Documentation

documentation@lists.ipfire.org

226 discussions

Re: (RFC) How to change the admin account of the web user interface
by Michael Tremer 12 Nov '18

12 Nov '18

Hey, at least it would be a good idea to have a howto that is stable and does not need any changes after an update has been installed. Best, -Michael P.S. Please don't forget to CC the list On Sun, 2018-11-11 at 21:05 +0100, Carlo Fusco wrote: > You are right. Maybe we can trash my guide and I can add a sentence to > the hardening guide to warn about if the system files have to be > changed, they will not survive an update. Let me know if this is > acceptable. > On Fri, Nov 9, 2018 at 5:26 PM Michael Tremer <michael.tremer(a)ipfire.org> > wrote: > > > > Hey, > > > > nah, I was just warning that this is not a stable change and will be > > overwritten > > eventually. > > > > I guess the idea of the hardening guide is a good one, but it is probably > > best > > to change this in the software than having a wiki guide about it. What do > > you > > think? > > > > Best, > > -Michael > > > > On Fri, 2018-11-09 at 17:14 +0100, Carlo Fusco wrote: > > > I see three options: > > > > > > 1) Either, expand a bit the "change the login detail" from the > > > hardening document > > > https://wiki.ipfire.org/optimization/start/security_hardening > > > to explain what consequences changing the system files have to the > > > system, including the loss of them after an update. > > > > > > 2) And/Or add the warning about changing the system files and the loss > > > of the modifications upon update. > > > > > > 3) Or, if it's not worth it, I can just trash my howto. I have no > > > problem whatsoever. > > > > > > Just let me know. > > > On Fri, Nov 9, 2018 at 5:01 PM Carlo Fusco <fusco.carlo(a)gmail.com> wrote: > > > > > > > > I am referring to this document (I am not the author): > > > > > > > > https://wiki.ipfire.org/optimization/start/security_hardening > > > > > > > > in particular the section: > > > > > > > > "Change default login details" > > > > > > > > I wanted to specify how to change the default admin for the wui and the > > > > console. > > > > On Fri, Nov 9, 2018 at 4:56 PM Michael Tremer <michael.tremer(a)ipfire.org > > > > > > > > > wrote: > > > > > > > > > > Hello, > > > > > > > > > > the configuration files in this article will be overwritten with > > > > > updates. > > > > > They > > > > > are system configuration files. > > > > > > > > > > What are you trying to achieve here? > > > > > > > > > > -Michael > > > > > > > > > > On Fri, 2018-11-09 at 16:54 +0100, Carlo Fusco wrote: > > > > > > Hello, > > > > > > > > > > > > please review the following howto. Any criticism would be very much > > > > > > appreciated. > > > > > > > > > > > > https://wiki.ipfire.org/optimization/start/wui_username > > > > > > > > > > > > Thank you, > > > > > > > > > > > > Have a great weekend. > > > > > > > > > > > > > > > > > > -- > > > > Carlo Fusco > > > > > > > > > > >

1 0

Re: (RFC) How to change the admin account of the web user interface
by Carlo Fusco 09 Nov '18

09 Nov '18

I see three options: 1) Either, expand a bit the "change the login detail" from the hardening document https://wiki.ipfire.org/optimization/start/security_hardening to explain what consequences changing the system files have to the system, including the loss of them after an update. 2) And/Or add the warning about changing the system files and the loss of the modifications upon update. 3) Or, if it's not worth it, I can just trash my howto. I have no problem whatsoever. Just let me know. On Fri, Nov 9, 2018 at 5:01 PM Carlo Fusco <fusco.carlo(a)gmail.com> wrote: > > I am referring to this document (I am not the author): > > https://wiki.ipfire.org/optimization/start/security_hardening > > in particular the section: > > "Change default login details" > > I wanted to specify how to change the default admin for the wui and the console. > On Fri, Nov 9, 2018 at 4:56 PM Michael Tremer <michael.tremer(a)ipfire.org> wrote: > > > > Hello, > > > > the configuration files in this article will be overwritten with updates. They > > are system configuration files. > > > > What are you trying to achieve here? > > > > -Michael > > > > On Fri, 2018-11-09 at 16:54 +0100, Carlo Fusco wrote: > > > Hello, > > > > > > please review the following howto. Any criticism would be very much > > > appreciated. > > > > > > https://wiki.ipfire.org/optimization/start/wui_username > > > > > > Thank you, > > > > > > Have a great weekend. > > > > > > > > -- > Carlo Fusco -- Carlo Fusco

2 1

(RFC) How to change the admin account of the web user interface
by Carlo Fusco 09 Nov '18

09 Nov '18

Hello, please review the following howto. Any criticism would be very much appreciated. https://wiki.ipfire.org/optimization/start/wui_username Thank you, Have a great weekend. -- Carlo Fusco

2 1

Request for credentials to modify the wiki
by Carlo Fusco 08 Nov '18

08 Nov '18

Greetings, I already wrote on a separate tread of this mailing list about few improvements I would like to make to the wiki, however before doing that I need to receive a username and password, since the ones I use for the forum are not valid anymore for the wiki. I sent a request to wiki(a)ipfire.org as well, but I have yet to receive an answer. I imagine it went to a spam folder or Michael is too busy at the moment. In case, I remain at your disposal for any help I can give to the project. Until then, have a great day. -- Carlo Fusco

2 1

broken link
by Carlo Fusco 21 Oct '18

21 Oct '18

Hello, the following page: https://wiki.ipfire.org/configuration/services/openvpn/extensions/addconf has this broken link: https://wiki.ipfire.org/en/configuration/services/openvpn/config/advanced_s… If I can get an account on the wiki, I can correct it myself. I would like also to update a bit the instructions concerning setting the iOS client for OpenVPN. Finally, since it was very confusing for me as a newbie, I would like to write somewhere that setting a client for using a proxy behind OpenVPN (dhcp-option PROXY_HTTP) is not the same thing as connecting to the vpn through a proxy (http-proxy directive). Please let me know if this is acceptable and how should I proceed. Thanks -- Carlo Fusco

2 2

Re: Wiki-Link leads to chrisbenton
by Michael Tremer 27 Aug '18

27 Aug '18

Hey, On Sun, 2018-08-26 at 23:46 -0700, jim stephens wrote: > I will take a look at this. I'm requested to join the documentation > list but my reply there bounced till you guys approve it. You just have to sign up to the list. All posts from other people are being rejected (which is mainly spammers). > I need to study it for a bit, and will get a friend who knows networking > to help edit, etc. > > Thanks > jim > > On 8/26/2018 11:11 PM, Michael Tremer wrote: > > Hi, > > > > I am sure that some other places have talked about this and that there might > > be > > an alternative article. > > > > Or maybe one of you wants to just summarize the post a little bit on an own > > page > > on our wiki? > > > > Best, > > -Michael > > > > On Sun, 2018-08-26 at 15:55 -0700, jim stephens wrote: > > > Perhaps replace with a note and this link to the archive.org? > > > > > > Looks like it may have been junk since 2014, FWIW in the archive.org. > > > 302 redirects, no content since then. > > > > > > > > > > https://web.archive.org/web/20140603031911/http://www.chrisbrenton.org/2009… > > > On 8/26/2018 7:08 AM, Matthias Fischer wrote: > > > > Hi! > > > > > > > > This just came to my view: > > > > > > > > The current link for "Drop vs Reject" on > > > > https://wiki.ipfire.org/configuration/firewall/start leads to > > > > > > > > http://www.chrisbrenton.org/2009/07/why-firewall-reject-rules-are-better-th… > > > > . > > > > > > > > But this URL only shows a big, white page on chrisbenton.org: "Diese > > > > Domain kaufen". > > > > > > > > No relevant contents at all. > > > > > > > > Deleted without warning!? > > > > > > > > Best, > > > > Matthias > > > > > > > > > >

1 0

Re: Wiki-Link leads to chrisbenton
by Michael Tremer 27 Aug '18

27 Aug '18

Hi, I am sure that some other places have talked about this and that there might be an alternative article. Or maybe one of you wants to just summarize the post a little bit on an own page on our wiki? Best, -Michael On Sun, 2018-08-26 at 15:55 -0700, jim stephens wrote: > Perhaps replace with a note and this link to the archive.org? > > Looks like it may have been junk since 2014, FWIW in the archive.org. > 302 redirects, no content since then. > > https://web.archive.org/web/20140603031911/http://www.chrisbrenton.org/2009… > > On 8/26/2018 7:08 AM, Matthias Fischer wrote: > > Hi! > > > > This just came to my view: > > > > The current link for "Drop vs Reject" on > > https://wiki.ipfire.org/configuration/firewall/start leads to > > http://www.chrisbrenton.org/2009/07/why-firewall-reject-rules-are-better-th… > > . > > > > But this URL only shows a big, white page on chrisbenton.org: "Diese > > Domain kaufen". > > > > No relevant contents at all. > > > > Deleted without warning!? > > > > Best, > > Matthias > > > > > >

1 0

Is there anybody out there?
by Michael Tremer 23 Aug '18

23 Aug '18

Hello, I just wanted to send a message to everyone involved here about the wiki and what changes I have done. I sat down a couple of days ago and spent a few hours on writing, improving, moving and removing loads of content. Hopefully someone can have a look and check. Biggest things: * Main Page: I removed some sections which are not necessary for the average user and moved them together into a smaller list. That is nicer on mobile and draws attention to the four main sections. * I entirely removed the crypto section which was quite empty and moved the few pages into the hardware section (HWRNGs and crypto accelerators). * I added a guide on how to install IPFire on AWS: https://wiki.ipfire.org/installation/aws/start * I added some details about the LWL hardware and removed the fountain networks section. This is going to merge into LWL soon. I also added a page about which appliances are affected by any of the Spectre/Meltdown/etc. vulnerabilities. * I changed the sidebar to have more things on there that are accessed very often. I find that quite useful to get somewhere quickly. * And then I restructured many pages without adding or removing any content. Have a look around. There is still plenty to do All in all I am very often quite happy with the content on the wiki. But it does need work. Loads of things are outdated and pages can be shortened by referencing information that can be found somewhere else. Is anybody in to help me out here? Best, -Michael

3 9

[Announcement] talk.ipfire.org updated
by Michael Tremer 14 Mar '17

14 Mar '17

Hello *, I would like to announce to the IPFire community, that the IPFire.org VoIP services have been relaunched with loads of bug fixes and some exciting new features! Everyone of the IPFire team members has an account on our infrastructure to be able to log on to the systems, etc. Tied to that is our Jabber server and SIP server. The latter of which has always had some trouble with some phones under certain conditions, with calls being dropped or one party not hearing anything. That was annoying and led to many problems communicating to each other. I personally like to use this service since we are all so close to each other, but often in many different countries so that using a landline is very expensive. So here is the boring details: We are using Kamailio and Asterisk to provide the telephone services. Kamailio is acting as a SIP proxy and registrar and Asterisk is handling the dialplan and upstream connections to some SIP providers. The relaunch was basically to replace SEMS (which we used before) by Asterisk and to rewrite the Kamailio configuration file from scratch. That took a long time and led to many problems itself, but finally we have come to a point where there are no bigger known issues any more. Yay! To make a long story short: Here we are now with our brand new system. And to make it even more awesome it has gotten some new features. First of all: There is a connection to the plain old telephony network now. That means that every SIP extension call be called from a landline phone. Even with this nice SIP service it is sometimes a little bit inconvenient to have a SIP phone around. This is no longer needed since your normal phone is enough now. The number is: +49 2363 6035 XXX Where XXX is the extension of each developer. You can decide if you want to share that publicly or not. That is up to you. We are not getting charged for any inbound calls. Outbound calls are not available for everyone, but I have the option to activate those on a per-user basis. Extensions had four digits before. Since it was very expensive to get a number block that was large enough I had to change them to three digits only. Please update your configuration. Incoming calls will query a phonebook so that the name of the caller is shown when known. The same connection allows us to call any services like the conference server from a landline which is available under: +49 2363 6035 900 This will allow people who do not have an account or who don't have it set up to join the monthly conference call or any other conference without any setup. SIP over TLS is supported and outgoing calls can use SRTP to encrypt the voice traffic. However, Asterisk is not able to initiate any calls with optional SRTP, so that only one call leg can use the encryption now. On top of all of this, there is some standard PBX services available like mailboxes, music and echo test for testing and you can also park calls, etc. Further documentation is here: http://wiki.ipfire.org/en/community/talk.ipfire.org/start It includes some guides how to configure phones and some technical details about which codecs are supported, etc. So, please make good use out of this service. It is free and it is supposed to bring the IPFire team closer together to be able to work quicker and better! If you find any problems with your phone, please let me know. Best, -Michael

1 0

New version of Proxy access control list documentation
by Carlo Fusco 15 Sep '16

15 Sep '16

On Thu, Sep 15, 2016 at 12:32 PM, Matthias Fischer <matthias.fischer(a)ipfire.org> wrote: > Did you mean: > > "Here you can find two examples of how to use the manual configuration > of squid.conf and how you can control the proxy in ways that are not > available with the WUI."? Of course. My mistake. I will correct it. -- Carlo Fusco

1 0

← Newer
1
2
3
4
5
6
7
...
23
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

Documentation