* [git.ipfire.org] IPFire 2.x development tree branch, next, updated. d1d684fcd919819cfde07e65b91bee40a6c81d5c
@ 2026-07-08 16:13 Michael Tremer
0 siblings, 0 replies; only message in thread
From: Michael Tremer @ 2026-07-08 16:13 UTC (permalink / raw)
To: ipfire-scm
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".
The branch, next has been updated
via d1d684fcd919819cfde07e65b91bee40a6c81d5c (commit)
via b037dabdede25400ee177f6e58152bd1528288a5 (commit)
via 3a113f1a7de5e78addbc9a50521e5fe01b7924a0 (commit)
from d63331e5c04b050b47df90153b6bafb9fc720641 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit d1d684fcd919819cfde07e65b91bee40a6c81d5c
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed Jul 8 18:13:01 2026 +0200
core204: Ship sysklogd and firewall changes
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit b037dabdede25400ee177f6e58152bd1528288a5
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed Jul 8 18:09:12 2026 +0200
sysklogd: Fix sending packets to remove syslog servers
When sysklogd binds to localhost, it will try to use that socket to
reach any remove syslog servers which fails because of obvious reasons.
Therefore we will have to let sysklogd bind to 0.0.0.0 and we create a
separate firewall so that we won't accept any packets from the network
but localhost which is accepted in the LOOPBACK chain.
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
commit 3a113f1a7de5e78addbc9a50521e5fe01b7924a0
Author: Michael Tremer <michael.tremer@ipfire.org>
Date: Wed Jul 8 17:50:30 2026 +0200
dns.cgi: Show if we are running in Recursor Mode
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
-----------------------------------------------------------------------
Summary of changes:
config/rootfiles/core/204/filelists/files | 2 ++
config/rootfiles/core/204/update.sh | 4 ++++
doc/language_issues.de | 1 -
doc/language_issues.en | 1 +
doc/language_issues.es | 1 -
doc/language_issues.fr | 1 -
doc/language_issues.it | 1 +
doc/language_issues.nl | 1 +
doc/language_issues.pl | 1 +
doc/language_issues.ru | 1 +
doc/language_issues.tr | 1 +
doc/language_issues.tw | 1 -
doc/language_issues.zh | 1 -
html/cgi-bin/dns.cgi | 5 +++++
src/initscripts/system/firewall | 6 ++++++
src/initscripts/system/sysklogd | 2 +-
16 files changed, 24 insertions(+), 6 deletions(-)
Difference in files:
diff --git a/config/rootfiles/core/204/filelists/files b/config/rootfiles/core/204/filelists/files
index e69de29bb..9e8a5bbaa 100644
--- a/config/rootfiles/core/204/filelists/files
+++ b/config/rootfiles/core/204/filelists/files
@@ -0,0 +1,2 @@
+etc/rc.d/init.d/firewall
+etc/rc.d/init.d/sysklogd
diff --git a/config/rootfiles/core/204/update.sh b/config/rootfiles/core/204/update.sh
index 0b3d900cc..740b48cd2 100644
--- a/config/rootfiles/core/204/update.sh
+++ b/config/rootfiles/core/204/update.sh
@@ -115,7 +115,11 @@ rm -rfv \
# Apply SSH configuration
/usr/local/bin/sshctrl
+# Restart the firewall
+/etc/init.d/firewall restart
+
# Start services
+/etc/init.d/sysklogd restart
/etc/init.d/apache start
/etc/init.d/suricata restart
/etc/init.d/knot-resolver restart
diff --git a/doc/language_issues.de b/doc/language_issues.de
index bfcb004a6..2682349e2 100644
--- a/doc/language_issues.de
+++ b/doc/language_issues.de
@@ -261,7 +261,6 @@ WARNING: translation string unused: dns mode for qname minimisation
WARNING: translation string unused: dns new 0
WARNING: translation string unused: dns new 1
WARNING: translation string unused: dns proxy server
-WARNING: translation string unused: dns recursor mode
WARNING: translation string unused: dns saved
WARNING: translation string unused: dns saved txt
WARNING: translation string unused: dnsbl acl
diff --git a/doc/language_issues.en b/doc/language_issues.en
index 2bbfef5b5..903e75868 100644
--- a/doc/language_issues.en
+++ b/doc/language_issues.en
@@ -613,6 +613,7 @@ WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS ser
WARNING: untranslated string: dns isp nameservers and tls not allowed = ISP-assigned DNS servers and TLS cannot be used at the same time.
WARNING: untranslated string: dns no address given = No IP Address given.
WARNING: untranslated string: dns no tls hostname given = No TLS hostname given.
+WARNING: untranslated string: dns recursor mode = Recursor Mode
WARNING: untranslated string: dns resolver = DNS Resolver
WARNING: untranslated string: dns servers = DNS Servers
WARNING: untranslated string: dns title = Domain Name System
diff --git a/doc/language_issues.es b/doc/language_issues.es
index 99941f8f3..b47e0f34b 100644
--- a/doc/language_issues.es
+++ b/doc/language_issues.es
@@ -286,7 +286,6 @@ WARNING: translation string unused: dns mode for qname minimisation
WARNING: translation string unused: dns new 0
WARNING: translation string unused: dns new 1
WARNING: translation string unused: dns proxy server
-WARNING: translation string unused: dns recursor mode
WARNING: translation string unused: dns saved
WARNING: translation string unused: dns saved txt
WARNING: translation string unused: dns server
diff --git a/doc/language_issues.fr b/doc/language_issues.fr
index 79d276e4d..d0611eb25 100644
--- a/doc/language_issues.fr
+++ b/doc/language_issues.fr
@@ -286,7 +286,6 @@ WARNING: translation string unused: dns mode for qname minimisation
WARNING: translation string unused: dns new 0
WARNING: translation string unused: dns new 1
WARNING: translation string unused: dns proxy server
-WARNING: translation string unused: dns recursor mode
WARNING: translation string unused: dns saved
WARNING: translation string unused: dns saved txt
WARNING: translation string unused: dnssec disabled warning
diff --git a/doc/language_issues.it b/doc/language_issues.it
index a03d4abf2..6a234503e 100644
--- a/doc/language_issues.it
+++ b/doc/language_issues.it
@@ -1044,6 +1044,7 @@ WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS ser
WARNING: untranslated string: dns isp nameservers and tls not allowed = ISP-assigned DNS servers and TLS cannot be used at the same time.
WARNING: untranslated string: dns no address given = No IP Address given.
WARNING: untranslated string: dns no tls hostname given = No TLS hostname given.
+WARNING: untranslated string: dns recursor mode = Recursor Mode
WARNING: untranslated string: dns resolver = DNS Resolver
WARNING: untranslated string: dns tls hostname = TLS Hostname
WARNING: untranslated string: dns use isp assigned nameservers = Use ISP-assigned DNS servers
diff --git a/doc/language_issues.nl b/doc/language_issues.nl
index 19a67628d..6df55b9b6 100644
--- a/doc/language_issues.nl
+++ b/doc/language_issues.nl
@@ -1043,6 +1043,7 @@ WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS ser
WARNING: untranslated string: dns isp nameservers and tls not allowed = ISP-assigned DNS servers and TLS cannot be used at the same time.
WARNING: untranslated string: dns no address given = No IP Address given.
WARNING: untranslated string: dns no tls hostname given = No TLS hostname given.
+WARNING: untranslated string: dns recursor mode = Recursor Mode
WARNING: untranslated string: dns resolver = DNS Resolver
WARNING: untranslated string: dns tls hostname = TLS Hostname
WARNING: untranslated string: dns use isp assigned nameservers = Use ISP-assigned DNS servers
diff --git a/doc/language_issues.pl b/doc/language_issues.pl
index 385e281ce..d84ed5f79 100644
--- a/doc/language_issues.pl
+++ b/doc/language_issues.pl
@@ -999,6 +999,7 @@ WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS ser
WARNING: untranslated string: dns isp nameservers and tls not allowed = ISP-assigned DNS servers and TLS cannot be used at the same time.
WARNING: untranslated string: dns no address given = No IP Address given.
WARNING: untranslated string: dns no tls hostname given = No TLS hostname given.
+WARNING: untranslated string: dns recursor mode = Recursor Mode
WARNING: untranslated string: dns resolver = DNS Resolver
WARNING: untranslated string: dns tls hostname = TLS Hostname
WARNING: untranslated string: dns use isp assigned nameservers = Use ISP-assigned DNS servers
diff --git a/doc/language_issues.ru b/doc/language_issues.ru
index 819aba832..a4b622777 100644
--- a/doc/language_issues.ru
+++ b/doc/language_issues.ru
@@ -997,6 +997,7 @@ WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS ser
WARNING: untranslated string: dns isp nameservers and tls not allowed = ISP-assigned DNS servers and TLS cannot be used at the same time.
WARNING: untranslated string: dns no address given = No IP Address given.
WARNING: untranslated string: dns no tls hostname given = No TLS hostname given.
+WARNING: untranslated string: dns recursor mode = Recursor Mode
WARNING: untranslated string: dns resolver = DNS Resolver
WARNING: untranslated string: dns tls hostname = TLS Hostname
WARNING: untranslated string: dns use isp assigned nameservers = Use ISP-assigned DNS servers
diff --git a/doc/language_issues.tr b/doc/language_issues.tr
index 12c38a7fa..6b15730eb 100644
--- a/doc/language_issues.tr
+++ b/doc/language_issues.tr
@@ -1025,6 +1025,7 @@ WARNING: untranslated string: dns isp assigned nameserver = ISP-assigned DNS ser
WARNING: untranslated string: dns isp nameservers and tls not allowed = ISP-assigned DNS servers and TLS cannot be used at the same time.
WARNING: untranslated string: dns no address given = No IP Address given.
WARNING: untranslated string: dns no tls hostname given = No TLS hostname given.
+WARNING: untranslated string: dns recursor mode = Recursor Mode
WARNING: untranslated string: dns resolver = DNS Resolver
WARNING: untranslated string: dns tls hostname = TLS Hostname
WARNING: untranslated string: dns use isp assigned nameservers = Use ISP-assigned DNS servers
diff --git a/doc/language_issues.tw b/doc/language_issues.tw
index 95d63140b..b1df45dea 100644
--- a/doc/language_issues.tw
+++ b/doc/language_issues.tw
@@ -288,7 +288,6 @@ WARNING: translation string unused: dns mode for qname minimisation
WARNING: translation string unused: dns new 0
WARNING: translation string unused: dns new 1
WARNING: translation string unused: dns proxy server
-WARNING: translation string unused: dns recursor mode
WARNING: translation string unused: dns saved
WARNING: translation string unused: dns saved txt
WARNING: translation string unused: dns server
diff --git a/doc/language_issues.zh b/doc/language_issues.zh
index 95d63140b..b1df45dea 100644
--- a/doc/language_issues.zh
+++ b/doc/language_issues.zh
@@ -288,7 +288,6 @@ WARNING: translation string unused: dns mode for qname minimisation
WARNING: translation string unused: dns new 0
WARNING: translation string unused: dns new 1
WARNING: translation string unused: dns proxy server
-WARNING: translation string unused: dns recursor mode
WARNING: translation string unused: dns saved
WARNING: translation string unused: dns saved txt
WARNING: translation string unused: dns server
diff --git a/html/cgi-bin/dns.cgi b/html/cgi-bin/dns.cgi
index c02f0a4b7..6735e61a1 100644
--- a/html/cgi-bin/dns.cgi
+++ b/html/cgi-bin/dns.cgi
@@ -444,6 +444,11 @@ sub show_nameservers () {
$dns_status_col = "${Header::colourred}";
}
+ # Show if we are running in recursor mode
+ if (scalar %dns_servers == 0) {
+ $dns_status_string .= " - $Lang::tr{'dns recursor mode'}";
+ }
+
print <<END;
<table width='100%'>
<tr>
diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index c7642282f..a97758dc3 100644
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -322,6 +322,12 @@ iptables_init() {
iptables -A GUIINPUT -i "${GREEN_DEV}" -p tcp --dport 444 -j ACCEPT
fi
+ # Drop any messages to syslog
+ iptables -N SYSLOG
+ iptables -A SYSLOG -p udp --dport 514 -j DROP
+ iptables -A SYSLOG -p tcp --dport 514 -j DROP
+ iptables -A INPUT -j SYSLOG
+
# WIRELESS chains
iptables -N WIRELESSINPUT
iptables -A INPUT -m conntrack --ctstate NEW -j WIRELESSINPUT
diff --git a/src/initscripts/system/sysklogd b/src/initscripts/system/sysklogd
index c2531b1eb..9263daf0c 100644
--- a/src/initscripts/system/sysklogd
+++ b/src/initscripts/system/sysklogd
@@ -25,7 +25,7 @@
case "${1}" in
start)
boot_mesg "Starting system log daemon..."
- loadproc syslogd -m 0 -r -k -b 127.0.0.1
+ loadproc syslogd -m 0 -r -k
boot_mesg "Saving Bootlog..."
if [ -e /var/log/bootlog ]; then
hooks/post-receive
--
IPFire 2.x development tree
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2026-07-08 16:13 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-07-08 16:13 [git.ipfire.org] IPFire 2.x development tree branch, next, updated. d1d684fcd919819cfde07e65b91bee40a6c81d5c Michael Tremer
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox