aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
| * | | | | | | tor: disable man pages and html manual generationRui Salvaterra2020-10-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We don't need this on an embedded system. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
| * | | | | | | tor: add a basic variant, without relay/bridge supportRui Salvaterra2020-10-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If relay/bridge support isn't required, this variant is about 300 kiB smaller than the full tor daemon. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
| * | | | | | | tor: improve readability of the packages help textRui Salvaterra2020-10-28
| | |_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Whitespace before and after the description makes the package information much more obvious. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* | | | | | | Merge pull request #13678 from oldium/update-fwknopd-defaultsRosen Penev2020-11-01
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | fwknop: Use sensible defaults.
| * | | | | | | fwknop: Use sensible defaults.Oldřich Jedlička2020-10-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Change KEY/HMAC_KEY to __CHANGEME__, which is rejected by fwknopd during start-up. The value CHANGEME is used only by LuCI package luci-app-fwknopd - pull request for generating keys directly from LuCI has been created already. * Add sensible defaults for ENABLE_IPT_FORWARDING and ENABLE_NAT_DNS, which both are/were set by luci-app-fwknopd. Move the defaults here. Signed-off-by: Oldřich Jedlička <oldium.pro@gmail.com>
* | | | | | | | Merge pull request #13653 from FinnixB/znc-multiple-listenersRosen Penev2020-11-01
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | znc: Add support for many configurable listeners for znc
| * | | | | | | | znc: Add support for many configurable listenersPavel Demkovich2020-10-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Function add_listener called from /etc/init.d/znc, but not implemented Signed-off-by: Pavel Demkovich <finn@finnix.servebeer.com>
| * | | | | | | | znc: Add support for many configurable listeners for zncPavel Demkovich2020-10-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Function add_listener called from /etc/init.d/znc, but not implemented Signed-off-by: Pavel Demkovich <finn@finnix.servebeer.com>
* | | | | | | | | Merge pull request #13816 from mlichvar/chrony-improvementsRosen Penev2020-11-01
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | chrony: improve configuration and hotplug script
| * | | | | | | | | chrony: improve configurationMiroslav Lichvar2020-10-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Extend configuration of NTP sources in UCI: - Add nts option to enable NTS - Add disabled option to allow inactive sources Add nts section to UCI with: - rtccheck option to disable certificate time checks on systems that don't have an RTC to avoid the chicken-and-egg problem (it is less secure, but still should be better than no NTS at all) - systemcerts option to disable system certificates - trustedcerts option to specify path to trusted certificates Save NTS keys and cookies by default to avoid unnecessary NTS-KE sessions when restarted or switching back to an already used NTS source. Also, save the drift to stabilize the clock after chronyd restart. Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
| * | | | | | | | | chrony: improve hotplug scriptMiroslav Lichvar2020-10-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Use the chronyc onoffline command to update state of all sources per current routing configuration - Don't ignore the "ifupdate" action - Add NTP servers from DHCP for the interface that went up instead of the wan4+wan6 interfaces - Save the servers to files loaded by the sourcedir directive to not lose them when chronyd is restarted, and remove them when the interface goes down Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
| * | | | | | | | | chrony: rework loading of configurationMiroslav Lichvar2020-10-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of loading /etc/chrony/chrony.conf from the file generated from the chrony UCI configuration, use the confdir directive in the main config to load the generated file. This should make it obvious that chrony is configured in UCI and it can also be easily disabled. Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
* | | | | | | | | | kea: fix compilation with libcxxRosen Penev2020-10-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Boost headers try to include experimental/string_view when std is less than c++17. This does not work ith libcxx where this header is not present. Refreshed patches. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | | bind: update to version 9.16.8Josef Schlehofer2020-10-31
| |_|_|_|/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - DNS Flag Day 2020 (default EDNS buffer size changed from 4096 to 1232 bytes) -- Added patch, which should be part of the next release It fixes an issue while cross-compilation (I linked it in the commit message with issue link) Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | | | | Merge pull request #13806 from TDT-AG/pr/20201029-stunnelFlorian Eckert2020-10-30
|\ \ \ \ \ \ \ \ \ | |/ / / / / / / / |/| | | | | | | | stunnel: update version to 5.57
| * | | | | | | | stunnel: update version to 5.57Florian Eckert2020-10-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | | | | | xl2tpd: bump to version 1.3.16Yousong Zhou2020-10-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | | | | | nginx: adapt to changed ubus socket pathDaniel Golle2020-10-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | | | | lighttpd: add config for logrotateJan Pavlinec2020-10-29
|/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | / / / / / Add option for days until renewalJannis Pinter2020-10-29
| |_|/ / / / / |/| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jannis Pinter <jannis+openwrt@pinterjann.is>
* | | | | | | ifstat: import fixes from Debian packageMatthieu Baerts2020-10-27
| |_|_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Extracted from: http://deb.debian.org/debian/pool/main/i/ifstat/ifstat_1.1-8.1.diff.gz Note that I also created a new git repository with these fixes: https://github.com/matttbe/ifstat/ The original author of these modification is: Goswin von Brederlow <goswin-v-b@web.de> ChangeLog: * snmp.c: fix 2 pointer targets differ in signedness warnings * Adding upport for 64bit /proc/net/dev counters. * Clean up compiler warnings. More modifications are available in the patch from the Debian project but mostly related to the "debian" dir, man page and debug mode. Here I only took the modifications related to the .c and .h files. The most important fix is related to the support for 64bit counters in /proc/net/dev instead of displaying 0 after a while. Signed-off-by: Matthieu Baerts <matthieu.baerts@tessares.net>
* | | | | | knot: disable libnghttp2 autodetectionDaniel Salzman2020-10-27
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
* | | | | | Merge pull request #13752 from TDT-AG/pr/20201023-xinetdFlorian Eckert2020-10-27
|\ \ \ \ \ \ | | | | | | | | | | | | | | xinetd: some changes
| * | | | | | xinetd: update config sample to latest requirementsHelge Mader2020-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Helge Mader <ma@dev.tdt.de>
| * | | | | | xinetd: include additional (runtime) directory in configuration fileHelge Mader2020-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The additional directory is created and can be used e.g. for configurations which are created e.g. dynamically from an uci config. Signed-off-by: Helge Mader <ma@dev.tdt.de>
| * | | | | | xinetd: save configurations in /etc/xinetd.d on sysupgradeHelge Mader2020-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For applications writing their own xinetd configuration to the /etc/xinetd.d directory it would be necessary to save them (e.g. a user edits them manually) Signed-off-by: Helge Mader <ma@dev.tdt.de>
| * | | | | | xinetd: update PKG_RELEASE to 9Helge Mader2020-10-23
| | |_|/ / / | |/| | | | | | | | | | | | | | | | Signed-off-by: Helge Mader <ma@dev.tdt.de>
* | | | | | softethervpn: update to 4.34-9745Rosen Penev2020-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Several patch changes regarding to OpenSSL as this version does not compile under LibreSSL. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | transmission: remove variants and use libcurl's TLS libraryRosen Penev2020-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allows the Makefile to be cleaned up and to have fewer dependencies. There's no need for multiple TLS libraries to be installed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | Merge pull request #13768 from bmork/conserverRosen Penev2020-10-26
|\ \ \ \ \ \ | | | | | | | | | | | | | | conserver: update to version 8.2.6
| * | | | | | conserver: update to version 8.2.6Bjørn Mork2020-10-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | version 8.2.6 (October 19, 2020): - try and address license concerns with LICENSE.md - replace usleep with nanosleep (Rosen Penev <rosenp@gmail.com>) - console: Add 'k' option to exit on console-down (Mylène Josserand <mylene.josserand@collabora.com>) - Fix #48 - apply ipv4 CIDR access list when compiled with ipv6 support Signed-off-by: Bjørn Mork <bjorn@mork.no>
* | | | | | | nextdns: Update to version 1.8.8Olivier Poitrey2020-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | | | | knot: update to version 3.0.1Jan Hak2020-10-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | definition of PSELECT_COMPAT could be removed many years ago, is no longer needed Signed-off-by: Jan Hak <jan.hak@nic.cz>
* | | | | | | openconnect: allow specify --protocol from configMengyang Li2020-10-25
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | openconnect v8.10 supports 4 VPN protocols --protocol=anyconnect Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default) --protocol=nc Compatible with Juniper Network Connect --protocol=gp Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN --protocol=pulse Compatible with Pulse Connect Secure SSL VPN This patch allows user to specify protocol use the new "vpn_protocol" option and deprecate the old option "juniper" which seems to be missing in the current openconnect client. Signed-off-by: Mengyang Li <mayli.he@gmail.com>
* | | | | | libreswan: update to 4.1Lucian Cristian2020-10-25
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | | banip: Added packet logging feature. Resolved shellcheck warnings.Richard Gering2020-10-24
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Richard Gering <rg4github@dutchies.us>
* | | | | | ddns-scripts: update sitelutions urlFlorian Eckert2020-10-22
|/ / / / / | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | Merge pull request #13734 from Meano/fix-udpxyRosen Penev2020-10-21
|\ \ \ \ \ | | | | | | | | | | | | udpxy: fix error 'enable verbose' command flag in init script
| * | | | | udpxy: fix error 'enable verbose' command flag in init scriptMeano2020-10-21
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Meano <meano@foxmail.com>
* | | | | | Merge pull request #13183 from mrjoel/mrjoel/ddns-default-bindnetworkRosen Penev2020-10-21
|\ \ \ \ \ \ | | | | | | | | | | | | | | ddns-scripts: use ip_source as bind_network default
| * | | | | | ddns-scripts: use ip_source as bind_network defaultJoel Johnson2020-10-21
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: #13182 on https://github.com/openwrt/packages Signed-off-by: Joel Johnson <mrjoel@lixil.net>
* | | | | | Merge pull request #13169 from aaronjg/mwan3-owner-procdFlorian Eckert2020-10-21
|\ \ \ \ \ \ | |/ / / / / |/| | | | | mwan3: mwan3track via default routing table and use procd from mwan3track & mwan3rtmon
| * | | | | mwan3: Simplify default configuration, mostly use defaultsJames White2020-10-16
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: James White <james@jmwhite.co.uk>
| * | | | | mwan3: cleanup mwan3trackAaron Goodman2020-10-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - reduce duplicate logging code - simplify nping track code - simplify ping result parsing Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | | mwan3: add back support for iputils pingAaron Goodman2020-10-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With the new wrapper code, we can override the broken binding behavior of iputils ping v20101006. Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | | mwan3: add "use" function to mwan3 utilsAaron Goodman2020-10-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use "mwan3 use" to wrap a command with interface bindings so that you can avoid the mwan3 rules and test behavior on a specific interface. eg "mwan3 use wan ping -c1 1.1.1.1" Additional binding arguments to the command will have their system calls intercepted and ignored. eg "mwan3 use wan ping -c1 -I tun0 1.1.1.1" will use the device associated with "wan", rather than "tun0". Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | | mwan3: use helper library for mwan3trackAaron Goodman2020-10-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Rather than using a special mwan3 user to manage mwan3track's tracking packets, this commit implements a small helper library to bind to device and to set a fwmark so that the tracking packets can be routed out of the correct interface. This provides a consistent method for binding to a device rather than relying on various packages potentially buggy implementations. For example: #8139 and #12836 This helper issue also allows for more tracking methods to be added even if they do not have a command line option to bind to device, such as iperf3 (eg #13050). Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | | mwan3: give warning if ip of incorrect family specified in a ruleAaron Goodman2020-10-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | also use global IPv4_REGEX environment variable as consistent IPv4 regex Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | | mwan3: use procd for mwan3rtmon and mwan3trackAaron Goodman2020-10-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | start all mwan3mon and mwan3track instances on mwan3 start if an interface is down when mwan3track starts, it waits for a signal from the hotplug script to start procd can then handle stopping all of the scripts when mwan3 is halted Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | | mwan3: fix bug when one interface is a prefix of anotherAaron Goodman2020-10-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | correctly terminate interface status checks with new lines so that interface status does not get confused when one interface is a prefix of another interface. Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
Powered by cgit, Themed by Ted Yin.