Subversion Repositories ALCASAR

Rev

Go to most recent revision | Hide changed files | Details | Compare with Previous | Blame

Filtering Options

Rev Age Author Path Log message Diff Changes
2226 2604 d 19 h richard /repos/alcasar/trunk/ - improve update process
- translation & HTML fixes in ACC
- remove unused folder & files		  
/web/acc/manager/lib/lang
/scripts/alcasar-uninstall.sh
/scripts/alcasar-urpmi.sh
/web/acc/manager/htdocs/user_finger.php
/web/acc/manager/htdocs/user_new.php
/web/acc/manager/htdocs/user_new2.php
/web/acc/manager/lib/langues.php
/web/acc/manager/lib/sql/create_user.php
/web/acc/manager/lib/sql/delete_user.php
/web/acc/menu.php
2224 2604 d 22 h tom.houdayer /repos/alcasar/trunk/scripts/ Revert alcasar-iptables.sh from last commit (added by mistake)  
/scripts/alcasar-iptables.sh
2223 2604 d 22 h tom.houdayer /repos/alcasar/trunk/scripts/ Fix ALCASAR scripts shebang and line endings (UNIX format)  
/scripts/alcasar-bl.sh
/scripts/alcasar-conf.sh
/scripts/alcasar-dhcp.sh
/scripts/alcasar-dns-local.sh
/scripts/alcasar-https.sh
/scripts/alcasar-importcert.sh
/scripts/alcasar-iptables.sh
/scripts/alcasar-logout.sh
/scripts/alcasar-profil.sh
/scripts/alcasar-uninstall.sh
/scripts/alcasar-url_filter_bl.sh
/scripts/alcasar-url_filter_wl.sh
2221 2605 d 23 h richard /repos/alcasar/trunk/scripts/ - Bugfix in uninstall process
- don't install more recent kernel than the ALCASAR one		  
/scripts/alcasar-uninstall.sh
/scripts/alcasar-urpmi.sh
2213 2610 d 15 h richard /repos/alcasar/trunk/ - Don't display vga=791 on VM
- prepare the 3.1.1 version		  
/alcasar.sh
/readme.txt
/scripts/alcasar-iptables.sh
2212 2610 d 19 h richard /repos/alcasar/trunk/  
/CHANGELOG
/scripts/alcasar-uninstall.sh
2211 2610 d 20 h richard /repos/alcasar/trunk/ - Adapt "msec" to ALCASAR architecture  
/alcasar.sh
/scripts/alcasar-uninstall.sh
2209 2612 d 18 h tom.houdayer /repos/alcasar/trunk/scripts/ Improve the activity report:
- Fix titles level
- Get ACC access from file instead of web server
- Fix fail2ban date filter (awk command)
- Add a row when table is empty for "ACC access", "Global traffic" & "fail2ban"		  
/scripts/alcasar-activity_report.sh
2206 2612 d 18 h richard /repos/alcasar/trunk/ - prepare the scripts to allow remote update of ALCASAR (via SSH). The finality is to be able to update via ACC (great!)  
/alcasar.sh
/scripts/alcasar-uninstall.sh
2202 2612 d 23 h richard /repos/alcasar/trunk/  
/alcasar.sh
/scripts/alcasar-urpmi.sh
2193 2617 d 15 h richard /repos/alcasar/trunk/ Some adjustments with custom blacklist management  
/scripts/alcasar-bl.sh
/web/acc/admin/bl_filter.php
2192 2617 d 17 h richard /repos/alcasar/trunk/ - improve managment of custom Blacklist/Whitelist files  
/scripts/alcasar-nf.sh
/CHANGELOG
/alcasar.sh
/scripts/alcasar-bl.sh
/scripts/alcasar-uninstall.sh
/scripts/alcasar-urpmi.sh
/web/acc/admin/bl_filter.php
2190 2620 d 15 h tom.houdayer /repos/alcasar/trunk/ Add ACC access, Global traffic and Fail2Ban bans to activity report.  
/CHANGELOG
/scripts/alcasar-activity_report.sh
2189 2620 d 15 h tom.houdayer /repos/alcasar/trunk/scripts/ Remove "Authorized connections" chart (which show disconnections type) in activity report.  
/scripts/alcasar-activity_report.sh
2187 2621 d 14 h richard /repos/alcasar/trunk/scripts/ - bug : import custom domain BL  
/scripts/alcasar-bl.sh
/scripts/alcasar-iptables.sh
2184 2622 d 19 h richard /repos/alcasar/trunk/ uamallowed domain works again  
/CHANGELOG
/conf/etc/alcasar-services
/scripts/alcasar-condown.sh
/scripts/alcasar-conup.sh
/scripts/alcasar-iptables.sh
/web/acc/admin/protocols_filter.php
/web/intercept.php
2183 2623 d 14 h richard /repos/alcasar/trunk/scripts/ Commentaires  
/scripts/alcasar-conup.sh
2175 2624 d 16 h richard /repos/alcasar/trunk/ Prise en compte immédiate des changements de type "uamdomain"  
/alcasar.sh
/scripts/alcasar-file-clean.sh
/web/acc/manager/auth_exceptions.php
2171 2627 d 19 h tom.houdayer /repos/alcasar/trunk/ Remove ALCASAR version visible in the user part.  
/CHANGELOG
/alcasar.sh
/scripts/alcasar-conf.sh
/scripts/alcasar-version.sh
/web/acc/menu.php
/web/acc/phpsysinfo/includes/xml/portail.php
2165 2642 d 14 h richard /repos/alcasar/trunk/scripts/ kernel 4.4.59  
/scripts/alcasar-urpmi.sh
2157 2644 d 15 h franck /repos/alcasar/trunk/scripts/ script de deconnexion des equipements  
/scripts/alcasar-watchdog-hl.sh
2153 2652 d 16 h richard /repos/alcasar/trunk/ kernel 4.4.55 (LTS)  
/rpms/x86_64/ipt-netflow-2.2-8.mga5.x86_64.rpm
/rpms/x86_64/ipt-netflow-2.2-7.mga5.x86_64.rpm
/rpms/ipt-netflow-2.2.spec
/scripts/alcasar-urpmi.sh
/web/acc/alcasar-3.1-presentation-en.pdf
/web/acc/alcasar-3.1-presentation-fr.pdf
2141 2659 d 4 h richard /repos/alcasar/trunk/scripts/ Warning ...  
/scripts/alcasar-activity_report.sh
2140 2659 d 4 h richard /repos/alcasar/trunk/scripts/ Bug lors de la mise à jour (duplication @MAC)  
/scripts/alcasar-conf.sh
2139 2660 d 16 h richard /repos/alcasar/trunk/scripts/  
/scripts/alcasar-activity_report.sh
2138 2661 d 18 h richard /repos/alcasar/trunk/ - le rapport d'activité hebdomadaire se situe maintenant dans "sauvegarde"
- mise à jour de la blacklist		  
/web/acc/manager/activity_report/index.php
/alcasar.sh
/blacklist/blacklist-MD5SUM.lst
/blacklist/blacklists.tar.gz
/scripts/alcasar-activity_report.sh
/web/acc/backup/sauvegarde.php
/web/acc/manager/activity_report/models/Chart.report.js
/web/acc/manager/auth_exceptions.php
/web/acc/stat.php
2131 2675 d 21 h richard /repos/alcasar/trunk/ kernel 4.4.50  
/rpms/i586/ipt-netflow-2.2-7.mga5.i586.rpm
/rpms/x86_64/ipt-netflow-2.2-7.mga5.x86_64.rpm
/rpms/i586/ipt-netflow-2.2-6.mga5.i586.rpm
/rpms/x86_64/ipt-netflow-2.2-6.mga5.x86_64.rpm
/rpms/ipt-netflow-2.2.spec
/scripts/alcasar-urpmi.sh
2117 2720 d 20 h franck /repos/alcasar/trunk/scripts/ intègre le changement de réseau ou d'@MAC  
/scripts/alcasar-conf.sh
2113 2730 d 14 h richard /repos/alcasar/trunk/ Ticket en arabe. Il reste à voir les caractères en PDF!!!  
/scripts/alcasar-watchdog.sh
/web/acc/manager/htdocs/user_new.php
/web/acc/manager/lib/langues_imp.php
2109 2730 d 21 h richard /repos/alcasar/trunk/scripts/ kernel 4.4.39 (les rpm suivront)  
/scripts/alcasar-rpm-download.sh
/scripts/alcasar-urpmi.sh
2108 2733 d 4 h richard /repos/alcasar/trunk/ - watchdog : Bascule sur système de fichier virtuel (évite les accès disque)
- watchdog : retrait de l'adresse IP d'un utilisateur déconnecté		  
/scripts/alcasar-watchdog.sh
/web/status.php
/web/still_connected.php
2107 2733 d 14 h raphael.pion /repos/alcasar/trunk/scripts/ # We disconnect inactive users (its means that status.php has been closed)
# Each user inform about his connectivity by filling in /tmp/current_users.txt his own @IP		  
/scripts/alcasar-watchdog.sh
2106 2733 d 18 h richard /repos/alcasar/trunk/scripts/ commentaire avant modif  
/scripts/alcasar-watchdog.sh
2101 2750 d 13 h richard /repos/alcasar/trunk/ - kernel 4.4.36 (64b only)
- add "bc" rpm (need for the reporting processes)		  
/rpms/coova-chilli-1.4.spec
/rpms/coova-chilli-1.4.tar.gz
/rpms/x86_64/coova-chilli-1.4-1.mga5.x86_64.rpm
/rpms/x86_64/ipt-netflow-2.2-5.mga5.x86_64.rpm
/rpms/coova-chilli-1.3.2.spec
/rpms/coova-chilli-1.3.2.tar.gz
/rpms/x86_64/coova-chilli-1.3.2-2.mga5.x86_64.rpm
/rpms/x86_64/ipt-netflow-2.2-4.mga5.x86_64.rpm
/rpms/ipt-netflow-2.2.spec
/rpms/rpm-build-howto
/scripts/alcasar-rpm-download.sh
/scripts/alcasar-urpmi.sh
2099 2753 d 9 h raphael.pion /repos/alcasar/trunk/ Amélioration de la synthaxe des noms de domaines importés depuis un fichier
Suppression de la fonction max_tdl() dans le code PHP car inutilisée		  
/scripts/alcasar-bl.sh
/web/acc/admin/bl_filter.php
/web/acc/admin/wl_filter.php
2094 2753 d 12 h raphael.pion /repos/alcasar/trunk/scripts/ Correction macup/macdown :
Lecture de filter-id dans la BDD. Placement de l'utilisateur dans l'ipset configuré lors de l'édition de l'utilisateur (ou plutot l'@MAC de équipement réseau)

Remarque :
lorsque l'équipement est autorisé "a chaud" depuis la page PHP activity.php, il se place directement dans l'ipset 'not_filtered' et proto_0 (pas de filtrage de protocole). C'est le résultat de la commande "/usr/sbin/chilli_query authorize @MAC"		  
/scripts/alcasar-macdown.sh
/scripts/alcasar-macup.sh
2090 2757 d 13 h richard /repos/alcasar/trunk/ Fin de traduction chinoise  
/scripts/alcasar-macdown.sh
/web/index.php
2088 2758 d 6 h raphael.pion /repos/alcasar/trunk/ Les scripts 'macup' et 'macdown' sont appelés par coovachilli lors du DHCP up et down (release).
Depuis la version 3.1 de ALCASAR, le système d'interception a changé. On doit traiter les authorisations par adresse MAC en amont ainsi que leur déconnection du réseau.

Pour une adresse mac authorisée, nous stockons sont @IP dans l'ipset 'not_filtered'. Elle sera retiré de cet ipset lors du DHCP down		  
/scripts/alcasar-macdown.sh
/scripts/alcasar-macup.sh
/alcasar.sh
2079 2768 d 21 h raphael.pion /repos/alcasar/trunk/scripts/ Génération des journaux d'imputabilités (inversion des colonnes upload <-> download)
Ajout de commentaires		  
/scripts/alcasar-condown.sh
/scripts/alcasar-conup.sh
/scripts/alcasar-generate_log.sh
2076 2770 d 21 h franck /repos/alcasar/trunk/scripts/ Permet d'extraire les certificats d'unserveur pour l'intégrer dans un autre ou dans une sauvegarde  
/scripts/alcasar-certificates.sh