Development February 2022

development@lists.ipfire.org

16 participants
114 discussions

libloc 0.9.10 released
by Michael Tremer 16 Feb '22

16 Feb '22

Good morning, I just tagged a new version of libloc which includes these changes: * A feed from LACNIC is now being parsed for better data in the South America region * The importer now recognises the new il-central-1 AWS Region and corrects “UK” to “GB” wherever someone go those country codes confused * The exporter will now create files in ipset format which can be reloaded without any further ado. Before, ipset threw an error when the file has already been loaded. We will now flush and reload all data for each country/AS. * libloc is now being packaged for Debian Bookworm * Some development documentation has been added and can be found here: https://man-pages.ipfire.org/libloc/ Thank you to everyone who has contributed to this release. You can find the source here: https://git.ipfire.org/?p=location/libloc.git;a=shortlog;h=refs/tags/0.9.10 https://source.ipfire.org/releases/libloc/libloc-0.9.10.tar.gz Best, -Michael

1 0

[PATCH] gdbm: Update to version 1.23
by Adolf Belka 15 Feb '22

15 Feb '22

- Update from 1.20 to 1.23 - Update of rootfile not required - Changelog Version 1.23, 2022-02-04 * Bucket cache switched from balanced tree to hash table Change suggested by Terence Kelly. * Speed up flushing the changed buckets on disk * New option codes for gdbm_setopt ** GDBM_GETDBFORMAT Return the database format. ** GDBM_GETDIRDEPTH Return the directory depth, i.e. the number of initial (most significant) bits in hash value that are interpreted as index to the directory. ** GDBM_GETBUCKETSIZE Return maximum number of keys per bucket. ** GDBM_GETCACHEAUTO Return the status of the automatic cache adjustment. ** GDBM_SETCACHEAUTO Enable or disable automatic cache adjustment. Version 1.22, 2021-10-19 * Fix file header validation * Fix key verification in sequential access * Fix testing with DejaGNU 1.6.3 * Fix stack overflow in print_usage * Fix a leak of avail entry on pushing a new avail block The leak would occur if the original avail table had odd number of entries. * New gdbmtool variables: errorexit, errormask, trace, timing "Errorexit" and "errormask" control which GDBM errors would cause the program termination and emitting a diagnostic message, correspondingly. Both variables are comma-delimited lists of error codes. The "trace" variable enables tracing of the gdbmtool commands. The "timing" variable, when set, instructs gdbmtool to print time spent in each command it runs. * New gdbmtool options: -t (--trace), and -T (--timing) Version 1.21, 2021-09-02 * Crash tolerance By default it is possible for an abrupt crash (e.g., power failure, OS kernel panic, or application process crash) to corrupt the gdbm database file. A new Linux-only mechanism enables applications to recover the database state corresponding to the most recent successful gdbm_sync() call before the crash. See the chapter 17 "Crash Tolerance" in the GDBM manual. * New database file format: numsync The new "numsync" database format is designed to better support crash tolerance. To create a database in numsync format, the gdbm_open (or gdbm_fd_open) function must be given the GDBM_NEWDB|GDBM_NUMSYNC flags. The GDBM_NUMSYNC flag also takes effect when used together with GDBM_WRCREAT, provided that the new file is created. New function gdbm_convert() is provided for converting the databases from standard GDBM format to numsync and vice versa. The gdbmtool tool can also be used for converting databases between these two formats. * Changes in gdbmtool ** Fix string output in non-ASCII encodings Printable multi-byte sequences are correctly represented on output. This also fixes octal representation of unprintable characters. ** The filename variable This variable supplies the name of database file for use in "open" command, if the latter is called without arguments. If "open" is called with the file name argument, the "filename" variable is initialized to this value. ** The fd variable If set, its value must be an open file descriptor referring to a GDBM database file. The "open" command will use gdbm_fd_open function to use this file. Upon closing the database, this descriptor will be closed and the variable will be unset. The file descriptor to use can also be supplied using the -d (--db-descriptor) command line option. ** The format variable Defines the format in which new databases will be created. Allowed values are: "standard" (default) and "numsync". ** New commands: upgrade and downgrade The "upgrade" command converts current database to the numsync (extended) format. The "downgrade" command converts current database to the standard format. ** New command: snapshot The "snapshot" command is part of the new crash tolerance support. Given the names of two snapshot files, it analyzes them and selects the one to be used for database recovery. See the GDBM manual, section 17.5 "Manual crash recovery" for a detailed discussion of its use. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/gdbm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/gdbm b/lfs/gdbm index 6f96d2f3c..fa1b2d860 100644 --- a/lfs/gdbm +++ b/lfs/gdbm @@ -24,7 +24,7 @@ include Config -VER = 1.20 +VER = 1.23 THISAPP = gdbm-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 006c19b8b60828fd6916a16f3496bd3c +$(DL_FILE)_MD5 = 8551961e36bf8c70b7500d255d3658ec install : $(TARGET) -- 2.35.1

2 1

[PATCH] libarchive: Update to version 3.6.0
by Adolf Belka 15 Feb '22

15 Feb '22

- Update from 3.5.2 to 3.6.0 - Update of rootfile - Changelog Libarchive 3.6.0 is a feature and bugfix release. New features: tar: new option "--no-read-sparse" (#1614) tar: threads support for zstd (#1567) RAR reader: filter support (#1503) RAR5 reader: self-extracting archive support (#1585) ZIP reader: zstd decompression support (#1518) Other notable bugfixes and improvements: tar: respect "--ignore-zeros" in c, r and u modes (#1620) reduced size of application binaries (#1625) internal code optimizations Libarchive 3.5.3 is a security release Security Fixes: extended fix for following symlinks when processing the fixup list (#1566, #1617, CVE-2021-31566) fix invalid memory access and out of bounds read in RAR5 reader (#1491, #1492, #1493, CVE-2021-36976) Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/common/libarchive | 2 +- lfs/libarchive | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/libarchive b/config/rootfiles/common/libarchive index e1c76269b..c939d74f4 100644 --- a/config/rootfiles/common/libarchive +++ b/config/rootfiles/common/libarchive @@ -6,7 +6,7 @@ #usr/lib/libarchive.la #usr/lib/libarchive.so usr/lib/libarchive.so.13 -usr/lib/libarchive.so.13.5.2 +usr/lib/libarchive.so.13.6.0 #usr/lib/pkgconfig/libarchive.pc #usr/share/man/man1/bsdcat.1 #usr/share/man/man1/bsdcpio.1 diff --git a/lfs/libarchive b/lfs/libarchive index a9618c2b5..29bde8d60 100644 --- a/lfs/libarchive +++ b/lfs/libarchive @@ -24,7 +24,7 @@ include Config -VER = 3.5.2 +VER = 3.6.0 THISAPP = libarchive-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -41,7 +41,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 2ba9f1f8c169aa9caf8e2d34dde323be +$(DL_FILE)_MD5 = 93f96acdb9e7277278edb154e5d76e49 install : $(TARGET) -- 2.35.1

2 1

[PATCH] stunnel: Update to version 5.62
by Adolf Belka 15 Feb '22

15 Feb '22

- Update from 5.58 to 5.62 - Update of rootfile - Changelog ### Version 5.62, 2022.01.17, urgency: MEDIUM * New features - Added a bash completion script. * Bugfixes - Fixed a transfer() loop bug. ### Version 5.61, 2021.12.22, urgency: LOW * New features sponsored by the University of Maryland - Added new "protocol = capwin" and "protocol = capwinctrl" configuration file options. * New features for the Windows platform - Added client mode allowing authenticated users to view logs, reconfigure and terminate running stunnel services. - Added support for multiple GUI and service instances distinguised by the location of stunnel.conf. - Improved log window scrolling. - Added a new 'Pause auto-scroll' GUI checkbox. - Double click on the icon tray replaced with single click. - OpenSSL DLLs updated to version 3.0.1. * Other new features - Rewritten the testing framework in python (thx to Peter Pentchev for inspiration and initial framework). - Added support for missing SSL_set_options() values. - Updated stunnel.spec to support RHEL8. * Bugfixes - Fixed OpenSSL 3.0 build. - Fixed reloading configuration with "systemctl reload stunnel.service". - Fixed incorrect messages logged for OpenSSL errors. - Fixed printing IPv6 socket option defaults on FreeBSD. ### Version 5.60, 2021.08.16, urgency: LOW * New features - New 'sessionResume' service-level option to allow or disallow session resumption - Added support for the new SSL_set_options() values. - Download fresh ca-certs.pem for each new release. * Bugfixes - Fixed 'redirect' with 'protocol'. This combination is not supported by 'smtp', 'pop3' and 'imap' protocols. - Enforced minimum WIN32 log window size. - Fixed support for password-protected private keys with OpenSSL 3.0 (thx to Dmitry Belyavskiy). ### Version 5.59, 2021.04.05, urgency: HIGH * Security bugfixes - OpenSSL DLLs updated to version 1.1.1k. * New features - Client-side "protocol = ldap" support (thx to Bart Dopheide and Seth Grover). * Bugfixes - The test suite fixed not to require external connectivity. - Fixed paths in generated manuals (thx to Tatsuki Makino). - Fixed configuration reload when compression is used. - Fixed compilation with early releases of OpenSSL 1.1.1. Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- config/rootfiles/packages/stunnel | 1 + lfs/stunnel | 6 +++--- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/packages/stunnel b/config/rootfiles/packages/stunnel index 0882ef4de..c44cbc90c 100644 --- a/config/rootfiles/packages/stunnel +++ b/config/rootfiles/packages/stunnel @@ -7,6 +7,7 @@ usr/bin/stunnel #usr/lib/stunnel #usr/lib/stunnel/libstunnel.la usr/lib/stunnel/libstunnel.so +#usr/share/bash-completion/completions/stunnel.bash #usr/share/doc/stunnel #usr/share/doc/stunnel/AUTHORS.md #usr/share/doc/stunnel/BUGS.md diff --git a/lfs/stunnel b/lfs/stunnel index 0b6524e01..b56b77989 100644 --- a/lfs/stunnel +++ b/lfs/stunnel @@ -24,7 +24,7 @@ include Config -VER = 5.58 +VER = 5.62 THISAPP = stunnel-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = stunnel -PAK_VER = 7 +PAK_VER = 8 DEPS = @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = aed41cff61d622ff6c8706e9d75c53b7 +$(DL_FILE)_MD5 = e8cafad72a75252ff85210c0cef77f19 install : $(TARGET) -- 2.35.1

2 1

[PATCH 1/2] Run "./make.sh lang"
by Michael Tremer 15 Feb '22

15 Feb '22

Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- doc/language_issues.de | 4 ++++ doc/language_issues.en | 23 ++++++++++--------- doc/language_issues.es | 11 ++++++++- doc/language_issues.fr | 11 +++++++++ doc/language_issues.it | 13 +++++++++-- doc/language_issues.nl | 11 ++++++++- doc/language_issues.pl | 11 ++++++++- doc/language_issues.ru | 11 ++++++++- doc/language_issues.tr | 11 +++++++++ doc/language_missings | 51 +++++++++++++++++++++++++++++++++++++++++- langs/de/cgi-bin/de.pl | 2 +- langs/en/cgi-bin/en.pl | 2 +- 12 files changed, 142 insertions(+), 19 deletions(-) diff --git a/doc/language_issues.de b/doc/language_issues.de index a091f2303..d1aacc1e6 100644 --- a/doc/language_issues.de +++ b/doc/language_issues.de @@ -92,7 +92,9 @@ WARNING: translation string unused: advproxy errmsg password incorrect WARNING: translation string unused: advproxy invalid num of children WARNING: translation string unused: advproxy no clients defined WARNING: translation string unused: advproxy redirector children +WARNING: translation string unused: advproxy squid version WARNING: translation string unused: advproxy ssadvanced proxy +WARNING: translation string unused: advproxy suppress version WARNING: translation string unused: advproxy throttle binary WARNING: translation string unused: advproxy throttle dskimg WARNING: translation string unused: advproxy throttle mmedia @@ -234,6 +236,7 @@ WARNING: translation string unused: dns new 0 WARNING: translation string unused: dns new 1 WARNING: translation string unused: dns saved WARNING: translation string unused: dns saved txt +WARNING: translation string unused: dnssec disabled warning WARNING: translation string unused: dnssec information WARNING: translation string unused: do not log this port list WARNING: translation string unused: domain master @@ -264,6 +267,7 @@ WARNING: translation string unused: enable javascript WARNING: translation string unused: enable wildcards WARNING: translation string unused: enabledtitle WARNING: translation string unused: encrypted +WARNING: translation string unused: enter ack class WARNING: translation string unused: err bk 1 WARNING: translation string unused: err bk 10 password WARNING: translation string unused: err bk 2 key diff --git a/doc/language_issues.en b/doc/language_issues.en index 3d10bebc6..34a95b358 100644 --- a/doc/language_issues.en +++ b/doc/language_issues.en @@ -180,6 +180,7 @@ WARNING: untranslated string: advproxy admin mail = Cache administrator e-mail WARNING: untranslated string: advproxy advanced web proxy = Advanced Web Proxy WARNING: untranslated string: advproxy advanced web proxy configuration = Advanced web proxy configuration WARNING: untranslated string: advproxy allowed subnets = Allowed subnets (one per line) +WARNING: untranslated string: advproxy asbased anomaly detection = Anomaly detections based on Autonomous Systems information WARNING: untranslated string: advproxy back to main page = Back to main page WARNING: untranslated string: advproxy banned ip clients = Banned IP addresses (one per line) WARNING: untranslated string: advproxy banned mac clients = Banned MAC addresses (one per line) @@ -232,6 +233,11 @@ WARNING: untranslated string: advproxy errmsg time restriction = Invalid time re WARNING: untranslated string: advproxy errmsg wpad invalid ip or mask = WPAD: Invalid IP or subnet for excluded IP subnet WARNING: untranslated string: advproxy error design = Error messages design WARNING: untranslated string: advproxy error language = Error messages language +WARNING: untranslated string: advproxy fastflux detection = Deny access to destinations hosted on fast flux setups +WARNING: untranslated string: advproxy fastflux detection threshold = Threshold +WARNING: untranslated string: advproxy fastflux no threshold given = No threshold was given for fast flux detection +WARNING: untranslated string: advproxy fastflux threshold invalid = Supplied fast flux detection threshold is invalid +WARNING: untranslated string: advproxy fastflux threshold out of bounds = Supplied fast flux detection threshold is out of bounds WARNING: untranslated string: advproxy friday = Fri WARNING: untranslated string: advproxy from = From WARNING: untranslated string: advproxy group access control = Group based access control @@ -265,14 +271,13 @@ WARNING: untranslated string: advproxy ram cache size = Memory cache size (MB) WARNING: untranslated string: advproxy reset = Reset WARNING: untranslated string: advproxy saturday = Sat WARNING: untranslated string: advproxy save and restart = Save and Restart -WARNING: untranslated string: advproxy squid version = Squid cache version +WARNING: untranslated string: advproxy selectively announcements detection = Deny access to destinations hosted on selectively announced networks WARNING: untranslated string: advproxy squidclamav = SquidClamav WARNING: untranslated string: advproxy ssl ports = Allowed SSL ports (one per line) WARNING: untranslated string: advproxy standard = Standard WARNING: untranslated string: advproxy standard ports = Allowed standard ports (one per line) WARNING: untranslated string: advproxy sunday = Sun WARNING: untranslated string: advproxy supervisor password = Supervisor password -WARNING: untranslated string: advproxy suppress version = Suppress version information WARNING: untranslated string: advproxy throttling per host on = Limit per host on WARNING: untranslated string: advproxy throttling total on = Overall limit on WARNING: untranslated string: advproxy throttling unlimited = unlimited @@ -345,8 +350,8 @@ WARNING: untranslated string: bad destination range = The Destination port range WARNING: untranslated string: bad ignore filter = Bad ignore filter: WARNING: untranslated string: bad return code = Helper program returned error code WARNING: untranslated string: bad source range = The Source port range has a first value that is greater than or equal to the second value. -WARNING: untranslated string: bandwitherror = You cannot change the bandwithsettings, with Qos being enabled. First disable Qos. -WARNING: untranslated string: bandwithsettings = Bandwithsettings +WARNING: untranslated string: bandwidtherror = You cannot change the bandwidthsettings, with Qos being enabled. First disable Qos. +WARNING: untranslated string: bandwidthsettings = bandwidthsettings WARNING: untranslated string: basic options = Basic Options WARNING: untranslated string: beep when ppp connects or disconnects = Beep when IPFire connects or disconnects WARNING: untranslated string: bit = bit @@ -626,7 +631,6 @@ WARNING: untranslated string: dnsforward entries = Current entries WARNING: untranslated string: dnsforward forward_servers = Nameservers WARNING: untranslated string: dnsforward zone = Zone WARNING: untranslated string: dnssec aware = DNSSEC Aware -WARNING: untranslated string: dnssec disabled warning = WARNING: DNSSEC has been disabled WARNING: untranslated string: dnssec not supported = DNSSEC Not supported WARNING: untranslated string: dnssec validating = DNSSEC Validating WARNING: untranslated string: dod = Dial on Demand @@ -713,7 +717,6 @@ WARNING: untranslated string: enabled on = Enabled on WARNING: untranslated string: encapsulation = Encapsulation WARNING: untranslated string: encryption = Encryption: WARNING: untranslated string: end address = End address: -WARNING: untranslated string: enter ack class = Enter the ACK- Class and then press Save. WARNING: untranslated string: enter data = Enter your settings and then press Save. WARNING: untranslated string: entropy = Entropy WARNING: untranslated string: entropy graphs = Entropy Graphs @@ -736,8 +739,8 @@ WARNING: untranslated string: extrahd to root = to root WARNING: untranslated string: extrahd you cant mount = You can't mount WARNING: untranslated string: fallout zombieload ridl = Fallout/ZombieLoad/RIDL WARNING: untranslated string: false classnumber = The Class-Number does not match the interface. -WARNING: untranslated string: false max bandwith = Maximum bandwith is false. -WARNING: untranslated string: false min bandwith = Minimum bandwith is false. +WARNING: untranslated string: false max bandwidth = Maximum bandwidth is false. +WARNING: untranslated string: false min bandwidth = Minimum bandwidth is false. WARNING: untranslated string: february = February WARNING: untranslated string: fetch ip from = Guess the real public IP with help of an external server WARNING: untranslated string: fifteen minutes = 15 Minutes @@ -964,7 +967,7 @@ WARNING: untranslated string: graph = Graph WARNING: untranslated string: graph per = per WARNING: untranslated string: green = GREEN WARNING: untranslated string: grouptype = Grouptype: -WARNING: untranslated string: guaranteed bandwith = Guaranteed bandwith +WARNING: untranslated string: guaranteed bandwidth = Guaranteed bandwidth WARNING: untranslated string: guardian = Guardian WARNING: untranslated string: guardian block a host = unknown string WARNING: untranslated string: guardian block httpd brute-force = unknown string @@ -1223,7 +1226,7 @@ WARNING: untranslated string: masquerade orange = Masquerade ORANGE WARNING: untranslated string: masquerading = Masquerading WARNING: untranslated string: masquerading disabled = Masquerading disabled WARNING: untranslated string: masquerading enabled = Masquerading enabled -WARNING: untranslated string: max bandwith = Maximum bandwith +WARNING: untranslated string: max bandwidth = Maximum bandwidth WARNING: untranslated string: max lease time = Max lease time (mins): WARNING: untranslated string: max reliability = Maximum reliability WARNING: untranslated string: max renewal time = Maximum Renewal Time diff --git a/doc/language_issues.es b/doc/language_issues.es index 2e58b5b02..55d46c597 100644 --- a/doc/language_issues.es +++ b/doc/language_issues.es @@ -90,7 +90,9 @@ WARNING: translation string unused: advproxy errmsg password incorrect WARNING: translation string unused: advproxy invalid num of children WARNING: translation string unused: advproxy no clients defined WARNING: translation string unused: advproxy redirector children +WARNING: translation string unused: advproxy squid version WARNING: translation string unused: advproxy ssadvanced proxy +WARNING: translation string unused: advproxy suppress version WARNING: translation string unused: advproxy throttle binary WARNING: translation string unused: advproxy throttle dskimg WARNING: translation string unused: advproxy throttle mmedia @@ -273,6 +275,7 @@ WARNING: translation string unused: enable javascript WARNING: translation string unused: enable wildcards WARNING: translation string unused: enabledtitle WARNING: translation string unused: encrypted +WARNING: translation string unused: enter ack class WARNING: translation string unused: err bk 1 WARNING: translation string unused: err bk 10 password WARNING: translation string unused: err bk 2 key @@ -801,15 +804,22 @@ WARNING: untranslated string: addons = Addons WARNING: untranslated string: administrator password = Administrator password WARNING: untranslated string: administrator username = Administrator username WARNING: untranslated string: advproxy AUTH method ntlm auth = Windows Active Directory +WARNING: untranslated string: advproxy asbased anomaly detection = Anomaly detections based on Autonomous Systems information WARNING: untranslated string: advproxy basic authentication = Allow HTTP Basic authentication WARNING: untranslated string: advproxy cache-digest = Enable Cache-Digest Generation WARNING: untranslated string: advproxy errmsg cache = The RAM cache size is greater than the harddisk cache size: WARNING: untranslated string: advproxy errmsg invalid upstream proxy = Invalid upstream proxy IP/hostname WARNING: untranslated string: advproxy errmsg proxy ports equal = The proxy port and the transparent port cannot be equal. WARNING: untranslated string: advproxy errmsg wpad invalid ip or mask = WPAD: Invalid IP or subnet for excluded IP subnet +WARNING: untranslated string: advproxy fastflux detection = Deny access to destinations hosted on fast flux setups +WARNING: untranslated string: advproxy fastflux detection threshold = Threshold +WARNING: untranslated string: advproxy fastflux no threshold given = No threshold was given for fast flux detection +WARNING: untranslated string: advproxy fastflux threshold invalid = Supplied fast flux detection threshold is invalid +WARNING: untranslated string: advproxy fastflux threshold out of bounds = Supplied fast flux detection threshold is out of bounds WARNING: untranslated string: advproxy group access control = Group based access control WARNING: untranslated string: advproxy group required = Required group WARNING: untranslated string: advproxy proxy port transparent = Transparent port +WARNING: untranslated string: advproxy selectively announcements detection = Deny access to destinations hosted on selectively announced networks WARNING: untranslated string: advproxy wpad example dst_noproxy_ip = e.g. 192.168.2.0/255.255.255.0 WARNING: untranslated string: advproxy wpad example dst_noproxy_url = e.g. *.ipfire.org* WARNING: untranslated string: advproxy wpad label dst_noproxy_ip = Excluded IP Subnets (one per line) @@ -920,7 +930,6 @@ WARNING: untranslated string: dnsforward entries = Current entries WARNING: untranslated string: dnsforward forward_servers = Nameservers WARNING: untranslated string: dnsforward zone = Zone WARNING: untranslated string: dnssec aware = DNSSEC Aware -WARNING: untranslated string: dnssec disabled warning = WARNING: DNSSEC has been disabled WARNING: untranslated string: dnssec not supported = DNSSEC Not supported WARNING: untranslated string: dnssec validating = DNSSEC Validating WARNING: untranslated string: downlink = Downlink diff --git a/doc/language_issues.fr b/doc/language_issues.fr index 72826274b..6f8edcead 100644 --- a/doc/language_issues.fr +++ b/doc/language_issues.fr @@ -96,7 +96,9 @@ WARNING: translation string unused: advproxy errmsg password incorrect WARNING: translation string unused: advproxy invalid num of children WARNING: translation string unused: advproxy no clients defined WARNING: translation string unused: advproxy redirector children +WARNING: translation string unused: advproxy squid version WARNING: translation string unused: advproxy ssadvanced proxy +WARNING: translation string unused: advproxy suppress version WARNING: translation string unused: advproxy throttle binary WARNING: translation string unused: advproxy throttle dskimg WARNING: translation string unused: advproxy throttle mmedia @@ -261,6 +263,7 @@ WARNING: translation string unused: dns new 0 WARNING: translation string unused: dns new 1 WARNING: translation string unused: dns saved WARNING: translation string unused: dns saved txt +WARNING: translation string unused: dnssec disabled warning WARNING: translation string unused: dnssec information WARNING: translation string unused: do not log this port list WARNING: translation string unused: domain master @@ -292,6 +295,7 @@ WARNING: translation string unused: enable javascript WARNING: translation string unused: enable wildcards WARNING: translation string unused: enabledtitle WARNING: translation string unused: encrypted +WARNING: translation string unused: enter ack class WARNING: translation string unused: err bk 1 WARNING: translation string unused: err bk 10 password WARNING: translation string unused: err bk 2 key @@ -892,6 +896,13 @@ WARNING: translation string unused: zoneconf val vlan amount assignment error WARNING: translation string unused: zoneconf val vlan tag assignment error WARNING: translation string unused: zoneconf val vlan tag range error WARNING: translation string unused: zoneconf val zoneslave amount error +WARNING: untranslated string: advproxy asbased anomaly detection = Anomaly detections based on Autonomous Systems information +WARNING: untranslated string: advproxy fastflux detection = Deny access to destinations hosted on fast flux setups +WARNING: untranslated string: advproxy fastflux detection threshold = Threshold +WARNING: untranslated string: advproxy fastflux no threshold given = No threshold was given for fast flux detection +WARNING: untranslated string: advproxy fastflux threshold invalid = Supplied fast flux detection threshold is invalid +WARNING: untranslated string: advproxy fastflux threshold out of bounds = Supplied fast flux detection threshold is out of bounds +WARNING: untranslated string: advproxy selectively announcements detection = Deny access to destinations hosted on selectively announced networks WARNING: untranslated string: fwhost cust locationgrp = unknown string WARNING: untranslated string: fwhost err hostip = unknown string WARNING: untranslated string: guardian block a host = unknown string diff --git a/doc/language_issues.it b/doc/language_issues.it index 4538461c6..a97016dcc 100644 --- a/doc/language_issues.it +++ b/doc/language_issues.it @@ -70,7 +70,9 @@ WARNING: translation string unused: advproxy errmsg password incorrect WARNING: translation string unused: advproxy invalid num of children WARNING: translation string unused: advproxy no clients defined WARNING: translation string unused: advproxy redirector children +WARNING: translation string unused: advproxy squid version WARNING: translation string unused: advproxy ssadvanced proxy +WARNING: translation string unused: advproxy suppress version WARNING: translation string unused: advproxy throttle binary WARNING: translation string unused: advproxy throttle dskimg WARNING: translation string unused: advproxy throttle mmedia @@ -263,6 +265,7 @@ WARNING: translation string unused: enable javascript WARNING: translation string unused: enable wildcards WARNING: translation string unused: enabledtitle WARNING: translation string unused: encrypted +WARNING: translation string unused: enter ack class WARNING: translation string unused: err bk 1 WARNING: translation string unused: err bk 10 password WARNING: translation string unused: err bk 2 key @@ -895,10 +898,17 @@ WARNING: untranslated string: acpitemp = ACPI - Temperatures WARNING: untranslated string: administrator password = Administrator password WARNING: untranslated string: administrator username = Administrator username WARNING: untranslated string: advproxy AUTH method ntlm auth = Windows Active Directory +WARNING: untranslated string: advproxy asbased anomaly detection = Anomaly detections based on Autonomous Systems information WARNING: untranslated string: advproxy basic authentication = Allow HTTP Basic authentication WARNING: untranslated string: advproxy errmsg wpad invalid ip or mask = WPAD: Invalid IP or subnet for excluded IP subnet +WARNING: untranslated string: advproxy fastflux detection = Deny access to destinations hosted on fast flux setups +WARNING: untranslated string: advproxy fastflux detection threshold = Threshold +WARNING: untranslated string: advproxy fastflux no threshold given = No threshold was given for fast flux detection +WARNING: untranslated string: advproxy fastflux threshold invalid = Supplied fast flux detection threshold is invalid +WARNING: untranslated string: advproxy fastflux threshold out of bounds = Supplied fast flux detection threshold is out of bounds WARNING: untranslated string: advproxy group access control = Group based access control WARNING: untranslated string: advproxy group required = Required group +WARNING: untranslated string: advproxy selectively announcements detection = Deny access to destinations hosted on selectively announced networks WARNING: untranslated string: advproxy wpad example dst_noproxy_ip = e.g. 192.168.2.0/255.255.255.0 WARNING: untranslated string: advproxy wpad example dst_noproxy_url = e.g. *.ipfire.org* WARNING: untranslated string: advproxy wpad label dst_noproxy_ip = Excluded IP Subnets (one per line) @@ -946,7 +956,6 @@ WARNING: untranslated string: dns use isp assigned nameservers = Use ISP-assigne WARNING: untranslated string: dns use protocol for dns queries = Protocol for DNS queries WARNING: untranslated string: dnsforward dnssec disabled = DNSSEC Validation is disabled WARNING: untranslated string: dnsforward forward_servers = Nameservers -WARNING: untranslated string: dnssec disabled warning = WARNING: DNSSEC has been disabled WARNING: untranslated string: download apple profile = Download Apple Configuration Profile WARNING: untranslated string: duration = Duration WARNING: untranslated string: eight hours = 8 Hours @@ -999,7 +1008,7 @@ WARNING: untranslated string: fwhost cust locationgrp = unknown string WARNING: untranslated string: fwhost err hostip = unknown string WARNING: untranslated string: fwhost newlocationgrp = Location Groups WARNING: untranslated string: generate ptr = Generate PTR -WARNING: untranslated string: guaranteed bandwith = Guaranteed bandwith +WARNING: untranslated string: guaranteed bandwidth = Guaranteed bandwidth WARNING: untranslated string: guardian = Guardian WARNING: untranslated string: guardian block a host = unknown string WARNING: untranslated string: guardian block httpd brute-force = unknown string diff --git a/doc/language_issues.nl b/doc/language_issues.nl index 85fdcbe44..6c2715bc4 100644 --- a/doc/language_issues.nl +++ b/doc/language_issues.nl @@ -69,7 +69,9 @@ WARNING: translation string unused: advproxy errmsg password incorrect WARNING: translation string unused: advproxy invalid num of children WARNING: translation string unused: advproxy no clients defined WARNING: translation string unused: advproxy redirector children +WARNING: translation string unused: advproxy squid version WARNING: translation string unused: advproxy ssadvanced proxy +WARNING: translation string unused: advproxy suppress version WARNING: translation string unused: advproxy throttle binary WARNING: translation string unused: advproxy throttle dskimg WARNING: translation string unused: advproxy throttle mmedia @@ -261,6 +263,7 @@ WARNING: translation string unused: enable javascript WARNING: translation string unused: enable wildcards WARNING: translation string unused: enabledtitle WARNING: translation string unused: encrypted +WARNING: translation string unused: enter ack class WARNING: translation string unused: err bk 1 WARNING: translation string unused: err bk 10 password WARNING: translation string unused: err bk 2 key @@ -890,10 +893,17 @@ WARNING: untranslated string: acpitemp = ACPI - Temperatures WARNING: untranslated string: administrator password = Administrator password WARNING: untranslated string: administrator username = Administrator username WARNING: untranslated string: advproxy AUTH method ntlm auth = Windows Active Directory +WARNING: untranslated string: advproxy asbased anomaly detection = Anomaly detections based on Autonomous Systems information WARNING: untranslated string: advproxy basic authentication = Allow HTTP Basic authentication WARNING: untranslated string: advproxy errmsg wpad invalid ip or mask = WPAD: Invalid IP or subnet for excluded IP subnet +WARNING: untranslated string: advproxy fastflux detection = Deny access to destinations hosted on fast flux setups +WARNING: untranslated string: advproxy fastflux detection threshold = Threshold +WARNING: untranslated string: advproxy fastflux no threshold given = No threshold was given for fast flux detection +WARNING: untranslated string: advproxy fastflux threshold invalid = Supplied fast flux detection threshold is invalid +WARNING: untranslated string: advproxy fastflux threshold out of bounds = Supplied fast flux detection threshold is out of bounds WARNING: untranslated string: advproxy group access control = Group based access control WARNING: untranslated string: advproxy group required = Required group +WARNING: untranslated string: advproxy selectively announcements detection = Deny access to destinations hosted on selectively announced networks WARNING: untranslated string: advproxy wpad example dst_noproxy_ip = e.g. 192.168.2.0/255.255.255.0 WARNING: untranslated string: advproxy wpad example dst_noproxy_url = e.g. *.ipfire.org* WARNING: untranslated string: advproxy wpad label dst_noproxy_ip = Excluded IP Subnets (one per line) @@ -949,7 +959,6 @@ WARNING: untranslated string: dns use protocol for dns queries = Protocol for DN WARNING: untranslated string: dnsforward dnssec disabled = DNSSEC Validation is disabled WARNING: untranslated string: dnsforward forward_servers = Nameservers WARNING: untranslated string: dnssec aware = DNSSEC Aware -WARNING: untranslated string: dnssec disabled warning = WARNING: DNSSEC has been disabled WARNING: untranslated string: dnssec not supported = DNSSEC Not supported WARNING: untranslated string: dnssec validating = DNSSEC Validating WARNING: untranslated string: download apple profile = Download Apple Configuration Profile diff --git a/doc/language_issues.pl b/doc/language_issues.pl index a023bdbee..79d2045d3 100644 --- a/doc/language_issues.pl +++ b/doc/language_issues.pl @@ -69,7 +69,9 @@ WARNING: translation string unused: advproxy errmsg password incorrect WARNING: translation string unused: advproxy invalid num of children WARNING: translation string unused: advproxy no clients defined WARNING: translation string unused: advproxy redirector children +WARNING: translation string unused: advproxy squid version WARNING: translation string unused: advproxy ssadvanced proxy +WARNING: translation string unused: advproxy suppress version WARNING: translation string unused: advproxy throttle binary WARNING: translation string unused: advproxy throttle dskimg WARNING: translation string unused: advproxy throttle mmedia @@ -251,6 +253,7 @@ WARNING: translation string unused: enable javascript WARNING: translation string unused: enable wildcards WARNING: translation string unused: enabledtitle WARNING: translation string unused: encrypted +WARNING: translation string unused: enter ack class WARNING: translation string unused: err bk 1 WARNING: translation string unused: err bk 10 password WARNING: translation string unused: err bk 2 key @@ -816,15 +819,22 @@ WARNING: untranslated string: addons = Addons WARNING: untranslated string: administrator password = Administrator password WARNING: untranslated string: administrator username = Administrator username WARNING: untranslated string: advproxy AUTH method ntlm auth = Windows Active Directory +WARNING: untranslated string: advproxy asbased anomaly detection = Anomaly detections based on Autonomous Systems information WARNING: untranslated string: advproxy basic authentication = Allow HTTP Basic authentication WARNING: untranslated string: advproxy cache-digest = Enable Cache-Digest Generation WARNING: untranslated string: advproxy errmsg cache = The RAM cache size is greater than the harddisk cache size: WARNING: untranslated string: advproxy errmsg invalid upstream proxy = Invalid upstream proxy IP/hostname WARNING: untranslated string: advproxy errmsg proxy ports equal = The proxy port and the transparent port cannot be equal. WARNING: untranslated string: advproxy errmsg wpad invalid ip or mask = WPAD: Invalid IP or subnet for excluded IP subnet +WARNING: untranslated string: advproxy fastflux detection = Deny access to destinations hosted on fast flux setups +WARNING: untranslated string: advproxy fastflux detection threshold = Threshold +WARNING: untranslated string: advproxy fastflux no threshold given = No threshold was given for fast flux detection +WARNING: untranslated string: advproxy fastflux threshold invalid = Supplied fast flux detection threshold is invalid +WARNING: untranslated string: advproxy fastflux threshold out of bounds = Supplied fast flux detection threshold is out of bounds WARNING: untranslated string: advproxy group access control = Group based access control WARNING: untranslated string: advproxy group required = Required group WARNING: untranslated string: advproxy proxy port transparent = Transparent port +WARNING: untranslated string: advproxy selectively announcements detection = Deny access to destinations hosted on selectively announced networks WARNING: untranslated string: advproxy wpad example dst_noproxy_ip = e.g. 192.168.2.0/255.255.255.0 WARNING: untranslated string: advproxy wpad example dst_noproxy_url = e.g. *.ipfire.org* WARNING: untranslated string: advproxy wpad label dst_noproxy_ip = Excluded IP Subnets (one per line) @@ -935,7 +945,6 @@ WARNING: untranslated string: dnsforward entries = Current entries WARNING: untranslated string: dnsforward forward_servers = Nameservers WARNING: untranslated string: dnsforward zone = Zone WARNING: untranslated string: dnssec aware = DNSSEC Aware -WARNING: untranslated string: dnssec disabled warning = WARNING: DNSSEC has been disabled WARNING: untranslated string: dnssec not supported = DNSSEC Not supported WARNING: untranslated string: dnssec validating = DNSSEC Validating WARNING: untranslated string: downlink = Downlink diff --git a/doc/language_issues.ru b/doc/language_issues.ru index d1abbc4a8..52b116c60 100644 --- a/doc/language_issues.ru +++ b/doc/language_issues.ru @@ -69,7 +69,9 @@ WARNING: translation string unused: advproxy errmsg password incorrect WARNING: translation string unused: advproxy invalid num of children WARNING: translation string unused: advproxy no clients defined WARNING: translation string unused: advproxy redirector children +WARNING: translation string unused: advproxy squid version WARNING: translation string unused: advproxy ssadvanced proxy +WARNING: translation string unused: advproxy suppress version WARNING: translation string unused: advproxy throttle binary WARNING: translation string unused: advproxy throttle dskimg WARNING: translation string unused: advproxy throttle mmedia @@ -250,6 +252,7 @@ WARNING: translation string unused: enable javascript WARNING: translation string unused: enable wildcards WARNING: translation string unused: enabledtitle WARNING: translation string unused: encrypted +WARNING: translation string unused: enter ack class WARNING: translation string unused: err bk 1 WARNING: translation string unused: err bk 10 password WARNING: translation string unused: err bk 2 key @@ -812,15 +815,22 @@ WARNING: untranslated string: addons = Addons WARNING: untranslated string: administrator password = Administrator password WARNING: untranslated string: administrator username = Administrator username WARNING: untranslated string: advproxy AUTH method ntlm auth = Windows Active Directory +WARNING: untranslated string: advproxy asbased anomaly detection = Anomaly detections based on Autonomous Systems information WARNING: untranslated string: advproxy basic authentication = Allow HTTP Basic authentication WARNING: untranslated string: advproxy cache-digest = Enable Cache-Digest Generation WARNING: untranslated string: advproxy errmsg cache = The RAM cache size is greater than the harddisk cache size: WARNING: untranslated string: advproxy errmsg invalid upstream proxy = Invalid upstream proxy IP/hostname WARNING: untranslated string: advproxy errmsg proxy ports equal = The proxy port and the transparent port cannot be equal. WARNING: untranslated string: advproxy errmsg wpad invalid ip or mask = WPAD: Invalid IP or subnet for excluded IP subnet +WARNING: untranslated string: advproxy fastflux detection = Deny access to destinations hosted on fast flux setups +WARNING: untranslated string: advproxy fastflux detection threshold = Threshold +WARNING: untranslated string: advproxy fastflux no threshold given = No threshold was given for fast flux detection +WARNING: untranslated string: advproxy fastflux threshold invalid = Supplied fast flux detection threshold is invalid +WARNING: untranslated string: advproxy fastflux threshold out of bounds = Supplied fast flux detection threshold is out of bounds WARNING: untranslated string: advproxy group access control = Group based access control WARNING: untranslated string: advproxy group required = Required group WARNING: untranslated string: advproxy proxy port transparent = Transparent port +WARNING: untranslated string: advproxy selectively announcements detection = Deny access to destinations hosted on selectively announced networks WARNING: untranslated string: advproxy wpad example dst_noproxy_ip = e.g. 192.168.2.0/255.255.255.0 WARNING: untranslated string: advproxy wpad example dst_noproxy_url = e.g. *.ipfire.org* WARNING: untranslated string: advproxy wpad label dst_noproxy_ip = Excluded IP Subnets (one per line) @@ -932,7 +942,6 @@ WARNING: untranslated string: dnsforward entries = Current entries WARNING: untranslated string: dnsforward forward_servers = Nameservers WARNING: untranslated string: dnsforward zone = Zone WARNING: untranslated string: dnssec aware = DNSSEC Aware -WARNING: untranslated string: dnssec disabled warning = WARNING: DNSSEC has been disabled WARNING: untranslated string: dnssec not supported = DNSSEC Not supported WARNING: untranslated string: dnssec validating = DNSSEC Validating WARNING: untranslated string: downlink = Downlink diff --git a/doc/language_issues.tr b/doc/language_issues.tr index a882db069..019dd7be0 100644 --- a/doc/language_issues.tr +++ b/doc/language_issues.tr @@ -92,7 +92,9 @@ WARNING: translation string unused: advproxy errmsg password incorrect WARNING: translation string unused: advproxy invalid num of children WARNING: translation string unused: advproxy no clients defined WARNING: translation string unused: advproxy redirector children +WARNING: translation string unused: advproxy squid version WARNING: translation string unused: advproxy ssadvanced proxy +WARNING: translation string unused: advproxy suppress version WARNING: translation string unused: advproxy throttle binary WARNING: translation string unused: advproxy throttle dskimg WARNING: translation string unused: advproxy throttle mmedia @@ -258,6 +260,7 @@ WARNING: translation string unused: dns new 1 WARNING: translation string unused: dns saved WARNING: translation string unused: dns saved txt WARNING: translation string unused: dnsforward forward_server +WARNING: translation string unused: dnssec disabled warning WARNING: translation string unused: dnssec information WARNING: translation string unused: do not log this port list WARNING: translation string unused: domain master @@ -289,6 +292,7 @@ WARNING: translation string unused: enable javascript WARNING: translation string unused: enable wildcards WARNING: translation string unused: enabledtitle WARNING: translation string unused: encrypted +WARNING: translation string unused: enter ack class WARNING: translation string unused: err bk 1 WARNING: translation string unused: err bk 10 password WARNING: translation string unused: err bk 2 key @@ -885,7 +889,14 @@ WARNING: untranslated string: Disabled = Disabled WARNING: untranslated string: Scan for Songs = unknown string WARNING: untranslated string: Weekly = Weekly WARNING: untranslated string: acpitemp = ACPI - Temperatures +WARNING: untranslated string: advproxy asbased anomaly detection = Anomaly detections based on Autonomous Systems information WARNING: untranslated string: advproxy errmsg wpad invalid ip or mask = WPAD: Invalid IP or subnet for excluded IP subnet +WARNING: untranslated string: advproxy fastflux detection = Deny access to destinations hosted on fast flux setups +WARNING: untranslated string: advproxy fastflux detection threshold = Threshold +WARNING: untranslated string: advproxy fastflux no threshold given = No threshold was given for fast flux detection +WARNING: untranslated string: advproxy fastflux threshold invalid = Supplied fast flux detection threshold is invalid +WARNING: untranslated string: advproxy fastflux threshold out of bounds = Supplied fast flux detection threshold is out of bounds +WARNING: untranslated string: advproxy selectively announcements detection = Deny access to destinations hosted on selectively announced networks WARNING: untranslated string: advproxy wpad example dst_noproxy_ip = e.g. 192.168.2.0/255.255.255.0 WARNING: untranslated string: advproxy wpad example dst_noproxy_url = e.g. *.ipfire.org* WARNING: untranslated string: advproxy wpad label dst_noproxy_ip = Excluded IP Subnets (one per line) diff --git a/doc/language_missings b/doc/language_missings index 7aa2094a4..ae3901bc5 100644 --- a/doc/language_missings +++ b/doc/language_missings @@ -79,6 +79,7 @@ < administrator password < administrator username < adsl settings +< advproxy asbased anomaly detection < advproxy AUTH method ntlm < advproxy AUTH method ntlm auth < advproxy basic authentication @@ -87,9 +88,15 @@ < advproxy errmsg invalid upstream proxy < advproxy errmsg proxy ports equal < advproxy errmsg wpad invalid ip or mask +< advproxy fastflux detection +< advproxy fastflux detection threshold +< advproxy fastflux no threshold given +< advproxy fastflux threshold invalid +< advproxy fastflux threshold out of bounds < advproxy group access control < advproxy group required < advproxy proxy port transparent +< advproxy selectively announcements detection < advproxy wpad example dst_noproxy_ip < advproxy wpad example dst_noproxy_url < advproxy wpad label dst_noproxy_ip @@ -927,6 +934,13 @@ ############################################################################ # Checking cgi-bin translations for language: fr # ############################################################################ +< advproxy asbased anomaly detection +< advproxy fastflux detection +< advproxy fastflux detection threshold +< advproxy fastflux no threshold given +< advproxy fastflux threshold invalid +< advproxy fastflux threshold out of bounds +< advproxy selectively announcements detection < ansi t1.483 < bewan adsl pci st < bewan adsl usb @@ -943,11 +957,18 @@ < administrator password < administrator username < adsl settings +< advproxy asbased anomaly detection < advproxy AUTH method ntlm auth < advproxy basic authentication < advproxy errmsg wpad invalid ip or mask +< advproxy fastflux detection +< advproxy fastflux detection threshold +< advproxy fastflux no threshold given +< advproxy fastflux threshold invalid +< advproxy fastflux threshold out of bounds < advproxy group access control < advproxy group required +< advproxy selectively announcements detection < advproxy wpad example dst_noproxy_ip < advproxy wpad example dst_noproxy_url < advproxy wpad label dst_noproxy_ip @@ -1108,7 +1129,7 @@ < fwhost cust locationlocation < fwhost newlocationgrp < generate ptr -< guaranteed bandwith +< guaranteed bandwidth < guardian < hardware vulnerabilities < ids apply @@ -1340,12 +1361,19 @@ < administrator password < administrator username < adsl settings +< advproxy asbased anomaly detection < advproxy AUTH method ntlm < advproxy AUTH method ntlm auth < advproxy basic authentication < advproxy errmsg wpad invalid ip or mask +< advproxy fastflux detection +< advproxy fastflux detection threshold +< advproxy fastflux no threshold given +< advproxy fastflux threshold invalid +< advproxy fastflux threshold out of bounds < advproxy group access control < advproxy group required +< advproxy selectively announcements detection < advproxy wpad example dst_noproxy_ip < advproxy wpad example dst_noproxy_url < advproxy wpad label dst_noproxy_ip @@ -1793,6 +1821,7 @@ < administrator password < administrator username < adsl settings +< advproxy asbased anomaly detection < advproxy AUTH method ntlm < advproxy AUTH method ntlm auth < advproxy basic authentication @@ -1801,9 +1830,15 @@ < advproxy errmsg invalid upstream proxy < advproxy errmsg proxy ports equal < advproxy errmsg wpad invalid ip or mask +< advproxy fastflux detection +< advproxy fastflux detection threshold +< advproxy fastflux no threshold given +< advproxy fastflux threshold invalid +< advproxy fastflux threshold out of bounds < advproxy group access control < advproxy group required < advproxy proxy port transparent +< advproxy selectively announcements detection < advproxy wpad example dst_noproxy_ip < advproxy wpad example dst_noproxy_url < advproxy wpad label dst_noproxy_ip @@ -2687,6 +2722,7 @@ < administrator password < administrator username < adsl settings +< advproxy asbased anomaly detection < advproxy AUTH method ntlm < advproxy AUTH method ntlm auth < advproxy basic authentication @@ -2695,9 +2731,15 @@ < advproxy errmsg invalid upstream proxy < advproxy errmsg proxy ports equal < advproxy errmsg wpad invalid ip or mask +< advproxy fastflux detection +< advproxy fastflux detection threshold +< advproxy fastflux no threshold given +< advproxy fastflux threshold invalid +< advproxy fastflux threshold out of bounds < advproxy group access control < advproxy group required < advproxy proxy port transparent +< advproxy selectively announcements detection < advproxy wpad example dst_noproxy_ip < advproxy wpad example dst_noproxy_url < advproxy wpad label dst_noproxy_ip @@ -3581,7 +3623,14 @@ # Checking cgi-bin translations for language: tr # ############################################################################ < acpitemp +< advproxy asbased anomaly detection < advproxy errmsg wpad invalid ip or mask +< advproxy fastflux detection +< advproxy fastflux detection threshold +< advproxy fastflux no threshold given +< advproxy fastflux threshold invalid +< advproxy fastflux threshold out of bounds +< advproxy selectively announcements detection < advproxy wpad example dst_noproxy_ip < advproxy wpad example dst_noproxy_url < advproxy wpad label dst_noproxy_ip diff --git a/langs/de/cgi-bin/de.pl b/langs/de/cgi-bin/de.pl index 0844e3991..80aaff9a9 100644 --- a/langs/de/cgi-bin/de.pl +++ b/langs/de/cgi-bin/de.pl @@ -328,8 +328,8 @@ 'advproxy error design' => 'Design der Fehlermeldungen', 'advproxy error language' => 'Sprache der Fehlermeldungen', 'advproxy fastflux detection' => 'Verbindungen zu auf Fast Flux-Setups gehosteten Zielen verweigern', -'advproxy fastflux no threshold given' => 'Kein Schwellwert für Fast Flux-Erkennung angegeben', 'advproxy fastflux detection threshold' => 'Schwellwert', +'advproxy fastflux no threshold given' => 'Kein Schwellwert für Fast Flux-Erkennung angegeben', 'advproxy fastflux threshold invalid' => 'Eingegebener Schwellwert für Fast Flux-Erkennung ist ungültig', 'advproxy fastflux threshold out of bounds' => 'Eingegebener Schwellwert für Fast Flux-Erkennung befindet sich außerhalb zulässiger Grenzwerte', 'advproxy friday' => 'Fr', diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl index 1d833b6ef..4c05dcf76 100644 --- a/langs/en/cgi-bin/en.pl +++ b/langs/en/cgi-bin/en.pl @@ -325,8 +325,8 @@ 'advproxy error design' => 'Error messages design', 'advproxy error language' => 'Error messages language', 'advproxy fastflux detection' => 'Deny access to destinations hosted on fast flux setups', -'advproxy fastflux no threshold given' => 'No threshold was given for fast flux detection', 'advproxy fastflux detection threshold' => 'Threshold', +'advproxy fastflux no threshold given' => 'No threshold was given for fast flux detection', 'advproxy fastflux threshold invalid' => 'Supplied fast flux detection threshold is invalid', 'advproxy fastflux threshold out of bounds' => 'Supplied fast flux detection threshold is out of bounds', 'advproxy friday' => 'Fri', -- 2.20.1

2 2

[PATCH] firewall: Revert strict martian check on loopback interface
by Arne Fitzenreiter 15 Feb '22

15 Feb '22

If the firewall is talking to itself using one of its private IP addresses (e.g. the primary green interface IP address), it will use the loopback interface. This is due to the local routing table which will be looked up first: [root@ipfire ~]# ip rule 0: from all lookup local 128: from all lookup 220 220: from all lookup 220 32765: from all lookup static 32766: from all lookup main 32767: from all lookup default It contains: [root@ipfire ~]# ip route show table local local 8x.1x.1x.1x dev ppp0 proto kernel scope host src 8x.1x.1x.1x local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1 local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1 broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1 local 192.168.x.1 dev green0 proto kernel scope host src 192.168.x.1 broadcast 192.168.x.255 dev green0 proto kernel scope link src 192.168.x.1 Any lookup for the green IP address will show this: local 192.168.x.1 dev lo table local src 192.168.x.1 uid 0 cache <local> A test ping shows this in tcpdump: [root@ipfire ~]# tcpdump -i any icmp -nn tcpdump: data link type LINUX_SLL2 tcpdump: verbose output suppressed, use -v[v]... for full protocol decode listening on any, link-type LINUX_SLL2 (Linux cooked v2), snapshot length 262144 bytes 17:24:22.864293 lo In IP 127.0.0.1 > 127.0.0.1: ICMP echo request, id 10420, seq 1, length 64 17:24:22.864422 lo In IP 127.0.0.1 > 127.0.0.1: ICMP echo reply, id 10420, seq 1, length 64 17:24:29.162021 lo In IP 192.168.x.1 > 192.168.x.1: ICMP echo request, id 1555, seq 1, length 64 17:24:29.162201 lo In IP 192.168.x.1 > 192.168.x.1: ICMP echo reply, id 1555, seq 1, length 64 For this reason, we will have to accept any source and destination IP address on the loopback interface, which is what this patch does. We can however, continue to check whether we received any packets with the loopback address on any other interface. This regression was introduced in commit a36cd34e. Fixes: #12776 - New spoofed or martian filter block Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- src/initscripts/system/firewall | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall index 48653ff57..fc355cd5d 100644 --- a/src/initscripts/system/firewall +++ b/src/initscripts/system/firewall @@ -200,14 +200,10 @@ iptables_init() { iptables -A INPUT -j ICMPINPUT iptables -A ICMPINPUT -p icmp --icmp-type 8 -j ACCEPT - # Accept everything on loopback if source/destination is loopback space... + # Accept everything on loopback iptables -N LOOPBACK - iptables -A LOOPBACK -i lo -s 127.0.0.0/8 -j ACCEPT - iptables -A LOOPBACK -o lo -d 127.0.0.0/8 -j ACCEPT - - # ... and drop everything else on the loopback interface, since no other traffic should appear there - iptables -A LOOPBACK -i lo -j SPOOFED_MARTIAN - iptables -A LOOPBACK -o lo -j SPOOFED_MARTIAN + iptables -A LOOPBACK -i lo -j ACCEPT + iptables -A LOOPBACK -o lo -j ACCEPT # Filter all packets with loopback addresses on non-loopback interfaces (spoofed) iptables -A LOOPBACK -s 127.0.0.0/8 -j SPOOFED_MARTIAN -- 2.34.1

3 2

[PATCH] xtables-addons: Drop package.
by Stefan Schantl 15 Feb '22

15 Feb '22

None of the provided modules are in use, so this package safely can be dropped. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- config/rootfiles/common/xtables-addons | 44 --------- lfs/xtables-addons | 118 ------------------------- make.sh | 2 - 3 files changed, 164 deletions(-) delete mode 100644 config/rootfiles/common/xtables-addons delete mode 100644 lfs/xtables-addons diff --git a/config/rootfiles/common/xtables-addons b/config/rootfiles/common/xtables-addons deleted file mode 100644 index 51b0d208d..000000000 --- a/config/rootfiles/common/xtables-addons +++ /dev/null @@ -1,44 +0,0 @@ -lib/xtables/libxt_ACCOUNT.so -lib/xtables/libxt_CHAOS.so -lib/xtables/libxt_DELUDE.so -lib/xtables/libxt_DHCPMAC.so -lib/xtables/libxt_DNETMAP.so -lib/xtables/libxt_ECHO.so -lib/xtables/libxt_IPMARK.so -lib/xtables/libxt_LOGMARK.so -lib/xtables/libxt_PROTO.so -lib/xtables/libxt_SYSRQ.so -lib/xtables/libxt_TARPIT.so -lib/xtables/libxt_condition.so -lib/xtables/libxt_dhcpmac.so -lib/xtables/libxt_fuzzy.so -lib/xtables/libxt_geoip.so -lib/xtables/libxt_gradm.so -lib/xtables/libxt_iface.so -lib/xtables/libxt_ipp2p.so -lib/xtables/libxt_ipv4options.so -lib/xtables/libxt_length2.so -lib/xtables/libxt_lscan.so -lib/xtables/libxt_pknock.so -lib/xtables/libxt_psd.so -lib/xtables/libxt_quota2.so -usr/bin/xt_geoip_query -#usr/lib/libxt_ACCOUNT_cl.la -#usr/lib/libxt_ACCOUNT_cl.so -usr/lib/libxt_ACCOUNT_cl.so.0 -usr/lib/libxt_ACCOUNT_cl.so.0.0.0 -#usr/libexec/xtables-addons -#usr/libexec/xtables-addons/xt_geoip_build -#usr/libexec/xtables-addons/xt_geoip_build_maxmind -#usr/libexec/xtables-addons/xt_geoip_dl -#usr/libexec/xtables-addons/xt_geoip_dl_maxmind -usr/sbin/iptaccount -usr/sbin/pknlusr -#usr/share/man/man1/xt_geoip_build.1 -#usr/share/man/man1/xt_geoip_build_maxmind.1 -#usr/share/man/man1/xt_geoip_dl.1 -#usr/share/man/man1/xt_geoip_dl_maxmind.1 -#usr/share/man/man1/xt_geoip_query.1 -#usr/share/man/man8/iptaccount.8 -#usr/share/man/man8/pknlusr.8 -#usr/share/man/man8/xtables-addons.8 diff --git a/lfs/xtables-addons b/lfs/xtables-addons deleted file mode 100644 index fdea1ffcd..000000000 --- a/lfs/xtables-addons +++ /dev/null @@ -1,118 +0,0 @@ -############################################################################### -# # -# IPFire.org - A linux based firewall # -# Copyright (C) 2007-2021 IPFire Team <info(a)ipfire.org> # -# # -# This program is free software: you can redistribute it and/or modify # -# it under the terms of the GNU General Public License as published by # -# the Free Software Foundation, either version 3 of the License, or # -# (at your option) any later version. # -# # -# This program is distributed in the hope that it will be useful, # -# but WITHOUT ANY WARRANTY; without even the implied warranty of # -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # -# GNU General Public License for more details. # -# # -# You should have received a copy of the GNU General Public License # -# along with this program. If not, see <http://www.gnu.org/licenses/>. # -# # -############################################################################### - -############################################################################### -# Definitions -############################################################################### - -include Config - -VERSUFIX = ipfire$(KCFG) -MODPATH = /lib/modules/$(KVER)-$(VERSUFIX)/extra/ - -VER = 3.18 - -THISAPP = xtables-addons-$(VER) -DL_FILE = $(THISAPP).tar.xz -DL_FROM = $(URL_IPFIRE) -DIR_APP = $(DIR_SRC)/$(THISAPP) - -ifeq "$(USPACE)" "1" - TARGET = $(DIR_INFO)/$(THISAPP) -else - TARGET = $(DIR_INFO)/$(THISAPP)-kmod-$(KVER)-$(VERSUFIX) -endif - -############################################################################### -# Top-level Rules -############################################################################### - -objects = $(DL_FILE) - -$(DL_FILE) = $(DL_FROM)/$(DL_FILE) - -$(DL_FILE)_MD5 = 755471b1dc6808f274f914fa11552698 - -install : $(TARGET) - -check : $(patsubst %,$(DIR_CHK)/%,$(objects)) - -download :$(patsubst %,$(DIR_DL)/%,$(objects)) - -md5 : $(subst %,%_MD5,$(objects)) - -dist: - $(PAK) - -############################################################################### -# Downloading, checking, md5sum -############################################################################### - -$(patsubst %,$(DIR_CHK)/%,$(objects)) : - @$(CHECK) - -$(patsubst %,$(DIR_DL)/%,$(objects)) : - @$(LOAD) - -$(subst %,%_MD5,$(objects)) : - @$(MD5) - -############################################################################### -# Installation Details -############################################################################### - -$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) - @$(PREBUILD) - @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) - - # Only build the specified modules. -# cp -avf $(DIR_SRC)/config/xtables-addons/mconfig \ -# $(DIR_APP)/mconfig - -# Check if we build the modules for a kernel or the userspace parts. -ifeq "$(USPACE)" "1" - cd $(DIR_APP) && ./configure \ - --prefix=/usr \ - --without-kbuild - - cd $(DIR_APP) && make $(MAKETUNING) - cd $(DIR_APP) && make install -else - cd $(DIR_APP) && ./configure \ - --with-kbuild=/lib/modules/$$(uname -r)$(KCFG)/build - cd $(DIR_APP) && make $(MAKETUNING) - - # Install the built kernel modules. - mkdir -p $(MODPATH) - cd $(DIR_APP) && for f in $$(ls extensions/*.ko); do \ - /lib/modules/$$(uname -r)$(KCFG)/build/scripts/sign-file sha512 \ - /lib/modules/$$(uname -r)$(KCFG)/build/certs/signing_key.pem \ - /lib/modules/$$(uname -r)$(KCFG)/build/certs/signing_key.x509 \ - $$f; \ - xz $$f; \ - install -m 644 $$f.xz $(MODPATH); \ - done -endif - - # Create directory for the databases. - mkdir -pv /usr/share/xt_geoip/ - - @rm -rf $(DIR_APP) - @$(POSTBUILD) diff --git a/make.sh b/make.sh index 79798834a..7fee7ad40 100755 --- a/make.sh +++ b/make.sh @@ -1184,10 +1184,8 @@ buildipfire() { lfsmake2 rtl8812au KCFG="" lfsmake2 rtl8822bu KCFG="" lfsmake2 xradio KCFG="" - lfsmake2 xtables-addons KCFG="" lfsmake2 linux-initrd KCFG="" - lfsmake2 xtables-addons USPACE="1" lfsmake2 libgpg-error lfsmake2 libgcrypt lfsmake2 libassuan -- 2.30.2

3 2

[PATCH 1/4] firewall: Drop support for blocking P2P protocols.
by Stefan Schantl 15 Feb '22

15 Feb '22

The main P2P (peer-to-peer) aera has passed for several year now, so this kind of feature is realy out-dated. The feature only supports a handfull of P2P protocols (mostly unencrypted) for applications, which have been superseeded by various other applications and protocols. So, this fairly is not longer required and safely can be dropped. Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- config/firewall/rules.pl | 23 ----------------------- 1 file changed, 23 deletions(-) diff --git a/config/firewall/rules.pl b/config/firewall/rules.pl index 9d280045a..fea6874a4 100644 --- a/config/firewall/rules.pl +++ b/config/firewall/rules.pl @@ -70,12 +70,9 @@ my %locationsettings = ( "LOCATIONBLOCK_ENABLED" => "off" ); -my @p2ps=(); - my $configfwdfw = "${General::swroot}/firewall/config"; my $configinput = "${General::swroot}/firewall/input"; my $configoutgoing = "${General::swroot}/firewall/outgoing"; -my $p2pfile = "${General::swroot}/firewall/p2protocols"; my $locationfile = "${General::swroot}/firewall/locationblock"; my $configgrp = "${General::swroot}/fwhosts/customgroups"; my $netsettings = "${General::swroot}/ethernet/settings"; @@ -125,9 +122,6 @@ sub main { &buildrules(\%configfwdfw); } - # Load P2P block rules. - &p2pblock(); - # Load Location block rules. &locationblock(); @@ -620,23 +614,6 @@ sub time_convert_to_minutes { return ($hrs * 60) + $min; } -sub p2pblock { - open(FILE, "<$p2pfile") or die "Unable to read $p2pfile"; - my @protocols = (); - foreach my $p2pentry (<FILE>) { - my @p2pline = split(/\;/, $p2pentry); - next unless ($p2pline[2] eq "off"); - - push(@protocols, "--$p2pline[1]"); - } - close(FILE); - - run("$IPTABLES -F P2PBLOCK"); - if (@protocols) { - run("$IPTABLES -A P2PBLOCK -m ipp2p @protocols -j DROP"); - } -} - sub locationblock { # Flush iptables chain. run("$IPTABLES -F LOCATIONBLOCK"); -- 2.30.2

3 11

[PATCH] iana-etc: Update to version 20220207
by Adolf Belka 15 Feb '22

15 Feb '22

- Update from 2.30 (2011) to 20220207 - Update of rootfile not required - After version 2.30 the files from iana are no longer versioned. A git repository is available (also used by LFS) which creates the required files by an automated script. So the lfs just needs to copy across the services and protocols files to /etc - There is no Changelog Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/iana-etc | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/lfs/iana-etc b/lfs/iana-etc index 8b7156f12..ddcdc9242 100644 --- a/lfs/iana-etc +++ b/lfs/iana-etc @@ -24,10 +24,10 @@ include Config -VER = 2.30 +VER = 20220207 THISAPP = iana-etc-$(VER) -DL_FILE = $(THISAPP).tar.bz2 +DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 3ba3afb1d1b261383d247f46cb135ee8 +$(DL_FILE)_MD5 = 81d865ce7fe4240d5abed48c3ca5fa9f install : $(TARGET) @@ -69,8 +69,7 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) - @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE) - cd $(DIR_APP) && make install + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) + cp -avf $(DIR_APP)/{services,protocols} /etc/ @rm -rf $(DIR_APP) @$(POSTBUILD) -- 2.35.1

2 2

Porting IPFire 2 to RISC-V
by Michael Tremer 15 Feb '22

15 Feb '22

Hello, Apologies that this email comes a bit late and my changes have caused some confusion on the list, but better late than never. I have spent some time to port IPFire 2 to RISC-V. This is nothing that had a very high priority, but I wanted to get my hands on it to see whether it was “just another architecture” that could bring us 1% of users, or if it was different from ARM which we already support as an alternative architecture to x86. To keep it short, RISC-V seems to be very different. In a good way. But it is too soon. The bootstrap for ARM took many months whereas this port compiled almost on the first go. There were some issues with autotools, but no bigger linker issues in the toolchain, assembly errors or simply where a build process broken because it didn’t recognise the architecture. The only exception was that PCRE/PCRE2 do not have support for RISC-V for their JIT, yet. Therefore I decided to merge the branch with all required changes into the main repository because there are no changes that will break anything else. This was a very nice experience. As a package maintainer, you probably just switch on RISC-V and you are done. There are, however, a couple of downsides. The biggest one is that I didn’t have hardware and that there isn’t much available at this point in time. The development boards are too expensive and I didn’t even consider to buy one because even if I could compile IPFire for RISC-V in reasonable time, literally nobody will be able to use it. With ARM, we were quite early and we can only conclude that that wasn’t a good thing. We ran into loads of problems with the architecture and we still have *very* limited choice of hardware available. At least RISC-V does not seem to cause these issues on the software development side, which might make support for it a lot less painful for us. Yay. I have used QEMU to emulate the whole architecture and it can be built on any machine that has qemu-system-riscv64 installed. Please do not forget to download the toolchain first. Although QEMU is fast, compiling it took about three days on a 12-core Xeon processor that was a little bit dated actually. One of the biggest pain points is Rust which isn’t available at all for RISC-V and therefore I could not build suricata. Due to the lack of real-world application for this and our limited usage of Rust this won’t be a problem for now, but probably further down the line. So, what we are going to do with it? I will probably compile it every once in a while just to check if it is still compiling. There is no point in uploading it to a server yet because nobody will be able to use it. I unfortunately have no connection to the (RISC-V) hardware industry. If someone does have such connection, please let me know. It would be great to have some development hardware to use and make IPFire boot on it. We would also require some strong build power to not delay development because of adding another architecture. Those are my thoughts on this :) -Michael

1 1

← Newer
1
2
3
4
5
6
7
8
9
...
12
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development February 2022