Development October 2018

development@lists.ipfire.org

9 participants
29 discussions

[PATCH] fix broken SFTP in OpenSSH server
by Peter Müller 08 Oct '18

08 Oct '18

Fixes #1887 Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> Cc: Michael Tremer <michael.tremer(a)ipfire.org> --- config/ssh/sshd_config | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/ssh/sshd_config b/config/ssh/sshd_config index 60bb0a9e6..3a4254526 100644 --- a/config/ssh/sshd_config +++ b/config/ssh/sshd_config @@ -75,4 +75,7 @@ ClientAliveInterval 10 # close unresponsive SSH sessions which fail to answer keep-alive ClientAliveCountMax 6 +# add support for SFTP +Subsystem sftp /usr/lib/ssh/sftp-server + # EOF -- 2.16.4

2 4

[PATCH v2] fix broken SFTP in OpenSSH server
by Peter Müller 08 Oct '18

08 Oct '18

Fixes #11887 The second version of this patch uses the correct path on IPFire systems and supersedes the first one. It also referrs to the correct issue ID. Thanks to Matthias Fischer for reporting this. Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- config/ssh/sshd_config | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/ssh/sshd_config b/config/ssh/sshd_config index 60bb0a9e6..a248c4906 100644 --- a/config/ssh/sshd_config +++ b/config/ssh/sshd_config @@ -75,4 +75,7 @@ ClientAliveInterval 10 # close unresponsive SSH sessions which fail to answer keep-alive ClientAliveCountMax 6 +# add support for SFTP +Subsystem sftp /usr/lib/openssh/sftp-server + # EOF -- 2.16.4

1 0

[PATCH] dhcpcd: Update to 7.0.8
by Matthias Fischer 07 Oct '18

07 Oct '18

Hi, No explicit changelog. I used: https://roy.marples.name/search/query:dhcpcd Running here. Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/dhcpcd | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/dhcpcd b/lfs/dhcpcd index 212fd467b..9f3f5fbb6 100644 --- a/lfs/dhcpcd +++ b/lfs/dhcpcd @@ -24,7 +24,7 @@ include Config -VER = 6.11.5 +VER = 7.0.8 THISAPP = dhcpcd-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 2465624b62c1154f0e89dc69c42c849b +$(DL_FILE)_MD5 = 77bbb1d73b6f30d6ddcc8b0fd3eae266 install : $(TARGET) @@ -73,7 +73,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && ./configure --prefix="" --sysconfdir=/var/ipfire/dhcpc \ --dbdir=/var/ipfire/dhcpc \ --libexecdir=/var/ipfire/dhcpc \ - --mandir=/usr/share/man --disable-nls + --mandir=/usr/share/man cd $(DIR_APP) && make $(MAKETUNING) cd $(DIR_APP) && make install -- 2.18.0

1 0

[PATCH 1/3] hostapd: Add support for 802.11ac
by Michael Tremer 06 Oct '18

06 Oct '18

Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- html/cgi-bin/wlanap.cgi | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/html/cgi-bin/wlanap.cgi b/html/cgi-bin/wlanap.cgi index bb40021cf..0abbf6d6e 100644 --- a/html/cgi-bin/wlanap.cgi +++ b/html/cgi-bin/wlanap.cgi @@ -73,6 +73,7 @@ $wlanapsettings{'SYSLOGLEVEL'} = '0'; $wlanapsettings{'DEBUG'} = '4'; $wlanapsettings{'DRIVER'} = 'NL80211'; $wlanapsettings{'HTCAPS'} = ''; +$wlanapsettings{'VHTCAPS'} = ''; &General::readhash("/var/ipfire/wlanap/settings", \%wlanapsettings); &Header::getcgihash(\%wlanapsettings); @@ -389,6 +390,7 @@ print<<END <option value='g' $selected{'HW_MODE'}{'g'}>802.11g</option> <option value='an' $selected{'HW_MODE'}{'an'}>802.11an</option> <option value='gn' $selected{'HW_MODE'}{'gn'}>802.11gn</option> + <option value='ac' $selected{'HW_MODE'}{'ac'}>802.11ac</option> </select> </td></tr> END @@ -428,6 +430,7 @@ END ; print <<END <tr><td width='25%' class='base'>HT Caps: </td><td class='base' colspan='3'><input type='text' name='HTCAPS' size='30' value='$wlanapsettings{'HTCAPS'}' /></td></tr> +<tr><td width='25%' class='base'>VHT Caps: </td><td class='base' colspan='3'><input type='text' name='VHTCAPS' size='30' value='$wlanapsettings{'VHTCAPS'}' /></td></tr> <tr><td width='25%' class='base'>Tx Power: </td><td class='base' colspan='3'><input type='text' name='TXPOWER' size='10' value='$wlanapsettings{'TXPOWER'}' /></td></tr> <tr><td width='25%' class='base'>Loglevel (hostapd): </td><td class='base' width='25%'> <select name='SYSLOGLEVEL'> @@ -577,6 +580,17 @@ ht_capab=$wlanapsettings{'HTCAPS'} END ; + }elsif ( $wlanapsettings{'HW_MODE'} eq 'ac' ){ + print CONFIGFILE <<END +hw_mode=a +ieee80211ac=1 +ieee80211n=1 +wmm_enabled=1 +ht_capab=$wlanapsettings{'HTCAPS'} +vht_capab=$wlanapsettings{'VHTCAPS'} +END +; + }else{ print CONFIGFILE <<END hw_mode=$wlanapsettings{'HW_MODE'} -- 2.12.2

1 2

[PATCH] update OpenSSH default port in language files
by Peter Müller 04 Oct '18

04 Oct '18

Fixes #11881 Signed-off-by: Peter Müller <peter.mueller(a)link38.eu> --- langs/de/cgi-bin/de.pl | 4 ++-- langs/en/cgi-bin/en.pl | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index 6e3dba4db..c8d4c65e7 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -2153,7 +2153,7 @@ 'ssdmz pinholes' => 'DMZ-Schlupflöcher', 'ssh' => 'SSH', 'ssh access' => 'SSH-Zugriff', -'ssh access tip' => 'IPFire SSH läuft auf dem nicht-standard Port 222!', +'ssh access tip' => 'IPFire SSH läuft nicht auf dem Standardport 22!', 'ssh active sessions' => 'Aktive Benutzeranmeldungen', 'ssh fingerprint' => 'Fingerabdruck', 'ssh host keys' => 'SSH Host Schlüssel', @@ -2166,7 +2166,7 @@ 'ssh no active logins' => 'Keine aktiven Benutzeranmeldungen', 'ssh no auth' => 'Sie haben keinerlei Authentifizierungverfahren zugelassen; dies wird Ihre Anmeldung verhindern', 'ssh passwords' => 'Passwortbasierte Authentifizierung zulassen', -'ssh port' => 'SSH Port auf 22 setzen (Standard ist 222)', +'ssh port' => 'SSH-Port auf 222 setzen (Standard ist 22)', 'ssh portfw' => 'TCP-Weiterleitung zulassen', 'ssh tempstart15' => 'SSH-Deamon in 15 Minuten beenden', 'ssh tempstart30' => 'SSH-Deamon in 30 Minuten beenden', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index 3ec5af57e..b563e5685 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -2191,7 +2191,7 @@ 'ssdmz pinholes' => 'DMZ Pinholes', 'ssh' => 'SSH', 'ssh access' => 'SSH Access', -'ssh access tip' => 'IPFire SSH is not using default port 222!', +'ssh access tip' => 'IPFire SSH is not using default port 22!', 'ssh active sessions' => 'Active logins', 'ssh fingerprint' => 'Fingerprint', 'ssh host keys' => 'SSH Host Keys', @@ -2204,7 +2204,7 @@ 'ssh no active logins' => 'No active logins', 'ssh no auth' => 'You have not allowed any authentication methods; this will stop you logging in', 'ssh passwords' => 'Allow password based authentication', -'ssh port' => 'SSH port set to 22 (default is 222)', +'ssh port' => 'SSH port set to 222 (default is 22)', 'ssh portfw' => 'Allow TCP forwarding', 'ssh tempstart15' => 'Stop SSH demon in 15 minutes', 'ssh tempstart30' => 'Stop SSH demon in 30 minutes', -- 2.16.4

1 0

[PATCH] Allow kernel to swap memory on high demand
by Tim FitzGeorge 04 Oct '18

04 Oct '18

Signed-off-by: Tim FitzGeorge <ipfr at tfitzgeorge.me.uk> Fixes: Bug 11839 --- config/etc/sysctl.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/etc/sysctl.conf b/config/etc/sysctl.conf index 345f8f52a..4066af767 100644 --- a/config/etc/sysctl.conf +++ b/config/etc/sysctl.conf @@ -27,7 +27,7 @@ net.ipv4.conf.all.accept_source_route = 0 net.ipv4.conf.all.log_martians = 1 kernel.printk = 1 4 1 7 -vm.swappiness=0 +vm.swappiness=1 vm.mmap_min_addr = 4096 vm.min_free_kbytes = 8192 -- 2.16.4

3 6

[PATCH] clamav: Update to 0.100.2
by Matthias Fischer 04 Oct '18

04 Oct '18

Hi, "This is a patch release to address several vulnerabilities..." For details see: https://blog.clamav.net/2018/10/clamav-01002-has-been-released.html Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- lfs/clamav | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/clamav b/lfs/clamav index c0612f1aa..ad89e1356 100644 --- a/lfs/clamav +++ b/lfs/clamav @@ -24,7 +24,7 @@ include Config -VER = 0.100.1 +VER = 0.100.2 THISAPP = clamav-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = clamav -PAK_VER = 39 +PAK_VER = 40 DEPS = "" @@ -48,7 +48,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 0f653df0480eebcd828939e8db9f0443 +$(DL_FILE)_MD5 = 253dd79dd57da759567e42543a569c5c install : $(TARGET) -- 2.18.0

2 1

Site Down
by Rod Rodolico 02 Oct '18

02 Oct '18

I just tried to go to the web site and it is currently down: ipfire.org gets a '500 - Internal Server Error' on several pages, but some static links work planet.ipfire.org same as www.ipfire.org (same server?) forum.ipfire.org Looks like the database is down. Message is 'SQL Error Postgres' wiki.ipfire.org is up rod -- Rod Rodolico Daily Data, Inc. POB 140465 Dallas TX 75214-0465 US http://dailydata.net 214.827.2170

2 1

git.ipfire.org - no route to host
by Matthias Fischer 01 Oct '18

01 Oct '18

Hi, while trying to push - or pull - something to 'git.ipfire.org' through SSH I suddenly always get: ***SNIP*** root@Devel: /home/matz/ipfire-2.x # git push mfischer squid_4 ssh: connect to host git.ipfire.org port 22: No route to host fatal: Could not read from remote repository. Please make sure you have the correct access rights and the repository exists. ***SNAP*** 'Pathping' gives me: ***SNIP*** c:\>pathping git.ipfire.org Routenverfolgung zu git.ipfire.org [81.3.27.45] über maximal 30 Abschnitte: 0 SE7501BR-1-Win7 [192.168.100.1] 1 ipfire.localdomain [192.168.100.254] 2 192.168.99.253 3 217.0.119.53 4 87.186.238.6 5 217.239.44.22 6 cr02.h.as24679.net [87.128.239.195] 7 fr3.h.as24679.net [195.47.229.53] 8 81.3.27.45 Berechnung der Statistiken dauert ca. 200 Sekunden... Quelle zum Abs. Knoten/Verbindung Abs. Zeit Verl./Ges.= % Verl./Ges.= % Adresse 0 SE7501BR-1-Win7 [192.168.100.1] 0/ 100 = 0% | 1 0ms 0/ 100 = 0% 0/ 100 = 0% ipfire.localdomain [192.168.100.254] 0/ 100 = 0% | 2 0ms 0/ 100 = 0% 0/ 100 = 0% 192.168.99.253 0/ 100 = 0% | 3 15ms 8/ 100 = 8% 8/ 100 = 8% 217.0.119.53 0/ 100 = 0% | 4 15ms 0/ 100 = 0% 0/ 100 = 0% 87.186.238.6 0/ 100 = 0% | 5 20ms 0/ 100 = 0% 0/ 100 = 0% 217.239.44.22 0/ 100 = 0% | 6 --- 100/100 =100% 100/100 =100% cr02.h.as24679.net [87.128.239.195] 0/ 100 = 0% | 7 29ms 0/100 = 0% 0/ 100 = 0% fr3.h.as24679.net [195.47.229.53] 0/ 100 = 0% | 8 0ms 0/ 100 = 0% 0/ 100 = 0% 81.3.27.45 Ablaufverfolgung beendet. ***SNAP*** Ping, 'nslookup' and Web-Access are ok - and fast. So it seems as if "someone up there (87.128.239.195!?) doesn't like me" (Rocky Graciano, the other way around). Could someone please take a look!? Best, Matthias

2 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development October 2018