aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* | | | Merge pull request #20491 from dibdot/banIPDirk Brenken2023-02-18
|\ \ \ \ | | | | | | | | | | banip: release 0.8.0 (nft rewrite)
| * | | | banip: release 0.8.0 (nft rewrite)Dirk Brenken2023-02-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - complete rewrite of banIP to support nftables - all sets are handled in a separate nft table/namespace 'banIP' - for incoming blocking it uses the inet input hook, for outgoing blocking it uses the inet forward hook - full IPv4 and IPv6 support - supports nft atomic set loading - supports blocking by ASN numbers and by iso country codes - 42 preconfigured external feeds are available, plus local allow- and blocklist - supports local allow- and blocklist (IPv4, IPv6, CIDR notation or domain names) - auto-add the uplink subnet to the local allowlist - provides a small background log monitor to ban unsuccessful login attempts in real-time - the logterms for the log monitor service can be freely defined via regex - auto-add unsuccessful LuCI, nginx, Asterisk or ssh login attempts to the local blocklist - fast feed processing as they are handled in parallel as background jobs - per feed it can be defined whether the input chain or the forward chain should be blocked (default: both chains) - automatic blocklist backup & restore, the backups will be used in case of download errors or during startup - automatically selects one of the following download utilities with ssl support: aria2c, curl, uclient-fetch or wget - supports a 'allowlist only' mode, this option restricts internet access from/to a small number of secure websites/IPs - provides comprehensive runtime information - provides a detailed set report - provides a set search engine for certain IPs - feed parsing by fast & flexible regex rulesets - minimal status & error logging to syslog, enable debug logging to receive more output - procd based init system support (start/stop/restart/reload/status/report/search) - procd network interface trigger support - ability to add new banIP feeds on your own - add a readme with all available options/feeds to customize your installation to your needs - a new LuCI frontend will be available in due course Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | adblock: update 4.1.5-6Dirk Brenken2023-02-18
| |_|/ / |/| | | | | | | | | | | | | | | | | | | * adapted changed oisd downloads (again), fixed #20516 Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | kcptun: update to version 20230207Dengfeng Liu2023-02-17
| | | | | | | | | | | | | | | | | | | | | | | | add support for port-range dailer, port-range listener Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
* | | | podman: update 4.4.1Oskari Rauta2023-02-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | patch refreshed. Changes - Added the podman-systemd.unit man page, which can also be displayed using man quadlet (#17349). - Documented journald identifiers used in the journald backend for the podman events command. Bugfixes - Fixed a bug where the default handling of pids-limit was incorrect. - Fixed a bug where parallel calls to make docs crashed (#17322). - Fixed a regression in the podman kube play command where existing resources got mistakenly removed. Full list of changes: [Release notes](https://github.com/containers/podman/blob/main/RELEASE_NOTES.md) Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | cloudreve: Update to 3.7.1Tianling Shen2023-02-16
| |/ / |/| | | | | | | | | | | | | | Dropped architectures that are no longer supported by upstream. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | gg: Update to 0.2.18Tianling Shen2023-02-16
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | dnsproxy: Update to 0.47.0Tianling Shen2023-02-16
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | conmon: update to 2.1.6Oskari Rauta2023-02-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug fixes - Fix OOM watcher for cgroupv2 oom_kill events Misc - Use --detach instead of -d - ctrl: drop fifo perms to 0660 [Release notes](https://github.com/containers/conmon/releases/tag/v2.1.6) Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | irqbalance: Add upstream fix for AARCH64 irq name parsingHannu Nyman2023-02-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add upstream fix for AARCH64 irq name parsing. > On arm64 SoCs like TI's K3 SoC and few other SoCs, > IRQ names don't get parsed correct due to which they > end up being classified into wrong class. Fix this by > considering last token to contain IRQ name always. The fix seems to enable e.g. RT3200 to notice a few more interrupts and start balancing them. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | adblock: update 4.1.5-5Dirk Brenken2023-02-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * adapted changed oisd namings / download locations oisd_big (old: oisd_full), oisd_small (old: oisdb_basic) * added antipopads as new sources * removed broken energized source * fixed readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #20481 from ttytyper/hamlib-init-configFlorian Eckert2023-02-15
|\ \ \ | | | | | | | | hamlib: Added init script and config files
| * | | hamlib: Added newline at end of init script and configJesper Henriksen2023-02-13
| | | | | | | | | | | | | | | | Signed-off-by: Jesper Henriksen <mail-openwrt@jesper.io>
| * | | hamlib: Added init and config filesJesper Henriksen2023-02-12
| | | | | | | | | | | | | | | | Signed-off-by: Jesper Henriksen <mail-openwrt@jesper.io>
* | | | uvol: switch to /sys/class/ubiDaniel Golle2023-02-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of /sys/devices/virtual/ubi which will no longer be available in future kernels, switch to /sys/class/ubi. While at it fix unrelated arithmetic syntax error by guarding the affected expression to not run on an empty string. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | Merge pull request #20425 from autobakterie/flask_jinja_update_maintainerJosef Schlehofer2023-02-14
|\ \ \ \ | |_|_|/ |/| | | Flask, Jinja2: update maintainer
| * | | Jinja2: pass maintainership to Michal VasílekŠimon Bořek2023-02-14
| | | | | | | | | | | | | | | | Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
| * | | Flask: pass maintainership to Michal VasílekŠimon Bořek2023-02-14
| | | | | | | | | | | | | | | | Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
| * | | Jinja2: get rid of deprecated AUTORELEASEŠimon Bořek2023-02-14
| | | | | | | | | | | | | | | | Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
| * | | Flask: get rid of deprecated AUTORELEASEŠimon Bořek2023-02-14
|/ / / | | | | | | | | | Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
* / / restic: update to 0.15.1Tom Stöveken2023-02-12
|/ / | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Tom Stöveken <tom@naaa.de> Compile tested: SDK for OpenWrt 22.03.3 Run tested: x86/64 @ Intel(R) Celeron(R) CPU N3160 @ 1.60GHz, OpenWrt 22.03.3 Description: Updated to version 0.15.1 changed PKG_RELEASE:=2 due to deprecated value AUTORELEASE, squashed commits and then changed PKG_RELEASE:=1 because upgrading the whole main PKG_VERSION (the major version item) should reset this to 1 Signed-off-by: Tom Stöveken <tom@naaa.de>
* | python-websocket-client: update to 1.5.1Javier Marcet2023-02-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - 1.5.1 - Fix logic bug that can cause disconnects - 1.5.0 - Refactor and improve ping/pong logic to resolve several issues, including an infinite loop issue during reconnect - Fix issue where `skip_utf8_validation = True` is ignored - Fix issue where sslopt `is_ssl` is ignored - Downgrade "websocket connected" message from logging.warning to logging.info - Update github actions to newer versions (669fe1b) Signed-off-by: Javier Marcet <javier@marcet.info>
* | hamlib: update to 4.5.4Jesper Henriksen2023-02-12
|/ | | | Signed-off-by: Jesper Henriksen <mail-openwrt@jesper.io>
* gsocket: upstream update to 1.4.39Ralf Kaiser2023-02-11
| | | | Signed-off-by: Ralf Kaiser <skyper@thc.org>
* docker-compose: Update to version 2.16.0Javier Marcet2023-02-11
| | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* Merge pull request #20349 from turris-cz/unbound-1171Josef Schlehofer2023-02-10
|\ | | | | unbound: update to version 1.17.1
| * unbound: update to version 1.17.1Josef Schlehofer2023-02-10
| | | | | | | | | | | | | | - Refreshed one patch - Removed deprecated AUTORELEASE Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | sing-box: add new packageVan Waholtz2023-02-10
| | | | | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | v2ray-geodata: Update to latest versionTianling Shen2023-02-10
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | v2ray-core: Update to 5.3.0Tianling Shen2023-02-10
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | xray-core: Update to 1.7.5Tianling Shen2023-02-10
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | cloudflared: Update to 2023.2.1Tianling Shen2023-02-09
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | Merge pull request #20460 from mhei/php8-update-8.2.2Michael Heimpold2023-02-09
|\ \ | | | | | | php8: update to 8.2.2
| * | php8: update to 8.2.2Michael Heimpold2023-02-07
| | | | | | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | dnscrypt-proxy2: update to version 2.1.4Fabian Lipken2023-02-08
| | | | | | | | | | | | Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
* | | Merge pull request #20443 from commodo/stress-updatesAlexandru Ardelean2023-02-07
|\ \ \ | |/ / |/| | stress/stress-ng: bump versions
| * | stress: bump to version 1.0.7Alexandru Ardelean2023-02-06
| | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
| * | stress-ng: bump to version 0.15.03Alexandru Ardelean2023-02-06
| | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* | | Merge pull request #20451 from graysky2/htopEtienne Champetier2023-02-07
|\ \ \ | | | | | | | | htop: update to 3.2.2
| * | | htop: update to 3.2.2John Audia2023-02-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Build-tested: x86/64 Run-tested: bcm2711/RPi4B Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | Merge pull request #20442 from commodo/python-updates1Alexandru Ardelean2023-02-06
|\ \ \ \ | | | | | | | | | | python-{chardet,evdev}: bump versions
| * | | | python-evdev: bump to version 1.6.1Alexandru Ardelean2023-02-04
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
| * | | | python-chardet: bump to version 5.1.0Alexandru Ardelean2023-02-04
| | |/ / | |/| | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | Merge pull request #20444 from commodo/sudoAlexandru Ardelean2023-02-06
|\ \ \ \ | | | | | | | | | | sudo: bump to version 1.9.12p2
| * | | | sudo: bump to version 1.9.12p2Alexandru Ardelean2023-02-04
| |/ / / | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* | / / xl2tpd: bump to version 1.3.18Yousong Zhou2023-02-06
| |/ / |/| | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | bind: bump PKG_RELEASENoah Meyerhans2023-02-05
| | |
* | | bind: add option to enable GSSAPI supportStijn Tintel2023-02-05
| | | | | | | | | | | | | | | | | | | | | Samba4 running as Active Directory Domain Controller with the internal DNS backend requires the nsupdate binary with GSSAPI support. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | bind: bump release numberRucke Teg2023-02-05
| | | | | | | | | | | | Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
* | | bind: Fix ipv6 detection logicRucke Teg2023-02-05
| | | | | | | | | | | | | | | | | | | | | Bug was introduced in a7b770eec4370087a5ccd27887386dac9266214e and results in bind always stating with the `-4` flag. Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
Powered by cgit, Themed by Ted Yin.