Development March 2013

development@lists.ipfire.org

9 participants
15 discussions

DynDNS support for ddns project.
by Stefan Schantl 16 Jun '14

16 Jun '14

Hello guys, i've created a patch for the Dynamic DNS client for IPFire. (http://git.ipfire.org/?p=oddments/ddns.git;a=summary) My patch will add support for the very popular "dyndns.org" provider. However I wasn't able to test my changes, because I don't have any account there and I seems new members have to purchase to use use it. So, I need your help to test my changes and finally be able to support that provider in the next major version of IPFire. Best regards, Stefan

2 3

Strongswan 5 issues in IPFire 2.13
by Michael Tremer 14 Jul '13

14 Jul '13

Hey, when IPFire 2.13 was released, the latest version of strongswan was shipped with it. Apparently, some people have problems operating their VPN connections with it. This is a brief summary from my point of view: The first version with these changes that might cause trouble has been released in August 2012 with a big headline which said: Testers needed. * http://planet.ipfire.org/post/testers-needed-strongswan-5-0-0 * http://lists.ipfire.org/pipermail/development/2012-August/000039.html My mail on the mailing list states: > It should not require any manual interaction at all. Please install > and give me feedback about the connection stability and the > interoperability with other (proprietary) implementations. It's as if someone had known... If you think, we didn't have people who actually tested this, you are wrong. There were a lot of people and the reports I got of them were all like: "Yeah, this made my VPN tunnels more stable". Especially when the configuration of one connection has been edited, the other connections remained established all the time. A big advantage over the implementation in IPFire 2.11! Eight days before the final version of IPFire 2.13 was released, people started complaining. It was not a real bug report, but just a shout out "something went wrong, I could not be bothered, so I downgraded!". No technical details, no logs, no what-so-ever. Since the release, a bunch of more people complained about similar problems. Again, no one provided (or was willing to provide) information that helps to solve the problem. Nobody was even bothered to create a proper bug report in bugzilla. My VPN connections run for more than six months with strongswan 5 and I never had any problems since then. If someone really has interest in solving this, maybe it is time that you start the action and help the developers. This is not a project where you can tell people what they should do (for you). This is an Open Source project - so everyone is able to read the source code, check what changes have been made and to provide a fix. -Michael

4 5

connections.cgi: iptables connection tracking.
by Kay-Michael Köhler 05 Jul '13

05 Jul '13

Hello everyone i'm going to start development on connections.cgi to have some kind of sorting at "iptables connection tracking" (status->connections) I think it is a good idea to have the following (asc/desc) sort options: "Protocol" "Source IP:Port" "Destination IP Port" "Connection status" If you guys agree it would be a please for me to share and post the patch here when i'm done. Regards Kay-Michael

2 12

Content-type with charset at showhttpheaders in header.pl
by Kay-Michael Köhler 28 Mar '13

28 Mar '13

I suggest to set the charset with the Content-type. That will make things go faster with the browsers. Regarding to: https://developers.google.com/speed/docs/best-practices/rendering#SpecifyCh… Specifying a character set in the HTTP response headers of your HTML documents allows the browser to begin parsing HTML and executing scripts immediately. Regards, Kay-Michael diff --git a/config/cfgroot/header.pl b/config/cfgroot/header.pl index bbb0eca..7c36820 100644 --- a/config/cfgroot/header.pl +++ b/config/cfgroot/header.pl @@ -164,7 +164,7 @@ print "Pragma: no-cache\n"; print "Cache-control: no-cache\n"; print "Connection: close\n"; - print "Content-type: text/html\n\n"; + print "Content-type: text/html; charset=UTF-8\n\n"; } sub is_menu_visible($) {

2 2

Fwd: Update-Accelerator 3.0
by Jan Behrens 12 Mar '13

12 Mar '13

---------- Forwarded message ---------- From: Jan Behrens <jan.behrensx(a)googlemail.com> Date: 2013/3/6 Subject: Re: Update-Accelerator 3.0 To: Michael Tremer <michael.tremer(a)ipfire.org> Hi, okay dynamic is not always really dynamic. Youtube-Videos are also dynamic content to squid. So is everything with ? in the URL threaded as dynamic in squid. And that is why squid behaves like he does: refresh_pattern -i (/cgi-bin/|\?) 0 0% 0 Of course there is no sense in caching "really" dynamic content, as you say, it is generated per request or per client. But for some big names, there is sense in caching some pseudo dynamic content excluding the really dynamic ones. well it would be possible to cache HTTPS - Content with "Man-in-the-Middle" Squid. The client will make a HTTPS-connection to squid and squid will make it's connection to the original destination server. At this point squid can serve and save content. 2013/3/6 Michael Tremer <michael.tremer(a)ipfire.org> > Hi, > > it is great that you take part in the discussion. > > On Wed, 2013-03-06 at 20:13 +0100, Jan Behrens wrote: > > > > I agree to Fajar's intention! > > We need a way more dynamic content caching capability. > > No, I think that is exactly the wrong way. Dynamic content should not be > cached because it is _dynamic_. It's very unlikely that someone else > will get the same response to a request. > > The only thing that makes sense it to cache _static_ content like > avatars, videos, (big) pictures. But actually this is the proxy's task, > which apparently does not work very well for some things. > > > I think the way to go is an written Addon for squid which does the > > needed work. > > Here is a point to start reading about: > > http://wiki.squid-cache.org/Features/AddonHelpers#HTTP_Redirection > > What work? Re-implementing an extra cache is not a good idea. At least > not for small files. > > > In the company I work in, it is as follows: > > The most traffic is secured (HTTPS). > > Just think about the hosting providers like Dropbox, Google-Drive, and > > so on. There probably are files which are needed by many people and > > then downloaded by them, and you can't legally cache them. That's a > > shame. > > Files transferred over HTTPS cannot be cached by the proxy. This has no > legal reasons. It is just technically impossible. > > > > > 2013/3/6 Michael Tremer <michael.tremer(a)ipfire.org> > > Hello, > > > > On Wed, 2013-03-06 at 16:57 +0800, Fajar Ramadhan wrote: > > > Hello there, replying inline > > > > > > > Any other ideas? > > > > > > Hyper Cache > > > > > > That's a possibility. I didn't know that anyone is still using > > the word > > hyper :D > > > > > > >> Michael from IPFire.org told me that you may have some > > > requirements or > > > > >> ideas for an improved update accelerator > > > > > > Firstly, this idea is not part of update accelerator > > thingie. > > > > > > Well, we are thinking about a rewrite, so every idea is > > welcome. Nobody > > promises that it will be implemented, but in the process of > > searching > > for the real purpose of the update accelerator, feel free to > > write > > anything on your mind if you think it is worth considering. > > > > > > >> cause we plan to extend the > > > > >> current version (at this point it look like a complete > > rewrite > > > o_O) > > > > > > complete rewrite, maybe :) > > > > ? > > > > > My idea is basically out from squid 2.7 abilities to cache > > dynamic > > > contents using built-in storeurl feature. > > > > > http://www.squid-cache.org/Doc/config/storeurl_rewrite_program/ > > > > > > As we are looking into the (far) future, we cannot possibly > > stick to an > > old version of squid. Even the currently in IPFire 2 running > > version 3.1 > > is "old" right now. > > > > Maybe it is also a good idea to design this without > > considering squid as > > the default thing to work with it. It should be possible to > > drop squid > > and use an other proxy server - although I really don't have > > plans for > > that right now, because squid is the best proxy server one can > > have. > > > > > Wiki for example how to use storeurl > > > http://wiki.squid-cache.org/Features/StoreUrlRewrite > > > > > > We already know that squid 2.7 is already obsolete - but > > this feature > > > was extremely useful for slow internet users (just like me > > in > > > Indonesia, where bandwidth is expensive). Built-in storeurl > > feature > > > inside squid 2.7 has ability to cache or manipulating > > caching for > > > dynamically hosted contents (dynamic contents). Example for > > Facebook's > > > CDN : > > > > > > It is interesting that this has not been ported to squid 3.x. > > Apparently, the reason is that this the implementation was > > poorly > > written and so people thought about replacing it entirely. It > > also looks > > like there are not many users of this feature. > > > > > If squid already cache one of this picture then all same > > pictures from > > > hprofile-ak-prn1, hprofile-ak-prn2, hprofile-ak-prn3 ..... > > > hprofile-ak-prnX will result cache hit - squid not necessary > > to fetch > > > same content from different cdn urls, since its already in > > cache and > > > request got rewritten by storeurl. All contents from > > Facebook such as > > > javascript, css, image, even sound and videos will have very > > high > > > chance to get hits from squid. > > > > > > Looking at your user data your provided further below, the > > important > > stuff to cache is big files. That's not only video and all > > sorts of > > downloads. Nowadays javascript code of sites like Facebook is > > of the > > size of one or two megabytes*. > > > > * Didn't check. Read this somewhere, some time ago. > > > > What I get from this is that we should design the rewrite to > > literally > > cache anything. > > > > A technical question from me: Why cannot we use the internal > > cache of > > squid to do so, but code our own caching proxy that is > > actually queried > > by the real caching proxy? I think even with a very fast > > implementation, > > squid will always be much faster. > > > > > This method works on almost all web that serving dynamic > > contents for > > > its visitors : Youtube videos (all resolutions) , > > blogger.com > > > contents, online games patch files, google maps, ads, imeem, > > etc. This > > > is something that you cannot done with squid 3.x. > > > > > > This cannot be done with squid 3 AT THE MOMENT. > > > > > Another approach to make it work on squid 3 is using ICAP - > > I'm not > > > familiar with this one since I never used it. You can see > > some > > > reference about ICAP to cache dynamic contents here (for me > > it seems > > > difficult to do it) : > > > > > > http://www.squid-cache.org/mail-archive/squid-users/201206/0074.html > > > > > > As pointed out earlier, I like ICAP. The protocol has a lot of > > advantages and makes us independent from squid (not to replace > > it, but > > being not dependent on a certain version - they all talk > > ICAP). > > > > Can someone find out if somebody already implemented this kind > > of thing? > > > > Terima kasih, > > -Michael > > > > > > _______________________________________________ > > Development mailing list > > Development(a)lists.ipfire.org > > http://lists.ipfire.org/mailman/listinfo/development > > > > > > > >

4 8

PPPOE
by R. W. Rodolico 10 Mar '13

10 Mar '13

I don't know if this is a bug, or if I just haven't found the correct page in the user manual. I built a router and set up red to be dhcp. Then, when I got to the client site, I realized they used PPPOE. I started setup, and changed the red connection to PPPOE, but nothing came up to give the username and password. I saved the changes, then went into the web UI, and saw the place to choose the profile from an (empty) list, but found no way to create the PPPOE profile from there either. Is this a bug? Or is it just something that has to be manually done. Rod -- R. W. "Rod" Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 http://www.dailydata.net 214.827.2170

2 2

IPFire 3.x packfire
by Thomas Ebert 10 Mar '13

10 Mar '13

I've tried to use this image: http://people.ipfire.org/~stevee/IPFire_3.x/VM-Images/20121006/i686/ipfire-… But i get the following error while trying these commands: pakfire install pakfire-builder pakfire update Loading installed packages Time: 00:00:17 Traceback (most recent call last): File "/bin/pakfire", line 61, in <module> cli.run() File "/usr/lib/python2.7/site-packages/pakfire/cli.py", line 286, in run return func() File "/usr/lib/python2.7/site-packages/pakfire/cli.py", line 306, in handle_update **args) File "/usr/lib/python2.7/site-packages/pakfire/api.py", line 53, in update allow_vendorchange=allow_vendorchange, allow_archchange=allow_archchange) File "/usr/lib/python2.7/site-packages/pakfire/base.py", line 501, in update t = solver.transaction File "/usr/lib/python2.7/site-packages/pakfire/satsolver.py", line 184, in transaction transaction.Transaction.from_solver(self.pakfire, self) File "/usr/lib/python2.7/site-packages/pakfire/transaction.py", line 235, in from_solver transaction.add(action_name, pkg) File "/usr/lib/python2.7/site-packages/pakfire/transaction.py", line 256, in add action = cls(self.pakfire, pkg) File "/usr/lib/python2.7/site-packages/pakfire/actions.py", line 42, in __init__ binary_package = self.pkg.get_from_cache() File "/usr/lib/python2.7/site-packages/pakfire/packages/solv.py", line 240, in get_from_cache return file.BinaryPackage(self.pakfire, self.repo, path) File "/usr/lib/python2.7/site-packages/pakfire/packages/file.py", line 143, in __init__ self.check() File "/usr/lib/python2.7/site-packages/pakfire/packages/file.py", line 169, in check assert self.format in PACKAGE_FORMATS_SUPPORTED, self.format AssertionError: 5 If needed, i can put logfiles here

3 21

Re: IPFire 3.x packfire
by Michael Tremer 09 Mar '13

09 Mar '13

Okay, then we don't have an error in the code base. I tried to clarify what happens in a couple of sentences on which I was not quite successful: http://wiki.ipfire.org/devel/pakfire/architecture#clean_build_environments Maybe some else can improve that? -Michael On Fri, 2013-03-08 at 09:39 +0100, Thomas Ebert wrote: > Tnanks for the explanation Michael. > > As i mentioned before, that pakfire3 doesn't re-download the packages. > ... they are not deleted! > > I missunderstood the output. > > Regards Thomas > > > Am 08.03.2013 00:00, schrieb Michael Tremer: > > Yes, the build environment is cleaned up after every build. This is > > intentional, so you start every build in a clean environment and don't > > get caught up in any errors. > > > > However, the downloaded package files are never deleted. > > > > Are you sure you see a re-download or just the extraction? > > > > -Michael > > > > On Thu, 2013-03-07 at 18:38 +0100, Thomas Ebert wrote: > >> Hello out there. > >> > >> I know most of you are very busy at the moment, but could anybody of you > >> provide an answer of my question? > >> ... Is it normal that the build environment is cleaned everytime if you > >> exit from it and start the command "pakfire-builder shell"? > >> > >> Regards > >> Thomas > >> > >> Am 01.03.2013 13:43, schrieb Thomas Ebert: > >>> Sorry. I missunderstood the output. Packfire is using local packages > >>> as you described. But what about the build chroot environment. Is it > >>> normal that the build environment is cleaned everytime if you exit > >>> from it and start the command "pakfire-builder shell". > >>> > >>> Here is the paste from my shell: http://pastebin.com/fKn3UECQ > >>> > >>> This is my configuration /etc/pakfire/builder.conf > >>> > >>> [logger] > >>> > >>> # Use a different log file for the builder stuff. > >>> file = /var/log/pakfire-builder.log > >>> > >>> [builder] > >>> # Select the distribution to build for. > >>> distro = ipfire3 > >>> > >>> # Use ccache in order to build rebuilds in less time. > >>> use_ccache = true > >>> > >>> # Use icecream in order to speed up builds. > >>> use_icecream = false > >>> > >>> # Create build environments in a tmpfs. > >>> # This requires a lot of RAM. > >>> # Only enable if you know what your are doing. > >>> #use_tmpfs = false > >>> > >>> # Create loop devices in build environment. > >>> #use_loop_devices = true > >>> > >>> Regards > >> _______________________________________________ > >> Development mailing list > >> Development(a)lists.ipfire.org > >> http://lists.ipfire.org/mailman/listinfo/development > > > > _______________________________________________ > > Development mailing list > > Development(a)lists.ipfire.org > > http://lists.ipfire.org/mailman/listinfo/development > > >

2 2

Re: Introduce of >updated< webui of update accelerator
by Jörn-Ingo Weigert 08 Mar '13

08 Mar '13

Hi Michael, 2013/3/8 Michael Tremer <michael.tremer(a)ipfire.org>: > Hi, > > I just reviewed your changes and I have got overall mixed feelings: > > On Tue, 2013-03-05 at 16:40 +0100, Jörn-Ingo Weigert wrote: >> I would like to introduce and (ask to merge) the new updated webui of >> update accelerator >> (and some other minor changes which should be implemented) >> >> First the new ui of updxlrator could be found here: >> ==================================== >> >> Git: http://git.ipfire.org/?p=people/jiweigert/ipfire-2.x.git;a=shortlog;h=refs/… >> >> The new ui have in most parts a renovated code base and a layout which >> are separated in a html / css part. >> - In XHTML1.0 strict deprecated tags like <font> or style-attributes are removed >> - no hardcoded path-variables except of the variables at code begin anymore >> - The layout is now splitted into several parts: "Overview" / >> "Statistics" / "Maintenance" & new "Settings" which can be choosed by >> an button area in upper right corner >> - The section which shouldbe shown when calling update accelerator via >> sidemenu could now be set in settings view >> - When using current browser like opera or chrome the fields for max >> disk usage & max-bandwidth usage are shown as slider / number selector >> for older browser old input fields >> - the percentbar for disk usage shows now the space used by update >> accelerator & total disk usage instead of only total disk usage >> - the vendor-icons are now searched dynamically and be shown in the >> legend and rows if they are present in >> /srv/web/ipfire/html/images/updatebooster >> - all other symbols are collected together in one graphic >> - Update files are now sorted by vendor in maintenance view > > I did not merge this yet, because I wanted to have a closer look at the > code (there are a lot of changes in a single commit) and the user > interface, which does not look consistent with the rest of the web user > interface. Why is that? I understand that such lot of code needs its time to check. Which parts you mean exactly? >> Updated Themes ipfire / maniac: >> ======================= >> Git: http://git.ipfire.org/?p=people/jiweigert/ipfire-2.x.git;a=shortlog;h=refs/… >> >> The XHTML declaration inside functions.pl of both themes lacks correct >> syntax, so this caused Chrome Browser >> to interpret first the HTML-Code in ascii which slows down the render >> time inside the browser and blocks the preload >> function of IE 8 and up. This fix correct this >> >> Which fixed also Bug 10267. https://bugzilla.ipfire.org/show_bug.cgi?id=10267 > > I merged this. But in general, this code will never conform to a certain > standard. It's all messy and not easily maintainable. mhh. I think you mean the big indents.. its a editor setting will correct that for future commits.. The other code is not my fault.. I agree its a messy code with the use of indents to print a indented html-source. which is not really needed. >> Delivery of compressed html-pages: >> ========================== >> Git: http://git.ipfire.org/?p=people/jiweigert/ipfire-2.x.git;a=shortlog;h=refs/… >> >> Cause of some huge content pages delivered by f.e. update accelerator >> or large log-files it is good to use >> mod_deflate if Browser support it. That reduces bandwidth which users >> appreciate if they call the webif via external access or slow lines. >> This patch activates it for content except of images or Javascript-Files > > I agree with using mod_deflate, but why do you only use it for the SSL > pages? Did not merge this, except the Cache-Control commit. I enabled it only for the ssl-interface, to be sure when something will be going wrong, its happends only in the ssl-section (admin-interface) but not in maybe affect other installed addons which use non-ssl connections. >> Improved age-Function: >> ================= >> Git: http://git.ipfire.org/?p=people/jiweigert/ipfire-2.x.git;a=shortlog;h=refs/… >> >> This advanced version now shows only the time parts, which are >> important in singular / plural / shortened form. >> examples: >> (1 seconds.) instead of (0d, 0h, 0m, 1s) >> (3 minutes, 1 sec.) >> (4 hours, 3 min., 1 sec) >> (2 days, 4 hr., 3 min., 1 sec.) > > Merged, with some small changes. Please pay attention to your whitespace > errors. > >> Colorized & Improved uptime >> ===================== >> Git: http://git.ipfire.org/?p=people/jiweigert/ipfire-2.x.git;a=shortlog;h=refs/… >> >> In both themes there are used different javascript-codes to display >> in/out bandwidth rate. >> This patch correct that and use in maniac-theme as in ipfire-theme the >> same external jquery.js >> the style-attributes to colorize the output is now included inside the style.css > > Merged, but I removed "span" from the CSS, because the elements you were > searching for are addressed by their IDs. ok > Why has the javascript not been changed in the IPFire theme? ?? You mean "function refreshInetInfo()" its both the same in ipfire- and maniac-theme and needed to change the bandwidth ?? > >> And at least a small optical layout issue >> ============================= >> Git: http://git.ipfire.org/?p=people/jiweigert/ipfire-2.x.git;a=shortlog;h=refs/… >> >> there was a large margin-bottom defined for the H3-Tag which caused >> the spacer line not inline with that of the sidemenu >> This patch fixes that. >> >> Lang-files for de and en are included, all other langs need some maintenance. >> >> some screenshots can be found in at the end of the first post in: >> http://forum.ipfire.org/index.php?topic=7518 > > Looks a bit better, but is still not in line with the sidebar underline. > Anyway, I merged this. thats caused by the different way the sidebar and header is positioned, I didn't wanted to change the whole themes-code, just to fix the header margin... > Please review the changes and please fix the other things I mentioned. > http://git.ipfire.org/?p=people/ms/ipfire-2.x.git;a=shortlog;h=refs/heads/c… Ingo > Why don't you use your @ipfire.org email address? It's the easiest way at moment to use gmail(-webfrontend) cause most of the time i'm at work and develope there and didn't add the account to my gmail prefs. Will fix that in near future. > -Michael > > _______________________________________________ > Development mailing list > Development(a)lists.ipfire.org > http://lists.ipfire.org/mailman/listinfo/development

1 0

[Merge request] updxlrtr sources
by Jörn-Ingo Weigert 08 Mar '13

08 Mar '13

Add support for Mozilla (Firefox) Updates in updxlrator ======================================= Commit: http://git.ipfire.org/?p=people/jiweigert/ipfire-2.x.git;a=commit;h=219c963… New source-url for McAfee Scanner support for updxlrator ========================================== Commit: http://git.ipfire.org/?p=people/jiweigert/ipfire-2.x.git;a=commit;h=5150d37… New extension/host for Avast 7.x/8.x Scanner versions ======================================== Commit: http://git.ipfire.org/?p=people/jiweigert/ipfire-2.x.git;a=commit;h=5150d37… Kind re

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development March 2013