Development October 2019

development@lists.ipfire.org

12 participants
77 discussions

[PATCH] tshark: Update to version 3.0.5
by Erik Kapfer 04 Oct '19

04 Oct '19

The jump from 3.0.2 to 3.0.5 includes several bugfixes, updated protocols and new and updated capture support. The complete release notes can be found in here --> https://www.wireshark.org/docs/relnotes/ . Signed-off-by: Erik Kapfer <ummeegge(a)ipfire.org> --- config/rootfiles/packages/tshark | 6 +++--- lfs/tshark | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/config/rootfiles/packages/tshark b/config/rootfiles/packages/tshark index 816ab920b..dffd2a507 100644 --- a/config/rootfiles/packages/tshark +++ b/config/rootfiles/packages/tshark @@ -608,10 +608,10 @@ usr/bin/tshark #usr/include/wireshark/wsutil/xtea.h #usr/lib/libwireshark.so usr/lib/libwireshark.so.12 -usr/lib/libwireshark.so.12.0.2 +usr/lib/libwireshark.so.12.0.5 #usr/lib/libwiretap.so usr/lib/libwiretap.so.9 -usr/lib/libwiretap.so.9.0.2 +usr/lib/libwiretap.so.9.0.5 #usr/lib/libwscodecs.so usr/lib/libwscodecs.so.2 usr/lib/libwscodecs.so.2.0.0 @@ -755,7 +755,7 @@ usr/share/wireshark/dtds/xcap-error.dtd #usr/share/wireshark/help/capture_filters.txt #usr/share/wireshark/help/capturing.txt #usr/share/wireshark/help/display_filters.txt -#usr/share/wireshark/help/faq.py +#usr/share/wireshark/help/faq.txt #usr/share/wireshark/help/getting_started.txt #usr/share/wireshark/help/overview.txt #usr/share/wireshark/help/toc diff --git a/lfs/tshark b/lfs/tshark index 562c70e26..7c9cd6613 100644 --- a/lfs/tshark +++ b/lfs/tshark @@ -24,7 +24,7 @@ include Config -VER = 3.0.2 +VER = 3.0.5 THISAPP = wireshark-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -33,7 +33,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tshark DEPS = "krb5" -PAK_VER = 2 +PAK_VER = 3 ############################################################################### # Top-level Rules @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = e344675283d6329a4bc213b621d7f46a +$(DL_FILE)_MD5 = d01fdc4e78ef8ea70f20616c91419bd9 install : $(TARGET) -- 2.12.2

1 0

libloc: Approaching feature-completeness
by Michael Tremer 04 Oct '19

04 Oct '19

Good morning ladies and gentlemen, I would like to bring everyone up to speed since we have made huge progress on libloc and I would like to keep this momentum! What has happened in the last couple of weeks? Stefan has been working on Perl bindings which are essential to launch this on IPFire 2. The web UI makes a lot of use of looking up IP addresses and displaying the correct flag. That needs to be fast and therefore we could not rely on a CLI wrapper for location-query(8). The Perl module is super-lightweight and does not implement all features of libloc. Mainly it is ready-only since we do not need another tool to compose a database. For our purposes this is sufficient and easier to maintain. If anyone else needs more features, they can always be added later. The other thing I have been working on (with a lot of sweat, blood and tears) is walking through the tree to search it. This has been an outstanding issue for a long time and was fairly difficult to implement since a standard DFS was not possible to use. We have encoded information into the edges to store less information and this made it extremely difficult to extract again - on top of that comes that the implementation could not be recursive to be used in the Python wrapper. We now have a re-entrant search which performs super fast and uses very little memory. The depth of the tree is limited to 128, although we would never get too close to that. That results in a maximum stack size of 256 + 1 nodes and we walk through every edge and node only once which results in a performance of O(1) for computing and memory. It could not get better than that. Finally, I have extended the Python bindings to make use of all of this so that all networks belonging to an AS can now be listed with “list-networks-by-as” and all networks belonging to a country can be listed with “list-networks-by-cc”. I have added a man-page for location-query(8) which can be found here: https://man-pages.ipfire.org/libloc/location-query.html As far as I can see this now, we are approaching to be feature-complete for a 1.0 release. Of course there is still a long way to test this and make sure that we do not have any bugs in the database format or the code. Another major road block is that we do not have a database that is ready for prime time, yet, but the good news is that the toolkit is almost there! Best, -Michael

1 0

[PATCH] speedtest-cli: New package
by Michael Tremer 03 Oct '19

03 Oct '19

This is a CLI implementation to test the speed of an internet connection. I find this quite useful when there is no access to a client computer on the network and this will give you a rough idea about the connection speed. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- lfs/speedtest-cli | 83 +++++++++++++++++++++++++++++++++++++++++++++++ make.sh | 1 + 2 files changed, 84 insertions(+) create mode 100644 lfs/speedtest-cli diff --git a/lfs/speedtest-cli b/lfs/speedtest-cli new file mode 100644 index 000000000..aa2af73bb --- /dev/null +++ b/lfs/speedtest-cli @@ -0,0 +1,83 @@ +############################################################################### +# # +# IPFire.org - A linux based firewall # +# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see <http://www.gnu.org/licenses/>. # +# # +############################################################################### + +############################################################################### +# Definitions +############################################################################### + +include Config + +VER = 2.1.2 + +THISAPP = speedtest-cli-$(VER) +DL_FILE = $(THISAPP).tar.gz +DL_FROM = $(URL_IPFIRE) +DIR_APP = $(DIR_SRC)/$(THISAPP) +TARGET = $(DIR_INFO)/$(THISAPP) +PROG = speedtest-cli +PAK_VER = 1 + +DEPS = "" + +############################################################################### +# Top-level Rules +############################################################################### + +objects = $(DL_FILE) + +$(DL_FILE) = $(DL_FROM)/$(DL_FILE) + +$(DL_FILE)_MD5 = a49ad088331810fc9442e8a5c59de713 + +install : $(TARGET) + +check : $(patsubst %,$(DIR_CHK)/%,$(objects)) + +download :$(patsubst %,$(DIR_DL)/%,$(objects)) + +md5 : $(subst %,%_MD5,$(objects)) + +dist: + @$(PAK) + +############################################################################### +# Downloading, checking, md5sum +############################################################################### + +$(patsubst %,$(DIR_CHK)/%,$(objects)) : + @$(CHECK) + +$(patsubst %,$(DIR_DL)/%,$(objects)) : + @$(LOAD) + +$(subst %,%_MD5,$(objects)) : + @$(MD5) + +############################################################################### +# Installation Details +############################################################################### + +$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) + @$(PREBUILD) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && python setup.py build + cd $(DIR_APP) && python setup.py install --root=/ + @rm -rf $(DIR_APP) + @$(POSTBUILD) diff --git a/make.sh b/make.sh index f8370ca0b..d87e1faae 100755 --- a/make.sh +++ b/make.sh @@ -1628,6 +1628,7 @@ buildipfire() { lfsmake2 firmware-update lfsmake2 tshark lfsmake2 geoip-generator + lfsmake2 speedtest-cli } buildinstaller() { -- 2.20.1

2 2

[PATCHv2] perl: Testsuite: Add tests for lookup_asn()
by Stefan Schantl 02 Oct '19

02 Oct '19

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/perl/t/Location.t | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/src/perl/t/Location.t b/src/perl/t/Location.t index 55a18f3..fd43946 100644 --- a/src/perl/t/Location.t +++ b/src/perl/t/Location.t @@ -11,7 +11,7 @@ use warnings; # Where to find the test database. my $testdb = $ENV{'database'}; -use Test::More tests => 5; +use Test::More tests => 6; BEGIN { use_ok('Location') }; ######################### @@ -42,3 +42,12 @@ if(defined($country_code)) { fail("Test 5 - Lookup country code for address not $country_code = &Location::lookup_country_code($db, "a.b.c.d"); if(defined($country_code)) { fail("Test 6 - Lookup country code for invalid address.") } + +my $as_number = &Location::lookup_asn($db, $address); +ok($as_number eq "204867", "Test 7 - Lookup Autonomous System Number for $address."); + +$as_number = &Location::lookup_asn($db, "1.1.1.1"); +if(defined($as_number)) { fail("Test 8 - Lookup Autonomous System Number for address not in Database.") } + +$as_number = &Location::lookup_asn($db, "a.b.c.d"); +if(defined($as_number)) { fail("Test 9 - Lookup Autonomous System Number for invalid address.") } -- 2.20.1

1 0

[PATCHv2] perl: Add function to perform AS number lookups.
by Stefan Schantl 02 Oct '19

02 Oct '19

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/perl/Location.xs | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/src/perl/Location.xs b/src/perl/Location.xs index cdbc7e7..b6c4dc5 100644 --- a/src/perl/Location.xs +++ b/src/perl/Location.xs @@ -113,6 +113,29 @@ lookup_country_code(db, address) OUTPUT: RETVAL +SV* +lookup_asn(db, address) + struct loc_database* db; + char* address; + + CODE: + RETVAL = &PL_sv_undef; + + // Lookup network + struct loc_network *network; + int err = loc_database_lookup_from_string(db, address, &network); + if (!err) { + // Extract the ASN + unsigned int as_number = loc_network_get_asn(network); + if (as_number > 0) { + RETVAL = newSViv(as_number); + } + + loc_network_unref(network); + } + OUTPUT: + RETVAL + void DESTROY(db) struct loc_database* db; -- 2.20.1

1 0

[PATCH 1/2] perl: Fix lookup if given address is invalid or not in DB.
by Stefan Schantl 02 Oct '19

02 Oct '19

In this case now undef will be returned. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/perl/Location.xs | 20 ++++++++------------ 1 file changed, 8 insertions(+), 12 deletions(-) diff --git a/src/perl/Location.xs b/src/perl/Location.xs index ab27f0b..cdbc7e7 100644 --- a/src/perl/Location.xs +++ b/src/perl/Location.xs @@ -92,27 +92,23 @@ get_license(db) # # Lookup functions # -char* +SV* lookup_country_code(db, address) struct loc_database* db; char* address; CODE: + RETVAL = &PL_sv_undef; + // Lookup network struct loc_network *network; int err = loc_database_lookup_from_string(db, address, &network); - if (err) { - croak("Could not look up for %s\n", address); - } - - // Extract the country code - const char* country_code = loc_network_get_country_code(network); - loc_network_unref(network); + if (!err) { + // Extract the country code + const char* country_code = loc_network_get_country_code(network); + RETVAL = newSVpv(country_code, strlen(country_code)); - if (country_code) { - RETVAL = strdup(country_code); - } else { - RETVAL = NULL; + loc_network_unref(network); } OUTPUT: RETVAL -- 2.20.1

1 1

[PATCH 1/2] strongswan: Update 5.8.1
by Michael Tremer 02 Oct '19

02 Oct '19

Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- lfs/strongswan | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/strongswan b/lfs/strongswan index e326886cf..c6f428e41 100644 --- a/lfs/strongswan +++ b/lfs/strongswan @@ -24,7 +24,7 @@ include Config -VER = 5.8.0 +VER = 5.8.1 THISAPP = strongswan-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = e05f2d16a7479a2a9591609c256d523a +$(DL_FILE)_MD5 = 5a6b9980cd1ac4fad3c24b55ed960ac9 install : $(TARGET) -- 2.20.1

1 1

[PATCH] WIO:Add fr language
by Stephan Feddersen 01 Oct '19

01 Oct '19

--- src/wio/lang/wio.fr.pl | 158 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 158 insertions(+) create mode 100644 src/wio/lang/wio.fr.pl diff --git a/src/wio/lang/wio.fr.pl b/src/wio/lang/wio.fr.pl new file mode 100644 index 000000000..088c8105e --- /dev/null +++ b/src/wio/lang/wio.fr.pl @@ -0,0 +1,158 @@ +%tr = (%tr, +'wio' => 'Qui est en ligne ?', +'wio stat' => 'Etat actuel :', +'wio checked' => 'Dernière mise à jour', +'wio name' => 'Nom d\'hôte ou FQDN ', +'wio ipadress' => 'Adresse IP ', +'wio image' => 'Statut', +'wio up' => 'Actif', +'wio down' => 'Inactif', +'wio err' => 'Erreur', +'wio warn' => 'Alerte', +'wio_import_csv' => 'Fichier CSV :', +'wio_import_hosts' => 'Configuration hôtes (var/ipfire/main/hosts) ?', +'wio_import_data' => 'Import paramètres pour ', +'wio_import_data1' => ' correct :', +'wio_import_data2' => ' import :', +'wio_import' => 'Importer', +'wio_import_info' => 'message :', +'wio_import_file' => 'Import de client(s) depuis :', +'wio_import_info_csv' => 'Il n\'y a pas de nouvelle config à importer !', +'wio settings' => 'Configuration :', +'wio enabled' => 'Activer le service ?', +'wio min' => 'minute(s)', +'wio cron' => 'Interval de temps pour la mise à jour :', +'wio_ovpn_cron' => 'Interval de temps pour vérifier l\'état d\'OpenVPN RW et IPSec :', +'wio_save' => 'Sauvegarder', +'wio_error' => 'message d\'erreur :', +'wio_info' => 'message :', +'wio_back' => 'Retour', +'wio_use' => 'Importer cette config ?', +'wio_ip_error' => 'Adresse IP invalide.', +'wio_host_error' => 'Nom d\'hôte invalide.', +'wio_host_exists' => 'Le nom d\'hôte est déjà utilisé.', +'wio_host_empty' => 'Aucun nom d\'hôte n\'a été enregistré !', +'wio_ip_exists' => 'Adresse IP déjà utilisée.', +'wio_ip_empty' => 'Aucune adresse n\'a été enregistrée !', +'wio_import_fixleases' => 'Configuration DHCP (var/ipfire/dhcp/fixleases) ?', +'wio_import_leases' => 'Import settings :', +'wio network' => 'Réseau', +'wio_refresh' => 'maj de tous les clients maintenant', +'wio_fqdn_error' => 'Nom de domaine (FQDN) invalide ! Veuillez ne pas utiliser de caractères spéciaux ni de blancs dans le nom de domaine.', +'wio_edit' => 'Modifier les paramètres :', +'wio_dyndns' => 'DynDNS ', +'wio_dyndns_hosts' => 'Nom(s) DynDNS', +'wio_dyndns_refresh' => 'Mise à jour IP de l\'hôte DynDNS', +'wio_dyndns_on' => 'DynDNS Host activé (cliquer pour désactiver)', +'wio_dyndns_off' => 'Hôte DynDNS désactivé (cliquer pour activer)', +'wio_dyndns_info' => 'Aucune adresse IP enregistrée, car apparemment aucune connexion n’existe sur Internet. Avec la prochaine connexion Internet est réalisée une actualisation de l\'IP des hôtes DynDNS.', +'wio_no_csv' => 'Le fichier n\'a pas l\'extension .csv', +'wio_no_csv_error' => 'Veuillez ne pas utiliser de caractères spéciaux ou vides dans le nom de fichier.', +'wio_no_file_selected' => 'Aucun fichier choisi !', +'wio_import_infos' => 'Importer les configurations :', +'wio_import_infos_csv' => 'NOTE : Seuls les enregistrements de données marqués "Importer ces paramètres ?" sont considérés comme importants ! Si des enregistrements de données avec une double adresse IP ou des noms d\'hôte doivent se faire, seul le premier enregistrement de données sera importé et les autres enregistrements de données (avec les adresses IP ou noms d\'hôte doubles) ne seront pas pris en compte !', +'enable disable dyndns' => 'Activer ou désactiver l\'hôte DynDNS', +'wio_msg' => 'L\'état du ou des clients examinés est mis à jour...', +'wio_lanname' => 'Nom LAN', +'wio_wanname' => 'Nom WAN', +'wio_sc_refresh' => 'Mettre à jour le client maintenant', +'wio_edit_settings' => 'Ajout manuel d\'un client :', +'wio_edit_client' => 'Edition client :', +'wio_graphs' => 'Afficher le graphique', +'wio_no_graphs' => 'Pas de graphique disponible', +'wio_graphs_stat' => 'Graphique pour', +'wio_vpn_con' => 'Connexion(s) VPN :', +'wio_wan_con' => 'Connexion WAN :', +'wio_clients' => 'Clients :', +'wio click to disable' => 'Activé', +'wio click to enable' => 'Désactivé', +'wio_net_scan' => 'Scan réseau(s) :', +'wio_net_scan_vl' => 'Scan réseau', +'wio_net_scan_l' => 'sur', +'wio_net_scan_r' => '', +'wio_net_scan_green' => 'vert', +'wio_net_scan_blue' => 'bleu', +'wio_net_scan_orange' => 'orange', +'wio_net_scan_run' => 'Démarrer la recherche', +'wio_sort_host' => 'Trier noms d\'hôtes (FQDN)', +'wio_sort_ip' => 'Trier adresses IP', +'wio_logging' => 'Activer la journalisation (/var/log/messages) ?', +'wio_no_image' => 'SANS STATUT', +'wio_ovpn_con' => 'OpenVPN - Connexion(s) :', +'wio_connected' => 'Connecté depuis', +'wio_wan_up' => 'CONNECTE', +'wio_wan_down' => 'NON CONNECTE', +'wio_n2n' => 'Connexion site-à-site', +'wio_rw' => 'Connexion client nomade', +'wio_mailremark_enabled' => 'Ajouter une remarque du client au corps de l\'email ?', +'wio_mail_online_on' => 'Email en ligne activé (cliquer pour désactiver)', +'wio_mail_online_off' => 'Email en ligne désactivé (cliquer pour activer)', +'wio_mail_offline_on' => 'Email hors ligne activé (cliquer pour désactiver)', +'wio_mail_offline_off' => 'Email hors ligne désactivé (cliquer pour activer)', +'wio_mail_online' => 'Activer ou désactiver email en ligne', +'wio_mail_offline' => 'Activer ou désactiver email hors ligne', +'wio_sendemail' => 'Envoi mail changement d\'état ', +'wio_hwaddress' => 'Adresse MAC', +'wio_iface' => 'Interface', +'wio_client_enable' => 'Hôte actif ?', +'wio_ping_send' => 'Envoi ping vers ', +'wio_link_open' => 'Ouvrir le lien avec ', +'enable disable client' => 'Activer ou désactiver client', +'wio_client_on' => 'Client activé (cliquer pour désactiver)', +'wio_client_off' => 'Client désactivé (cliquer pour activer)', +'wio_webinterface' => 'LIEN', +'wio_webinterface_link' => 'Suivre le lien', +'wio_ip' => 'Envoi ping vers IP activé', +'wio_fqdn' => 'Envoi ping vers FQDN activé', +'wio_ip_on' => 'Envoi ping vers IP activé (cliquer pour activer FQDN)', +'wio_fqdn_on' => 'Envoi ping vers FQDN activé (cliquer pour activer IP)', +'wio_client_add' => 'Valider ces paramètres', +'wio_config' => 'Configurer client(s) :', +'wio_settings_msg' => 'Paramètres de configuration :', +'wio_settings_msg_hint' => 'Dans cette zone, vous pouvez personnaliser des paramètres du module.', +'wio_sub' => 'WIO Client-Status-Mail', +'wio timeout' => 'Temps de réponse max. du ping :', +'wio sec' => 'seconde(s)', +'wio_add' => 'Paramètres :', +'wio_no_add' => 'Client est disponible', +'wio_id' => '#', +'wio_online' => 'En ligne', +'wio_offline' => 'Hors ligne', +'wio_status' => 'WIO Client-Status', +'wio_mail_style' => 'Envoyer les messages d\'état du client WIO en tant que ', +'wio_mail_smail' => 'Email collectif', +'wio_mail_email' => 'Email simple', +'wio_mail_ovpnrw' => 'Activer les messages d\'état OpenVPN RW et IPSec ?', +'wio_edit_set' => 'Configuration', +'wio_service' => 'Paramètres du service "Qui est en ligne ?" :', +'wio_dyndns_success' => 'IP DynDNS identifié et enregistré !', +'wio_remove_all' => 'Enlever tous les clients', +'wio_remove_all_hint' => 'Etes-vous sûr de supprimer tous les clients ?', +'wio_remove_client' => 'Enlever le client', +'wio_remove_client_hint' => 'Etes-vous sûr de supprimer le client ?', +'wio_arp_table_entries' => 'Ajout de client(s) depuis la table ARP :', +'wio_activ' => 'Actif', +'wio_check' => 'Vérif.', +'wio_common_name' => 'Hôte/IP distant', +'wio_msg_left' => 'La recherche du réseau ', +'wio_msg_green' => 'vert', +'wio_msg_blue' => 'bleu', +'wio_msg_orange' => 'orange', +'wio_msg_center' => 'sur l\'interface', +'wio_msg_right' => 'est en cours.', +'wio_msg_hint' => 'Un moment SVP...', +'wio_last_update' => 'Dernière mise à jour', +'wio_disable_hint' => 'Attention ! Tous les paramètres vont être réinitialisés , y compris le client à vérifier !', +'wio_clientremark' => 'Afficher la remarque ?', +'wio_already_running' => 'Cette vérification est déjà en cours d\'exécution !', +'wio_error_function' => 'Cette fonction est temporairement indisponible, car en arrière-plan les états du client sont mis à jour (actif / inactif).', +'wio_shutdown' => 'Arrêter IPFire quand tous les clients sont "hors ligne" ?', +'wio_unknown_lan' => 'INCONNU', +'wio_red_lan' => 'ROUGE', +'wio_search' => 'Recherche d\'hôtes actifs sur le réseau local...', +'wio_answer' => 'Answer', +'wio_answer_time' => 'Temps de réponse', +'wio_scriptruntime' => 'Temps d\'exécution du script', +'wio_show_table_off' => 'Cacher la table', +'wio_show_table_on' => 'Afficher la table', +); -- 2.17.1

1 0

[PATCH] WIO: Add french translation file
by Stephan Feddersen 01 Oct '19

01 Oct '19

--- config/rootfiles/packages/wio | 1 + lfs/wio | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/config/rootfiles/packages/wio b/config/rootfiles/packages/wio index 065d0be10..899dccf06 100644 --- a/config/rootfiles/packages/wio +++ b/config/rootfiles/packages/wio @@ -16,6 +16,7 @@ var/log/rrd/wio var/ipfire/addon-lang/wio.de.pl var/ipfire/addon-lang/wio.en.pl var/ipfire/addon-lang/wio.tr.pl +var/ipfire/addon-lang/wio.fr.pl var/ipfire/menu.d/EX-wio.menu srv/web/ipfire/html/images/wio srv/web/ipfire/html/images/wio/add.png diff --git a/lfs/wio b/lfs/wio index 3d788efda..58ab16620 100644 --- a/lfs/wio +++ b/lfs/wio @@ -15,7 +15,7 @@ THISAPP = wio-$(VER) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = wio -PAK_VER = 5 +PAK_VER = 6 ############################################################################### # Top-level Rules @@ -58,6 +58,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) install -v -m 644 $(DIR_APP)/wio/images/* /srv/web/ipfire/html/images/wio/ install -v -m 644 $(DIR_APP)/wio/lang/wio.de.pl /var/ipfire/addon-lang/ install -v -m 644 $(DIR_APP)/wio/lang/wio.en.pl /var/ipfire/addon-lang/ + install -v -m 644 $(DIR_APP)/wio/lang/wio.fr.pl /var/ipfire/addon-lang/ install -v -m 644 $(DIR_APP)/wio/lang/wio.tr.pl /var/ipfire/addon-lang/ install -v -m 644 $(DIR_APP)/wio/EX-wio.menu /var/ipfire/menu.d/ install -v -m 644 $(DIR_APP)/wio/config/backup/includes/wio /var/ipfire/backup/addons/includes/wio -- 2.17.1

1 0

Re: Extra "Grey" interfaces on IpFire
by Michael Tremer 01 Oct '19

01 Oct '19

Hi, > On 25 Sep 2019, at 16:12, Klaus Gimm <teclis22(a)schatten-welt.de> wrote: > > Dear Michael, > > thanks for getting back to me. > Right now i am not sure if i saw you post in the german subsection of the ipfire Forum hence i stick to english :) Yes, but this list is English only. You also forgot to copy it. > My use case would look like this: > > I as a <SuperUser in a SOHO environment> > want to <have the Option to add more physical Interfaces (suggested Name "Grey") to the Hardware of the ipfire and configure them via the GUI. I want them to be sperated by the rest of the Networks by Default as a safe area. I want the option to configure individually (read as: allow) all offered Services (like DHCP, DNS, Red Access, Port forwarding, etc.) to be accessible from devices in this new physical Network.>. > My intended use is <a safe Network area, to use as a Kind of test lab, wich has Internet Access, but is otherwise entirely seperated from green, blue and orange. There i can try out new Things, products and Setup machines/devices that maybe compromised by a Virus or malware. This works by plug and Play, as the Network ports in the area are connected to their own seperate Switch. The Switch has an uplink to the Grey Interface on the ipfire with in return provices red Access, dhcp, etc. >. Why - under any circumstances - would you connect a machine that has malware on it to a network? > Role Definition "SuperUser": > Not an full Administrator, but motivated home user. Curious, able to read up on a few wikis and how tos, but 95%windows user. No experince with Linux Systems or their adminstration. Maintains the other Networks on a rudimentary Level (file Server in green, mail Server in orange and the WDS infrastructure in blue). > > > Environment Definition "SoHo": > Approx 10-15 machines in total, with less then 10 active at any given time. A very large home Office. > > > My personal Setup and reason for asking for this Feature: > I have used IPcop over the years and have my Network set up to ist interaces, including Grey. I made the Switch to ipfire due to ipcops end of life. My Basement is Setup on a Grey Segment, i have the ports connected to a Switch and that Switch is connected to the Firewall. there i set up new machines when i Need to do so, reinstall or try to help friends and neighbours with machiens of unknown protection Level and smimilar. I find this Feature to be very Handy indeed. And since an ipcop add on exists/existed - i had the high hopes it would be possible to Transfer the functionally into ipfire. > > > For a larger Company Network i understand the risk of creating a Singe Point of failure, but want to put forth that most likely a backup Hardware solution will be hept at the ready. In my SoHo Environment that would be less of an issue, while it would certainly suck and blow at the same time, it would be managable. > > I would apprecaite it if you find the time to look into the matter if a gui based Feature similar to this use case can be included in ipfire. Even with the Speed drawback (especially when compared to a single Switch with vlans), the ease of use and implementation is worth the trade off. I will definitely not have time to take on this project. We are already years behind with roadmaps of all kinds of projects and I have pledged at the last developer summit to not take on anything else before at least a good number of the open things are done. But I can of course help out and advice. Best, -Michael > > Thanks a lot in advance. > > yours sincerely, > > Klaus > > > > ----- Original Message ----- > From: Michael Tremer [mailto:michael.tremer@ipfire.org] > To: Klaus Gimm [mailto:teclis22@schatten-welt.de] > Cc: development(a)lists.ipfire.org > Subject: Re: Extra "Grey" interfaces on IpFire > > >> Hi Klaus, >> >> Thanks for your email. >> >> First of all, I would like to point out that it might be a very bad idea to >> add too many interfaces to the firewall. It will make it a big single-point >> of failure and very often a switch can route traffic between networks much >> more efficiently. Firewalls are always slow. >> >> However, you can just add more interfaces on the console and use them in the >> firewall by creating a subnet. >> >> What would be your use-case for this? >> >> -Michael >> >>> On 24 Sep 2019, at 15:30, Klaus Gimm <teclis22(a)schatten-welt.de> wrote: >>> >>> Dear Sir or Madam, >>> >>> as a Long time ipcop user i had installed this add on for a Long time and >> it >>> worked great for me: >>> >>> http://www.ban-solms.de/t/IPCop-xtiface.html >>> >>> After the Switch to Ipfire as the follow-up Project to ipcop i do miss it >>> dearly. >>> >>> >>> Is it possible to implement this functionality into IpFire? I am >>> unfortunatley not a developer so i cant adjust the package or redesign it. >> >>> >>> Is there a ticket somewhere to suggest Features for developement? >>> >>> Thanks a lot in advance. >>> >>> Yours sincerely >>> >>> Klaus >> >> >>

2 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development October 2019