > > > > > > > > https://forum.ipfire.org/viewtopic.php?f=22&t=21088 > > > > > > > > For reasons I can't understand the diskspace check for core 121 fails > > > > for several users. > > > > > > > > I checked by myself and can't find the reason... > > > > > > Found. Checking 'bootspace' fails ("Returncode 3")- I got the wrong > > > commit... > > > > > > Best, > > > Matthias

1 0

Core 121: Checking diskspace on root fails
by Matthias Fischer 30 Jul '18

30 Jul '18

Hi, could someone please have a look at this: https://forum.ipfire.org/viewtopic.php?f=22&t=21088 For reasons I can't understand the diskspace check for core 121 fails for several users. I checked by myself and can't find the reason... Best, Matthias

2 2

Core 122
by Kienker, Fred 23 Jul '18

23 Jul '18

Core 122 has been in the testing phase for almost a month now. Is there anything outsiders can do to help accelerate the release? Things we have tried on Core 122 with success: * Updating copies of existing systems including those with VPN’s * Installing from scratch on bare metal machines * Transferring settings backups from existing machines to bare metal setups No surprises with any of these. Machines were left running with the various test setups for up to a week with no issues. All showed significant performance boosts with the new kernel. One thing we have noticed – to get the maximum benefit does require a bare metal install and a restore from backup. Best regards, Fred Kienker

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development July 2018