IPFire-SCM March 2021

ipfire-scm@lists.ipfire.org

1 participants
32 discussions

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 74d3d9cbe3e3b198e6c7a8c30ec2a0c58b6c5e2c
by Michael Tremer 02 Mar '21

02 Mar '21

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via 74d3d9cbe3e3b198e6c7a8c30ec2a0c58b6c5e2c (commit) from b6deb78d91664a8ef7b9eac2cbfd44b5d9cfaf2c (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 74d3d9cbe3e3b198e6c7a8c30ec2a0c58b6c5e2c Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Tue Mar 2 10:04:46 2021 +0000 firewall: Disable all connection tracking helpers by default This will mitigate exploiting networks secured by IPFire using NAT Slipstreaming: https://lists.ipfire.org/pipermail/development/2021-February/009303.html Suggested-by: Peter Müller <peter.mueller(a)ipfire.org> Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: lfs/configroot | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) Difference in files: diff --git a/lfs/configroot b/lfs/configroot index bc8c0283f..a3e474d70 100644 --- a/lfs/configroot +++ b/lfs/configroot @@ -139,12 +139,7 @@ $(TARGET) : cp $(DIR_SRC)/config/suricata/convert-ids-modifysids-file /usr/sbin/convert-ids-modifysids-file # Add conntrack helper default settings - for proto in FTP H323 IRC SIP TFTP; do \ - echo "CONNTRACK_$${proto}=on" >> $(CONFIG_ROOT)/optionsfw/settings; \ - done - - # Do not enable these by default because these are broken - for proto in AMANDA PPTP; do \ + for proto in AMANDA FTP H323 IRC PPTP SIP TFTP; do \ echo "CONNTRACK_$${proto}=off" >> $(CONFIG_ROOT)/optionsfw/settings; \ done hooks/post-receive -- IPFire 2.x development tree

1 0

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. b6deb78d91664a8ef7b9eac2cbfd44b5d9cfaf2c
by Michael Tremer 02 Mar '21

02 Mar '21

This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, next has been updated via b6deb78d91664a8ef7b9eac2cbfd44b5d9cfaf2c (commit) from f8798c09e97b99893f710ad3bb5648ac4d4eaa6d (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit b6deb78d91664a8ef7b9eac2cbfd44b5d9cfaf2c Author: Michael Tremer <michael.tremer(a)ipfire.org> Date: Mon Mar 1 21:32:08 2021 +0000 suricata: Ship after updating rust compiler Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> ----------------------------------------------------------------------- Summary of changes: config/rootfiles/{oldcore/131 => core/155}/filelists/suricata | 0 config/rootfiles/core/155/update.sh | 1 + 2 files changed, 1 insertion(+) copy config/rootfiles/{oldcore/131 => core/155}/filelists/suricata (100%) Difference in files: diff --git a/config/rootfiles/core/155/filelists/suricata b/config/rootfiles/core/155/filelists/suricata new file mode 120000 index 000000000..f671f6993 --- /dev/null +++ b/config/rootfiles/core/155/filelists/suricata @@ -0,0 +1 @@ +../../../common/suricata \ No newline at end of file diff --git a/config/rootfiles/core/155/update.sh b/config/rootfiles/core/155/update.sh index eb00f339b..5c7a3d3a9 100644 --- a/config/rootfiles/core/155/update.sh +++ b/config/rootfiles/core/155/update.sh @@ -70,6 +70,7 @@ ldconfig /etc/init.d/unbound restart /etc/init.d/collectd restart /etc/init.d/squid restart +/etc/init.d/suricata restart # This update needs a reboot... #touch /var/run/need_reboot hooks/post-receive -- IPFire 2.x development tree

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

IPFire-SCM March 2021