astlinux-commits — Commits to the AstLinux SVN repository

[Astlinux-commits] SF.net SVN: astlinux:[7845] branches/1.0/docs/ChangeLog.txt

[<abe...@us...>]

Revision: 7845
          http://sourceforge.net/p/astlinux/code/7845
Author:   abelbeck
Date:     2016-09-17 16:18:25 +0000 (Sat, 17 Sep 2016)
Log Message:
-----------
update ChangeLog

Modified Paths:
--------------
    branches/1.0/docs/ChangeLog.txt

Modified: branches/1.0/docs/ChangeLog.txt
===================================================================
--- branches/1.0/docs/ChangeLog.txt	2016-09-17 16:10:28 UTC (rev 7844)
+++ branches/1.0/docs/ChangeLog.txt	2016-09-17 16:18:25 UTC (rev 7845)
@@ -24,11 +24,11 @@
 
 -- e1000e version bump to 3.3.5 Intel PCI-Express PRO/1000 Ethernet Linux driver
 
--- php, major version bump to 5.6.25, bug and security fixes
+-- php, major version bump to 5.6.26, bug and security fixes
 
 -- perl, version bump to 5.24.0 using perlcross 1.0.3
 
--- sqlite, version bump to 3.14.1
+-- sqlite, version bump to 3.14.2
 
 -- ethtool, version bump to 4.6
 
@@ -50,7 +50,7 @@
    == 05 05,15 * * * reload-blocklist-netset /mnt/kd/blocklists firehol_level1 spamhaus_dropv6 >/dev/null 2>&1
    More Info: http://iplists.firehol.org/?ipset=firehol_level1
 
--- ca-certificates, update trusted root certificates 2016-09-07
+-- ca-certificates, update trusted root certificates 2016-09-14
 
 -- mac2vendor, oui.txt database snapshot 2016-08-21
 
@@ -60,9 +60,9 @@
 
 -- Added a 4th LAN Interface configuration entry
 
--- arnofw (AIF), version bump to 2.0.1g-RC3, added support for 'ipset'
+-- arnofw (AIF), version bump to 2.0.1g-RC4, added support for 'ipset'
 
--- libcurl (curl) version bump to 7.50.2, security fixes: CVE-2016-5419, CVE-2016-5420, CVE-2016-5421
+-- libcurl (curl) version bump to 7.50.3, security fixes: CVE-2016-5419, CVE-2016-5420, CVE-2016-5421, CVE-2016-7167
 
 -- lighttpd, version bump to 1.4.41
 
@@ -89,6 +89,8 @@
 -- wide-dhcpv6, add upstream Debian patches 0011, 0012 and 0015, build fixes and handle OPTION_RECONF_ACCEPT(20)
    More Info: http://doc.astlinux.org/userdoc:tt-dhcpv6-prefix-delegation
 
+-- tcpdump, version bump to 4.8.0
+
 ** Asterisk
 
 -- Asterisk 1.8.32.3 (no change), 11.23.1 (version bump) and 13.11.2 (version bump)
@@ -103,6 +105,8 @@
    Note: If you have a license, you may need to purchase an "Annual Software Maintenance" license if you upgrade.
    More info: http://doc.astlinux.org/userdoc:tt_asterisk-fop2-upgrade
 
+-- wanpipe, version bump to 7.0.20
+
 ** Web Interface
 
 -- Network tab, add 4th LAN Interface.  Added 4th LAN support to Firewall sub-tab and PhoneProv tab.

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7844] branches/1.0/package/wanpipe/wanpipe.mk

[<abe...@us...>]

Revision: 7844
          http://sourceforge.net/p/astlinux/code/7844
Author:   abelbeck
Date:     2016-09-17 16:10:28 +0000 (Sat, 17 Sep 2016)
Log Message:
-----------
wanpipe, version bump to 7.0.20

Modified Paths:
--------------
    branches/1.0/package/wanpipe/wanpipe.mk

Modified: branches/1.0/package/wanpipe/wanpipe.mk
===================================================================
--- branches/1.0/package/wanpipe/wanpipe.mk	2016-09-17 15:38:05 UTC (rev 7843)
+++ branches/1.0/package/wanpipe/wanpipe.mk	2016-09-17 16:10:28 UTC (rev 7844)
@@ -3,7 +3,7 @@
 # wanpipe
 #
 #############################################################
-WANPIPE_VER:= 7.0.19
+WANPIPE_VER:= 7.0.20
 WANPIPE_SITE:= ftp://ftp.sangoma.com/linux/current_wanpipe
 WANPIPE_SOURCE:=wanpipe-$(WANPIPE_VER).tgz
 WANPIPE_DIR:=$(BUILD_DIR)/wanpipe-$(WANPIPE_VER)

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7843] branches/1.0/package/tcpdump/tcpdump.mk

[<abe...@us...>]

Revision: 7843
          http://sourceforge.net/p/astlinux/code/7843
Author:   abelbeck
Date:     2016-09-17 15:38:05 +0000 (Sat, 17 Sep 2016)
Log Message:
-----------
tcpdump, version bump to 4.8.0, ngrep fails to build with libpcap 1.8.0 - staying with libpcap 1.7.4 for now

Modified Paths:
--------------
    branches/1.0/package/tcpdump/tcpdump.mk

Modified: branches/1.0/package/tcpdump/tcpdump.mk
===================================================================
--- branches/1.0/package/tcpdump/tcpdump.mk	2016-09-17 13:56:25 UTC (rev 7842)
+++ branches/1.0/package/tcpdump/tcpdump.mk	2016-09-17 15:38:05 UTC (rev 7843)
@@ -4,7 +4,7 @@
 #
 #############################################################
 
-TCPDUMP_VERSION = 4.7.4
+TCPDUMP_VERSION = 4.8.0
 TCPDUMP_SITE = http://www.tcpdump.org/release
 TCPDUMP_SOURCE = tcpdump-$(TCPDUMP_VERSION).tar.gz
 

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7842] branches/1.0/package/libcurl/libcurl.mk

[<abe...@us...>]

Revision: 7842
          http://sourceforge.net/p/astlinux/code/7842
Author:   abelbeck
Date:     2016-09-17 13:56:25 +0000 (Sat, 17 Sep 2016)
Log Message:
-----------
libcurl, version bump to 7.50.3, security fix: CVE-2016-7167

Modified Paths:
--------------
    branches/1.0/package/libcurl/libcurl.mk

Modified: branches/1.0/package/libcurl/libcurl.mk
===================================================================
--- branches/1.0/package/libcurl/libcurl.mk	2016-09-17 13:24:49 UTC (rev 7841)
+++ branches/1.0/package/libcurl/libcurl.mk	2016-09-17 13:56:25 UTC (rev 7842)
@@ -3,7 +3,7 @@
 # libcurl
 #
 #############################################################
-LIBCURL_VERSION = 7.50.2
+LIBCURL_VERSION = 7.50.3
 LIBCURL_SOURCE = curl-$(LIBCURL_VERSION).tar.gz
 LIBCURL_SITE = https://curl.haxx.se/download
 LIBCURL_INSTALL_STAGING = YES

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7841] branches/1.0/package/php/php.mk

[<abe...@us...>]

Revision: 7841
          http://sourceforge.net/p/astlinux/code/7841
Author:   abelbeck
Date:     2016-09-17 13:24:49 +0000 (Sat, 17 Sep 2016)
Log Message:
-----------
php, version bump to 5.6.26

Modified Paths:
--------------
    branches/1.0/package/php/php.mk

Modified: branches/1.0/package/php/php.mk
===================================================================
--- branches/1.0/package/php/php.mk	2016-09-17 13:09:52 UTC (rev 7840)
+++ branches/1.0/package/php/php.mk	2016-09-17 13:24:49 UTC (rev 7841)
@@ -4,7 +4,7 @@
 #
 #############################################################
 
-PHP_VERSION = 5.6.25
+PHP_VERSION = 5.6.26
 PHP_SITE = http://www.php.net/distributions
 PHP_SOURCE = php-$(PHP_VERSION).tar.xz
 PHP_INSTALL_STAGING = YES

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7840] branches/1.0/package/sqlite/sqlite.mk

[<abe...@us...>]

Revision: 7840
          http://sourceforge.net/p/astlinux/code/7840
Author:   abelbeck
Date:     2016-09-17 13:09:52 +0000 (Sat, 17 Sep 2016)
Log Message:
-----------
sqlite, version bump to 3.14.2

Modified Paths:
--------------
    branches/1.0/package/sqlite/sqlite.mk

Modified: branches/1.0/package/sqlite/sqlite.mk
===================================================================
--- branches/1.0/package/sqlite/sqlite.mk	2016-09-16 23:11:32 UTC (rev 7839)
+++ branches/1.0/package/sqlite/sqlite.mk	2016-09-17 13:09:52 UTC (rev 7840)
@@ -4,7 +4,7 @@
 #
 #############################################################
 
-SQLITE_VERSION = 3140100
+SQLITE_VERSION = 3140200
 SQLITE_SOURCE = sqlite-autoconf-$(SQLITE_VERSION).tar.gz
 SQLITE_SITE = http://www.sqlite.org/2016
 SQLITE_INSTALL_STAGING = YES

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7839] branches/1.0/package/ca-certificates/ ca-certificates.mk

[<abe...@us...>]

Revision: 7839
          http://sourceforge.net/p/astlinux/code/7839
Author:   abelbeck
Date:     2016-09-16 23:11:32 +0000 (Fri, 16 Sep 2016)
Log Message:
-----------
ca-certificates version bump to 2016-09-14. only comment changes from 2016-09-07

Modified Paths:
--------------
    branches/1.0/package/ca-certificates/ca-certificates.mk

Modified: branches/1.0/package/ca-certificates/ca-certificates.mk
===================================================================
--- branches/1.0/package/ca-certificates/ca-certificates.mk	2016-09-16 22:59:17 UTC (rev 7838)
+++ branches/1.0/package/ca-certificates/ca-certificates.mk	2016-09-16 23:11:32 UTC (rev 7839)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-CA_CERTIFICATES_VERSION = 2016-09-07
+CA_CERTIFICATES_VERSION = 2016-09-14
 CA_CERTIFICATES_SOURCE = cacert-$(CA_CERTIFICATES_VERSION).pem
 CA_CERTIFICATES_SITE = https://curl.haxx.se/ca
 

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7838] branches/1.0/package/arnofw/arnofw.mk

[<abe...@us...>]

Revision: 7838
          http://sourceforge.net/p/astlinux/code/7838
Author:   abelbeck
Date:     2016-09-16 22:59:17 +0000 (Fri, 16 Sep 2016)
Log Message:
-----------
arnofw, version bump to 2.0.1g-RC4, adds whitelist sets

Modified Paths:
--------------
    branches/1.0/package/arnofw/arnofw.mk

Modified: branches/1.0/package/arnofw/arnofw.mk
===================================================================
--- branches/1.0/package/arnofw/arnofw.mk	2016-09-16 22:30:18 UTC (rev 7837)
+++ branches/1.0/package/arnofw/arnofw.mk	2016-09-16 22:59:17 UTC (rev 7838)
@@ -3,7 +3,7 @@
 # Arno's IPtables Firewall Script
 #
 #############################################################
-ARNOFW_VER := 2.0.1g-RC3
+ARNOFW_VER := 2.0.1g-RC4
 ARNOFW_ROOT := arno-iptables-firewall
 ARNOFW_SOURCE := $(ARNOFW_ROOT)_$(ARNOFW_VER).tar.gz
 #ARNOFW_SITE := http://rocky.eld.leidenuniv.nl/arno-iptables-firewall

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7837] branches/1.0/package/webinterface/altweb/admin/ edit.php

[<abe...@us...>]

Revision: 7837
          http://sourceforge.net/p/astlinux/code/7837
Author:   abelbeck
Date:     2016-09-16 22:30:18 +0000 (Fri, 16 Sep 2016)
Log Message:
-----------
web interface, Edit tab, add Firewall Whitelist Set support

Modified Paths:
--------------
    branches/1.0/package/webinterface/altweb/admin/edit.php

Modified: branches/1.0/package/webinterface/altweb/admin/edit.php
===================================================================
--- branches/1.0/package/webinterface/altweb/admin/edit.php	2016-09-15 17:04:12 UTC (rev 7836)
+++ branches/1.0/package/webinterface/altweb/admin/edit.php	2016-09-16 22:30:18 UTC (rev 7837)
@@ -311,6 +311,7 @@
       $dir === '/mnt/kd/docs' ||
       $dir === '/mnt/kd/arno-iptables-firewall' ||
       $dir === '/mnt/kd/arno-iptables-firewall/plugins' ||
+      $dir === '/mnt/kd/blocklists' ||
       $dir === '/mnt/kd/phoneprov/templates' ||
       $dir === '/etc/asterisk' ||
       $dir === '/etc/asterisk/includes' ||
@@ -502,6 +503,14 @@
     $sel = ($file === $openfile) ? ' selected="selected"' : '';
     putHtml('<option value="'.$file.'"'.$sel.'>'.basename($file).' - Firewall Blocked Hosts</option>');
   }
+  if (is_writable($file = '/mnt/kd/blocklists/whitelist.netset')) {
+    $sel = ($file === $openfile) ? ' selected="selected"' : '';
+    putHtml('<option value="'.$file.'"'.$sel.'>'.basename($file).' - Firewall IPv4 Whitelist Set</option>');
+  }
+  if (is_writable($file = '/mnt/kd/blocklists/whitelistv6.netset')) {
+    $sel = ($file === $openfile) ? ' selected="selected"' : '';
+    putHtml('<option value="'.$file.'"'.$sel.'>'.basename($file).' - Firewall IPv6 Whitelist Set</option>');
+  }
   if (is_writable($file = '/mnt/kd/crontabs/root')) {
     $sel = ($file === $openfile) ? ' selected="selected"' : '';
     putHtml('<option value="'.$file.'"'.$sel.'>crontabs/'.basename($file).' - Cron Jobs for root</option>');

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7836] branches/1.0/docs/ChangeLog.txt

[<abe...@us...>]

Revision: 7836
          http://sourceforge.net/p/astlinux/code/7836
Author:   abelbeck
Date:     2016-09-15 17:04:12 +0000 (Thu, 15 Sep 2016)
Log Message:
-----------
update ChangeLog

Modified Paths:
--------------
    branches/1.0/docs/ChangeLog.txt

Modified: branches/1.0/docs/ChangeLog.txt
===================================================================
--- branches/1.0/docs/ChangeLog.txt	2016-09-15 17:00:56 UTC (rev 7835)
+++ branches/1.0/docs/ChangeLog.txt	2016-09-15 17:04:12 UTC (rev 7836)
@@ -20,6 +20,8 @@
 
 -- linux, enable NETFILTER_XT_SET=m and IP_SET=m for the 'ipset' userspace utility
 
+-- linux, enable 8139CP=m for the Realtek '8139cp' NIC driver, used in old Watchguard appliances
+
 -- e1000e version bump to 3.3.5 Intel PCI-Express PRO/1000 Ethernet Linux driver
 
 -- php, major version bump to 5.6.25, bug and security fixes

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7835] branches/1.0/project/astlinux

[<abe...@us...>]

Revision: 7835
          http://sourceforge.net/p/astlinux/code/7835
Author:   abelbeck
Date:     2016-09-15 17:00:56 +0000 (Thu, 15 Sep 2016)
Log Message:
-----------
linux, build the Realtek '8139cp' NIC module, leave commented out in /etc/rc.modules, used on old Watchguard appliances

Modified Paths:
--------------
    branches/1.0/project/astlinux/board/geni586/target_skeleton/etc/rc.modules
    branches/1.0/project/astlinux/board/geni586-serial/target_skeleton/etc/rc.modules
    branches/1.0/project/astlinux/board/genx86_64/target_skeleton/etc/rc.modules
    branches/1.0/project/astlinux/board/genx86_64-serial/target_skeleton/etc/rc.modules
    branches/1.0/project/astlinux/geni586/linux-smp.config
    branches/1.0/project/astlinux/geni586/linux.config
    branches/1.0/project/astlinux/genx86_64/linux-smp-vm.config
    branches/1.0/project/astlinux/genx86_64/linux-smp.config

Modified: branches/1.0/project/astlinux/board/geni586/target_skeleton/etc/rc.modules
===================================================================
--- branches/1.0/project/astlinux/board/geni586/target_skeleton/etc/rc.modules	2016-09-14 21:46:00 UTC (rev 7834)
+++ branches/1.0/project/astlinux/board/geni586/target_skeleton/etc/rc.modules	2016-09-15 17:00:56 UTC (rev 7835)
@@ -10,6 +10,7 @@
 e100
 natsemi
 forcedeth
+#8139cp
 8139too
 via-rhine
 via-velocity

Modified: branches/1.0/project/astlinux/board/geni586-serial/target_skeleton/etc/rc.modules
===================================================================
--- branches/1.0/project/astlinux/board/geni586-serial/target_skeleton/etc/rc.modules	2016-09-14 21:46:00 UTC (rev 7834)
+++ branches/1.0/project/astlinux/board/geni586-serial/target_skeleton/etc/rc.modules	2016-09-15 17:00:56 UTC (rev 7835)
@@ -10,6 +10,7 @@
 e100
 natsemi
 forcedeth
+#8139cp
 8139too
 via-rhine
 via-velocity

Modified: branches/1.0/project/astlinux/board/genx86_64/target_skeleton/etc/rc.modules
===================================================================
--- branches/1.0/project/astlinux/board/genx86_64/target_skeleton/etc/rc.modules	2016-09-14 21:46:00 UTC (rev 7834)
+++ branches/1.0/project/astlinux/board/genx86_64/target_skeleton/etc/rc.modules	2016-09-15 17:00:56 UTC (rev 7835)
@@ -10,6 +10,7 @@
 e100
 natsemi
 forcedeth
+#8139cp
 8139too
 via-rhine
 via-velocity

Modified: branches/1.0/project/astlinux/board/genx86_64-serial/target_skeleton/etc/rc.modules
===================================================================
--- branches/1.0/project/astlinux/board/genx86_64-serial/target_skeleton/etc/rc.modules	2016-09-14 21:46:00 UTC (rev 7834)
+++ branches/1.0/project/astlinux/board/genx86_64-serial/target_skeleton/etc/rc.modules	2016-09-15 17:00:56 UTC (rev 7835)
@@ -10,6 +10,7 @@
 e100
 natsemi
 forcedeth
+#8139cp
 8139too
 via-rhine
 via-velocity

Modified: branches/1.0/project/astlinux/geni586/linux-smp.config
===================================================================
--- branches/1.0/project/astlinux/geni586/linux-smp.config	2016-09-14 21:46:00 UTC (rev 7834)
+++ branches/1.0/project/astlinux/geni586/linux-smp.config	2016-09-15 17:00:56 UTC (rev 7835)
@@ -1313,7 +1313,7 @@
 # CONFIG_QLGE is not set
 # CONFIG_NETXEN_NIC is not set
 CONFIG_NET_VENDOR_REALTEK=y
-# CONFIG_8139CP is not set
+CONFIG_8139CP=m
 CONFIG_8139TOO=m
 # CONFIG_8139TOO_PIO is not set
 # CONFIG_8139TOO_TUNE_TWISTER is not set

Modified: branches/1.0/project/astlinux/geni586/linux.config
===================================================================
--- branches/1.0/project/astlinux/geni586/linux.config	2016-09-14 21:46:00 UTC (rev 7834)
+++ branches/1.0/project/astlinux/geni586/linux.config	2016-09-15 17:00:56 UTC (rev 7835)
@@ -1300,7 +1300,7 @@
 # CONFIG_QLGE is not set
 # CONFIG_NETXEN_NIC is not set
 CONFIG_NET_VENDOR_REALTEK=y
-# CONFIG_8139CP is not set
+CONFIG_8139CP=m
 CONFIG_8139TOO=m
 # CONFIG_8139TOO_PIO is not set
 # CONFIG_8139TOO_TUNE_TWISTER is not set

Modified: branches/1.0/project/astlinux/genx86_64/linux-smp-vm.config
===================================================================
--- branches/1.0/project/astlinux/genx86_64/linux-smp-vm.config	2016-09-14 21:46:00 UTC (rev 7834)
+++ branches/1.0/project/astlinux/genx86_64/linux-smp-vm.config	2016-09-15 17:00:56 UTC (rev 7835)
@@ -1289,7 +1289,7 @@
 # CONFIG_QLGE is not set
 # CONFIG_NETXEN_NIC is not set
 CONFIG_NET_VENDOR_REALTEK=y
-# CONFIG_8139CP is not set
+CONFIG_8139CP=m
 CONFIG_8139TOO=m
 # CONFIG_8139TOO_PIO is not set
 # CONFIG_8139TOO_TUNE_TWISTER is not set

Modified: branches/1.0/project/astlinux/genx86_64/linux-smp.config
===================================================================
--- branches/1.0/project/astlinux/genx86_64/linux-smp.config	2016-09-14 21:46:00 UTC (rev 7834)
+++ branches/1.0/project/astlinux/genx86_64/linux-smp.config	2016-09-15 17:00:56 UTC (rev 7835)
@@ -1266,7 +1266,7 @@
 # CONFIG_QLGE is not set
 # CONFIG_NETXEN_NIC is not set
 CONFIG_NET_VENDOR_REALTEK=y
-# CONFIG_8139CP is not set
+CONFIG_8139CP=m
 CONFIG_8139TOO=m
 # CONFIG_8139TOO_PIO is not set
 # CONFIG_8139TOO_TUNE_TWISTER is not set

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7834] branches/1.0/docs/ChangeLog.txt

[<abe...@us...>]

Revision: 7834
          http://sourceforge.net/p/astlinux/code/7834
Author:   abelbeck
Date:     2016-09-14 21:46:00 +0000 (Wed, 14 Sep 2016)
Log Message:
-----------
update ChangeLog

Modified Paths:
--------------
    branches/1.0/docs/ChangeLog.txt

Modified: branches/1.0/docs/ChangeLog.txt
===================================================================
--- branches/1.0/docs/ChangeLog.txt	2016-09-14 21:11:45 UTC (rev 7833)
+++ branches/1.0/docs/ChangeLog.txt	2016-09-14 21:46:00 UTC (rev 7834)
@@ -42,6 +42,12 @@
 
 -- libsodium, version bump to 1.0.11
 
+-- reload-blocklist-netset (optional CRON script), new command added to generate .netset files for the firewall blocklist.
+   Issue "reload-blocklist-netset" for details.
+   == Cron may be used to run this script once or twice every day.  Example:
+   == 05 05,15 * * * reload-blocklist-netset /mnt/kd/blocklists firehol_level1 spamhaus_dropv6 >/dev/null 2>&1
+   More Info: http://iplists.firehol.org/?ipset=firehol_level1
+
 -- ca-certificates, update trusted root certificates 2016-09-07
 
 -- mac2vendor, oui.txt database snapshot 2016-08-21
@@ -52,7 +58,7 @@
 
 -- Added a 4th LAN Interface configuration entry
 
--- arnofw (AIF), version bump to 2.0.1g-RC2, added support for 'ipset'
+-- arnofw (AIF), version bump to 2.0.1g-RC3, added support for 'ipset'
 
 -- libcurl (curl) version bump to 7.50.2, security fixes: CVE-2016-5419, CVE-2016-5420, CVE-2016-5421
 
@@ -101,6 +107,8 @@
 
 -- Network -> Firewall sub-tab, add "Deny LAN to DMZ" option for specified LAN Interfaces.
 
+-- Network -> Firewall sub-tab, add Block Host/CIDR using *.netset file(s) in the directory /mnt/kd/blocklists .
+
 -- Network tab, SMTP Mail Relay, allow an empty "SMTP Cert File" which will default to the system ca-bundle.crt .
 
 

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7833] branches/1.0/package/webinterface/altweb/admin/ firewall.php

[<abe...@us...>]

Revision: 7833
          http://sourceforge.net/p/astlinux/code/7833
Author:   abelbeck
Date:     2016-09-14 21:11:45 +0000 (Wed, 14 Sep 2016)
Log Message:
-----------
web interface, Firewall sub-tab, add BLOCK_NETSET_DIR=/mnt/kd/blocklists support

Modified Paths:
--------------
    branches/1.0/package/webinterface/altweb/admin/firewall.php

Modified: branches/1.0/package/webinterface/altweb/admin/firewall.php
===================================================================
--- branches/1.0/package/webinterface/altweb/admin/firewall.php	2016-09-14 18:15:56 UTC (rev 7832)
+++ branches/1.0/package/webinterface/altweb/admin/firewall.php	2016-09-14 21:11:45 UTC (rev 7833)
@@ -22,6 +22,7 @@
 // 06-08-2014, Added support for multiple "Allow OpenVPN" LAN interfaces
 // 06-12-2016, Added "Pass LAN->LAN" action
 // 07-10-2016, Added Deny LAN to DMZ for specified LAN Interfaces
+// 09-14-2016, Added BLOCK_NETSET_DIR support
 //
 // System location of /mnt/kd/rc.conf.d directory
 $FIREWALLCONFDIR = '/mnt/kd/rc.conf.d';
@@ -379,6 +380,10 @@
     $value = 'BLOCK_HOSTS_FILE="/mnt/kd/blocked-hosts"';
     fwrite($fp, $value."\n");
   }
+  if (isset($_POST['block_netset_dir'])) {
+    $value = 'BLOCK_NETSET_DIR="/mnt/kd/blocklists"';
+    fwrite($fp, $value."\n");
+  }
   $value = 'BLOCKED_HOST_LOG='.(isset($_POST['log_blocked']) ? '1' : '0');
   fwrite($fp, $value."\n");
   
@@ -1112,6 +1117,9 @@
   putHtml('<tr class="dtrow1"><td width="75" style="text-align: right;">');
   $sel = (getVARdef($vars, 'BLOCK_HOSTS_FILE') === '/mnt/kd/blocked-hosts') ? ' checked="checked"' : '';
   putHtml('<input type="checkbox" value="file_blocked" name="file_blocked"'.$sel.' /></td><td>Block Host/CIDR using the file /mnt/kd/blocked-hosts</td></tr>');
+  putHtml('<tr class="dtrow1"><td width="75" style="text-align: right;">');
+  $sel = (getVARdef($vars, 'BLOCK_NETSET_DIR') === '/mnt/kd/blocklists') ? ' checked="checked"' : '';
+  putHtml('<input type="checkbox" value="block_netset_dir" name="block_netset_dir"'.$sel.' /></td><td>Block Host/CIDR using *.netset file(s) in the directory /mnt/kd/blocklists</td></tr>');
   putHtml('<tr class="dtrow1"><td style="text-align: right;">');
   $sel = (getVARdef($vars, 'BLOCKED_HOST_LOG') == 1) ? ' checked="checked"' : '';
   putHtml('<input type="checkbox" value="log_blocked" name="log_blocked"'.$sel.' /></td><td>Log Denied attempts by a blocked host</td></tr>');

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7832] branches/1.0/package/arnofw

[<abe...@us...>]

Revision: 7832
          http://sourceforge.net/p/astlinux/code/7832
Author:   abelbeck
Date:     2016-09-14 18:15:56 +0000 (Wed, 14 Sep 2016)
Log Message:
-----------
arnofw, version bump to 2.0.1g-RC3, added BLOCK_NETSET_DIR which efficiently creates ipset's for blocklists using .netset files. Additionally added reload-blocklist-netset script to generate the .netset files

Modified Paths:
--------------
    branches/1.0/package/arnofw/arnofw.mk

Added Paths:
-----------
    branches/1.0/package/arnofw/reload-blocklist-netset

Removed Paths:
-------------
    branches/1.0/package/arnofw/arnofw-0001-handle-ipset-errors.patch

Deleted: branches/1.0/package/arnofw/arnofw-0001-handle-ipset-errors.patch
===================================================================
--- branches/1.0/package/arnofw/arnofw-0001-handle-ipset-errors.patch	2016-09-11 19:08:52 UTC (rev 7831)
+++ branches/1.0/package/arnofw/arnofw-0001-handle-ipset-errors.patch	2016-09-14 18:15:56 UTC (rev 7832)
@@ -1,81 +0,0 @@
-From d06e18113b683ff6b19810eae25db5e4dd11ce2e Mon Sep 17 00:00:00 2001
-From: Lonnie Abelbeck <lo...@ab...>
-Date: Sun, 11 Sep 2016 13:26:55 -0500
-Subject: [PATCH] added: handle errors for ipset BLOCK_HOSTS and
- BLOCK_HOSTS_FILE
-
----
- bin/arno-iptables-firewall | 30 +++++++++++++++++++++++++++---
- 1 file changed, 27 insertions(+), 3 deletions(-)
-
-diff --git a/bin/arno-iptables-firewall b/bin/arno-iptables-firewall
-index aacf489..0e8739b 100755
---- a/bin/arno-iptables-firewall
-+++ b/bin/arno-iptables-firewall
-@@ -4158,7 +4158,7 @@ setup_output_log()
- ######################################
- setup_hostblock_chain()
- {
--  local hashsize maxelem
-+  local hashsize maxelem swap4_err=0 swap6_err=0
- 
-   if iptables -F HOST_BLOCK_SRC 2>&1 |grep -q "No chain" || \
-      iptables -F HOST_BLOCK_DST 2>&1 |grep -q "No chain"; then
-@@ -4216,10 +4216,18 @@ if ipset_check; then
-         case $? in
-         4)
-           ipset add -exist aif_blocklist_tmp $host
-+          if [ $? -ne 0 ]; then
-+            swap4_err=1
-+            RULE_WARNING=$((RULE_WARNING + 1))
-+          fi
-           ;;
-         6)
-           if [ "$IPV6_SUPPORT" = "1" ]; then
-             ipset add -exist aif_blocklist6_tmp $host
-+            if [ $? -ne 0 ]; then
-+              swap6_err=1
-+              RULE_WARNING=$((RULE_WARNING + 1))
-+            fi
-           fi
-           ;;
-         esac
-@@ -4273,9 +4281,17 @@ if ipset_check; then
-       echo "$total_cnt host line(s) read"
- 
-       ipset restore < "$IP4TABLES_BATCH_FILE"
-+      if [ $? -ne 0 ]; then
-+        swap4_err=1
-+        RULE_WARNING=$((RULE_WARNING + 1))
-+      fi
-       rm -f "$IP4TABLES_BATCH_FILE"
-       if [ "$IPV6_SUPPORT" = "1" ]; then
-         ipset restore < "$IP6TABLES_BATCH_FILE"
-+        if [ $? -ne 0 ]; then
-+          swap6_err=1
-+          RULE_WARNING=$((RULE_WARNING + 1))
-+        fi
-         rm -f "$IP6TABLES_BATCH_FILE"
-       fi
-     else
-@@ -4283,10 +4299,18 @@ if ipset_check; then
-     fi
-   fi
- 
--  ipset swap aif_blocklist aif_blocklist_tmp
-+  if [ $swap4_err -eq 0 ]; then
-+    ipset swap aif_blocklist aif_blocklist_tmp
-+  else
-+    printf "\033[40m\033[1;31mERROR: IPv4 \"ipset swap ...\" not applied.\033[0m\n" >&2
-+  fi
-   ipset destroy aif_blocklist_tmp
-   if [ "$IPV6_SUPPORT" = "1" ]; then
--    ipset swap aif_blocklist6 aif_blocklist6_tmp
-+    if [ $swap6_err -eq 0 ]; then
-+      ipset swap aif_blocklist6 aif_blocklist6_tmp
-+    else
-+      printf "\033[40m\033[1;31mERROR: IPv6 \"ipset swap ...\" not applied.\033[0m\n" >&2
-+    fi
-     ipset destroy aif_blocklist6_tmp
-   fi
- else

Modified: branches/1.0/package/arnofw/arnofw.mk
===================================================================
--- branches/1.0/package/arnofw/arnofw.mk	2016-09-11 19:08:52 UTC (rev 7831)
+++ branches/1.0/package/arnofw/arnofw.mk	2016-09-14 18:15:56 UTC (rev 7832)
@@ -3,7 +3,7 @@
 # Arno's IPtables Firewall Script
 #
 #############################################################
-ARNOFW_VER := 2.0.1g-RC2
+ARNOFW_VER := 2.0.1g-RC3
 ARNOFW_ROOT := arno-iptables-firewall
 ARNOFW_SOURCE := $(ARNOFW_ROOT)_$(ARNOFW_VER).tar.gz
 #ARNOFW_SITE := http://rocky.eld.leidenuniv.nl/arno-iptables-firewall
@@ -64,6 +64,8 @@
 		$(TARGET_DIR)$(ARNOFW_CONFIG_SHIM)
 	$(INSTALL) -D -m 0755 package/arnofw/reload-spamhaus-drop \
 		$(TARGET_DIR)/usr/sbin/reload-spamhaus-drop
+	$(INSTALL) -D -m 0755 package/arnofw/reload-blocklist-netset \
+		$(TARGET_DIR)/usr/sbin/reload-blocklist-netset
 	@rm -f $(TARGET_DIR)$(ARNOFW_PLUGIN_SCRIPT_DIR)/*.CHANGELOG
 	@echo
 	@echo "Remove plugins that don't apply."

Added: branches/1.0/package/arnofw/reload-blocklist-netset
===================================================================
--- branches/1.0/package/arnofw/reload-blocklist-netset	                        (rev 0)
+++ branches/1.0/package/arnofw/reload-blocklist-netset	2016-09-14 18:15:56 UTC (rev 7832)
@@ -0,0 +1,173 @@
+#!/bin/sh
+##
+## reload-blocklist-netset
+##
+## Cron may be used to run this script once or twice every day.  Example:
+## 05 05,15 * * * reload-blocklist-netset /mnt/kd/blocklists firehol_level1 spamhaus_dropv6 >/dev/null 2>&1
+##
+## Multiple netset entries may be space or comma separated.
+##
+## In this example, a /mnt/kd/blocklists/firehol_level1.netset
+##              and a /mnt/kd/blocklists/spamhaus_dropv6.netset file will be created.
+## Note: The specified directory must pre-exist, it will not be created.
+##
+## This script prevents any netset from being updated more often than
+## the defined 'AGE' value.
+##
+
+DIR="$1"
+
+UPDATES=0
+
+list_netsets()
+{
+  cat <<EOF
+
+Available IPv4 Blocklist Netsets:
+ firehol_level1: Blacklist composed from IP lists, providing maximum protection with minimum false positives.
+ firehol_level2: Blacklist that track attacks, during about the last 48 hours.
+ firehol_level3: Blacklist that track attacks, spyware, viruses, reported or detected in the last 30 days.
+  spamhaus_drop: Spamhaus DROP (Don't Route Or Peer), consisting of netblocks that are "hijacked" by cyber-crime operations.
+ spamhaus_edrop: Spamhaus EDROP is an extension of the DROP list that includes suballocated netblocks.
+
+Available IPv6 Blocklist Netsets:
+spamhaus_dropv6: Spamhaus DROPv6 list includes IPv6 ranges allocated to spammers or cyber criminals.
+
+EOF
+}
+
+netset_url()
+{
+  local netset="$1"
+
+  case $netset in
+  ## IPv4
+    firehol_level1)
+      URL="https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level1.netset"
+      ALT_URL=""
+      AGE=3600
+      ;;
+    firehol_level2)
+      URL="https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level2.netset"
+      ALT_URL=""
+      AGE=3600
+      ;;
+    firehol_level3)
+      URL="https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/firehol_level3.netset"
+      ALT_URL=""
+      AGE=3600
+      ;;
+    spamhaus_drop)
+      URL="https://www.spamhaus.org/drop/drop.txt"
+      ALT_URL="https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/spamhaus_drop.netset"
+      AGE=43200
+      ;;
+    spamhaus_edrop)
+      URL="https://www.spamhaus.org/drop/edrop.txt"
+      ALT_URL="https://raw.githubusercontent.com/firehol/blocklist-ipsets/master/spamhaus_edrop.netset"
+      AGE=43200
+      ;;
+
+  ## IPv6
+    spamhaus_dropv6)
+      URL="https://www.spamhaus.org/drop/dropv6.txt"
+      ALT_URL=""
+      AGE=43200
+      ;;
+
+    *)
+      URL=""
+      ALT_URL=""
+      AGE=0
+      ;;
+  esac
+}
+
+download_file()
+{
+  local file="$1" url="$2"
+
+  curl -sSfL --globoff --retry 1 --connect-timeout 15 --max-time 1800 -o "$file" "$url" >/dev/null
+}
+
+valid_update_age()
+{
+  local netset="$1" age="$2" file
+
+  file="$DIR/$netset.netset"
+
+  if [ -f "$file" ]; then
+    if [ $(( $(date +%s) - $(date -r "$file" +%s) )) -lt $age ]; then
+      return 1
+    fi
+  fi
+  return 0
+}
+
+blocklist_netset()
+{
+  local netset tmp_file count mesg IFS
+
+  IFS=' ,'
+  for netset in $*; do
+    unset IFS
+    netset_url $netset
+    if [ -z "$URL" ]; then
+      echo "reload-blocklist-netset: Unknown Netset: $netset" >&2
+      continue
+    fi
+    if ! valid_update_age $netset $AGE; then
+      echo "reload-blocklist-netset: The file '$netset.netset' has been updated within $AGE seconds, skipping." >&2
+      continue
+    fi
+    tmp_file="$(mktemp "/tmp/reload_blocklist.XXXXXX")"
+    if ! download_file "$tmp_file" "$URL"; then
+      if [ -z "$ALT_URL" ] || ! download_file "$tmp_file" "$ALT_URL"; then
+        rm -f "$tmp_file"
+        mesg="Retrieving '$netset' netset failed for '$URL', skipping."
+        logger -s -t reload-blocklist-netset -p kern.info "$mesg"
+        continue
+      fi
+    fi
+    if grep -q -i -e '^<!DOCTYPE HTML' -e '^<HTML' "$tmp_file"; then
+      rm -f "$tmp_file"
+      mesg="Netset '$netset' text format is invalid for '$URL', skipping."
+      logger -s -t reload-blocklist-netset -p kern.info "$mesg"
+      continue
+    fi
+
+    cp "$tmp_file" "$DIR/$netset.netset"
+    rm -f "$tmp_file"
+    UPDATES=$((UPDATES + 1))
+
+    count=$(grep -c '^[1-9a-fA-F]' "$DIR/$netset.netset")
+    mesg="Netset '$netset' has been updated. Contains $count addresses/nets."
+    logger -t reload-blocklist-netset -p kern.info "$mesg"
+    echo "$mesg"
+  done
+}
+
+if [ -z "$DIR" ]; then
+  echo "Usage: reload-blocklist-netset netset_dir netset_1 [ netset_2 ... ]"
+  list_netsets
+  exit 1
+fi
+
+if [ ! -d "$DIR" ]; then
+  echo "reload-blocklist-netset: Directory not found: $DIR"
+  exit 1
+fi
+
+shift 1
+
+if [ -z "$1" ]; then
+  list_netsets
+  exit 1
+fi
+
+blocklist_netset "$@"
+
+if [ $UPDATES -gt 0 ]; then
+  arno-iptables-firewall force-reload
+fi
+


Property changes on: branches/1.0/package/arnofw/reload-blocklist-netset
___________________________________________________________________
Added: svn:executable
## -0,0 +1 ##
+*
\ No newline at end of property
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7831] branches/1.0/package/arnofw/ arnofw-0001-handle-ipset-errors.patch

[<abe...@us...>]

Revision: 7831
          http://sourceforge.net/p/astlinux/code/7831
Author:   abelbeck
Date:     2016-09-11 19:08:52 +0000 (Sun, 11 Sep 2016)
Log Message:
-----------
arnofw, add upstream patch, handle errors for ipset BLOCK_HOSTS and BLOCK_HOSTS_FILE

Added Paths:
-----------
    branches/1.0/package/arnofw/arnofw-0001-handle-ipset-errors.patch

Added: branches/1.0/package/arnofw/arnofw-0001-handle-ipset-errors.patch
===================================================================
--- branches/1.0/package/arnofw/arnofw-0001-handle-ipset-errors.patch	                        (rev 0)
+++ branches/1.0/package/arnofw/arnofw-0001-handle-ipset-errors.patch	2016-09-11 19:08:52 UTC (rev 7831)
@@ -0,0 +1,81 @@
+From d06e18113b683ff6b19810eae25db5e4dd11ce2e Mon Sep 17 00:00:00 2001
+From: Lonnie Abelbeck <lo...@ab...>
+Date: Sun, 11 Sep 2016 13:26:55 -0500
+Subject: [PATCH] added: handle errors for ipset BLOCK_HOSTS and
+ BLOCK_HOSTS_FILE
+
+---
+ bin/arno-iptables-firewall | 30 +++++++++++++++++++++++++++---
+ 1 file changed, 27 insertions(+), 3 deletions(-)
+
+diff --git a/bin/arno-iptables-firewall b/bin/arno-iptables-firewall
+index aacf489..0e8739b 100755
+--- a/bin/arno-iptables-firewall
++++ b/bin/arno-iptables-firewall
+@@ -4158,7 +4158,7 @@ setup_output_log()
+ ######################################
+ setup_hostblock_chain()
+ {
+-  local hashsize maxelem
++  local hashsize maxelem swap4_err=0 swap6_err=0
+ 
+   if iptables -F HOST_BLOCK_SRC 2>&1 |grep -q "No chain" || \
+      iptables -F HOST_BLOCK_DST 2>&1 |grep -q "No chain"; then
+@@ -4216,10 +4216,18 @@ if ipset_check; then
+         case $? in
+         4)
+           ipset add -exist aif_blocklist_tmp $host
++          if [ $? -ne 0 ]; then
++            swap4_err=1
++            RULE_WARNING=$((RULE_WARNING + 1))
++          fi
+           ;;
+         6)
+           if [ "$IPV6_SUPPORT" = "1" ]; then
+             ipset add -exist aif_blocklist6_tmp $host
++            if [ $? -ne 0 ]; then
++              swap6_err=1
++              RULE_WARNING=$((RULE_WARNING + 1))
++            fi
+           fi
+           ;;
+         esac
+@@ -4273,9 +4281,17 @@ if ipset_check; then
+       echo "$total_cnt host line(s) read"
+ 
+       ipset restore < "$IP4TABLES_BATCH_FILE"
++      if [ $? -ne 0 ]; then
++        swap4_err=1
++        RULE_WARNING=$((RULE_WARNING + 1))
++      fi
+       rm -f "$IP4TABLES_BATCH_FILE"
+       if [ "$IPV6_SUPPORT" = "1" ]; then
+         ipset restore < "$IP6TABLES_BATCH_FILE"
++        if [ $? -ne 0 ]; then
++          swap6_err=1
++          RULE_WARNING=$((RULE_WARNING + 1))
++        fi
+         rm -f "$IP6TABLES_BATCH_FILE"
+       fi
+     else
+@@ -4283,10 +4299,18 @@ if ipset_check; then
+     fi
+   fi
+ 
+-  ipset swap aif_blocklist aif_blocklist_tmp
++  if [ $swap4_err -eq 0 ]; then
++    ipset swap aif_blocklist aif_blocklist_tmp
++  else
++    printf "\033[40m\033[1;31mERROR: IPv4 \"ipset swap ...\" not applied.\033[0m\n" >&2
++  fi
+   ipset destroy aif_blocklist_tmp
+   if [ "$IPV6_SUPPORT" = "1" ]; then
+-    ipset swap aif_blocklist6 aif_blocklist6_tmp
++    if [ $swap6_err -eq 0 ]; then
++      ipset swap aif_blocklist6 aif_blocklist6_tmp
++    else
++      printf "\033[40m\033[1;31mERROR: IPv6 \"ipset swap ...\" not applied.\033[0m\n" >&2
++    fi
+     ipset destroy aif_blocklist6_tmp
+   fi
+ else

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7830] branches/1.0/docs/ChangeLog.txt

[<abe...@us...>]

Revision: 7830
          http://sourceforge.net/p/astlinux/code/7830
Author:   abelbeck
Date:     2016-09-10 17:06:35 +0000 (Sat, 10 Sep 2016)
Log Message:
-----------
update ChangeLog

Modified Paths:
--------------
    branches/1.0/docs/ChangeLog.txt

Modified: branches/1.0/docs/ChangeLog.txt
===================================================================
--- branches/1.0/docs/ChangeLog.txt	2016-09-10 17:03:35 UTC (rev 7829)
+++ branches/1.0/docs/ChangeLog.txt	2016-09-10 17:06:35 UTC (rev 7830)
@@ -52,7 +52,7 @@
 
 -- Added a 4th LAN Interface configuration entry
 
--- arnofw (AIF), version bump to 2.0.1g-RC1
+-- arnofw (AIF), version bump to 2.0.1g-RC2, added support for 'ipset'
 
 -- libcurl (curl) version bump to 7.50.2, security fixes: CVE-2016-5419, CVE-2016-5420, CVE-2016-5421
 
@@ -83,7 +83,7 @@
 
 ** Asterisk
 
--- Asterisk 1.8.32.3 (no change), 11.23.0 (version bump) and 13.11.0 (version bump)
+-- Asterisk 1.8.32.3 (no change), 11.23.1 (version bump) and 13.11.2 (version bump)
 
 -- DAHDI, dahdi-linux 2.8.0.1 (no change) and dahdi-tools 2.8.0 (no change)
 

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7829] branches/1.0/package/asterisk

[<abe...@us...>]

Revision: 7829
          http://sourceforge.net/p/astlinux/code/7829
Author:   abelbeck
Date:     2016-09-10 17:03:35 +0000 (Sat, 10 Sep 2016)
Log Message:
-----------
asterisk, version bump to 11.23.1 and 13.11.2, security fixes

Modified Paths:
--------------
    branches/1.0/package/asterisk/asterisk-11-extension-changed-verbosity-chan_sip.patch
    branches/1.0/package/asterisk/asterisk-13-extension-changed-verbosity-chan_sip.patch
    branches/1.0/package/asterisk/asterisk.mk

Modified: branches/1.0/package/asterisk/asterisk-11-extension-changed-verbosity-chan_sip.patch
===================================================================
--- branches/1.0/package/asterisk/asterisk-11-extension-changed-verbosity-chan_sip.patch	2016-09-10 16:31:27 UTC (rev 7828)
+++ branches/1.0/package/asterisk/asterisk-11-extension-changed-verbosity-chan_sip.patch	2016-09-10 17:03:35 UTC (rev 7829)
@@ -1,6 +1,6 @@
 --- asterisk-11.17.1/channels/chan_sip.c.orig	2015-04-23 10:22:04.000000000 -0500
 +++ asterisk-11.17.1/channels/chan_sip.c	2015-04-23 10:22:40.000000000 -0500
-@@ -16799,7 +16799,7 @@
+@@ -16816,7 +16816,7 @@
  	}
  
  	if (!force) {

Modified: branches/1.0/package/asterisk/asterisk-13-extension-changed-verbosity-chan_sip.patch
===================================================================
--- branches/1.0/package/asterisk/asterisk-13-extension-changed-verbosity-chan_sip.patch	2016-09-10 16:31:27 UTC (rev 7828)
+++ branches/1.0/package/asterisk/asterisk-13-extension-changed-verbosity-chan_sip.patch	2016-09-10 17:03:35 UTC (rev 7829)
@@ -1,6 +1,6 @@
 --- asterisk-11.17.1/channels/chan_sip.c.orig	2015-04-23 10:22:04.000000000 -0500
 +++ asterisk-11.17.1/channels/chan_sip.c	2015-04-23 10:22:40.000000000 -0500
-@@ -17319,7 +17319,7 @@
+@@ -17336,7 +17336,7 @@
  	}
  
  	if (!force) {

Modified: branches/1.0/package/asterisk/asterisk.mk
===================================================================
--- branches/1.0/package/asterisk/asterisk.mk	2016-09-10 16:31:27 UTC (rev 7828)
+++ branches/1.0/package/asterisk/asterisk.mk	2016-09-10 17:03:35 UTC (rev 7829)
@@ -7,9 +7,9 @@
 ASTERISK_VERSION := 1.8.32.3
 else
  ifeq ($(BR2_PACKAGE_ASTERISK_v11),y)
-ASTERISK_VERSION := 11.23.0
+ASTERISK_VERSION := 11.23.1
  else
-ASTERISK_VERSION := 13.11.0
+ASTERISK_VERSION := 13.11.2
  endif
 endif
 ASTERISK_SOURCE := asterisk-$(ASTERISK_VERSION).tar.gz

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7828] branches/1.0/package/arnofw

[<abe...@us...>]

Revision: 7828
          http://sourceforge.net/p/astlinux/code/7828
Author:   abelbeck
Date:     2016-09-10 16:31:27 +0000 (Sat, 10 Sep 2016)
Log Message:
-----------
arnofw, version bump to 2.0.1g-RC2, added support for 'ipset'

Modified Paths:
--------------
    branches/1.0/package/arnofw/arnofw.mk
    branches/1.0/package/arnofw/arnofw.wrapper

Modified: branches/1.0/package/arnofw/arnofw.mk
===================================================================
--- branches/1.0/package/arnofw/arnofw.mk	2016-09-09 17:09:18 UTC (rev 7827)
+++ branches/1.0/package/arnofw/arnofw.mk	2016-09-10 16:31:27 UTC (rev 7828)
@@ -3,7 +3,7 @@
 # Arno's IPtables Firewall Script
 #
 #############################################################
-ARNOFW_VER := 2.0.1g-RC1
+ARNOFW_VER := 2.0.1g-RC2
 ARNOFW_ROOT := arno-iptables-firewall
 ARNOFW_SOURCE := $(ARNOFW_ROOT)_$(ARNOFW_VER).tar.gz
 #ARNOFW_SITE := http://rocky.eld.leidenuniv.nl/arno-iptables-firewall

Modified: branches/1.0/package/arnofw/arnofw.wrapper
===================================================================
--- branches/1.0/package/arnofw/arnofw.wrapper	2016-09-09 17:09:18 UTC (rev 7827)
+++ branches/1.0/package/arnofw/arnofw.wrapper	2016-09-10 16:31:27 UTC (rev 7828)
@@ -155,6 +155,8 @@
 {
   local intf lan lans extCIDR ovpnIF ovpnIP ovpnNM allowif allowifs denyif count IFS
 
+  IPTABLES_IPSET=1
+
   MANGLE_TOS=0
 
   if [ "$IPV6" = "yes" ]; then

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7827] branches/1.0/docs/ChangeLog.txt

[<abe...@us...>]

Revision: 7827
          http://sourceforge.net/p/astlinux/code/7827
Author:   abelbeck
Date:     2016-09-09 17:09:18 +0000 (Fri, 09 Sep 2016)
Log Message:
-----------
update ChangeLog

Modified Paths:
--------------
    branches/1.0/docs/ChangeLog.txt

Modified: branches/1.0/docs/ChangeLog.txt
===================================================================
--- branches/1.0/docs/ChangeLog.txt	2016-09-09 15:27:32 UTC (rev 7826)
+++ branches/1.0/docs/ChangeLog.txt	2016-09-09 17:09:18 UTC (rev 7827)
@@ -18,6 +18,8 @@
 
 -- linux, tcp: make challenge acks less predictable, security fix: CVE-2016-5696
 
+-- linux, enable NETFILTER_XT_SET=m and IP_SET=m for the 'ipset' userspace utility
+
 -- e1000e version bump to 3.3.5 Intel PCI-Express PRO/1000 Ethernet Linux driver
 
 -- php, major version bump to 5.6.25, bug and security fixes
@@ -66,6 +68,10 @@
 
 -- mtr, version bump to 0.87
 
+-- ipset, version 6.29, new package to store multiple IP addresses and match against the collection by iptables at one swoop
+
+-- dnsmasq, enabled 'ipset' support
+
 -- msmtp, add a functional "/bin/mail" script to emulate mail/mailx for sending email via sendmail.
    Particularly useful for sending file attachment(s) via email.  Issue "mail --help" for details.
    Example (end of iOS section): http://doc.astlinux.org/userdoc:tt_asterisk-fop2-ssl

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7826] branches/1.0

[<abe...@us...>]

Revision: 7826
          http://sourceforge.net/p/astlinux/code/7826
Author:   abelbeck
Date:     2016-09-09 15:27:32 +0000 (Fri, 09 Sep 2016)
Log Message:
-----------
default configs, enable packages 'ipset' and library 'libmnl'

Modified Paths:
--------------
    branches/1.0/astlinux-ast11.config
    branches/1.0/astlinux-ast13.config
    branches/1.0/astlinux18.config
    branches/1.0/x86_64-configs/astlinux-ast11.config
    branches/1.0/x86_64-configs/astlinux-ast13.config
    branches/1.0/x86_64-configs/astlinux18.config

Modified: branches/1.0/astlinux-ast11.config
===================================================================
--- branches/1.0/astlinux-ast11.config	2016-09-09 15:11:39 UTC (rev 7825)
+++ branches/1.0/astlinux-ast11.config	2016-09-09 15:27:32 UTC (rev 7826)
@@ -604,7 +604,7 @@
 # BR2_PACKAGE_NEON_NOXML is not set
 # BR2_PACKAGE_NEON_EXPAT is not set
 BR2_PACKAGE_NEON_LIBXML2=y
-# BR2_PACKAGE_LIBMNL is not set
+BR2_PACKAGE_LIBMNL=y
 # BR2_PACKAGE_LIBNET is not set
 # BR2_PACKAGE_LIBNFNETLINK is not set
 # BR2_PACKAGE_LIBNL is not set
@@ -723,7 +723,7 @@
 BR2_PACKAGE_IPSEC_SECCTX_DISABLE=y
 # BR2_PACKAGE_IPSEC_SECCTX_ENABLE is not set
 # BR2_PACKAGE_IPSEC_SECCTX_KERNEL is not set
-# BR2_PACKAGE_IPSET is not set
+BR2_PACKAGE_IPSET=y
 BR2_PACKAGE_IPTABLES=y
 # BR2_PACKAGE_IW is not set
 # BR2_PACKAGE_KISMET is not set

Modified: branches/1.0/astlinux-ast13.config
===================================================================
--- branches/1.0/astlinux-ast13.config	2016-09-09 15:11:39 UTC (rev 7825)
+++ branches/1.0/astlinux-ast13.config	2016-09-09 15:27:32 UTC (rev 7826)
@@ -604,7 +604,7 @@
 # BR2_PACKAGE_NEON_NOXML is not set
 # BR2_PACKAGE_NEON_EXPAT is not set
 BR2_PACKAGE_NEON_LIBXML2=y
-# BR2_PACKAGE_LIBMNL is not set
+BR2_PACKAGE_LIBMNL=y
 # BR2_PACKAGE_LIBNET is not set
 # BR2_PACKAGE_LIBNFNETLINK is not set
 # BR2_PACKAGE_LIBNL is not set
@@ -723,7 +723,7 @@
 BR2_PACKAGE_IPSEC_SECCTX_DISABLE=y
 # BR2_PACKAGE_IPSEC_SECCTX_ENABLE is not set
 # BR2_PACKAGE_IPSEC_SECCTX_KERNEL is not set
-# BR2_PACKAGE_IPSET is not set
+BR2_PACKAGE_IPSET=y
 BR2_PACKAGE_IPTABLES=y
 # BR2_PACKAGE_IW is not set
 # BR2_PACKAGE_KISMET is not set

Modified: branches/1.0/astlinux18.config
===================================================================
--- branches/1.0/astlinux18.config	2016-09-09 15:11:39 UTC (rev 7825)
+++ branches/1.0/astlinux18.config	2016-09-09 15:27:32 UTC (rev 7826)
@@ -604,7 +604,7 @@
 # BR2_PACKAGE_NEON_NOXML is not set
 # BR2_PACKAGE_NEON_EXPAT is not set
 BR2_PACKAGE_NEON_LIBXML2=y
-# BR2_PACKAGE_LIBMNL is not set
+BR2_PACKAGE_LIBMNL=y
 # BR2_PACKAGE_LIBNET is not set
 # BR2_PACKAGE_LIBNFNETLINK is not set
 # BR2_PACKAGE_LIBNL is not set
@@ -723,7 +723,7 @@
 BR2_PACKAGE_IPSEC_SECCTX_DISABLE=y
 # BR2_PACKAGE_IPSEC_SECCTX_ENABLE is not set
 # BR2_PACKAGE_IPSEC_SECCTX_KERNEL is not set
-# BR2_PACKAGE_IPSET is not set
+BR2_PACKAGE_IPSET=y
 BR2_PACKAGE_IPTABLES=y
 # BR2_PACKAGE_IW is not set
 # BR2_PACKAGE_KISMET is not set

Modified: branches/1.0/x86_64-configs/astlinux-ast11.config
===================================================================
--- branches/1.0/x86_64-configs/astlinux-ast11.config	2016-09-09 15:11:39 UTC (rev 7825)
+++ branches/1.0/x86_64-configs/astlinux-ast11.config	2016-09-09 15:27:32 UTC (rev 7826)
@@ -585,7 +585,7 @@
 # BR2_PACKAGE_NEON_NOXML is not set
 # BR2_PACKAGE_NEON_EXPAT is not set
 BR2_PACKAGE_NEON_LIBXML2=y
-# BR2_PACKAGE_LIBMNL is not set
+BR2_PACKAGE_LIBMNL=y
 # BR2_PACKAGE_LIBNET is not set
 # BR2_PACKAGE_LIBNFNETLINK is not set
 # BR2_PACKAGE_LIBNL is not set
@@ -704,7 +704,7 @@
 BR2_PACKAGE_IPSEC_SECCTX_DISABLE=y
 # BR2_PACKAGE_IPSEC_SECCTX_ENABLE is not set
 # BR2_PACKAGE_IPSEC_SECCTX_KERNEL is not set
-# BR2_PACKAGE_IPSET is not set
+BR2_PACKAGE_IPSET=y
 BR2_PACKAGE_IPTABLES=y
 # BR2_PACKAGE_IW is not set
 # BR2_PACKAGE_KISMET is not set

Modified: branches/1.0/x86_64-configs/astlinux-ast13.config
===================================================================
--- branches/1.0/x86_64-configs/astlinux-ast13.config	2016-09-09 15:11:39 UTC (rev 7825)
+++ branches/1.0/x86_64-configs/astlinux-ast13.config	2016-09-09 15:27:32 UTC (rev 7826)
@@ -585,7 +585,7 @@
 # BR2_PACKAGE_NEON_NOXML is not set
 # BR2_PACKAGE_NEON_EXPAT is not set
 BR2_PACKAGE_NEON_LIBXML2=y
-# BR2_PACKAGE_LIBMNL is not set
+BR2_PACKAGE_LIBMNL=y
 # BR2_PACKAGE_LIBNET is not set
 # BR2_PACKAGE_LIBNFNETLINK is not set
 # BR2_PACKAGE_LIBNL is not set
@@ -704,7 +704,7 @@
 BR2_PACKAGE_IPSEC_SECCTX_DISABLE=y
 # BR2_PACKAGE_IPSEC_SECCTX_ENABLE is not set
 # BR2_PACKAGE_IPSEC_SECCTX_KERNEL is not set
-# BR2_PACKAGE_IPSET is not set
+BR2_PACKAGE_IPSET=y
 BR2_PACKAGE_IPTABLES=y
 # BR2_PACKAGE_IW is not set
 # BR2_PACKAGE_KISMET is not set

Modified: branches/1.0/x86_64-configs/astlinux18.config
===================================================================
--- branches/1.0/x86_64-configs/astlinux18.config	2016-09-09 15:11:39 UTC (rev 7825)
+++ branches/1.0/x86_64-configs/astlinux18.config	2016-09-09 15:27:32 UTC (rev 7826)
@@ -585,7 +585,7 @@
 # BR2_PACKAGE_NEON_NOXML is not set
 # BR2_PACKAGE_NEON_EXPAT is not set
 BR2_PACKAGE_NEON_LIBXML2=y
-# BR2_PACKAGE_LIBMNL is not set
+BR2_PACKAGE_LIBMNL=y
 # BR2_PACKAGE_LIBNET is not set
 # BR2_PACKAGE_LIBNFNETLINK is not set
 # BR2_PACKAGE_LIBNL is not set
@@ -704,7 +704,7 @@
 BR2_PACKAGE_IPSEC_SECCTX_DISABLE=y
 # BR2_PACKAGE_IPSEC_SECCTX_ENABLE is not set
 # BR2_PACKAGE_IPSEC_SECCTX_KERNEL is not set
-# BR2_PACKAGE_IPSET is not set
+BR2_PACKAGE_IPSET=y
 BR2_PACKAGE_IPTABLES=y
 # BR2_PACKAGE_IW is not set
 # BR2_PACKAGE_KISMET is not set

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7825] branches/1.0/project/astlinux

[<abe...@us...>]

Revision: 7825
          http://sourceforge.net/p/astlinux/code/7825
Author:   abelbeck
Date:     2016-09-09 15:11:39 +0000 (Fri, 09 Sep 2016)
Log Message:
-----------
linux, enable ipset support for all kernel configs as modules

Modified Paths:
--------------
    branches/1.0/project/astlinux/geni586/linux-smp.config
    branches/1.0/project/astlinux/geni586/linux.config
    branches/1.0/project/astlinux/genx86_64/linux-smp-vm.config
    branches/1.0/project/astlinux/genx86_64/linux-smp.config

Modified: branches/1.0/project/astlinux/geni586/linux-smp.config
===================================================================
--- branches/1.0/project/astlinux/geni586/linux-smp.config	2016-09-08 22:06:37 UTC (rev 7824)
+++ branches/1.0/project/astlinux/geni586/linux-smp.config	2016-09-09 15:11:39 UTC (rev 7825)
@@ -601,6 +601,7 @@
 #
 CONFIG_NETFILTER_XT_MARK=m
 CONFIG_NETFILTER_XT_CONNMARK=m
+CONFIG_NETFILTER_XT_SET=m
 
 #
 # Xtables targets
@@ -665,7 +666,19 @@
 CONFIG_NETFILTER_XT_MATCH_TCPMSS=m
 CONFIG_NETFILTER_XT_MATCH_TIME=m
 CONFIG_NETFILTER_XT_MATCH_U32=m
-# CONFIG_IP_SET is not set
+CONFIG_IP_SET=m
+CONFIG_IP_SET_MAX=256
+CONFIG_IP_SET_BITMAP_IP=m
+CONFIG_IP_SET_BITMAP_IPMAC=m
+CONFIG_IP_SET_BITMAP_PORT=m
+CONFIG_IP_SET_HASH_IP=m
+CONFIG_IP_SET_HASH_IPPORT=m
+CONFIG_IP_SET_HASH_IPPORTIP=m
+CONFIG_IP_SET_HASH_IPPORTNET=m
+CONFIG_IP_SET_HASH_NET=m
+CONFIG_IP_SET_HASH_NETPORT=m
+CONFIG_IP_SET_HASH_NETIFACE=m
+CONFIG_IP_SET_LIST_SET=m
 # CONFIG_IP_VS is not set
 
 #

Modified: branches/1.0/project/astlinux/geni586/linux.config
===================================================================
--- branches/1.0/project/astlinux/geni586/linux.config	2016-09-08 22:06:37 UTC (rev 7824)
+++ branches/1.0/project/astlinux/geni586/linux.config	2016-09-09 15:11:39 UTC (rev 7825)
@@ -591,6 +591,7 @@
 #
 CONFIG_NETFILTER_XT_MARK=m
 CONFIG_NETFILTER_XT_CONNMARK=m
+CONFIG_NETFILTER_XT_SET=m
 
 #
 # Xtables targets
@@ -655,7 +656,19 @@
 CONFIG_NETFILTER_XT_MATCH_TCPMSS=m
 CONFIG_NETFILTER_XT_MATCH_TIME=m
 CONFIG_NETFILTER_XT_MATCH_U32=m
-# CONFIG_IP_SET is not set
+CONFIG_IP_SET=m
+CONFIG_IP_SET_MAX=256
+CONFIG_IP_SET_BITMAP_IP=m
+CONFIG_IP_SET_BITMAP_IPMAC=m
+CONFIG_IP_SET_BITMAP_PORT=m
+CONFIG_IP_SET_HASH_IP=m
+CONFIG_IP_SET_HASH_IPPORT=m
+CONFIG_IP_SET_HASH_IPPORTIP=m
+CONFIG_IP_SET_HASH_IPPORTNET=m
+CONFIG_IP_SET_HASH_NET=m
+CONFIG_IP_SET_HASH_NETPORT=m
+CONFIG_IP_SET_HASH_NETIFACE=m
+CONFIG_IP_SET_LIST_SET=m
 # CONFIG_IP_VS is not set
 
 #

Modified: branches/1.0/project/astlinux/genx86_64/linux-smp-vm.config
===================================================================
--- branches/1.0/project/astlinux/genx86_64/linux-smp-vm.config	2016-09-08 22:06:37 UTC (rev 7824)
+++ branches/1.0/project/astlinux/genx86_64/linux-smp-vm.config	2016-09-09 15:11:39 UTC (rev 7825)
@@ -575,6 +575,7 @@
 #
 CONFIG_NETFILTER_XT_MARK=m
 CONFIG_NETFILTER_XT_CONNMARK=m
+CONFIG_NETFILTER_XT_SET=m
 
 #
 # Xtables targets
@@ -639,7 +640,19 @@
 CONFIG_NETFILTER_XT_MATCH_TCPMSS=m
 CONFIG_NETFILTER_XT_MATCH_TIME=m
 CONFIG_NETFILTER_XT_MATCH_U32=m
-# CONFIG_IP_SET is not set
+CONFIG_IP_SET=m
+CONFIG_IP_SET_MAX=256
+CONFIG_IP_SET_BITMAP_IP=m
+CONFIG_IP_SET_BITMAP_IPMAC=m
+CONFIG_IP_SET_BITMAP_PORT=m
+CONFIG_IP_SET_HASH_IP=m
+CONFIG_IP_SET_HASH_IPPORT=m
+CONFIG_IP_SET_HASH_IPPORTIP=m
+CONFIG_IP_SET_HASH_IPPORTNET=m
+CONFIG_IP_SET_HASH_NET=m
+CONFIG_IP_SET_HASH_NETPORT=m
+CONFIG_IP_SET_HASH_NETIFACE=m
+CONFIG_IP_SET_LIST_SET=m
 # CONFIG_IP_VS is not set
 
 #

Modified: branches/1.0/project/astlinux/genx86_64/linux-smp.config
===================================================================
--- branches/1.0/project/astlinux/genx86_64/linux-smp.config	2016-09-08 22:06:37 UTC (rev 7824)
+++ branches/1.0/project/astlinux/genx86_64/linux-smp.config	2016-09-09 15:11:39 UTC (rev 7825)
@@ -555,6 +555,7 @@
 #
 CONFIG_NETFILTER_XT_MARK=m
 CONFIG_NETFILTER_XT_CONNMARK=m
+CONFIG_NETFILTER_XT_SET=m
 
 #
 # Xtables targets
@@ -619,7 +620,19 @@
 CONFIG_NETFILTER_XT_MATCH_TCPMSS=m
 CONFIG_NETFILTER_XT_MATCH_TIME=m
 CONFIG_NETFILTER_XT_MATCH_U32=m
-# CONFIG_IP_SET is not set
+CONFIG_IP_SET=m
+CONFIG_IP_SET_MAX=256
+CONFIG_IP_SET_BITMAP_IP=m
+CONFIG_IP_SET_BITMAP_IPMAC=m
+CONFIG_IP_SET_BITMAP_PORT=m
+CONFIG_IP_SET_HASH_IP=m
+CONFIG_IP_SET_HASH_IPPORT=m
+CONFIG_IP_SET_HASH_IPPORTIP=m
+CONFIG_IP_SET_HASH_IPPORTNET=m
+CONFIG_IP_SET_HASH_NET=m
+CONFIG_IP_SET_HASH_NETPORT=m
+CONFIG_IP_SET_HASH_NETIFACE=m
+CONFIG_IP_SET_LIST_SET=m
 # CONFIG_IP_VS is not set
 
 #

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7824] branches/1.0/package/ipset

[<abe...@us...>]

Revision: 7824
          http://sourceforge.net/p/astlinux/code/7824
Author:   abelbeck
Date:     2016-09-08 22:06:37 +0000 (Thu, 08 Sep 2016)
Log Message:
-----------
ipset, version bump to 6.29, not enabled yet, needs added kernel modules

Modified Paths:
--------------
    branches/1.0/package/ipset/ipset.mk

Removed Paths:
-------------
    branches/1.0/package/ipset/ipset-drop-modules.patch

Deleted: branches/1.0/package/ipset/ipset-drop-modules.patch
===================================================================
--- branches/1.0/package/ipset/ipset-drop-modules.patch	2016-09-08 20:59:58 UTC (rev 7823)
+++ branches/1.0/package/ipset/ipset-drop-modules.patch	2016-09-08 22:06:37 UTC (rev 7824)
@@ -1,100 +0,0 @@
-Drop all the kernel checks and let the user deal with having a new enough
-version of the kernel to enjoy this.
-
-Signed-off-by: Gustavo Zacarias <gu...@za...>
----
-
-diff -Nura ipset-6.8.orig//Makefile.am ipset-6.8/Makefile.am
---- ipset-6.8.orig//Makefile.am	2011-08-17 16:10:41.999386034 -0300
-+++ ipset-6.8/Makefile.am	2011-08-17 16:17:34.108702969 -0300
-@@ -4,11 +4,6 @@
- 
- include $(top_srcdir)/Make_global.am
- 
--if ! WITH_KBUILDDIR
--KBUILD_OUTPUT=/lib/modules/`uname -r`/build
--else
--KBUILD_OUTPUT=$(KBUILDDIR)
--endif
- if ! WITH_MAXSETS
- IP_SET_MAX=256
- else
-@@ -22,23 +17,6 @@
- 
- SUBDIRS		= lib src
- 
--modules_sparse:
--	${MAKE} -C $(KBUILD_OUTPUT) M=$$PWD/kernel/net/netfilter \
--			V=$V C=2 CF=-D__CHECK_ENDIAN__ \
--			IP_SET_MAX=$(IP_SET_MAX) KDIR=$$PWD/kernel modules
--
--modules:
--	${MAKE} -C $(KBUILD_OUTPUT) M=$$PWD/kernel/net/netfilter V=$V \
--			IP_SET_MAX=$(IP_SET_MAX) KDIR=$$PWD/kernel modules
--
--modules_install:
--	${MAKE} -C $(KBUILD_OUTPUT) M=$$PWD/kernel/net/netfilter \
--			KDIR=$$PWD/kernel modules_install
--
--modules_clean:
--	${MAKE} -C $(KBUILD_OUTPUT) M=$$PWD/kernel/net/netfilter \
--			KDIR=$$PWD/kernel clean
--
- update_includes:
- 	./update ip_set.h
- 	./update ip_set_bitmap.h
-diff -Nura ipset-6.8.orig//configure.ac ipset-6.8/configure.ac
---- ipset-6.8.orig//configure.ac	2011-08-17 16:10:42.015387986 -0300
-+++ ipset-6.8/configure.ac	2011-08-17 16:18:01.578056869 -0300
-@@ -11,51 +11,6 @@
- *) AC_MSG_ERROR([Linux systems supported exclusively!]);;
- esac
- 
--dnl Additional arguments
--dnl Kernel build directory or source tree
--AC_ARG_WITH([kbuild],
--            AS_HELP_STRING([--with-kbuild=PATH],
--                           [Path to kernel build directory]),
--            [KBUILDDIR="$withval";])
--AC_ARG_WITH([ksource],
--            AS_HELP_STRING([--with-ksource=PATH],
--                           [Path to kernel source directory, if not the same as the kernel build directory]),
--            [KSOURCEDIR="$withval";])
--AM_CONDITIONAL(WITH_KBUILDDIR, test "$KBUILDDIR" != "")
--AC_SUBST(KBUILDDIR)
--
--dnl Sigh: check kernel version dependencies
--if test "$KBUILDDIR" != ""
--then
--	kbuilddir="$KBUILDDIR"
--else
--	kbuilddir="/lib/modules/`uname -r`/build"
--fi
--
--if test -n "$KSOURCEDIR"; then
--	ksourcedir="$KSOURCEDIR"
--elif test -e "$kbuilddir/include/linux/netfilter/nfnetlink.h"; then
--	ksourcedir="$kbuilddir"
--else
--	ksourcedir="/lib/modules/$(uname -r)/source"
--fi
--if test ! -e "$ksourcedir/include/linux/netfilter/nfnetlink.h"
--then
--	AC_MSG_ERROR([Invalid kernel source directory $ksourcedir])
--fi
--
--if test ! -e "$kbuilddir/.config"
--then
--	AC_MSG_ERROR([The kernel build directory $kbuilddir is not configured])
--fi
--
--AC_PROG_GREP
--
--if test "X`$GREP 'NFNL_SUBSYS_IPSET' $ksourcedir/include/linux/netfilter/nfnetlink.h`" = "X"
--then
--	AC_MSG_ERROR([The kernel source directory $ksourcedir is not patched with netlink.patch to support ipset])
--fi
--
- dnl Maximal number of sets supported by the kernel, default 256
- AC_ARG_WITH([maxsets],
- 	    AS_HELP_STRING([--with-maxsets=256],

Modified: branches/1.0/package/ipset/ipset.mk
===================================================================
--- branches/1.0/package/ipset/ipset.mk	2016-09-08 20:59:58 UTC (rev 7823)
+++ branches/1.0/package/ipset/ipset.mk	2016-09-08 22:06:37 UTC (rev 7824)
@@ -4,10 +4,13 @@
 #
 #############################################################
 
-IPSET_VERSION = 6.8
+IPSET_VERSION = 6.29
 IPSET_SOURCE = ipset-$(IPSET_VERSION).tar.bz2
 IPSET_SITE = http://ipset.netfilter.org
-IPSET_AUTORECONF = YES
 IPSET_DEPENDENCIES = libmnl host-pkg-config
 
+IPSET_CONF_OPT = \
+	--disable-static \
+	--with-kmod=no
+
 $(eval $(call AUTOTARGETS,package,ipset))

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7823] branches/1.0/package/libmnl/libmnl.mk

[<abe...@us...>]

Revision: 7823
          http://sourceforge.net/p/astlinux/code/7823
Author:   abelbeck
Date:     2016-09-08 20:59:58 +0000 (Thu, 08 Sep 2016)
Log Message:
-----------
libmnl, version bump to 1.0.4, needed for ipset

Modified Paths:
--------------
    branches/1.0/package/libmnl/libmnl.mk

Modified: branches/1.0/package/libmnl/libmnl.mk
===================================================================
--- branches/1.0/package/libmnl/libmnl.mk	2016-09-07 16:23:42 UTC (rev 7822)
+++ branches/1.0/package/libmnl/libmnl.mk	2016-09-08 20:59:58 UTC (rev 7823)
@@ -4,7 +4,7 @@
 #
 #############################################################
 
-LIBMNL_VERSION = 1.0.1
+LIBMNL_VERSION = 1.0.4
 LIBMNL_SOURCE = libmnl-$(LIBMNL_VERSION).tar.bz2
 LIBMNL_SITE = http://netfilter.org/projects/libmnl/files
 LIBMNL_INSTALL_STAGING = YES

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7822] branches/1.0/docs/ChangeLog.txt

[<abe...@us...>]

Revision: 7822
          http://sourceforge.net/p/astlinux/code/7822
Author:   abelbeck
Date:     2016-09-07 16:23:42 +0000 (Wed, 07 Sep 2016)
Log Message:
-----------
update ChangeLog

Modified Paths:
--------------
    branches/1.0/docs/ChangeLog.txt

Modified: branches/1.0/docs/ChangeLog.txt
===================================================================
--- branches/1.0/docs/ChangeLog.txt	2016-09-07 16:13:58 UTC (rev 7821)
+++ branches/1.0/docs/ChangeLog.txt	2016-09-07 16:23:42 UTC (rev 7822)
@@ -40,6 +40,8 @@
 
 -- libsodium, version bump to 1.0.11
 
+-- ca-certificates, update trusted root certificates 2016-09-07
+
 -- mac2vendor, oui.txt database snapshot 2016-08-21
 
 -- Time Zone Database update, tzdata2016f and php-timezonedb-2016.6
@@ -50,7 +52,7 @@
 
 -- arnofw (AIF), version bump to 2.0.1g-RC1
 
--- libcurl (curl) version bump to 7.50.1, security fixes: CVE-2016-5419, CVE-2016-5420, CVE-2016-5421
+-- libcurl (curl) version bump to 7.50.2, security fixes: CVE-2016-5419, CVE-2016-5420, CVE-2016-5421
 
 -- lighttpd, version bump to 1.4.41
 
@@ -83,7 +85,7 @@
 
 -- SILK CODEC, version bump to 1.0.3, now supports Asterisk 13 as well as Asterisk 11
 
--- FOP2, available version bump to 2.31.03.
+-- FOP2, available version bump to 2.31.04.
    Note: If you have a license, you may need to purchase an "Annual Software Maintenance" license if you upgrade.
    More info: http://doc.astlinux.org/userdoc:tt_asterisk-fop2-upgrade
 

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Astlinux-commits] SF.net SVN: astlinux:[7821] branches/1.0/package

[<abe...@us...>]

Revision: 7821
          http://sourceforge.net/p/astlinux/code/7821
Author:   abelbeck
Date:     2016-09-07 16:13:58 +0000 (Wed, 07 Sep 2016)
Log Message:
-----------
libcurl, version bump to 7.50.2, ca-certificates version bump to 2016-09-07

Modified Paths:
--------------
    branches/1.0/package/ca-certificates/ca-certificates.mk
    branches/1.0/package/libcurl/libcurl.mk

Modified: branches/1.0/package/ca-certificates/ca-certificates.mk
===================================================================
--- branches/1.0/package/ca-certificates/ca-certificates.mk	2016-09-07 14:18:19 UTC (rev 7820)
+++ branches/1.0/package/ca-certificates/ca-certificates.mk	2016-09-07 16:13:58 UTC (rev 7821)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-CA_CERTIFICATES_VERSION = 2016-04-20
+CA_CERTIFICATES_VERSION = 2016-09-07
 CA_CERTIFICATES_SOURCE = cacert-$(CA_CERTIFICATES_VERSION).pem
 CA_CERTIFICATES_SITE = https://curl.haxx.se/ca
 

Modified: branches/1.0/package/libcurl/libcurl.mk
===================================================================
--- branches/1.0/package/libcurl/libcurl.mk	2016-09-07 14:18:19 UTC (rev 7820)
+++ branches/1.0/package/libcurl/libcurl.mk	2016-09-07 16:13:58 UTC (rev 7821)
@@ -3,7 +3,7 @@
 # libcurl
 #
 #############################################################
-LIBCURL_VERSION = 7.50.1
+LIBCURL_VERSION = 7.50.2
 LIBCURL_SOURCE = curl-$(LIBCURL_VERSION).tar.gz
 LIBCURL_SITE = https://curl.haxx.se/download
 LIBCURL_INSTALL_STAGING = YES

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.