This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".
The branch, core100 has been created at 33513817fa4eac7007fc4e39c348d7fffdfac20a (commit)
- Log ----------------------------------------------------------------- commit 33513817fa4eac7007fc4e39c348d7fffdfac20a Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sun Mar 20 09:36:33 2016 +0100
set version to IPFire 2.19 core100
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit dd676ffb49f9b5b6c9fe4178f86cd048fb789593 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sat Mar 19 21:56:30 2016 +0100
core100: add changes to updater
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit d731b1f9914738ba8c76f7724b7915c941d3e336 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sat Mar 19 12:54:12 2016 +0100
mt7601u-firmware: added
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit ee1148d12a32988f3ae8c75f7c4a4b31883dc674 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sat Mar 19 12:46:38 2016 +0100
ath10k-firmware: added
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 96e31c9817f1ee3bec3fe33ecae7a84ff7e4ffff Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Mar 18 19:26:39 2016 +0100
ntp: wait for connection if dhcpcd is running
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 8a148bbc5a9de80edb36fad91cd3f0e6ca3155a1 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Mar 17 23:04:54 2016 +0100
Config: update sourcecode upload url
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 01ddfa0d6f1483071fd87e9f6c77085b174a1b14 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Mar 17 23:00:46 2016 +0100
kernel: update to 3.14.65
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 224401de72e7e08403cd07774d4f311d2e86c3a7 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Mar 16 23:05:06 2016 +0100
linux-pae: add root (hd0) to grub.conf for virt install.
jiffybox will not load the kernel without this entry. not tested on citrix yet.
commit 8649a31ed040795b09228c8f3fa181d001614541 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Mar 16 22:58:21 2016 +0100
u-boot: fix fat16 reader
commit f08c14477ed0f875a86d01c1d11bc234766953aa Author: Arne Fitzenreiter arne_f@ipfire.org Date: Mon Mar 14 18:34:45 2016 +0100
core100: touch arm kernel and initrd before unpack.
this is a workaround for a uboot bug that not find all files.
commit 6fa34327dd38412820e9654df69d48995b02906a Author: Arne Fitzenreiter arne_f@ipfire.org Date: Mon Mar 14 18:04:38 2016 +0100
kernel: enable NFS_DEBUG
fixes #11053
commit 1775dbd2c6dc36e26712bbffa593e12af475c6a2 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Mar 10 22:29:02 2016 +0100
kernel: update to 3.14.64
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 46ce813e330925e0ab5969cf3e34c9e49fb9df88 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Mar 10 19:22:04 2016 +0000
setup: Fix segmentation fault with more than four NICs found
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 9ef4bbf7032d6727a6debc10702e9beacd0b097d Merge: cb679b1 8c1cf3b Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Mar 8 22:45:04 2016 +0000
Merge branch 'bird' into next
commit 8c1cf3b1f929ecd085827469ccb02ab9459de711 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Mar 8 22:44:01 2016 +0000
bird: New package
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit cb679b1eb965e0df188b50ab0337cf1687ed70cb Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Mar 8 21:32:29 2016 +0100
core100: add missing openssl rootfile to updater
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 03022f412ef2d4cfd0bad133988f2cc3312728d1 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Mar 8 20:29:59 2016 +0100
core100: ship openssl (build with new gcc)
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 593e2eeb0320285c309686668b73744973d0a944 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Mar 8 20:28:12 2016 +0100
core100: ship glibc (build with new gcc)
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 88cc99094805eb3133cac3eec0005844f5904721 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Mar 8 20:01:49 2016 +0100
core100: add kernel to updater
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit f83c50537bcb4b74bebcff83f86f69b60def544f Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Mar 8 19:31:49 2016 +0100
core100: add function to set last correct installed core on update.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 822b4313d1029bcfa19ec6cc2f36da128001ab24 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sat Mar 5 17:09:32 2016 +0100
kernel: update to 3.14.63
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 4f472f86f854a5460c4fa8eb63fd1a4393d6099d Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sat Mar 5 17:07:23 2016 +0100
flash-images: copy kernel and initrd first
there is a u-boot bug that not find all files if the directory entries was splittet to more sectors so copy the important files first.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 4a6cfe51a16575c7100862e2cc6f959bc48c6628 Merge: 64835e0 75ad2e4 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Mar 4 07:09:02 2016 +0100
Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 64835e022c52d24432d201bd4d57f1aa962c1f90 Author: Michael Tremer michael.tremer@ipfire.org Date: Sun Feb 28 12:27:06 2016 -0800
udev: Fix calling VLAN script
The VLAN hotplugging script was called with a wrong parameter that should just be used to rename devices. Hence the script was not correctly executed and did not create the virtual devices.
Fixes: #11009
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit a6cd8b9b5d903da27fef106329c892e372753e5f Author: Matthias Fischer matthias.fischer@ipfire.org Date: Sat Feb 27 16:29:45 2016 +0100
dnsmasq: 2.76test10 with latest patch (005) and some fixes
1. Added patch 005 because of the discussion on the dnsmasq-list: "I've noticed that replies which get their TTL from the dhcp-ttl option always get the TTL specified in dhcp-ttl. I'd prefer something like max(0, min(<dhcp-ttl>, <lease-expire-time> - <now>)). Otherwise, dns might hand out a high TTL for a dhcp-lease which expires one second later. ... Seems a sensible addition.
Cheers,
Simon."
2. Fixed several line numbers and patch lines in 'dnsmasq-Add-support-to-read-ISC-DHCP-lease-file.patch'. On the last build I got some "Hunk failed" messages. Patches are now applied exactly at the given lines.
3. Nevertheless, I still get some warnings: ... dnsmasq.c: In function 'main': dnsmasq.c:55:7: warning: unused variable 'did_bind' [-Wunused-variable] int did_bind = 0; ^ dnsmasq.c:54:9: warning: unused variable 'bound_device' [-Wunused-variable] char *bound_device = NULL; ^ ... isc.c: In function 'dhcp_lease_new': isc.c:40:3: warning: ignoring return value of 'asprintf', declared with attribute warn_unused_result [-Wunused-result] asprintf(&lease->fqdn, "%s.%s", hostname, daemon->domain_suffix); ^
Asking about these warnings in the dnsmasq-list showed no reaction - no one answered.
Best, Matthias
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 3b9815eb87e83a1b24e85ce0eab14a962b62ccd0 Author: Matthias Fischer matthias.fischer@ipfire.org Date: Fri Feb 26 18:29:28 2016 +0100
dnsmasq: 2.76test10 with latest patches (001-004)
This is 'dnsmasq 2.76test10', based on current 'next', containing latest patches.
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 43747fae333273890aadb66b72d911efaa4c2086 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Feb 26 13:43:33 2016 +0100
kernel: update to 3.14.62
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 5f39eb211974f1fa21c1f769f62b779f85ffbdf4 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Feb 26 07:27:09 2016 +0100
rename core99 to core100 for inserting another OpenSSL Security update
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 77c48fbe35e59957036b9533db0ec5b88a7a1e3d Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Feb 24 22:13:36 2016 -0800
core99: Ship updated xz
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f443b4cba7fbd22723e1716355ee921e289907ab Author: Marcel Lorenz lorenz.marcel@web.de Date: Tue Feb 23 08:49:27 2016 +0100
bison: update to 3.0.4
Update bison to the last version from Linux from Scratch.
Signed-off-by: Marcel Lorenz marcel.lorenz@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 962fade2d4714d4c8d5e26b841e4a87c96f92845 Author: Marcel Lorenz lorenz.marcel@web.de Date: Tue Feb 23 09:37:28 2016 +0100
xz: update to 5.2.2
Update xz to last version from Linux from Scratch.
Signed-off-by: Marcel Lorenz marcel.lorenz@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 28ef7a6a9e782410811e7733f27ec85b4ba0fe19 Author: Marcel Lorenz lorenz.marcel@web.de Date: Tue Feb 23 08:46:23 2016 +0100
m4: update to 1.4.17
Update m4 to last version from Linux from Scratch.
Signed-off-by: Marcel Lorenz marcel.lorenz@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 86b759785b24acd678450f639424b81798e329ab Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Feb 23 09:44:40 2016 -0800
make.sh: Update source upload URL
There is no longer a SSH service on source.ipfire.org.
The usual login on git.ipfire.org should be used instead.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit efd02229ae5402bad762a20c9ce75607267e3309 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Feb 24 16:01:33 2016 +0100
flash-images: change root uuid replacer sed
i cannot really test this on my systems.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 920f1950959bb1500847eb3e3eaebbe88ce08163 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Feb 23 20:08:25 2016 +0100
flash-image: set RAMDISK_MODE=2
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit c83d16146342d2a0d6ad8c101c82de71ab40d9e3 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Feb 23 20:01:30 2016 +0100
init-functions: enable autoramdisk with 400MB
The 512MB raspberry pi reserve some memory for buffers and gpu so there are a bit less than 490 MB free.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 38956241bb0644480887aeb9a399e3d9ba2fc3f4 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Feb 23 19:49:49 2016 +0100
flash-image: fix root uuid on some build machines.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit ee552b7e1a8238b620b557f16baf2131cbafc104 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Feb 19 07:18:29 2016 +0100
kernel: update to 3.14.61
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 802b916d10aa314ae878ec633e7c3bbd2adaba7e Merge: 879458d 1ffbca6 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Feb 17 19:45:08 2016 +0100
Merge remote-tracking branch 'origin/master' into next
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
Conflicts: make.sh
commit 879458d41f95578cd35e0f8e9f9e5078aa8dccbb Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Feb 17 10:10:19 2016 +0100
rename core98 to 99 for glibc security update
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit fd3b90c8751df6db7a99bcf3181cef608bb72417 Author: Matthias Fischer matthias.fischer@ipfire.org Date: Sat Feb 13 08:29:39 2016 +0100
squid 3.4.14: Bugfix for #4431 (C code is not compiled with CFLAGS)
For details see: http://bugs.squid-cache.org/show_bug.cgi?id=4431
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit e039df8613b4f51b58ca249998ef66fc7bb76758 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Feb 10 08:36:17 2016 +0100
backports: remove all old media modules.
more modules are renamed or merged into other modules.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit a760a5cfa96c9f383bf3244e07a34d13f97cbc63 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Mon Feb 8 13:53:13 2016 +0100
dracut: remove marvell sdio modules from initrd.
this allows to switch to uap module on dreamplug.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 7b757df70fb4caa70eb0f3a0e0cd1af7c9adaea1 Author: Michael Tremer michael.tremer@ipfire.org Date: Mon Feb 8 01:52:18 2016 +0000
core98: Ship changed /etc/ppp/ip-up
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c1bf984e05ff9c523121d459cd58154d3d37a34a Author: Matthias Fischer matthias.fischer@ipfire.org Date: Sun Feb 7 13:45:32 2016 +0100
New IP-address of 'ping.ipfire.org'
Telekom gateways (e.g.) don't answer 'pings', therefor '/etc/ppp/ip-up' uses 'ping.ipfire.org' for the 'gateway Graph' in 'Status / Network (other'. After moving the infrastructure, several IP addresses were changed. '178.63.73.246' doesn't work anymore for 'ping.ipfire.org', its now '81.3.27.38'.
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 8260fb7e0eac021a9be1c120d39ecb8e4a76c2a2 Author: Michael Tremer michael.tremer@ipfire.org Date: Mon Feb 8 01:40:35 2016 +0000
core98: Ship recently updated grep and sed
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c9ed30440afb129925fd05692a1c403db3831a43 Author: Matthias Fischer matthias.fischer@ipfire.org Date: Sun Jan 31 14:49:17 2016 +0100
grep: Update to 2.22
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 9dc6723a0a677ad84f8bc40679d963bcf8704f71 Author: Matthias Fischer matthias.fischer@ipfire.org Date: Sun Jan 31 14:44:05 2016 +0100
sed: Update to 4.2.2
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 067db4d53abbaeaaaaf46515ee834c78f1bf235b Merge: 645378f d651e48 Author: Michael Tremer michael.tremer@ipfire.org Date: Mon Feb 8 01:33:15 2016 +0000
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
commit d651e48f708182ade9669a5119cc63300b70d2d3 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sun Feb 7 09:38:20 2016 +0100
kernel: disable grsecurity KSTACKOVERFLOW.
this is the reason for crashes usb lan dongles and media devices.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 645378fbb9f8540ace66bd3a9be70583b6e15a6f Author: Michael Tremer michael.tremer@ipfire.org Date: Fri Feb 5 10:24:03 2016 +0000
firewall: Fix MAC filter
Packets destined for the firewall coming in from the blue device where accepted too early to be processed by the firewall input chain rules.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit ff43197b01d45dd6119fb15586c2ce29bd4f8cb3 Merge: 0aa7160 552fb4b Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Feb 4 14:35:55 2016 +0000
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
commit 0aa71600efb5dcff104135ed4bf621a23ee19ced Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Feb 4 14:31:53 2016 +0000
wirelessctrl: Remove some unused code
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 552fb4b8b5aa738959848dafc20d41e6fdbdbe4e Author: Arne Fitzenreiter arne_f@ipfire.org Date: Mon Feb 1 07:28:03 2016 +0100
dhcpcd: rework mtu handling on buggy nic's
some nic's loose the carrier after setting new mtu.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit a06723b1f4e87ee5b31dbc59e7b21a9e57750989 Author: Michael Tremer michael.tremer@ipfire.org Date: Sat Jan 30 16:37:21 2016 +0000
core98: Ship updated tzdata
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f83b3c65a34b5e66255c77140724db684e3e460b Author: Matthias Fischer matthias.fischer@ipfire.org Date: Sat Jan 30 11:07:46 2016 +0100
tzdata: Update to 2016a
Fixes https://bugzilla.ipfire.org/show_bug.cgi?id=11034
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 57d98918a1a11077d8d3e3caeaca9d85e4200ea5 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Jan 29 14:25:25 2016 +0100
kernel: update to 3.14.60
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 35b24ff8a933e2ab8614c4f9b7c27c25c6f95473 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Jan 28 22:08:08 2016 +0100
set core to 98 and move 97 to oldcore
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 78574c184666087272235ceeafceaf585cff96ba Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Jan 28 16:20:16 2016 +0100
finish core97
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit a6c71642778020a832bb5da67db8ebd004d85bad Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Jan 28 15:58:46 2016 +0100
openssl: security update to 1.0.2f
changes: * DH small subgroups - CVE-2016-0701 * SSLv2 doesn't block disabled ciphers - CVE-2015-3197 * Reject DH handshakes with parameters shorter than 1024 bits
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit eb2f4a4d2623d8e3646156126884dd78b8357dc7 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Jan 28 13:24:50 2016 +0100
hwdate: update databases
pci.ids: 2016.01.28 usb.ids: 2015.12.17
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit ecd50190976df0b55c912ee4b2eb004652cd3b4d Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Jan 28 13:08:59 2016 +0100
core97: prepare new core97 with openssl and openssh update.
the update itself has to be done...
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 6fa8a1a9cc50d2df78650f1fc0f8f6f3b9111398 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Jan 28 13:03:39 2016 +0100
rename core97 to 98 because we have to insert OpenSSL security update
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 235888599a4afa54d54421328733bf003c45711a Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Jan 28 13:02:09 2016 +0100
backports: update to 4.2.6
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 8998dde892d3e515747ee9a2e6e3fdf04ae607b9 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Tue Jan 26 18:02:00 2016 +0100
rsync: update to 3.1.2
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 00ee4eb13ce2f3cdd7deee08b6487145b46b28bb Author: Arne Fitzenreiter arne_f@ipfire.org Date: Mon Jan 25 20:15:06 2016 +0100
kernel: update to 3.14.59
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 02a60a9b9e99f1a8aa20b1deefa2b622ba99a5c6 Author: Michael Tremer michael.tremer@ipfire.org Date: Sat Jan 23 01:46:42 2016 +0000
squid: Actually make --with-filedescriptors work
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit cf82da6b376e4c7456a0690968ad2e879029a70c Author: Michael Tremer michael.tremer@ipfire.org Date: Sat Jan 23 00:41:02 2016 +0000
core97: Ship updated CGI files
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c97698a8f4b2520e198521c3d67a25efc3ad3776 Merge: 665f799 43638be Author: Michael Tremer michael.tremer@ipfire.org Date: Sat Jan 23 00:39:24 2016 +0000
Merge remote-tracking branch 'meitelwein/web-gui-ipv6' into next
commit 665f79926d025fec413531c397ccd6998583237e Merge: 92e4521 c26171b Author: Michael Tremer michael.tremer@ipfire.org Date: Sat Jan 23 00:39:19 2016 +0000
Merge remote-tracking branch 'origin/master' into next
commit 92e4521572f0a5a6411ce74a7a70b9b65dcebb26 Author: Daniel Weismüller daniel.weismueller@ipfire.org Date: Fri Jan 22 12:10:19 2016 +0100
cmake: Disable parallelism
Building cmake uses a high amount of memory (>2G) and fails to build on my system. Using less processes reduces memory usage and lets the build succeed.
Signed-off-by: Daniel Weismüller daniel.weismueller@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 20b27af8634b88fa400b1779415fc92888fbb1d8 Author: Michael Tremer michael.tremer@ipfire.org Date: Fri Jan 22 00:55:46 2016 +0000
Update translations
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 2775ab9cc63708ea0370d5220d5ee13a4f94142b Author: Michael Tremer michael.tremer@ipfire.org Date: Fri Jan 22 00:55:25 2016 +0000
core97: Ship iptables conntrack changes
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 8a1a3bf3934c8a92c605135ee13db466ea3dcbf4 Merge: 41410d1 6b86307 Author: Michael Tremer michael.tremer@ipfire.org Date: Fri Jan 22 00:54:14 2016 +0000
Merge remote-tracking branch 'ms/iptables-conntrack' into next
commit 41410d197b3dbf75dfd05376ed623857adac8977 Merge: 22a504c a7b0967 Author: Michael Tremer michael.tremer@ipfire.org Date: Fri Jan 22 00:49:15 2016 +0000
Merge branch 'hyper-v-fixes' into next
commit 22a504c69cb578f6e34928f3d862beac635e5224 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Jan 20 19:28:56 2016 +0100
toolchain: fix build on hosts that not support strong stackprotect
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 928eba27a5e15074d8e5b7d8b9f6892d122bf40f Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Jan 19 00:07:07 2016 +0000
core97: Ship updated webaccess.cgi
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit bcb30674e2f7f3fe4989bffe5fbc43d44be86633 Author: Erik Kapfer erik.kapfer@ipfire.org Date: Mon Jan 18 10:14:10 2016 +0100
webaccess.cgi: Fixed language settings.
Fix for #10879. Added also use strict.
Signed-off-by: Erik Kapfer erik.kapfer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 857b2c795e2c982cb5967725ba01a1e3c29d43f5 Author: Michael Tremer michael.tremer@ipfire.org Date: Mon Jan 18 22:26:23 2016 +0000
Improve hardening by using -fstack-protector-strong
This functionality is now available for us since we updated to GCC 4.9 and just improves the stack smashing protector in GCC.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit cc9f461f74525fa3f7300a86676634780c884a21 Author: Matthias Fischer matthias.fischer@ipfire.org Date: Tue Jan 12 18:46:52 2016 +0100
nano: Update to 2.5.1
Excerpt form 'NEWS': "It includes fixes for a syntax-highlighting bug and a positionlog bug, it disables a time-eating multiline regex in the C syntax, and it adds an escape hatch to the WriteOut menu when --tempfile is used: the discardbuffer command, ^Q. It also has translation updates for fifteen languages, and a small fix in the softwrap code."
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 037cf8d20dd5d754c89c8d267d9fd6384061d170 Author: Michael Tremer michael.tremer@ipfire.org Date: Sun Jan 17 18:51:47 2016 +0000
core97: Ship updated openssh
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 43e5fe9ded9899276a338476ba8a2974055ca222 Author: Matthias Fischer matthias.fischer@ipfire.org Date: Fri Jan 15 17:43:50 2016 +0100
openssh: Update to 7.1p2
Fixes CVE-2016-0777
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 64285d23eb9003efd7a2273d61814d4cd144431d Merge: cfdeb28 9b4f0e6 Author: Michael Tremer michael.tremer@ipfire.org Date: Sun Jan 17 18:49:03 2016 +0000
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
commit 9b4f0e639705d87708b67038e11fc4f10cbe81e5 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Jan 15 07:20:34 2016 +0100
toolchain: bump version number
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 3da3ac98564bc97ba96bc2e10d5d6acb746a33de Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Jan 14 16:08:24 2016 +0100
gcc: remove gdb python files also in root build.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 8f2ac12a87a1308c5e9adc7e7adb7150d5a1b364 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Jan 14 03:55:54 2016 +0100
toolchain: move *.py remove to correct pass.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 6e96dd142aa6a54f970968c8a1bb2087aa8c6147 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Jan 13 19:04:56 2016 +0100
toolchain: enable bootstrap and remove *.py files from lib.
only with bootstrap the gcc pass2 build works on arm.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 905d1afd4e7d30b9088e8c214248a76f5ff4ae72 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Jan 13 07:24:34 2016 +0100
kernel: disable RANDSTRUCT
RANDSRUCT is incompatible with ccache build.
fixes #10905 fixes #11012
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit cfdeb28050cac9c87d7be896378f2f53d722ff7d Author: Michael Tremer michael.tremer@ipfire.org Date: Sun Jan 10 21:20:49 2016 +0000
core97: Ship updated ntp
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit db017b4b6ef9ccf32f7e9a2c22f58c3f339e98ad Author: Matthias Fischer matthias.fischer@ipfire.org Date: Sat Jan 9 20:39:45 2016 +0100
ntp 4.2.8p5: removed obsolete patch file
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c1de76704acbb06bffbb4e6b15f66892db93c525 Author: Matthias Fischer matthias.fischer@ipfire.org Date: Sat Jan 9 20:29:41 2016 +0100
ntp: Update to 4.2.8p5
"...addresses 1 medium-severity security issue, 14 bugfixes, and contains other improvements over 4.2.8p4."
For a complete list, see: http://support.ntp.org/bin/view/Main/SecurityNotice#Recent_Vulnerabilities
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit b75b6382ab1a3a71bb434932623a396b106d6925 Author: Michael Tremer michael.tremer@ipfire.org Date: Sun Jan 10 19:35:42 2016 +0000
grub: Disable hardening for grub-script-check
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 1d9be34e2a617efa19135b646914fb1ef507a8b9 Author: Michael Tremer michael.tremer@ipfire.org Date: Sat Jan 9 19:48:21 2016 +0000
ccache: Include hash of compiler specs in hashing
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 43638be58b2ae99bd07a420c5f340222e2744feb Author: Michael Eitelwein michael@eitelwein.net Date: Sat Jan 9 20:09:58 2016 +0100
No code changes, fixed formatting by replacing spaces with tabs
commit cec5c724f5b1cb4c989c0832cc63c733d7c2b107 Merge: 820a4ab 16260e2 Author: Michael Tremer michael.tremer@ipfire.org Date: Sat Jan 9 14:56:33 2016 +0000
Merge branch 'next' of ssh://git.ipfire.org/pub/git/ipfire-2.x into next
commit 16260e2c695021795a06941781f9ef86af6305ec Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Jan 7 23:47:39 2016 +0000
timectrl: Stop ntp daemon when disabled
Fixes #11000
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 1b5b6c91dae0316c9453fe7560c1d39fc453ebcb Author: Michael Eitelwein michael@eitelwein.net Date: Thu Jan 7 19:40:24 2016 +0100
Fixed detection of firewall chain when bridge is used for ipv6
Signed-off-by: Michael Eitelwein michael@eitelwein.net
commit a249e865bd15f8f9041db8e3894cdae4dc4b25ca Author: Michael Eitelwein michael@eitelwein.net Date: Thu Jan 7 16:55:11 2016 +0100
Firewall chain was not extracted correctly when ipv6 uses bridge
Signed-off-by: Michael Eitelwein michael@eitelwein.net
commit 764a3f1ff2384f34c592c311f5435a24eb6a53c8 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Jan 7 17:41:43 2016 +0100
toolchain: fix full toolchain crossbuild
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit 2eb67894efaf650494cc5dafb73ca7ce144fe088 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Thu Jan 7 17:41:16 2016 +0100
binutils: update to 2.24
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit f97c6774ef3e4bd4cf77b5e6ff1870bc0f7e271b Author: Michael Eitelwein michael@eitelwein.net Date: Thu Jan 7 15:24:13 2016 +0100
Fix regex to extract firewall chain for ipv6 in showrequestfrom*.dat
If bridged ipv6 is used, $iface is taken from PHYSIN In the log line the order of fields is "... IN=XY OUT=XY PHYSIN=XY ..."
Signed-off-by: Michael Eitelwein michael@eitelwein.net
commit 9877d28d9e2daf49324cbf2120d00ab7169da0d3 Author: Michael Eitelwein michael@eitelwein.net Date: Thu Jan 7 14:00:01 2016 +0100
Enable correct display of ipv6 entries in Firewall log pages of web UI.
3 main changes: - Fill $iface and $out from PHYSIN and PHYSOUT when looking at bridged packets, othwerwise fill from IN and OUT - Recognize ipv4 and ipv6 address style for $srcaddr and $dstaddr - Match color coding of tables to pie charts (see seperate patch sent earlier)
I am using the bridged ipv6 setup as proposed in the wiki. I do not think this breaks anything when not using ipv6. So it would be nice to include this even if ipv6 is not officially supported yet. It is quite useful when using the ipv6 setup.
Signed-off-by: Michael Eitelwein michael@eitelwein.net ---
commit 820a4ab564b1bd437d27becede5defb000c06c50 Author: Daniel Weismüller daniel.weismueller@ipfire.org Date: Wed Jan 6 14:56:18 2016 +0100
owncloud: updated to version 7.0.11
Signed-off-by: Daniel Weismüller daniel.weismueller@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f81e27e1c8c47fefdc78b22ecb0bb5122ea0b304 Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Jan 6 15:05:37 2016 +0000
dnsdist: Don't build on ARM
There seem to be some serious C++ issues in this so that it won't build on ARM.
At the moment I do not have any resources to look further into this, so I just disable building this package for all ARM architectures.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit b0a014b7f83f160c036d8910e90d1262321e2d12 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Jan 5 21:00:19 2016 +0000
QoS: Improve saving enabled/disable state
It was reported that the QoS did not stop when the user clicked the "stop" button. This patch fixes that.
Fixes #10664
Signed-off-by: Michael Tremer michael.tremer@ipfire.org Acked-by: Arne Fitzenreiter arne.fitzenreiter@ipfire.org
commit 9a09d94ee3eb6097897f31dc236dc0c2aaea677b Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Jan 5 20:44:26 2016 +0000
qosctrl: Cleanup code by replacing hardcoded paths
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 84032d0845148505c230db0f391e524146835a9c Author: Michael Tremer michael.tremer@ipfire.org Date: Mon Jan 4 22:46:13 2016 +0000
core97: Ship updated openvpn package
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 964700d414ca841ca0d3e98329c179b4cb62e36e Author: Erik Kapfer erik.kapfer@ipfire.org Date: Tue Jul 7 13:13:35 2015 +0200
openvpn: Update to version 2.3.7, added --verify-x509-name directive.
The tls-remote directive is deprecated and will be removed with OpenVPN version 2.4 . Added instead --verify-x509-name HOST name into ovpnmain.cgi.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 9977da131b2d2e560057b79db714a987977026b4 Author: Matthias Fischer matthias.fischer@ipfire.org Date: Sun Dec 27 00:20:13 2015 +0100
bind: Update to 9.10.3-P2
Changelog:
[security] Update allowed OpenSSL versions as named is potentially vulnerable to CVE-2015-3193.
[maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53. [RT #40556]
[security] Insufficient testing when parsing a message allowed records with an incorrect class to be be accepted, triggering a REQUIRE failure when those records were subsequently cached. (CVE-2015-8000) [RT #40987]
[security] Address fetch context reference count handling error on socket error. (CVE-2015-8461) [RT#40945]
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 21ac63688a76cefccf4796fe608fae436c38d5c8 Author: Michael Tremer michael.tremer@ipfire.org Date: Mon Dec 28 15:37:02 2015 +0100
core97: Ship dnsmasq
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c3b4c861f5531712b6579cae839ea621f5336950 Author: Matthias Fischer matthias.fischer@ipfire.org Date: Thu Dec 24 10:17:16 2015 +0100
dnsmasq 2.75: latest patches from upstream
Same procedure as... :-)
Best to all for xmas and 2016!
Matthias
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 2135528774a66fa30143c024993054aed0f60c5a Author: Michael Tremer michael.tremer@ipfire.org Date: Mon Dec 28 15:30:13 2015 +0100
core97: Ship pgrep with the updater
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 4df3276bb43bfb77e570b8c329da3885f644dabb Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sat Dec 26 17:37:53 2015 +0100
ncurses: rootfile update.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit b94e0ffc689e6a659809fb874b6c18053faf1f48 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sat Dec 26 17:34:13 2015 +0100
dnsdist: rootfile update.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit b37e91c3b5527527ae354e66d91f6912e6e534de Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sat Dec 26 17:33:30 2015 +0100
diffutils: rootfile update.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit eddda7f9bd4489e6c5e37bf88eac83196210616b Author: Arne Fitzenreiter arne_f@ipfire.org Date: Sat Dec 26 13:16:59 2015 +0100
gcc: include libstdc++ to rootfile
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit f25314afd71657a51e1dc02759edaf99c22bb270 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Fri Dec 25 12:45:05 2015 +0100
vdr_eepg: fix source download.
the external server has changed the compression so the md5 has changed. Always use the IPFire server as primary download source.
Signed-off-by: Arne Fitzenreiter arne_f@ipfire.org
commit aa6684235847375033842ab4ed99e22bcd9a13c2 Author: Arne Fitzenreiter arne_f@ipfire.org Date: Wed Dec 23 10:14:26 2015 +0100
kernel: apply arm-multi grsecurity fixes only at arm-multi build
commit 98b8cabf4d80909b636e56a59091665798043f61 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Dec 10 21:25:27 2015 +0000
dnsdist: New package
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 6138d53bdd9df4a007361c3e63ab602e2c2de443 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Dec 10 21:10:06 2015 +0000
lua: New package
Simple scripting language. Supposed to be fast. Needed for dnsdist.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 3b7808295e2627ac9a0c8a79a793262ac6cd545a Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Dec 22 22:27:10 2015 +0000
Disable packaging mediatomb
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit ffea9709f83fae4f9b7e249d7f5cdc2501259607 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Dec 22 22:25:18 2015 +0000
linux: Fix build of kernel and headers package
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit a7b0967db425d27b349d436bf83e4a18143f6fe3 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Dec 15 18:30:56 2015 +0000
linux: Backport Hyper-V network driver
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit f295ca0cf75d0b475303a9db905e3ab082290997 Author: Michael Tremer michael.tremer@ipfire.org Date: Sat Dec 12 15:31:33 2015 +0000
kernel: Add grsecurity compile fix
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 21819b545a1451f557ea924b0dcdb5ab24b59a86 Author: Michael Tremer michael.tremer@ipfire.org Date: Fri Dec 4 22:11:49 2015 +0000
mediatomb: Disable build because it FTBFS
The upstream project seems to be dead
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 9f0f7c50cd2a4040a7ba26358e5d956e2168d0a8 Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Dec 10 17:47:33 2015 +0000
gcc: Update armv5tel rootfile
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit a9fd97961920a89c87217f89c14fa2d4234a393d Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Dec 10 14:40:36 2015 +0000
gcc: Update x86_64 rootfile
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 8675b78af98432f327adcb7d35c614cb2ce7dfb6 Author: Michael Tremer michael.tremer@ipfire.org Date: Fri Dec 4 21:24:14 2015 +0000
gcc: Update to version 4.9.3
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 9098b1e1c0f170b51620b8bc63118b89a038dfc6 Author: Michael Tremer michael.tremer@ipfire.org Date: Fri Dec 4 21:22:30 2015 +0000
glibc: Fix headers to build with new GCC
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit bdfd41c4f18fa85b9cc392354c0e1d73b7735651 Author: Michael Tremer michael.tremer@ipfire.org Date: Fri Dec 4 21:21:32 2015 +0000
libmpc: New package
A dependency for GCC
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 9753936f4cfcde7ff310bb9d9f31c6c3d5caff79 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Dec 22 12:34:59 2015 +0000
core97: Ship updated bind package
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit d31345a50bed70c4d2197e1294f5490be839dff2 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Dec 22 12:34:18 2015 +0000
Create Core Update 97
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit ea155e2d2b337366b04979b375251fdac724fcc6 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue Dec 22 11:11:24 2015 +0000
Move Core Update 96 to oldcore
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c15da8c3b5f94d3ced94166eefb9392b86dc9d80 Author: Matthias Fischer matthias.fischer@ipfire.org Date: Sat Nov 7 07:33:57 2015 +0100
bind: Update to 9.10.3
bind: Update to 9.10.3
Security fixes: An incorrect boundary check in the OPENPGPKEY rdatatype could trigger an assertion failure. This flaw is disclosed in CVE-2015-5986. [RT #40286]
A buffer accounting error could trigger an assertion failure when parsing certain malformed DNSSEC keys. This flaw was discovered by Hanno Böck of the Fuzzing Project, and is disclosed in CVE-2015-5722. [RT #40212]
A specially crafted query could trigger an assertion failure in message.c. This flaw was discovered by Jonathan Foote, and is disclosed in CVE-2015-5477. [RT #40046]
On servers configured to perform DNSSEC validation, an assertion failure could be triggered on answers from a specially configured server. This flaw was discovered by Breno Silveira Soares, and is disclosed in CVE-2015-4620. [RT #39795]
Bug fixes: Asynchronous zone loads were not handled correctly when the zone load was already in progress; this could trigger a crash in zt.c. [RT #37573]
A race during shutdown or reconfiguration could cause an assertion failure in mem.c. [RT #38979]
Some answer formatting options didn't work correctly with dig +short. [RT #39291]
Malformed records of some types, including NSAP and UNSPEC, could trigger assertion failures when loading text zone files. [RT #40274] [RT #40285]
Fixed a possible crash in ratelimiter.c caused by NOTIFY messages being removed from the wrong rate limiter queue. [RT #40350]
The default rrset-order of random was inconsistently applied. [RT #40456]
BADVERS responses from broken authoritative name servers were not handled correctly. [RT #40427]
Several bugs have been fixed in the RPZ implementation.
For a complete list, see: https://kb.isc.org/article/AA-01306/0/BIND-9.10.3-Release-Notes.html
Regards, Matthias
Signed-off-by: Matthias Fischer matthias.fischer@ipfire.org Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 6b86307cac1ed49a3d88836fc5fa90eef98a33ca Author: Michael Tremer michael.tremer@ipfire.org Date: Thu Aug 20 23:05:40 2015 +0100
firewall options: Fix translation and spelling of new ALG section
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 63fd135400da8e15a1a0519f377c20bad67a6d0e Author: Alexander Marx alexander.marx@ipfire.org Date: Thu Aug 20 10:56:54 2015 +0200
BUG10844 add new options to firewalloptions for conntrack
simple changes, so far no languagefile changes because of simple protocol names. should be clear in all languages.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 53a6b00c4fc7e863b8a1b22cc01f90b016184363 Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Aug 12 12:46:07 2015 +0100
firewall: Disable the PPTP and AMANDA conntrack helpers by default
These do not seem to work at the moment.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit 2c4b9c5004f0db606612eba3965846d4a2623296 Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Aug 12 12:44:26 2015 +0100
firewall: Fix amanda helper
This helper requires setting a layer 4 protocol.
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit e2c723627c587275e274948d026ac41a80a1705a Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Aug 12 12:18:18 2015 +0100
firewall: Fix H.323 helpers
Signed-off-by: Michael Tremer michael.tremer@ipfire.org
commit c8f8bf328f4dd6567513f942c9c1db1dcf73ef93 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue May 12 13:33:08 2015 +0200
firewall: Add H.323 to the conntrack helpers
commit 50354ffe3a946f314b5bf4f8648fa14d14c14667 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue May 12 13:27:24 2015 +0200
firewall: Add IRC to the conntrack helpers
commit a93bf696170d32a45ccc76b29f68ca9b4df9ddb3 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue May 12 13:25:04 2015 +0200
firewall: Add amanda to the conntrack helpers
commit d57c6162cb2d00fd4a4989fa3fe6924db528bce1 Author: Michael Tremer michael.tremer@ipfire.org Date: Tue May 12 13:16:40 2015 +0200
firewall: Make conntrack helpers configurable
commit 4071b2d61bdf3e284395d80a06189d5ae7752c5b Author: Michael Tremer michael.tremer@ipfire.org Date: Mon May 11 13:04:14 2015 +0200
firewall: iptables will load the conntrack modules automatically
commit 0f5350608ed5790101caf94c19bf08a0a0c2118f Author: Michael Tremer michael.tremer@ipfire.org Date: Mon May 11 13:00:34 2015 +0200
firewall: Accept related ICMP packets again
This rule is required to forward ICMP error messages for aborted TCP connections and the like.
commit a235f229527896f76ffa9404f6b8fb75f19d522b Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Apr 22 18:13:56 2015 +0200
firewall: Remove option to disable the SIP ALG
commit b1109b8af5f0a5e3ab7f0b68211d63ab0594c0ac Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Apr 22 18:10:59 2015 +0200
Enhance the security of the netfilter conntrack helpers
This is suggested here https://home.regit.org/netfilter-en/secure-use-of-helpers/ and deprecated in the kernel (#10665).
-----------------------------------------------------------------------
hooks/post-receive -- IPFire 2.x development tree