Development March 2022

development@lists.ipfire.org

21 participants
110 discussions

[PATCH] ids.cgi: Fixed trivial typos in comment
by Matthias Fischer 12 Mar '22

12 Mar '22

Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- html/cgi-bin/ids.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/ids.cgi b/html/cgi-bin/ids.cgi index b05912645..76c2b99a9 100644 --- a/html/cgi-bin/ids.cgi +++ b/html/cgi-bin/ids.cgi @@ -619,7 +619,7 @@ if ($cgiparams{'RULESET'} eq $Lang::tr{'ids apply'}) { # Convert interface name into upper case. my $zone_upper = uc($zone); - # Check if the IDS is enabled for this interaces. + # Check if the IDS is enabled for these interfaces. if ($cgiparams{"ENABLE_IDS_$zone_upper"}) { # Increase count. $monitored_zones++; -- 2.25.1

1 0

[PATCH] ids.cgi: Added topic for ruleset actions
by Matthias Fischer 12 Mar '22

12 Mar '22

Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- html/cgi-bin/ids.cgi | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/html/cgi-bin/ids.cgi b/html/cgi-bin/ids.cgi index 722715667..b05912645 100644 --- a/html/cgi-bin/ids.cgi +++ b/html/cgi-bin/ids.cgi @@ -1247,7 +1247,7 @@ print <<END; <td class='base' bgcolor='$color{'color20'}'>$Lang::tr{'ids provider'}</td> <td class='base' bgcolor='$color{'color20'}'>$Lang::tr{'date'}</td> <td class='base' bgcolor='$color{'color20'}' align='center'>$Lang::tr{'ids autoupdates'}</td> - <td class='base' bgcolor='$color{'color20'}'></td> + <td class='base' bgcolor='$color{'color20'}' align='center'>$Lang::tr{'action'}</td> <td class='base' colspan='3' bgcolor='$color{'color20'}'></td> </tr> END -- 2.25.1

1 0

[PATCH] cifs-utils: Update to version 6.14
by Adolf Belka 12 Mar '22

12 Mar '22

- Update from 6.13 to 6.14 - Update of rootfile not required - Changelog version 6.14 setcifsacl: fix formatting smbinfo: add support for new key dump ioctl mount.cifs: fix crash when mount point does not exist cifs.upcall: fix regression in kerberos mount smbinfo: Add command for displaying alternate data streams Reorder ACEs in preferred order during setcifsacl Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org> --- lfs/cifs-utils | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/lfs/cifs-utils b/lfs/cifs-utils index 524c3bcee..08e9b2c28 100644 --- a/lfs/cifs-utils +++ b/lfs/cifs-utils @@ -24,9 +24,7 @@ include Config -SUMMARY = Utilities for doing and managing mounts of the Linux CIFS filesystem - -VER = 6.13 +VER = 6.14 THISAPP = cifs-utils-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -34,12 +32,10 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = cifs-utils -PAK_VER = 3 +PAK_VER = 4 DEPS = -SERVICES = - ############################################################################### # Top-level Rules ############################################################################### @@ -48,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 4348921483c530826950e9503b08b033 +$(DL_FILE)_MD5 = e918d1246adb841c61e562538c2cc78e install : $(TARGET) @@ -58,7 +54,7 @@ download :$(patsubst %,$(DIR_DL)/%,$(objects)) md5 : $(subst %,%_MD5,$(objects)) -dist: +dist: @$(PAK) ############################################################################### -- 2.35.1

3 5

[PATCH] firewall: Make blocking all traffic impossible on HOSTILE
by Michael Tremer 11 Mar '22

11 Mar '22

The current setup can fail and block all traffic on RED if the RETURN rules could not be created. This can happen when the kernel fails to load the ipset module, as it is the case after upgrading to a new kernel. Restarting the firewall will cause that the system is being cut off the internet. This design now changes that if those rules cannot be created, the DROP_HOSTILE feature is just inactive, but it would not disrupt any traffic. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Daniel Weismüller <daniel.weismueller(a)ipfire.org> --- config/firewall/rules.pl | 12 +++--------- src/initscripts/system/firewall | 11 +++++++---- 2 files changed, 10 insertions(+), 13 deletions(-) diff --git a/config/firewall/rules.pl b/config/firewall/rules.pl index 57f4809b4..d71304986 100644 --- a/config/firewall/rules.pl +++ b/config/firewall/rules.pl @@ -701,15 +701,9 @@ sub drop_hostile_networks () { # Call function to load the network list of hostile networks. &ipset_restore($HOSTILE_CCODE); - # Setup rules to pass traffic which does not belong to a hostile network. - run("$IPTABLES -A HOSTILE -i $RED_DEV -m set ! --match-set $HOSTILE_CCODE src -j RETURN"); - run("$IPTABLES -A HOSTILE -o $RED_DEV -m set ! --match-set $HOSTILE_CCODE dst -j RETURN"); - - # Setup logging. - run("$IPTABLES -A HOSTILE -m limit --limit 10/second -j LOG --log-prefix \"DROP_HOSTILE \""); - - # Drop traffic from/to hostile network. - run("$IPTABLES -A HOSTILE -j DROP -m comment --comment \"DROP_HOSTILE\""); + # Check traffic in incoming/outgoing direction and drop if it matches + run("$IPTABLES -A HOSTILE -i $RED_DEV -m set --match-set $HOSTILE_CCODE src -j HOSTILE_DROP"); + run("$IPTABLES -A HOSTILE -o $RED_DEV -m set --match-set $HOSTILE_CCODE dst -j HOSTILE_DROP"); } sub get_protocols { diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall index 2c4d3163b..2a70feac2 100644 --- a/src/initscripts/system/firewall +++ b/src/initscripts/system/firewall @@ -262,10 +262,13 @@ iptables_init() { # Chains for networks known as being hostile, posing a technical threat to our users # (i. e. listed at Spamhaus DROP et al.) iptables -N HOSTILE - iptables -A INPUT -i $IFACE -j HOSTILE - iptables -A FORWARD -i $IFACE -j HOSTILE - iptables -A FORWARD -o $IFACE -j HOSTILE - iptables -A OUTPUT -o $IFACE -j HOSTILE + iptables -A INPUT -j HOSTILE + iptables -A FORWARD -j HOSTILE + iptables -A OUTPUT -j HOSTILE + + iptables -N HOSTILE_DROP + iptables -A HOSTILE_DROP -m limit --limit 10/second -j LOG --log-prefix "DROP_HOSTILE " + iptables -A HOSTILE_DROP -j DROP -m comment --comment "DROP_HOSTILE" # Tor (inbound) iptables -N TOR_INPUT -- 2.30.2

1 0

[PATCH] Added /var/ipfire/cups to the backup to solve the behavior discribed in bug 12404.
by Daniel Weismueller 11 Mar '22

11 Mar '22

Signed-off-by: Daniel Weismueller <daniel.weismueller(a)ipfire.org> --- lfs/cups | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lfs/cups b/lfs/cups index 99c9c8887..5c5aef5f8 100644 --- a/lfs/cups +++ b/lfs/cups @@ -94,6 +94,9 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb + install -v -m 644 $(DIR_SRC)/config/backup/includes/cups \ + /var/ipfire/backup/addons/includes/cups + # install initscript $(call INSTALL_INITSCRIPT,cups) cp -fv $(DIR_SRC)/config/cups/cupsd.conf /var/ipfire/cups/ -- 2.34.1

1 0

[PATCH 1/4] libloc: Update to 0.9.11
by Stefan Schantl 09 Mar '22

09 Mar '22

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- config/rootfiles/common/libloc | 516 ++++++++++++++++----------------- lfs/libloc | 4 +- 2 files changed, 260 insertions(+), 260 deletions(-) diff --git a/config/rootfiles/common/libloc b/config/rootfiles/common/libloc index a87635912..c7335c7ef 100644 --- a/config/rootfiles/common/libloc +++ b/config/rootfiles/common/libloc @@ -39,262 +39,262 @@ usr/lib/python3.10/site-packages/location/logger.py #var/lib/location var/lib/location/database.db var/lib/location/ipset -var/lib/location/ipset/A1.ipset4 -var/lib/location/ipset/A2.ipset4 -var/lib/location/ipset/A3.ipset4 -var/lib/location/ipset/AD.ipset4 -var/lib/location/ipset/AE.ipset4 -var/lib/location/ipset/AF.ipset4 -var/lib/location/ipset/AG.ipset4 -var/lib/location/ipset/AI.ipset4 -var/lib/location/ipset/AL.ipset4 -var/lib/location/ipset/AM.ipset4 -var/lib/location/ipset/AN.ipset4 -var/lib/location/ipset/AO.ipset4 -var/lib/location/ipset/AP.ipset4 -var/lib/location/ipset/AQ.ipset4 -var/lib/location/ipset/AR.ipset4 -var/lib/location/ipset/AS.ipset4 -var/lib/location/ipset/AT.ipset4 -var/lib/location/ipset/AU.ipset4 -var/lib/location/ipset/AW.ipset4 -var/lib/location/ipset/AX.ipset4 -var/lib/location/ipset/AZ.ipset4 -var/lib/location/ipset/BA.ipset4 -var/lib/location/ipset/BB.ipset4 -var/lib/location/ipset/BD.ipset4 -var/lib/location/ipset/BE.ipset4 -var/lib/location/ipset/BF.ipset4 -var/lib/location/ipset/BG.ipset4 -var/lib/location/ipset/BH.ipset4 -var/lib/location/ipset/BI.ipset4 -var/lib/location/ipset/BJ.ipset4 -var/lib/location/ipset/BL.ipset4 -var/lib/location/ipset/BM.ipset4 -var/lib/location/ipset/BN.ipset4 -var/lib/location/ipset/BO.ipset4 -var/lib/location/ipset/BQ.ipset4 -var/lib/location/ipset/BR.ipset4 -var/lib/location/ipset/BS.ipset4 -var/lib/location/ipset/BT.ipset4 -var/lib/location/ipset/BV.ipset4 -var/lib/location/ipset/BW.ipset4 -var/lib/location/ipset/BY.ipset4 -var/lib/location/ipset/BZ.ipset4 -var/lib/location/ipset/CA.ipset4 -var/lib/location/ipset/CC.ipset4 -var/lib/location/ipset/CD.ipset4 -var/lib/location/ipset/CF.ipset4 -var/lib/location/ipset/CG.ipset4 -var/lib/location/ipset/CH.ipset4 -var/lib/location/ipset/CI.ipset4 -var/lib/location/ipset/CK.ipset4 -var/lib/location/ipset/CL.ipset4 -var/lib/location/ipset/CM.ipset4 -var/lib/location/ipset/CN.ipset4 -var/lib/location/ipset/CO.ipset4 -var/lib/location/ipset/CR.ipset4 -var/lib/location/ipset/CS.ipset4 -var/lib/location/ipset/CU.ipset4 -var/lib/location/ipset/CV.ipset4 -var/lib/location/ipset/CW.ipset4 -var/lib/location/ipset/CX.ipset4 -var/lib/location/ipset/CY.ipset4 -var/lib/location/ipset/CZ.ipset4 -var/lib/location/ipset/DE.ipset4 -var/lib/location/ipset/DJ.ipset4 -var/lib/location/ipset/DK.ipset4 -var/lib/location/ipset/DM.ipset4 -var/lib/location/ipset/DO.ipset4 -var/lib/location/ipset/DZ.ipset4 -var/lib/location/ipset/EC.ipset4 -var/lib/location/ipset/EE.ipset4 -var/lib/location/ipset/EG.ipset4 -var/lib/location/ipset/EH.ipset4 -var/lib/location/ipset/ER.ipset4 -var/lib/location/ipset/ES.ipset4 -var/lib/location/ipset/ET.ipset4 -var/lib/location/ipset/EU.ipset4 -var/lib/location/ipset/FI.ipset4 -var/lib/location/ipset/FJ.ipset4 -var/lib/location/ipset/FK.ipset4 -var/lib/location/ipset/FM.ipset4 -var/lib/location/ipset/FO.ipset4 -var/lib/location/ipset/FR.ipset4 -var/lib/location/ipset/FX.ipset4 -var/lib/location/ipset/GA.ipset4 -var/lib/location/ipset/GB.ipset4 -var/lib/location/ipset/GD.ipset4 -var/lib/location/ipset/GE.ipset4 -var/lib/location/ipset/GF.ipset4 -var/lib/location/ipset/GG.ipset4 -var/lib/location/ipset/GH.ipset4 -var/lib/location/ipset/GI.ipset4 -var/lib/location/ipset/GL.ipset4 -var/lib/location/ipset/GM.ipset4 -var/lib/location/ipset/GN.ipset4 -var/lib/location/ipset/GP.ipset4 -var/lib/location/ipset/GQ.ipset4 -var/lib/location/ipset/GR.ipset4 -var/lib/location/ipset/GS.ipset4 -var/lib/location/ipset/GT.ipset4 -var/lib/location/ipset/GU.ipset4 -var/lib/location/ipset/GW.ipset4 -var/lib/location/ipset/GY.ipset4 -var/lib/location/ipset/HK.ipset4 -var/lib/location/ipset/HM.ipset4 -var/lib/location/ipset/HN.ipset4 -var/lib/location/ipset/HR.ipset4 -var/lib/location/ipset/HT.ipset4 -var/lib/location/ipset/HU.ipset4 -var/lib/location/ipset/ID.ipset4 -var/lib/location/ipset/IE.ipset4 -var/lib/location/ipset/IL.ipset4 -var/lib/location/ipset/IM.ipset4 -var/lib/location/ipset/IN.ipset4 -var/lib/location/ipset/IO.ipset4 -var/lib/location/ipset/IQ.ipset4 -var/lib/location/ipset/IR.ipset4 -var/lib/location/ipset/IS.ipset4 -var/lib/location/ipset/IT.ipset4 -var/lib/location/ipset/JE.ipset4 -var/lib/location/ipset/JM.ipset4 -var/lib/location/ipset/JO.ipset4 -var/lib/location/ipset/JP.ipset4 -var/lib/location/ipset/KE.ipset4 -var/lib/location/ipset/KG.ipset4 -var/lib/location/ipset/KH.ipset4 -var/lib/location/ipset/KI.ipset4 -var/lib/location/ipset/KM.ipset4 -var/lib/location/ipset/KN.ipset4 -var/lib/location/ipset/KP.ipset4 -var/lib/location/ipset/KR.ipset4 -var/lib/location/ipset/KW.ipset4 -var/lib/location/ipset/KY.ipset4 -var/lib/location/ipset/KZ.ipset4 -var/lib/location/ipset/LA.ipset4 -var/lib/location/ipset/LB.ipset4 -var/lib/location/ipset/LC.ipset4 -var/lib/location/ipset/LI.ipset4 -var/lib/location/ipset/LK.ipset4 -var/lib/location/ipset/LR.ipset4 -var/lib/location/ipset/LS.ipset4 -var/lib/location/ipset/LT.ipset4 -var/lib/location/ipset/LU.ipset4 -var/lib/location/ipset/LV.ipset4 -var/lib/location/ipset/LY.ipset4 -var/lib/location/ipset/MA.ipset4 -var/lib/location/ipset/MC.ipset4 -var/lib/location/ipset/MD.ipset4 -var/lib/location/ipset/ME.ipset4 -var/lib/location/ipset/MF.ipset4 -var/lib/location/ipset/MG.ipset4 -var/lib/location/ipset/MH.ipset4 -var/lib/location/ipset/MK.ipset4 -var/lib/location/ipset/ML.ipset4 -var/lib/location/ipset/MM.ipset4 -var/lib/location/ipset/MN.ipset4 -var/lib/location/ipset/MO.ipset4 -var/lib/location/ipset/MP.ipset4 -var/lib/location/ipset/MQ.ipset4 -var/lib/location/ipset/MR.ipset4 -var/lib/location/ipset/MS.ipset4 -var/lib/location/ipset/MT.ipset4 -var/lib/location/ipset/MU.ipset4 -var/lib/location/ipset/MV.ipset4 -var/lib/location/ipset/MW.ipset4 -var/lib/location/ipset/MX.ipset4 -var/lib/location/ipset/MY.ipset4 -var/lib/location/ipset/MZ.ipset4 -var/lib/location/ipset/NA.ipset4 -var/lib/location/ipset/NC.ipset4 -var/lib/location/ipset/NE.ipset4 -var/lib/location/ipset/NF.ipset4 -var/lib/location/ipset/NG.ipset4 -var/lib/location/ipset/NI.ipset4 -var/lib/location/ipset/NL.ipset4 -var/lib/location/ipset/NO.ipset4 -var/lib/location/ipset/NP.ipset4 -var/lib/location/ipset/NR.ipset4 -var/lib/location/ipset/NU.ipset4 -var/lib/location/ipset/NZ.ipset4 -var/lib/location/ipset/OM.ipset4 -var/lib/location/ipset/PA.ipset4 -var/lib/location/ipset/PE.ipset4 -var/lib/location/ipset/PF.ipset4 -var/lib/location/ipset/PG.ipset4 -var/lib/location/ipset/PH.ipset4 -var/lib/location/ipset/PK.ipset4 -var/lib/location/ipset/PL.ipset4 -var/lib/location/ipset/PM.ipset4 -var/lib/location/ipset/PN.ipset4 -var/lib/location/ipset/PR.ipset4 -var/lib/location/ipset/PS.ipset4 -var/lib/location/ipset/PT.ipset4 -var/lib/location/ipset/PW.ipset4 -var/lib/location/ipset/PY.ipset4 -var/lib/location/ipset/QA.ipset4 -var/lib/location/ipset/RE.ipset4 -var/lib/location/ipset/RO.ipset4 -var/lib/location/ipset/RS.ipset4 -var/lib/location/ipset/RU.ipset4 -var/lib/location/ipset/RW.ipset4 -var/lib/location/ipset/SA.ipset4 -var/lib/location/ipset/SB.ipset4 -var/lib/location/ipset/SC.ipset4 -var/lib/location/ipset/SD.ipset4 -var/lib/location/ipset/SE.ipset4 -var/lib/location/ipset/SG.ipset4 -var/lib/location/ipset/SH.ipset4 -var/lib/location/ipset/SI.ipset4 -var/lib/location/ipset/SJ.ipset4 -var/lib/location/ipset/SK.ipset4 -var/lib/location/ipset/SL.ipset4 -var/lib/location/ipset/SM.ipset4 -var/lib/location/ipset/SN.ipset4 -var/lib/location/ipset/SO.ipset4 -var/lib/location/ipset/SR.ipset4 -var/lib/location/ipset/SS.ipset4 -var/lib/location/ipset/ST.ipset4 -var/lib/location/ipset/SV.ipset4 -var/lib/location/ipset/SX.ipset4 -var/lib/location/ipset/SY.ipset4 -var/lib/location/ipset/SZ.ipset4 -var/lib/location/ipset/TC.ipset4 -var/lib/location/ipset/TD.ipset4 -var/lib/location/ipset/TF.ipset4 -var/lib/location/ipset/TG.ipset4 -var/lib/location/ipset/TH.ipset4 -var/lib/location/ipset/TJ.ipset4 -var/lib/location/ipset/TK.ipset4 -var/lib/location/ipset/TL.ipset4 -var/lib/location/ipset/TM.ipset4 -var/lib/location/ipset/TN.ipset4 -var/lib/location/ipset/TO.ipset4 -var/lib/location/ipset/TR.ipset4 -var/lib/location/ipset/TT.ipset4 -var/lib/location/ipset/TV.ipset4 -var/lib/location/ipset/TW.ipset4 -var/lib/location/ipset/TZ.ipset4 -var/lib/location/ipset/UA.ipset4 -var/lib/location/ipset/UG.ipset4 -var/lib/location/ipset/UM.ipset4 -var/lib/location/ipset/US.ipset4 -var/lib/location/ipset/UY.ipset4 -var/lib/location/ipset/UZ.ipset4 -var/lib/location/ipset/VA.ipset4 -var/lib/location/ipset/VC.ipset4 -var/lib/location/ipset/VE.ipset4 -var/lib/location/ipset/VG.ipset4 -var/lib/location/ipset/VI.ipset4 -var/lib/location/ipset/VN.ipset4 -var/lib/location/ipset/VU.ipset4 -var/lib/location/ipset/WF.ipset4 -var/lib/location/ipset/WS.ipset4 -var/lib/location/ipset/XD.ipset4 -var/lib/location/ipset/YE.ipset4 -var/lib/location/ipset/YT.ipset4 -var/lib/location/ipset/ZA.ipset4 -var/lib/location/ipset/ZM.ipset4 -var/lib/location/ipset/ZW.ipset4 +var/lib/location/ipset/A1v4.ipset +var/lib/location/ipset/A2v4.ipset +var/lib/location/ipset/A3v4.ipset +var/lib/location/ipset/ADv4.ipset +var/lib/location/ipset/AEv4.ipset +var/lib/location/ipset/AFv4.ipset +var/lib/location/ipset/AGv4.ipset +var/lib/location/ipset/AIv4.ipset +var/lib/location/ipset/ALv4.ipset +var/lib/location/ipset/AMv4.ipset +var/lib/location/ipset/ANv4.ipset +var/lib/location/ipset/AOv4.ipset +var/lib/location/ipset/APv4.ipset +var/lib/location/ipset/AQv4.ipset +var/lib/location/ipset/ARv4.ipset +var/lib/location/ipset/ASv4.ipset +var/lib/location/ipset/ATv4.ipset +var/lib/location/ipset/AUv4.ipset +var/lib/location/ipset/AWv4.ipset +var/lib/location/ipset/AXv4.ipset +var/lib/location/ipset/AZv4.ipset +var/lib/location/ipset/BAv4.ipset +var/lib/location/ipset/BBv4.ipset +var/lib/location/ipset/BDv4.ipset +var/lib/location/ipset/BEv4.ipset +var/lib/location/ipset/BFv4.ipset +var/lib/location/ipset/BGv4.ipset +var/lib/location/ipset/BHv4.ipset +var/lib/location/ipset/BIv4.ipset +var/lib/location/ipset/BJv4.ipset +var/lib/location/ipset/BLv4.ipset +var/lib/location/ipset/BMv4.ipset +var/lib/location/ipset/BNv4.ipset +var/lib/location/ipset/BOv4.ipset +var/lib/location/ipset/BQv4.ipset +var/lib/location/ipset/BRv4.ipset +var/lib/location/ipset/BSv4.ipset +var/lib/location/ipset/BTv4.ipset +var/lib/location/ipset/BVv4.ipset +var/lib/location/ipset/BWv4.ipset +var/lib/location/ipset/BYv4.ipset +var/lib/location/ipset/BZv4.ipset +var/lib/location/ipset/CAv4.ipset +var/lib/location/ipset/CCv4.ipset +var/lib/location/ipset/CDv4.ipset +var/lib/location/ipset/CFv4.ipset +var/lib/location/ipset/CGv4.ipset +var/lib/location/ipset/CHv4.ipset +var/lib/location/ipset/CIv4.ipset +var/lib/location/ipset/CKv4.ipset +var/lib/location/ipset/CLv4.ipset +var/lib/location/ipset/CMv4.ipset +var/lib/location/ipset/CNv4.ipset +var/lib/location/ipset/COv4.ipset +var/lib/location/ipset/CRv4.ipset +var/lib/location/ipset/CSv4.ipset +var/lib/location/ipset/CUv4.ipset +var/lib/location/ipset/CVv4.ipset +var/lib/location/ipset/CWv4.ipset +var/lib/location/ipset/CXv4.ipset +var/lib/location/ipset/CYv4.ipset +var/lib/location/ipset/CZv4.ipset +var/lib/location/ipset/DEv4.ipset +var/lib/location/ipset/DJv4.ipset +var/lib/location/ipset/DKv4.ipset +var/lib/location/ipset/DMv4.ipset +var/lib/location/ipset/DOv4.ipset +var/lib/location/ipset/DZv4.ipset +var/lib/location/ipset/ECv4.ipset +var/lib/location/ipset/EEv4.ipset +var/lib/location/ipset/EGv4.ipset +var/lib/location/ipset/EHv4.ipset +var/lib/location/ipset/ERv4.ipset +var/lib/location/ipset/ESv4.ipset +var/lib/location/ipset/ETv4.ipset +var/lib/location/ipset/EUv4.ipset +var/lib/location/ipset/FIv4.ipset +var/lib/location/ipset/FJv4.ipset +var/lib/location/ipset/FKv4.ipset +var/lib/location/ipset/FMv4.ipset +var/lib/location/ipset/FOv4.ipset +var/lib/location/ipset/FRv4.ipset +var/lib/location/ipset/FXv4.ipset +var/lib/location/ipset/GAv4.ipset +var/lib/location/ipset/GBv4.ipset +var/lib/location/ipset/GDv4.ipset +var/lib/location/ipset/GEv4.ipset +var/lib/location/ipset/GFv4.ipset +var/lib/location/ipset/GGv4.ipset +var/lib/location/ipset/GHv4.ipset +var/lib/location/ipset/GIv4.ipset +var/lib/location/ipset/GLv4.ipset +var/lib/location/ipset/GMv4.ipset +var/lib/location/ipset/GNv4.ipset +var/lib/location/ipset/GPv4.ipset +var/lib/location/ipset/GQv4.ipset +var/lib/location/ipset/GRv4.ipset +var/lib/location/ipset/GSv4.ipset +var/lib/location/ipset/GTv4.ipset +var/lib/location/ipset/GUv4.ipset +var/lib/location/ipset/GWv4.ipset +var/lib/location/ipset/GYv4.ipset +var/lib/location/ipset/HKv4.ipset +var/lib/location/ipset/HMv4.ipset +var/lib/location/ipset/HNv4.ipset +var/lib/location/ipset/HRv4.ipset +var/lib/location/ipset/HTv4.ipset +var/lib/location/ipset/HUv4.ipset +var/lib/location/ipset/IDv4.ipset +var/lib/location/ipset/IEv4.ipset +var/lib/location/ipset/ILv4.ipset +var/lib/location/ipset/IMv4.ipset +var/lib/location/ipset/INv4.ipset +var/lib/location/ipset/IOv4.ipset +var/lib/location/ipset/IQv4.ipset +var/lib/location/ipset/IRv4.ipset +var/lib/location/ipset/ISv4.ipset +var/lib/location/ipset/ITv4.ipset +var/lib/location/ipset/JEv4.ipset +var/lib/location/ipset/JMv4.ipset +var/lib/location/ipset/JOv4.ipset +var/lib/location/ipset/JPv4.ipset +var/lib/location/ipset/KEv4.ipset +var/lib/location/ipset/KGv4.ipset +var/lib/location/ipset/KHv4.ipset +var/lib/location/ipset/KIv4.ipset +var/lib/location/ipset/KMv4.ipset +var/lib/location/ipset/KNv4.ipset +var/lib/location/ipset/KPv4.ipset +var/lib/location/ipset/KRv4.ipset +var/lib/location/ipset/KWv4.ipset +var/lib/location/ipset/KYv4.ipset +var/lib/location/ipset/KZv4.ipset +var/lib/location/ipset/LAv4.ipset +var/lib/location/ipset/LBv4.ipset +var/lib/location/ipset/LCv4.ipset +var/lib/location/ipset/LIv4.ipset +var/lib/location/ipset/LKv4.ipset +var/lib/location/ipset/LRv4.ipset +var/lib/location/ipset/LSv4.ipset +var/lib/location/ipset/LTv4.ipset +var/lib/location/ipset/LUv4.ipset +var/lib/location/ipset/LVv4.ipset +var/lib/location/ipset/LYv4.ipset +var/lib/location/ipset/MAv4.ipset +var/lib/location/ipset/MCv4.ipset +var/lib/location/ipset/MDv4.ipset +var/lib/location/ipset/MEv4.ipset +var/lib/location/ipset/MFv4.ipset +var/lib/location/ipset/MGv4.ipset +var/lib/location/ipset/MHv4.ipset +var/lib/location/ipset/MKv4.ipset +var/lib/location/ipset/MLv4.ipset +var/lib/location/ipset/MMv4.ipset +var/lib/location/ipset/MNv4.ipset +var/lib/location/ipset/MOv4.ipset +var/lib/location/ipset/MPv4.ipset +var/lib/location/ipset/MQv4.ipset +var/lib/location/ipset/MRv4.ipset +var/lib/location/ipset/MSv4.ipset +var/lib/location/ipset/MTv4.ipset +var/lib/location/ipset/MUv4.ipset +var/lib/location/ipset/MVv4.ipset +var/lib/location/ipset/MWv4.ipset +var/lib/location/ipset/MXv4.ipset +var/lib/location/ipset/MYv4.ipset +var/lib/location/ipset/MZv4.ipset +var/lib/location/ipset/NAv4.ipset +var/lib/location/ipset/NCv4.ipset +var/lib/location/ipset/NEv4.ipset +var/lib/location/ipset/NFv4.ipset +var/lib/location/ipset/NGv4.ipset +var/lib/location/ipset/NIv4.ipset +var/lib/location/ipset/NLv4.ipset +var/lib/location/ipset/NOv4.ipset +var/lib/location/ipset/NPv4.ipset +var/lib/location/ipset/NRv4.ipset +var/lib/location/ipset/NUv4.ipset +var/lib/location/ipset/NZv4.ipset +var/lib/location/ipset/OMv4.ipset +var/lib/location/ipset/PAv4.ipset +var/lib/location/ipset/PEv4.ipset +var/lib/location/ipset/PFv4.ipset +var/lib/location/ipset/PGv4.ipset +var/lib/location/ipset/PHv4.ipset +var/lib/location/ipset/PKv4.ipset +var/lib/location/ipset/PLv4.ipset +var/lib/location/ipset/PMv4.ipset +var/lib/location/ipset/PNv4.ipset +var/lib/location/ipset/PRv4.ipset +var/lib/location/ipset/PSv4.ipset +var/lib/location/ipset/PTv4.ipset +var/lib/location/ipset/PWv4.ipset +var/lib/location/ipset/PYv4.ipset +var/lib/location/ipset/QAv4.ipset +var/lib/location/ipset/REv4.ipset +var/lib/location/ipset/ROv4.ipset +var/lib/location/ipset/RSv4.ipset +var/lib/location/ipset/RUv4.ipset +var/lib/location/ipset/RWv4.ipset +var/lib/location/ipset/SAv4.ipset +var/lib/location/ipset/SBv4.ipset +var/lib/location/ipset/SCv4.ipset +var/lib/location/ipset/SDv4.ipset +var/lib/location/ipset/SEv4.ipset +var/lib/location/ipset/SGv4.ipset +var/lib/location/ipset/SHv4.ipset +var/lib/location/ipset/SIv4.ipset +var/lib/location/ipset/SJv4.ipset +var/lib/location/ipset/SKv4.ipset +var/lib/location/ipset/SLv4.ipset +var/lib/location/ipset/SMv4.ipset +var/lib/location/ipset/SNv4.ipset +var/lib/location/ipset/SOv4.ipset +var/lib/location/ipset/SRv4.ipset +var/lib/location/ipset/SSv4.ipset +var/lib/location/ipset/STv4.ipset +var/lib/location/ipset/SVv4.ipset +var/lib/location/ipset/SXv4.ipset +var/lib/location/ipset/SYv4.ipset +var/lib/location/ipset/SZv4.ipset +var/lib/location/ipset/TCv4.ipset +var/lib/location/ipset/TDv4.ipset +var/lib/location/ipset/TFv4.ipset +var/lib/location/ipset/TGv4.ipset +var/lib/location/ipset/THv4.ipset +var/lib/location/ipset/TJv4.ipset +var/lib/location/ipset/TKv4.ipset +var/lib/location/ipset/TLv4.ipset +var/lib/location/ipset/TMv4.ipset +var/lib/location/ipset/TNv4.ipset +var/lib/location/ipset/TOv4.ipset +var/lib/location/ipset/TRv4.ipset +var/lib/location/ipset/TTv4.ipset +var/lib/location/ipset/TVv4.ipset +var/lib/location/ipset/TWv4.ipset +var/lib/location/ipset/TZv4.ipset +var/lib/location/ipset/UAv4.ipset +var/lib/location/ipset/UGv4.ipset +var/lib/location/ipset/UMv4.ipset +var/lib/location/ipset/USv4.ipset +var/lib/location/ipset/UYv4.ipset +var/lib/location/ipset/UZv4.ipset +var/lib/location/ipset/VAv4.ipset +var/lib/location/ipset/VCv4.ipset +var/lib/location/ipset/VEv4.ipset +var/lib/location/ipset/VGv4.ipset +var/lib/location/ipset/VIv4.ipset +var/lib/location/ipset/VNv4.ipset +var/lib/location/ipset/VUv4.ipset +var/lib/location/ipset/WFv4.ipset +var/lib/location/ipset/WSv4.ipset +var/lib/location/ipset/XDv4.ipset +var/lib/location/ipset/YEv4.ipset +var/lib/location/ipset/YTv4.ipset +var/lib/location/ipset/ZAv4.ipset +var/lib/location/ipset/ZMv4.ipset +var/lib/location/ipset/ZWv4.ipset var/lib/location/signing-key.pem diff --git a/lfs/libloc b/lfs/libloc index 29008191a..b94906c94 100644 --- a/lfs/libloc +++ b/lfs/libloc @@ -24,7 +24,7 @@ include Config -VER = 0.9.10 +VER = 0.9.11 DB_DATE = 2022-02-16 THISAPP = libloc-$(VER) @@ -43,7 +43,7 @@ objects = $(DL_FILE) \ $(DL_FILE) = https://source.ipfire.org/releases/libloc/$(DL_FILE) location-$(DB_DATE).db.xz = https://location.ipfire.org/databases/1/archive/location-$(DB_DATE).db.xz -$(DL_FILE)_MD5 = 3f67e15022c142c0731cbb3746351330 +$(DL_FILE)_MD5 = 724ce9081a025307528021e6398c9335 location-$(DB_DATE).db.xz_MD5 = c1ad9c544bab917035eb0cd13b66c453 install : $(TARGET) -- 2.30.2

2 4

Minutes from Monthly Video Conference Call on 7th March
by Adolf Belka 08 Mar '22

08 Mar '22

Hi All, I just had a check through the minutes for our conf call yesterday. The link for the kernel vulnerability patch fix is coming up as a mailto: link for me both on Seamonkey and Firefox. I thought I would edit it to fix it but as far as I can see the page code looks okay to me. That is likely my inexperience in markup code. Regards, Adolf.

3 2

Suggest fixes / patches
by Steph78630 08 Mar '22

08 Mar '22

Hi all, already a user and contributor for the French translation of IPFire, I would now like to propose patches / work to improve the interface. Not being used to this approach, I hope to use the right method... I thank you in advance for your support and advice. Best regards, Stephane

2 1

[PATCH] Add Readme and Contributing guidelines.
by Jonatan Schlag 08 Mar '22

08 Mar '22

For people which just have found our source code especially over GitHub sometimes seem to have problems finding out how to contribute. This is sad as it prevents us building a bigger community. While we have a wiki which conatins a lot informations, this seems to get overlooked. I guess a contributing fact is that most software today has these informations contained in the repository itself. While I am not going to duplicate the wiki to have these informations in our repository I still think it is a good idea to have a short guide to lead new contributers into the right direction. Someone now could argue that new people just a too * to look at the right place and that's why we do not need these documents. I do not think so because of several points: First people get used to look for information at a readme. I guees that is because of the fact both GitHub and Gitlab place the readme so prominently. Second starting in a new project is hard. Finding the right place where to start is also not easy as every project is different. Giving people a short introduction what the first steps could be is definitely needed. Signed-off-by: Jonatan Schlag <jonatan.schlag(a)ipfire.org> --- README.md | 25 +++++++++++++++++++++++++ doc/CONTRIBUTING.md | 35 +++++++++++++++++++++++++++++++++++ 2 files changed, 60 insertions(+) create mode 100644 README.md create mode 100644 doc/CONTRIBUTING.md diff --git a/README.md b/README.md new file mode 100644 index 000000000..1bb3a0727 --- /dev/null +++ b/README.md @@ -0,0 +1,25 @@ +# IPFire + +# What is IPFire? + +IPFire is a hardened, versatile, state-of-the-art Open Source firewall based on Linux. Its ease of use, high performance in any scenario and extensibility make it usable for everyone. For a full list of features have a look [here](https://www.ipfire.org/features). +This repository contains the source code which is used to build the whole distribution from scratch. + +# Where can I get IPFire? + +Just head over to https://www.ipfire.org/download + +# How do I use this software? + +We have a long and detailed wiki located [here](https://wiki.ipfire.org/) which should answers most of your questions. + +# But I have some questions left. Where can I get support? + +You can ask your question at our community located [here](https://community.ipfire.org/). +A complete list of our support options can be found [here](https://www.ipfire.org/support) + +# How can I contribute? + +We have another document for this. Please look [here](doc/CONTRIBUTING.md). + + diff --git a/doc/CONTRIBUTING.md b/doc/CONTRIBUTING.md new file mode 100644 index 000000000..510a26f02 --- /dev/null +++ b/doc/CONTRIBUTING.md @@ -0,0 +1,35 @@ +# How can I help? + +You can help in numerous ways. This document should give you an overview of what is possible and how you can get involved. +It will **not** give you all information you need to successfully contribute to avoid content duplication between this document and our [wiki](https://wiki.ipfire.org/). +Instead, it should guide you to the right places to look for further information. + +## Development + +All information is available in the [development section](https://wiki.ipfire.org/devel) of our wiki. The following is a very short overview about the most important topics. + +### Contact + +We use a mailing list development(a)lists.ipfire.org for our communication. For the list archive and registration, see [here](http://lists.ipfire.org/mailman/listinfo/development) + +### Source Code + +We use our own infrastructure for code hosting, located under git.ipfire.org. The GitHub repositories are **only** mirrors of the main repositories located under git.ipfire.org. + +### How to build the distribution? + +In order to contribute, you certainly need to build the distribution at some point. See [here](https://wiki.ipfire.org/devel/ipfire-2-x/build-howto) for a long guide how to do that. + +### Bugs + +We have a bug tracker located [here](https://wiki.ipfire.org/devel/bugzilla). Further information can be found in our [wiki](https://wiki.ipfire.org/devel/bugzilla). +We do **not** use GitHub for tracking bugs. + +### Contribute changes to the source code + +First: **we do not accept GitHub pull requests!** We are working with patches which are sent to our mailing list development(a)lists.ipfire.org . +This process might be a bit tricky in the beginning. That's why you can find more information how to do this [here](https://wiki.ipfire.org/devel/submit-patches) + + + + -- 2.30.2

1 0

Re: Testing Issues with core165 Development Build: next/cad86575
by Stefan Schantl 07 Mar '22

07 Mar '22

Hello Charles, a big thanks for pointing this regression out. I've introduced this by one of my latest IDS related fixes :( I'll send a patch to the list to fix this issue. Best regards, -Stefan > Hi Stefan, > > In case you had not noticed ... after fresh install of latest > next/cad86575 > ... > > Web page ids.cgi stops loading after header. > The page header down through "Intrusion Prevention System <?>" is > displayed and then stops -- nothing else on the page > > Log in httpd error shows as: > > "Unable to read file /var/ipfire/suricata/ignored at > /var/ipfire/general-functions.pl line 883." > > I went to the directory and touched "ignored" file and chowned it to > nobody:nobody. > That allowed the page to complete loading > > I don't know if the chown was necessary -- I didn't try reloading the > page before doing it. > > > Cheers, > Charles Brown >

1 1

← Newer
1
...
5
6
7
8
9
10
11
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development March 2022