| Commit message (Collapse) | Author | Age |
|
|
|
| |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
|
|
|
| |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
|\
| |
| | |
adblock: update 1.1.11
|
| |
| |
| |
| |
| |
| |
| | |
* fix changed winspy source url in default config
* fix adblock counters in config
* cosmetics
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
| |
| |
| |
| |
| |
| |
| |
| | |
Fixes:
CVE-2016-2315
CVE-2016-2324
Signed-off-by: Peter Wagner <tripolar@gmx.at>
|
|\|
| |
| | |
adblock: update 1.1.10
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* automatic AP mode detection (change nullip address accordingly)
* (de-)compress backups on the fly
* remove hardcoded path for logger
* documentation update
* change maintainer email address
* cosmetics
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
| |
| |
| |
| | |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
|\ \
| | |
| | | |
nginx: change start level to 80
|
| | |
| | |
| | |
| | | |
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Felix Fietkau <nbd@nbd.name>
|
|/ /
| |
| |
| | |
Signed-off-by: Dov Murik <dmurik@us.ibm.com>
|
| |
| |
| |
| | |
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
|
|\ \
| | |
| | | |
Update liburcu, add libedit and update knot
|
| | |
| | |
| | |
| | | |
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
|
| | |
| | |
| | |
| | | |
Signed-off-by: heil <heil@terminal-consulting.de>
|
|\ \ \
| | | |
| | | | |
nginx: upstep to 1.10.0, add Lua module, footprint optimizations
|
| | | |
| | | |
| | | |
| | | | |
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
|
|\ \ \ \
| | |_|/
| |/| | |
adblock: update 1.1.2
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
* remove hardcoded paths for system tools like iptables, uci & fetch
(wget)
* support openwrt & lede spin-off
* cosmetics & cleanups
Signed-off-by: Dirk Brenken <openwrt@brenken.org>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
- add DNS lookup support for "drill" and "khost" (Knot DNS) #2637
- new service nsupdate.info (IPv4 and IPv6) #2433
- new services dyndnss.net, dyns.net (IPv4 only)
- new services dnshome.de, goip.de, myonlineportal.net (IPv4 and IPv6)
Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
|
| |_|/
|/| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* push gnurl, gnutls and libmicrohttpd dependencies down to modules
* use standard UID/GID for gnunet (958/958)
* use GID adjecent (452) to dnsmasq (453) for gnunetdns to allow
using the owner match with a range of GIDs (452-452)
* package new gnunet-social pub/sub CLI tool
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Fixes the following CVEs:
Bug 3020 / CVE-2016-1551: Refclock impersonation vulnerability, AKA: refclock-peering
Reported by Matt Street and others of Cisco ASIG
Bug 3012 / CVE-2016-1549: Sybil vulnerability: ephemeral association attack, AKA: ntp-sybil - MITIGATION ONLY
Reported by Matthew Van Gundy of Cisco ASIG
Bug 3011 / CVE-2016-2516: Duplicate IPs on unconfig directives will cause an assertion botch
Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
Bug 3010 / CVE-2016-2517: Remote configuration trustedkey/requestkey values are not properly validated
Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
Bug 3009 / CVE-2016-2518: Crafted addpeer with hmode > 7 causes array wraparound with MATCH_ASSOC
Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
Bug 3008 / CVE-2016-2519: ctl_getitem() return value not always checked
Reported by Yihan Lian of the Cloud Security Team, Qihoo 360
Bug 3007 / CVE-2016-1547: Validate crypto-NAKs, AKA: nak-dos
Reported by Stephen Gray and Matthew Van Gundy of Cisco ASIG
Bug 2978 / CVE-2016-1548: Interleave-pivot - MITIGATION ONLY
Reported by Miroslav Lichvar of RedHat and separately by Jonathan Gardner of Cisco ASIG
Bug 2952 / CVE-2015-7704: KoD fix: peer associations were broken by the fix for NtpBug2901, AKA: Symmetric active/passive mode is broken
Reported by Michael Tatarinov, NTP Project Developer Volunteer
Bug 2945 / Bug 2901 / CVE-2015-8138: Zero Origin Timestamp Bypass, AKA: Additional KoD Checks
Reported by Jonathan Gardner of Cisco ASIG
Bug 2879 / CVE-2016-1550: Improve NTP security against buffer comparison timing attacks, authdecrypt-timing, AKA: authdecrypt-timing
Reported independently by Loganaden Velvindron, and Matthew Van Gundy and Stephen Gray of Cisco ASIG.
Signed-off-by: Peter Wagner <tripolar@gmx.at>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
OpenWrt offers a special 'prelocal' routing table at priority 0.
Use it, so local-to-local DNS traffic also gets redirected properly.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Anthony Brown <anthony@found-it.net>
|
|\ \ \
| | | |
| | | | |
tor: remove tor-fw-helper
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
The "internal pure-C" tor-fw-helper was removed in 0.2.7.5. This removes
the tor-fw-helper package and references to its dependencies.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
|
|\ \ \ \
| | | | |
| | | | | |
net/vpnc: Add option to prevent retry on authentication failure
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
On some systems too many retries with authentication failure results
in IP or username being locked out, so add option to prevent retries
in the event of authentication failure
Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
fwknop Makefile had two conffiles sections. Combine them.
Remove also the whitespace from conffiles section (see #2652)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
The conffiles definition in Makefile should not contain leading whitespace.
Remove whitespace from Makefile of motion, dnscrypt-proxy and sstp-client.
Reference to discussion at #2652
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Closes #2652
Signed-off-by: Martin Rowe <martin.p.rowe@gmail.com>
|
|\ \ \ \ \
| | |_|/ /
| |/| | | |
adblock: update to 1.1.1
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
* discard uncommitted uci changes in case of processing errors
* init script (stop action) now removes all 'adb_src_count' &
'adb_src_timestamp' entries in config
* updated documentation
Signed-off-by: Dirk Brenken <openwrt@brenken.org>
|
| | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
|\ \ \ \ \
| | | | | |
| | | | | | |
ddns-scripts: add IPv6 config for duckdns.org
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Joel Johnson <mrjoel@lixil.net>
|
|\ \ \ \ \ \
| | | | | | |
| | | | | | | |
p910nd: Convert p910nd init script to procd
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Signed-off-by: Maximilian Mehnert <maximilian.mehnert@gmx.de>
[pkerling@casix.org: increase PKG_RELEASE version]
Signed-off-by: Philipp Kerling <pkerling@casix.org>
|
|\ \ \ \ \ \ \
| | |_|/ / / /
| |/| | | | /
| |_|_|_|_|/
|/| | | | | |
adblock: release 1.1.0
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
* support more router modes, as long as the firewall and the DNS server
are enabled
* new source sites can be added & changed via awk ruleset in uci config
* source domain count, last update time & overall count will be stored
in uci config
* added 3 new source sites:
ransomware tracker
rolist/easylist
winspy
* switch to minimal inline base64 encoded 1×1 GIF for pixel server
(separate png image no longer needed)
* simplified uci parser
* source download & domain sort optimization
* add whitelist parser with wildcard support
* reduced code size & various cleanups
* updated documentation
Signed-off-by: Dirk Brenken <openwrt@brenken.org>
|
|\ \ \ \ \ \
| |_|_|/ / /
|/| | | | | |
add package for ncp (https://www.fefe.de/ncp)
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Andreas Shimokawa <shimokawa@fsfe.org>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Create directory which was accidentally left-out during the previous
commit adding the proto handler.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
|\ \ \ \ \ \
| |/ / / / /
|/| | | | | |
davfs2: updated to 1.5.4
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Federico Di Marco <fededim@gmail.com>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
|