aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* Merge pull request #8512 from mwarning/strongswanStijn Tintel2019-03-27
|\ | | | | strongswan: collapse menu items
| * strongswan: collapse menu itemsMoritz Warning2019-03-27
| | | | | | | | Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | mosquitto: bump to v1.5.8Karl Palsson2019-03-27
| | | | | | | | | | | | | | | | | | | | | | Full changelog available at: https://github.com/eclipse/mosquitto/blob/v1.5.8/ChangeLog.txt This is a bugfix release. Of likely note to OpenWrt is a bug affecting missing messages on bridges since 1.5.4: https://github.com/eclipse/mosquitto/issues/1174 Signed-off-by: Karl Palsson <karlp@etactica.com>
* | Merge pull request #8319 from brianjmurrell/shorewall-iface-updateHannu Nyman2019-03-27
|\ \ | | | | | | Shorewall: start and enable interfaces all in hotplug
| * | shorewall: Update PKG_RELEASEBrian J. Murrell2019-03-20
| | | | | | | | | | | | Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
| * | Shorewall: start and enable interfaces all in hotplugBrian J. Murrell2019-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Using shorewall-lite {en|dis}able instead of completely restarting Shorewall is much more efficient. But it also makes sense to move the starting of Shorewall from init to an interface hotplug event. The "lan" interface should be a good indicator that networking it ready. Besides, Shorewall won't start until br-lan is available. Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
* | | Merge pull request #8496 from ja-pa/ddns-scripts-fixDirk Brenken2019-03-27
|\ \ \ | |_|/ |/| | ddns-scripts: add hsts-file parameter to wget call
| * | ddns-scripts: add hsts-file parameter to wget callJan Pavlinec2019-03-25
| | | | | | | | | | | | | | | | | | | | | Note: this should prevent wget to writing to /root/.wget-hsts which can lead to flash memory degradation. Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | Merge pull request #8508 from teslamint/patch-1Hannu Nyman2019-03-27
|\ \ \ | | | | | | | | coova-chilli: fix build error
| * | | coova-chilli: fix build errorJaehoon You2019-03-27
| | | | | | | | | | | | | | | | | | | | | | | | This commit removes that copy command to fix build error. Signed-off-by: Jaehoon You <teslamint@gmail.com>
* | | | rpcbind: fix warmstart option, CVE-2017-8779Andy Walsh2019-03-27
|/ / / | | | | | | | | | | | | | | | | | | * always build with warmstart options * fix CVE-2017-8779 Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | Merge pull request #8505 from dibdot/travelmateDirk Brenken2019-03-27
|\ \ \ | | | | | | | | travelmate: 1.4.3
| * | | travelmate: 1.4.3Dirk Brenken2019-03-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove leftover from last commit * enhance rebind protection whitelisting: support multiple, cascaded captive portal domains Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | coova-chilli: Bump PKGRosen Penev2019-03-26
| | | |
* | | | Merge pull request #4911 from aleksander0m/coova-chili-fw-fixRosen Penev2019-03-26
|\ \ \ \ | | | | | | | | | | net/coova-chili: update default firewall setup
| * | | | net/coova-chili: update default firewall setupAleksander Morgado2017-10-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove the obsolete firewall configuration as the legacy firewall package was removed in a901329781eae4716c21d3d8f70a18501d9f2352. And at the same time, define in the configuration the correct paths for the firewall rules, installed as /etc/chilli/{up|down}.sh Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
* | | | | tor: fix CPE IDJan Pavlinec2019-03-26
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | lighttpd: Add PKG_CPE_ID for proper CVE trackingJan Pavlinec2019-03-26
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | yggdrasil: fix startup and generate nodeInfo infoWilliam Fleurant2019-03-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - init: fix no start - defaults: apply ubus system board info to nodeInfo - defaults: fix missing yggdrasil interface - defaults: call uci commit Signed-off-by: William Fleurant <william@netblazr.com>
* | | | | openssh: use quotesPeter Wagner2019-03-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | | Merge pull request #8471 from ptpt52/mwan3-fix-rtmon-bugHannu Nyman2019-03-22
|\ \ \ \ \ | | | | | | | | | | | | mwan3: fix logical/typo bug in mwan3rtmon
| * | | | | mwan3: fix logical/typo bug in mwan3rtmonChen Minqiang2019-03-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This bug was introduced since dd206b7d0bc4a7de739b6dbccbac5b5ffcae9024 mwan3_remon_ipv4 and mwan3_remon_ipv6 is command to run not a variable I add some comments on them hopefully people will notice it Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* | | | | | ACME: Fix missing quotes in variable comparisonsToke Høiland-Jørgensen2019-03-22
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The variables can be empty if not set in the UCI config. Reported-by: Petr Novák <petrn@me.com> Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
* | | | | nfs-kernel-server: fix dependenciesPeter Wagner2019-03-21
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | | openssh: handle multiple ports and simplify init scriptPeter Wagner2019-03-21
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | | Merge pull request #8437 from exploide/stubby_fixesHannu Nyman2019-03-21
|\ \ \ \ \ | | | | | | | | | | | | stubby: fixed duplicate IPv6 address and typo
| * | | | | stubby: fixed duplicate IPv6 address in stubby.yml; fixed typo in README.mdJannik Vieten2019-03-18
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jannik Vieten <me@exploide.net>
* | | | | | Merge pull request #8464 from lnslbrty/update/ptunnel-ngHannu Nyman2019-03-21
|\ \ \ \ \ \ | | | | | | | | | | | | | | ptunnel-ng: update to 1.40
| * | | | | | ptunnel-ng: update to 1.40Toni Uhlig2019-03-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* | | | | | | yggdrasil: use Golang buildroot appropriately, actually fix #8457Deng Qingfang2019-03-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This supersedes #8465 No longer needs FPU emulator now Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
* | | | | | | obfs4proxy: Remove build dependenciesJeffery To2019-03-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The Go compiler can now manage the build dependencies by itself, as obfs4proxy has been ported to a Go module. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | Merge pull request #8453 from dibdot/travelmateDirk Brenken2019-03-20
|\ \ \ \ \ \ \ | | |_|_|/ / / | |/| | | | | travelmate: 1.4.2
| * | | | | | travelmate: 1.4.2Dirk Brenken2019-03-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix a json related ressource leak * add a reload trigger when the wireless config gets changed * set an interface default 'trm_wwan' (like the LuCI frontend) * reordered nested loops to optimize the connection handling Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | | yggdrasil: remove pkgarch, cleanup space with tabsWilliam Fleurant2019-03-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: William Fleurant <william@netblazr.com>
* | | | | | | routing-yggdrasil: add packagePaul Spooren2019-03-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Yggdrasil builds end-to-end encrypted networks with IPv6. Beyond the similarities with cjdns is a different routing algorithm. This globally-agreed spanning tree uses greedy routing in a metric space. Back-pressure routing techniques allow advanced link aggregation bonding on per-stream basis. In turn, a single stream will span across multiple network interfaces simultaneously with much greater throughput. Authored by: William Fleurant <meshnet@protonmail.com> Signed-off-by: Paul Spooren <mail@aparcar.org>
* | | | | | | tcpreplay: bump to version 4.3.2Alexandru Ardelean2019-03-19
| |/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This one contains only a few CVEs + bugfixes. * CVE-2019-8381 memory access in do_checksum() (#538) * CVE-2019-8376 NULL pointer dereference get_layer4_v6() (#537) * CVE-2019-8377 NULL pointer dereference get_ipv6_l4proto() (#536) * Rename Ethereal to Wireshark (#545) Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | | | Merge pull request #8444 from wvdakker/masterHannu Nyman2019-03-19
|\ \ \ \ \ \ | | | | | | | | | | | | | | Shorewall: Bump to version 5.2.3.2
| * | | | | | Shorewall6: Bump to version 5.2.3.2.W. van den Akker2019-03-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | Shorewall: Bump to version 5.2.3.2.W. van den Akker2019-03-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | Shorewall6-lite: Bump to version 5.2.3.2.W. van den Akker2019-03-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | Shorewall-lite: Bump to version 5.2.3.2.W. van den Akker2019-03-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
| * | | | | | Shorewall-core: Bump to version 5.2.3.2.W. van den Akker2019-03-18
| | |/ / / / | |/| | | | | | | | | | | | | | | | Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
* / | | | | trafficshaper: new packageLuiz Angelo Daros de Luca2019-03-19
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | trafficshaper create QoS rules to limit (or reserve) traffic used by classes of clients. Uplink and downlink can be controled (or not controlled) independently. Client classes are defined by its network addresses (IPv4 or IPv6). Each client class can define absolute or relative (to wan) bandwith, and also the use (or not) of spare wan bandwidth when avaiable. Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* | | | | Merge pull request #8370 from danielg4/masterHannu Nyman2019-03-17
|\ \ \ \ \ | | | | | | | | | | | | vpnc: fix IPv6-triggered inoperability
| * | | | | vpnc: fix IPv6-triggered inoperabilityDaniel Gimpelevich2019-03-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When the server hostname resolved to both IPv4 and IPv6 addresses, connecting would fail with nothing in syslog. This corrects that oversight. Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us>
* | | | | | Merge pull request #8099 from ja-pa/torsocksHannu Nyman2019-03-17
|\ \ \ \ \ \ | | | | | | | | | | | | | | torsocks: add new package
| * | | | | | torsocks: add new packageJan Pavlinec2019-03-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | | | Merge pull request #8424 from MikePetullo/lighttpdHannu Nyman2019-03-17
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | lighttpd: update to 1.4.53
| * | | | | | | lighttpd: update to 1.4.53W. Michael Petullo2019-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* | | | | | | | Merge pull request #8421 from MikePetullo/krb5Hannu Nyman2019-03-17
|\ \ \ \ \ \ \ \ | |_|_|_|_|_|_|/ |/| | | | | | | krb5: update to 1.17