aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* Merge pull request #16194 from miska/snort3-masterJosef Schlehofer2021-08-03
|\ | | | | net/snort3: Include default configs and snort2lua
| * net/snort3: Include default configs and snort2luaMichal Hrusecky2021-07-22
| | | | | | | | | | | | | | | | Include default configuration files to have something to start from. Also include snort2lua to help convert snort2 rules to snort3 to also help with bootstrapping the configuration. Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
* | Merge pull request #16280 from 1715173329/dnsproxyJosef Schlehofer2021-08-03
|\ \ | | | | | | dnsproxy: Update to 0.39.1
| * | dnsproxy: Update to 0.39.1Tianling Shen2021-08-02
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | Merge pull request #16255 from stangri/master-curlStan Grishin2021-08-02
|\ \ \ | | | | | | | | curl: enable HTTP/2 support by default
| * | | curl: enable HTTP/2 support by defaultStan Grishin2021-07-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Description: Lack of support of HTTP/2 by default starts to hurt, for example with https-dns-proxy package, some DoH resolvers (like mullvad) no longer support HTTP/1 and are not usable. This enables HTTP/2 support by default (which would bring ~68Kb libnghttp). Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | | pdns: Update to 4.5.1Wout Bertrums2021-08-02
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | TARGET_CXX is added, because PowerDNS now uses C++17. pdns.conf-dist is updated to the latest version shipped by PowerDNS. 010-time_t-check.patch, which is also used in pdns-recursor and dnsdist, is added to patch out the check for 64-bit time_t, because OpenWrt still supports 32-bit devices. 100-pdns-disable-pdns.conf-dist.patch is refreshed. Signed-off-by: Wout Bertrums <wout@wbnet.eu>
* | | simple-adblock: update to 1.8.7-6Stan Grishin2021-08-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * supports newer shellcheck * restore EXTRA_COMMANDS compatibility with 19.07 * move status display from various functions to status_service * bugfix: status_service line break after output * minor arythmetic fix in status_service Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | Merge pull request #16252 from stangri/master-https-dns-proxyStan Grishin2021-08-01
|\ \ \ | | | | | | | | https-dns-proxy: update to 2021-07-29-1
| * | | https-dns-proxy: update to 2021-07-29-01Stan Grishin2021-07-30
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update binary to the latest commit (2021-07-29) to fix #16222 and #16239 * add hotplug.d/iface file and update Makefile to install it * use Cloudflare's and Google's bootstrap DNS if bootstrap DNS is missing * minor improvements in append_bool function * add append_counter function for verbosity setting * add append_bootstrap function (and supporting functions) to parse/sanitize bootstrap setting * move firewall array from 'main' instance to the first proxy instance * delete useless 'main' instace Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | transmission: apply DSCP to UDP sockets tooRui Salvaterra2021-08-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | Backport a pending patch in order to DSCP-mark UDP traffic. This allows for correct binning of traffic in diffserv-capable routers. Additionally, remove Rosen Penev from the maintainers list, as per his request. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* | | opentracker: update to git HEADDaniel Golle2021-08-01
| | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | gateway-go: update to 0.2.0Yu Fang2021-07-31
| | | | | | | | | | | | Signed-off-by: Yu Fang <yu@iotserv.com>
* | | nextdns: Update to version 1.35.0Olivier Poitrey2021-07-30
|/ / | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | Merge pull request #16187 from neheb/FuRosen Penev2021-07-29
|\ \ | | | | | | sshfs: update to 3.7.2
| * | sshfs: update to 3.7.2Rosen Penev2021-07-21
| | | | | | | | | | | | | | | | | | Switch to AUTORELEASE for simplicity. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #16078 from ja-pa/fix-emailRosen Penev2021-07-29
|\ \ \ | | | | | | | | treewide: change email address in PKG_MAINTAINER
| * | | treewide: change emailJan Pavlinec2021-07-29
| | | | | | | | | | | | | | | | | | | | | | | | Change from jan.pavlinec@nic.cz to jan.pavlinec1@gmail.com Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | openvswitch: add SSL supportStijn Tintel2021-07-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Open vSwitch supports SSL to connect to an OpenFlow controller. This is recommended for security. Expand the UCI ovs config section to allow configuring SSL CA, certificate and private key. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | openvswitch: add missing basescript variableStijn Tintel2021-07-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The Open vSwitch init script does not set USE_PROCD=1. Instead, it defines most of the functions and variables that would be set when USE_PROCD is set to 1, but with some minor changes. The basescript variable however, which is used when calling procd_open_service and procd_kill, is not set. As a result, basename of the contents of the initscript variable is used as the service name. As the service is automatically started via its symlink in /etc/rc.d, S15openvswitch, the service name is S15openvswitch. Set the basescript variable so that the service name is openvswitch. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | openvswitch: support setting OpenFlow datapath IDStijn Tintel2021-07-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | By default, Open vSwitch will generate the OpenFlow datapath ID of a bridge based on the MAC address of one of its ports. Due to this, it's possible that the datapath ID changes when new ports are added. When the datapath ID changes, Open vSwitch disconnects from the controller, as there is no way to notify the controller that the datapath ID has changed. Add an option to set the datapath ID so that the above situation can be avoided. The option takes either exactly 16 hex characters, or when prefixed with 0x, between 1 and 16 hex characters. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | openvswitch: check correct config symbolStijn Tintel2021-07-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The config symbol is named CONFIG_OPENVSWITCH_WITH_LIBUNBOUND, so check for that instead of the non-existent CONFIG_OPENVSWITCH_WITH_UNBOUND. Fixes: 45c8cc9d8a7b ("openvswitch: make libunbound optional") Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | dawn: update to 2021-07-27Nick Hainke2021-07-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | 276ca16 msghandler: fix rrm array parsing 1e4871d datastorage: debug rrm capabilities Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | irssi: add test.shJosef Schlehofer2021-07-27
| | | | | | | | | | | | | | | | Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | irssi: update to 1.2.3Rosen Penev2021-07-27
| | | | | | | | | | | | | | | | | | | | | | | | Switch to AUTORELEASE for simplicity. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | Merge pull request #16211 from stintel/ovs-libunbound-optionalStijn Tintel2021-07-27
|\ \ \ \ | | | | | | | | | | openvswitch: make libunbound optional
| * | | | openvswitch: make libunbound optionalStijn Tintel2021-07-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Installing openvswitch on an x86/64 snapshot image pulls in a bunch of dependencies, good for a total size of 3648406 byte. Disabling libunbound reduces that with 559941 byte, for a total of 3088465 byte. This is quite a big reduction for a small tradeoff: without libunbound, hostnames can not be used to specify OpenFlow managers or controllers. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | vpn-policy-routing: update to 0.3.5-1Stan Grishin2021-07-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | support for 21.02.0-rc2 and up support for reloading a single interface on ifup/ifupdate rename config file updated shellcheck compatibility remove obsolete create/remove_lock interface processing optimizations to speed up reloads drop dependency on curl in user scripts uniform styling of functions Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | | | Merge pull request #16226 from dibdot/masterDirk Brenken2021-07-26
|\ \ \ \ \ | |/ / / / |/| | | | adblock: bugfix 4.1.3-3
| * | | | adblock: bugfix 4.1.3-3Dirk Brenken2021-07-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix regex to prepare google safesearch domains Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | Merge pull request #16163 from stintel/openvswitchStijn Tintel2021-07-26
|\ \ \ \ \ | | | | | | | | | | | | openvswitch: allow complex port configurations
| * | | | | openvswitch: allow complex port configurationsStijn Tintel2021-07-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The current way to add ports to an Open vSwitch bridge does not allow complex port configurations. Use a dedicated uci config section per port instead of the current port:type syntax. This way we can easily support more features like setting the VLAN tag or the OpenFlow port number. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
| * | | | | openvswitch: only init bridges when (re)startingStijn Tintel2021-07-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Calling the ovs_bridge_init function when stopping the service will result in ovs-vsctl being called after ovsdb-server has been shut down. This causes the following error: ovs-vsctl: unix:/var/run/openvswitch/db.sock: database connection failed (No such file or directory) Calling the ovs_bridge_init function when requesting the service status has no added value. Only call ovs_bridge_init during start or restart to fix this. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
| * | | | | openvswitch: refresh patchesStijn Tintel2021-07-23
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | CI run fails due to dirty patches, so refresh them. Fixes: f4f1a25e80f5 ("openvswitch: bump to version 2.15.0") Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | travelmate: update to 2.0.4Dirk Brenken2021-07-25
| |/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * code cleanup * add auto login script for Julianahoeve beach resort (NL) * add auto login script for Vodafone hotspots (DE) * add auto login script for telekom hotspots (DE) * enhance captive portal detection to support html redirects as well * change default captive portal detection url to 'detectportal.firefox.com' Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | Merge pull request #16198 from 1715173329/dnsproxyRosen Penev2021-07-23
|\ \ \ \ | | | | | | | | | | dnsproxy: Update to 0.39.0 and add init script
| * | | | dnsproxy: add basic init scriptTianling Shen2021-07-23
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
| * | | | dnsproxy: Update to 0.39.0Tianling Shen2021-07-23
| |/ / / | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | hs20: set PKG_SOURCE_SUBDIRDaniel Golle2021-07-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Building without the mirror-tarballs fails to PKG_SOURCE_SUBDIR not matching the hostapd source subdir name. Fix that. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | Merge pull request #16170 from neheb/IperfRosen Penev2021-07-23
|\ \ \ \ | | | | | | | | | | iperf: update to 2.1.3
| * | | | iperf: update to 2.1.3Rosen Penev2021-07-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Switch to AUTORELEASE for simplicity. Remove upstreamed patches. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #16182 from neheb/lkRosen Penev2021-07-23
|\ \ \ \ \ | |_|/ / / |/| | | | lksctp-tools: update to 1.0.19
| * | | | lksctp-tools: update to 1.0.19Rosen Penev2021-07-21
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | Switch to AUTORELEASE for simplicity. Remove upstreamed patch. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | Merge pull request #16188 from neheb/UaRosen Penev2021-07-21
|\ \ \ \ | | | | | | | | | | uacme: update to 1.7.1
| * | | | uacme: update to 1.7.1Rosen Penev2021-07-21
| |/ / / | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* / / / clamav: update to 0.103.3Rosen Penev2021-07-21
|/ / / | | | | | | | | | | | | | | | Switch to AUTORELEASE for simplicity. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | Merge pull request #16122 from zhoreeq/bump_0_4_0Rosen Penev2021-07-20
|\ \ \ | | | | | | | | yggdrasil: bump to 0.4.0
| * | | yggdrasil: bump to 0.4.0George Iv2021-07-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Bump yggdrasil-go version to v0.4.0 - Update ygguci tool for compatibility with the new yggdrasil-go version - Yggdrasil's config file is now generated in a separate command before running the daemon Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
* | | | Merge pull request #16164 from stangri/master-vpnbypassRosen Penev2021-07-20
|\ \ \ \ | |_|/ / |/| | | vpnbypass: update to 1.3.2-1
| * | | vpnbypass: updates to 1.3.2-1Stan Grishin2021-07-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bugfix: domain names bypass rename config file update Makefile updated README link updated shellcheck compatibility support for 21.02.0-rc2 and later updated code for interface triggers add newline to test.sh Signed-off-by: Stan Grishin <stangri@melmac.net>
Powered by cgit, Themed by Ted Yin.