Development August 2018

development@lists.ipfire.org

14 participants
56 discussions

[PATCH v2] pciutils: update to 3.5.6
by Peter Müller 15 Aug '18

15 Aug '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 The second version of this patch supersedes the first one, which contained crappy line wraps due to a bug in PGP/MIME implementation in MUA. Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> - --- config/rootfiles/common/pciutils | 2 +- lfs/pciutils | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/pciutils b/config/rootfiles/common/pciutils index 5bb11a259..da35ef6a1 100644 - --- a/config/rootfiles/common/pciutils +++ b/config/rootfiles/common/pciutils @@ -1,7 +1,7 @@ bin/lspci bin/setpci lib/libpci.so.3 - -lib/libpci.so.3.4.1 +lib/libpci.so.3.5.6 sbin/update-pciids #usr/include/pci #usr/include/pci/config.h diff --git a/lfs/pciutils b/lfs/pciutils index 7c313ba3e..1ebfef0c8 100644 - --- a/lfs/pciutils +++ b/lfs/pciutils @@ -24,10 +24,10 @@ include Config - -VER = 3.4.1 +VER = 3.5.6 THISAPP = pciutils-$(VER) - -DL_FILE = $(THISAPP).tar.xz +DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) - -$(DL_FILE)_MD5 = 35763bb1eab7bc9bf6eb6efb72cbc8a1 +$(DL_FILE)_MD5 = 63b347d2bb5719b7769c03a1bb72a5b7 install : $(TARGET) - -- 2.16.4 -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvP4SiGhEYDJyrRLk2UjyD317n2gFAlt0Pu8ACgkQ2UjyD317 n2jPAA/8DKTI7qWx+B/ImrukDn0jthFhgzOiCFCU5d8GChR5YgP5c6nhuVo2rPEH Riwr7TxdZ4dXKt66Fojw59iNNkE9hGAmEgkve06DQPrUH5z3irsF81BysHzgtu/+ Z7nzxge6OIWlbygvmNh9Qu7Hi9OyW8O4D7LJkqVUXkV1DKzuLVOFhAnMF5OqUp6k R0WoaERo6GMrzzJSggnjHB4XSl2sr1+DTbrdJL4f/3LxO9ZY8zoZ1gh+zDY49p9N l406pXNMMlBRnbDaEuasiNbDSSsWIl97hKAO98KHlbtZew7DyFK/VR9JYTqJ1muv Dt1a8fznX2fEAuGcYJzwuV1sCs1Nt4CCOHureLkVL+vOeL/yxqJZRp9Xa+02XI8K vYBu3kk/3sAVUPR4kDm9oUJgTbm7O7nCvEBhP8jeCF8dWpV20zpZOmEiXveBA7KW Qz9dnyZLZibAR4kk1F9G7deSAbxgQOStmv55cH69MEakEB1UbTvMqu8j79hK/S+F LEj4RRXddVzC+V59u2tUQExnB0WxSSoCURUB+BXKYxRgfptvCmkXXQrJHRO1PhMq y9RvLPXRWxZzxodgzkEXQoJZzQRSdPVea8HNpN0E60yeZ7ydzgb2v15c0TkpPXzR ARUBiZieNFUkbjuGQXnzYJXAOrdGhdoL3zVuye7UfaoXOI3SeT4= =MPld -----END PGP SIGNATURE-----

1 0

[PATCH v2] download ET IDS rules via HTTPS
by Peter Müller 15 Aug '18

15 Aug '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 The Emerging Threats ruleset server supports HTTPS. It should be used for downloading the ruleset in IPFire, too. This also needs to be applied on the upcoming ids.cgi file for Suricata which I will do in a second patch. The second version of this patch supersedes the first one, which contained crappy line wraps due to a bug in PGP/MIME implementation in MUA. Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> - --- html/cgi-bin/ids.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/ids.cgi b/html/cgi-bin/ids.cgi index 9863251e2..d9d697deb 100644 - --- a/html/cgi-bin/ids.cgi +++ b/html/cgi-bin/ids.cgi @@ -265,7 +265,7 @@ if (!$errormessage) { } elsif ($snortsettings{'RULES'} eq 'community') { $url=" https://www.snort.org/rules/community"; } else { - - $url="http://rules.emergingthreats.net/open/snort-2.9.0/emerging.rules.tar.gz"; + $url="https://rules.emergingthreats.net/open/snort-2.9.0/emerging.rules.tar.gz"; } if ($snortsettings{'ACTION'} eq $Lang::tr{'save'} && $snortsettings{'ACTION2'} eq "snort" ) { - -- 2.16.4 -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvP4SiGhEYDJyrRLk2UjyD317n2gFAlt0Pr0ACgkQ2UjyD317 n2jqvA//e2RR4h363IYzcdKfsUqEkr6DN4AJu3m5d43G00u0/d/OsN5Ai+yjsEJ/ h+uzdk9mSt6ztBg/UziG4EpAH/qX6vDwY37J+rRtvqAO7X0S3lx4/g7AeZtxgpur LqvUOle3+IPiqCBfKJtzmOPpSMLitD+5yYLfLstjEZSTFelRYoE7uty6pQMvJKqv t+hDPA17MfSj+NSxzcewWsUqpXvgG+p/JNsN6/7b4vCKVeooqO9llw5Q6y2ICoJS B65yjr1JZmM6/zB55PXH0VXFzJBOMkVLq3ghQweCtCPj0q7lqLziZOy2ChEWXH0E ERucnSW/+rDSUrBQ4xtLcYx7HhtHWKXsdQC1MeVMGCzu6sc9RQG7cuqhmew0kRGE C5JtMnMSXIVsGkNT7GTHQheK83bB/jkp13N/FZm7UAPVirPfozkAjinXnP9NpZyw vARDXc1t2cPzz/igozopOcRShfYClFNQb7wf/9s9VSedyRrIwbcG+qEkoghBBox8 tKNE3iUFfNVIiOcmjlapfvSSf9kh3FwGsTDoj6AP9wrGUkR4YfZ/7kPTSxxYhjK7 4c9ptKBzTXeGw2zaTOoN6N8aGPCtPCPxQgkR1XlIrb79ljHGRcWnTuIvlMnUc+1W 2eg/G1NAgjlWvBnlN0/ZwcVxJHdZycKb0OakAqtFUxf56FwRkwI= =KaVn -----END PGP SIGNATURE-----

1 0

patchwork.ipfire.org didn't get last two patches
by Matthias Fischer 15 Aug '18

15 Aug '18

Hi, my last two commits, sent with "git send-email ..." (and pushed) don't show up on patchwork.ipfire.org. Sending to development list is OK, but nothing can be seen on patchwork. Can anyone confirm? Best, Matthias

4 10

[PATCH] Fixes for 'backup.pl' (Bug #11816)
by Matthias Fischer 15 Aug '18

15 Aug '18

Hi, Fixes #11816 (https://bugzilla.ipfire.org/show_bug.cgi?id=11816 and https://bugzilla.ipfire.org/attachment.cgi?id=608): "[root@ipfire ~]# backupctrl exclude ... tar: The following options were used after any non-optional arguments in archive create or update mode. These options are positional and affect only arguments that follow them. Please, rearrange them properly. tar: --exclude-from '/var/ipfire/backup/exclude.user' has no effect tar: Exiting with failure status due to previous errors" Please test - I got no errors anymore. Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/backup/backup.pl | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/config/backup/backup.pl b/config/backup/backup.pl index d430f3467..ce16e7f42 100644 --- a/config/backup/backup.pl +++ b/config/backup/backup.pl @@ -46,7 +46,7 @@ if (($ARGV[0] eq 'include') || ($ARGV[0] eq 'iso')) { print DATEI @include; print "/var/log/messages"; close(DATEI); - system("tar -cvzf /var/ipfire/backup/$Jahr$Monat$Monatstag-$Stunden$Minuten.ipf --files-from='/tmp/include' --exclude-from='/var/ipfire/backup/exclude' --files-from='/var/ipfire/backup/include.user' --exclude-from='/var/ipfire/backup/exclude.user'"); + system("tar -cvzf /var/ipfire/backup/$Jahr$Monat$Monatstag-$Stunden$Minuten.ipf --exclude-from='/var/ipfire/backup/exclude' --exclude-from='/var/ipfire/backup/exclude.user' --files-from='/tmp/include' --files-from='/var/ipfire/backup/include.user'"); system("rm /tmp/include"); if ($ARGV[0] eq 'iso') { system("/usr/local/bin/backupiso $Jahr$Monat$Monatstag-$Stunden$Minuten &"); @@ -57,7 +57,7 @@ elsif ($ARGV[0] eq 'exclude') { open(DATEI, ">/tmp/include") || die "Could not save temp include file"; print DATEI @include; close(DATEI); - system("tar -cvzf /var/ipfire/backup/$Jahr$Monat$Monatstag-$Stunden$Minuten.ipf --files-from='/tmp/include' --exclude-from='/var/ipfire/backup/exclude' --files-from='/var/ipfire/backup/include.user' --exclude-from='/var/ipfire/backup/exclude.user'"); + system("tar -cvzf /var/ipfire/backup/$Jahr$Monat$Monatstag-$Stunden$Minuten.ipf --exclude-from='/var/ipfire/backup/exclude' --exclude-from='/var/ipfire/backup/exclude.user' --files-from='/tmp/include' --files-from='/var/ipfire/backup/include.user'"); system("rm /tmp/include"); } elsif ($ARGV[0] eq 'restore') { @@ -158,7 +158,7 @@ sub createinclude(){ open(DATEI, "<${General::swroot}/backup/include") || die "Can not open include file"; my @Zeilen = <DATEI>; close(DATEI); - + foreach (@Zeilen){ chomp($_); my @files = `find $_ -maxdepth 0 2>/dev/null`; -- 2.18.0

2 1

[PATCH] logs.cgi/ids.dat: Rework linking to external rule documentation.
by Stefan Schantl 14 Aug '18

14 Aug '18

Check if the sid of a rule belongs to sourcefire and link to the changed URL for gathering more details. If the sid of the rule belongs to emergingthreads now link to the emergingthreads documentation. Fixes #11806. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- html/cgi-bin/logs.cgi/ids.dat | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/html/cgi-bin/logs.cgi/ids.dat b/html/cgi-bin/logs.cgi/ids.dat index 98176d690..5aef53499 100644 --- a/html/cgi-bin/logs.cgi/ids.dat +++ b/html/cgi-bin/logs.cgi/ids.dat @@ -336,7 +336,14 @@ print <<END END ; if ($sid ne "n/a") { - print "<a href='https://www.snort.org/rule_docs/$sid' "; + # Link to sourcefire if the the rule sid is less than 1000000. + if ($sid lt 1000000) { + print "<a href='https://www.snort.org/rule_docs/1-$sid'"; + # Link to emergingtreads if the rule sid is between 2000000 and 3000000. + } elsif (($sid gt 2000000) && ($sid lt 3000000)) { + print "<a href='http://doc.emergingthreats.net/$sid'"; + } + # Close html tag for hyperlink. print "target='_blank'>$sid</a></td>\n"; } else { print $sid; -- 2.17.1

2 3

[PATCH] Postfix: update to 3.3.1
by Peter Müller 14 Aug '18

14 Aug '18

This updates Postfix to recent 3.3.x series, which contains some new features. Release announcement available at http://www.postfix.org/announcements/postfix-3.3.1.html Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- lfs/postfix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/postfix b/lfs/postfix index 0fe4dfe08..07a869594 100644 --- a/lfs/postfix +++ b/lfs/postfix @@ -24,7 +24,7 @@ include Config -VER = 3.2.6 +VER = 3.3.1 THISAPP = postfix-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = postfix -PAK_VER = 15 +PAK_VER = 16 DEPS = "" @@ -66,7 +66,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = d10f1fb551be86f6e48c2908dd8a12ff +$(DL_FILE)_MD5 = 4381c6492f415e4a69cf5099d4acea76 install : $(TARGET) -- 2.16.4

2 4

Core 122: Odd issue with many IPSec Subnets defined
by Tom Rymes 10 Aug '18

10 Aug '18

I posted this up on the forum, but should probably post it up here. We have one tunnel on a machine upgraded to Core 122, and it has five individual hosts defined in the "Local Subnet" field: 192.169.1.2/32,192.168.1.3/32,192.168.1.4/32,192.168.1.5/32,192.168.1.6/32 This was working fine on Core 120, but now it will not work unless I define just the one host. I know that there were a few fixes related to multiple subnets and IPSec, so I thought I would ask here if maybe this change is related to those fixes. Is there a limit to how many subnets can be defined for a given tunnel? Tom

1 0

[PATCH] pciutils: update to 3.5.6
by Peter Müller 08 Aug '18

08 Aug '18

Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- config/rootfiles/common/pciutils | 2 +- lfs/pciutils | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/pciutils b/config/rootfiles/common/pciutils index 5bb11a259..da35ef6a1 100644 --- a/config/rootfiles/common/pciutils +++ b/config/rootfiles/common/pciutils @@ -1,7 +1,7 @@ bin/lspci bin/setpci lib/libpci.so.3 -lib/libpci.so.3.4.1 +lib/libpci.so.3.5.6 sbin/update-pciids #usr/include/pci #usr/include/pci/config.h diff --git a/lfs/pciutils b/lfs/pciutils index 7c313ba3e..1ebfef0c8 100644 --- a/lfs/pciutils +++ b/lfs/pciutils @@ -24,10 +24,10 @@ include Config -VER = 3.4.1 +VER = 3.5.6 THISAPP = pciutils-$(VER) -DL_FILE = $(THISAPP).tar.xz +DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 35763bb1eab7bc9bf6eb6efb72cbc8a1 +$(DL_FILE)_MD5 = 63b347d2bb5719b7769c03a1bb72a5b7 install : $(TARGET) -- 2.16.4

2 2

Research survey: Impact of Microsoft Acquisition of GitHub
by Asavaseri Natnaree 06 Aug '18

06 Aug '18

Dear IPFire developers, I am Natnaree Asavaseri and currently undertaking a research internship at Nara Institute of Science and Technology, Japan. Note that we are not biased to either GitHub or Microsoft, and this is purely from an empirical research perspective. As a part of my research in the field of Software Engineering (SE), my professors and I are analyzing the impact of Microsoft's acquisition of GitHub. The main purpose of my survey is understanding how developers perceive the Microsoft's acquisition of GitHub, especially from contributors to Linux distributions and BSD families. If the survey is successful, we will publish our findings at SE academic venues (journals or conference). So please consider voicing your opinion by allowing us up to 5 minutes to complete my short survey. https://goo.gl/forms/lbIL5qsinDRQyTaK2 We would like to remind you that participation in this survey is completely voluntary and your identity is hidden for anonymity. Thank you for your time in advance. Best regards, Natnaree (cc Shade, Raula, Hideaki) Nara Institute of Science and Technology, Japan

1 1

81.3.27.54 => rDNS => Reverse lookup failed
by Matthias Fischer 05 Aug '18

05 Aug '18

Hi! Since both DNS.WATCH-Servers are unavailable since today... => https://forum.ipfire.org/viewtopic.php?f=27&t=20253&p=117259#p117259 ...I switched to Lightning Wire Labs (81.3.27.54). 'unbound' says that everything is OK, DNSSEC is OK, testing is OK. But IPFire-GUI tells me that for 'rDNS' "Reverse lookup failed". Can anyone confirm? Reason? Best, Matthias

3 10

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development August 2018