Development February 2019

development@lists.ipfire.org

14 participants
55 discussions

Kernel patch - ERROR KCFG= FAIL
by ummeegge 25 Feb '19

25 Feb '19

Hi all, am trying currently to patch the kernel for nDPI-netfilter and am getting an error which i can´t solve. The patch is from here --> https://github.com/vel21ripn/nDPI/blob/netfilter-2.2/ndpi-netfilter/kernel-… and it does apply but the kernel quits after sometime with CC [M] drivers/net/wireless/ti/wlcore/sdio.o LD [M] drivers/net/wireless/ti/wlcore/wlcore_sdio.o LD [M] drivers/net/wireless/ti/wlcore/wlcore.o AR drivers/net/wireless/ti/built-in.o AR drivers/net/wireless/built-in.o AR drivers/net/built-in.o AR drivers/built-in.o make[1]: Leaving directory '/usr/src/linux-4.14.97' make: *** [linux:149: /usr/src/log/linux-4.14.97-ipfire] Error ERROR: Building linux KCFG= [ FAIL ] Check /var/dev-ipfire_20190118_1813/ipfire-2.x/log/_build.ipfire.log for errors if applicable so may there is a simple solution for the "KCFG= ERROR". Since i do not really have much experience in kernel development i decided to ask the list for potential help... Might be great if someone do have a hint for me ? Best, Erik

2 5

[PATCH 2/2] update Tor to 0.3.5.8
by Peter Müller 23 Feb '19

23 Feb '19

See https://blog.torproject.org/new-releases-tor-0402-alpha-0358-03411-and-03312 for release notes. Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- lfs/tor | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/tor b/lfs/tor index e1027c131..4e38a3e7c 100644 --- a/lfs/tor +++ b/lfs/tor @@ -24,7 +24,7 @@ include Config -VER = 0.3.5.7 +VER = 0.3.5.8 THISAPP = tor-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tor -PAK_VER = 32 +PAK_VER = 33 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 8076f11045b5a94fd4ef0a0114b845f6 +$(DL_FILE)_MD5 = e4b0feca80cc221ab235c9544851b146 install : $(TARGET) -- 2.16.4

1 0

[PATCH] htop: Update to 2.2.0
by Stefan Schantl 23 Feb '19

23 Feb '19

This is a major update to the latest available version of htop. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- htop/htop.nm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/htop/htop.nm b/htop/htop.nm index 186335157..03e9d8faf 100644 --- a/htop/htop.nm +++ b/htop/htop.nm @@ -4,7 +4,7 @@ ############################################################################### name = htop -version = 1.0.3 +version = 2.2.0 release = 1 groups = Applications/System -- 2.20.1

2 1

[PATCH] suricata: Update to 4.0.6
by Stefan Schantl 23 Feb '19

23 Feb '19

This is a major update to the latest 4.0 series which does not require rust. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- suricata/suricata.nm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/suricata/suricata.nm b/suricata/suricata.nm index f3fe7f44d..a74a50cdc 100644 --- a/suricata/suricata.nm +++ b/suricata/suricata.nm @@ -4,7 +4,7 @@ ############################################################################### name = suricata -version = 3.2.1 +version = 4.0.6 release = 1 groups = Networking/IDS -- 2.20.1

2 1

[PATCH] libhtp: Update to 0.5.29
by Stefan Schantl 23 Feb '19

23 Feb '19

This is a minor release to the latest stable version of libhtp Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- libhtp/libhtp.nm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libhtp/libhtp.nm b/libhtp/libhtp.nm index ce7e7f5cf..8bb4ebf9c 100644 --- a/libhtp/libhtp.nm +++ b/libhtp/libhtp.nm @@ -4,7 +4,7 @@ ############################################################################### name = libhtp -version = 0.5.20 +version = 0.5.29 release = 1 groups = System/Libraries -- 2.20.1

1 0

Problems with "Enable some performance tuning" => extremly slow downloads
by Matthias Fischer 22 Feb '19

22 Feb '19

Hi, being curious, I tested commit https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=d03916e55851a243594ebf6… on my Core 127 / 32bit IPFire. At first I didn't notice any differences, system was running as usual. No important performance impact or change. But yesterday, while starting some bigger downloads and closely watching, I noticed that everytime someone started to download a somewhat bigger file, e.g. 250-800 MB, downloading rates went down to a crawl. Some downloads even aborted and nearly all where amazingly slow (~150KB/s, normal: ~6.5 MB/s). Restarting our Fritzbox and IPFire itself didn't help, all downloads stayed that way. After reverting the above commit in '/etc/sysctl.conf' and running 'sysctl -p', system is running at full speed again: VDSL, 50Mbit down / 10Mbit up. Configuration: Duo Box with Core 127/32bit. Running 'privoxy 3.0.28', 'squid 4.6' (non-transparent, 512 MB RAM only), 'squidguard 1.5 beta', 'squidclamav', 'snort / guardian', 'unbound 1.9.0' with DoT/TFO. Could someone please test and confirm (or not ;-) ). Best, Matthias

2 5

[PATCH 0/1] Parallelized build for several packages
by Wolfgang Apolinarski 21 Feb '19

21 Feb '19

2 2

[PATCH] general-functions.pl: Only skip lines with a # at the beginning
by Michael Tremer 18 Feb '19

18 Feb '19

This accidientially dropped all lines that include #. That resulted in colour codes not being loaded from file any more. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- config/cfgroot/general-functions.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/cfgroot/general-functions.pl b/config/cfgroot/general-functions.pl index 2d3eb73d7..04e36969c 100644 --- a/config/cfgroot/general-functions.pl +++ b/config/cfgroot/general-functions.pl @@ -151,7 +151,7 @@ sub readhash chop; # Skip comments. - next if ($_ =~ /\#/); + next if ($_ =~ /^#/); ($var, $val) = split /=/, $_, 2; if ($var) -- 2.12.2

2 1

GeoIP Blocked IPs not being logged
by Rob Brewer 14 Feb '19

14 Feb '19

Hi After adding a few country codes with the GeoIP Configuration page, Geo blocked IPs no longer appear in the Firewall Logs. This might be the intended operation but for me I would like to log these blocked IPs and have added a logging rule to /usr/lib/firewall/rules.pl This is my patch for rules.pl which I have tested on my live IPFire and is working OK. diff -u build/usr/lib/firewall/rules.pl.orig build/usr/lib/firewall/rules.pl --- build/usr/lib/firewall/rules.pl.orig 2019-02-04 20:59:34.677143496 +0000 +++ build/usr/lib/firewall/rules.pl 2019-02-04 21:01:59.445137411 +0000 @@ -609,6 +609,8 @@ # is enabled. foreach my $location (@locations) { if(exists $geoipsettings{$location} && $geoipsettings{$location} eq "on") { + # add logging for geoip rwb 4/2/19 + run("$IPTABLES -A GEOIPBLOCK -m geoip --src-cc $location -j LOG --log-prefix 'GEOIPBLOCK-$location '"); run("$IPTABLES -A GEOIPBLOCK -m geoip --src-cc $location -j DROP"); } } Regards Rob

2 4

sendEmail-1.56-1
by Bob Brewer 14 Feb '19

14 Feb '19

I installed the sendEmail addon with pakfire which installs /usr/local/bin/sendEmail OK but I think it has incorrect owners and permissions. As installed it has: -rwxr-xr-x 1 503 tape 80215 Dec 6 2012 sendEmail which I think should be: -rwsr-x--- 1 root nobody 80215 Dec 6 2012 sendEmail This patch to lfs/sendEmail should correct it diff -u lfs/sendEmail lfs/sendEmail.1 --- lfs/sendEmail 2019-01-20 10:07:56.128391962 +0000 +++ lfs/sendEmail.1 2019-02-02 18:08:58.823295469 +0000 @@ -63,7 +63,8 @@ @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && cp -pvf sendEmail /usr/local/bin - chmod 755 /usr/local/bin/sendEmail + chown root.nobody /usr/local/bin/sendEmail + chmod 04750 /usr/local/bin/sendEmail @rm -rf $(DIR_APP) @$(POSTBUILD) HTH Rob

3 8

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development February 2019