aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* dnscrypt-proxy: change start priorityDirk Brenken2017-08-12
| | | | | * adapt start priority to the new trigger based setup Signed-off-by: Dirk Brenken <dev@brenken.org>
* Merge pull request #4679 from dibdot/dnscrypt-proxyHannu Nyman2017-08-09
|\ | | | | dnscrypt-proxy: mute needless warnings
| * dnscrypt-proxy: mute needless warningsDirk Brenken2017-08-08
| | | | | | | | | | | | * print only 'missing plugins support warning' if user really configured 'blacklist' or 'block_ipv6' parameter. Signed-off-by: Dirk Brenken <dev@brenken.org>
* | Merge pull request #4670 from larsi-org/masterHannu Nyman2017-08-08
|\ \ | | | | | | mwan3: allow to change mwan3's MARKing mask
| * | mwan3: allow to change mwan3's MARKing maskLars Schumann2017-08-04
| | | | | | | | | | | | Signed-off-by: Lars Schumann <larsi.org@gmail.com>
* | | Merge pull request #4678 from pprindeville/bind-update-9.11.2Noah Meyerhans2017-08-08
|\ \ \ | | | | | | | | Bind update 9.11.2
| * | | bind: fixes for openssl 1.1.0 thread compatibilityPhilip Prindeville2017-08-07
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
| * | | bind: version update to 9.11.2Philip Prindeville2017-08-07
| | | | | | | | | | | | | | | | | | | | | | | | Also refresh patches and dependencies. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | net/nmap: Avoid linking libssh2 unintentionallyDaniel Engberg2017-08-08
| | | | | | | | | | | | | | | | | | | | Explicitly tell nmap not to link libssh2 if its available, fixes buildbot failure. Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* | | | strongswan: use -eq when testing booleansStijn Tintel2017-08-07
| | | | | | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | strongswan: convert init script to procdStijn Tintel2017-08-07
| | | | | | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | strongswan: check return value instead of outputStijn Tintel2017-08-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When the strongswan service is running, `ipsec status` returns 0. Check the return value instead of checking its output. While at it, remove the [[ ]] bashism, use rereadall instead of (reread)secrets, and move it inside the if statement. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | strongswan: remove checks for UCI configStijn Tintel2017-08-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In commit 36e073d8201fe7cf133ef3eea41f8855c3344c71, some checks were added to see if the UCI config file exists and if there are any peers configured in it. Due to these checks, if /etc/config/ipsec exists, but contains no enabled peers, strongswan will not be started. This is not ideal, as a user might want to experiment with the UCI config while keeping existing connections in /etc/ipsec.conf operational. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | strongswan: add charon-cmd utilityStijn Tintel2017-08-07
| | | | | | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | strongswan: add missing charon config filesStijn Tintel2017-08-07
| | | | | | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | strongswan: add swanctl utilityStijn Tintel2017-08-07
| | | | | | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | strongswan: add vici pluginStijn Tintel2017-08-07
| | | | | | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | strongswan: rename -utils to -ipsecStijn Tintel2017-08-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Since the strongswan-utils package now only contains the aging ipsec utility, rename it to strongswan-ipsec. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | strongswan: split scepclient into separate packageStijn Tintel2017-08-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We currently include the SCEP client in strongswan-utils, which is a dependency of the strongswan-default meta-package. As it's generally not recommended to generate keys on embedded devices due to lack of entropy, move the SCEP client to a separate package, and only depend on it in the strongswan-full meta-package. While at it, add scepclient.conf to the package. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | strongswan: split PKI tool into separate packageStijn Tintel2017-08-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We currently include the PKI tool in strongswan-utils, which is a dependency of the strongswan-default meta-package. As it's generally not recommended to generate keys on embedded devices due to lack of entropy, move the PKI tool to a separate package, and only depend on it in the strongswan-full meta-package. While at it, add pki.conf to the package. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | git: update to 2.14.0Peter Wagner2017-08-07
| | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | Merge pull request #4675 from dibdot/dnscrypt-proxyHannu Nyman2017-08-07
|\ \ \ \ | | |_|/ | |/| | dnscrypt-proxy: start from procd interface trigger, not in init
| * | | dnscrypt-proxy: start from procd interface trigger, not in initDirk Brenken2017-08-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Start dnscrypt-proxy from procd interface trigger rather than immediately in init, to fix a possible race condition during boot and get rid of rc.local restarts. You can restrict trigger interface(s) by 'procd_trigger' in new global config section. * tab/whitespace cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | net/nmap: Update to 7.60Daniel Engberg2017-08-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update nmap-suite to 7.60 * Use PKG_HASH as PKG_MD5SUM is deprecated * Switch download URL to HTTPS * Add zlib as dependency and link libpcre dynamically Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* | | | radicale: Update to 1.1.6Christian Schoenebeck2017-08-05
| |_|/ |/| | | | | | | | Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
* | | shadowsocks-libev: support disable_sni for ss_server sectionYousong Zhou2017-08-04
| | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | Merge pull request #4669 from dibdot/adblockHannu Nyman2017-08-04
|\ \ \ | | | | | | | | adblock: update 2.8.5
| * | | adblock: update 2.8.5Dirk Brenken2017-08-04
| |/ / | | | | | | | | | | | | | | | | | | | | | * add preliminary kresd dns backend support for turris devices, see readme (experimental / untested!) * use tld compression for overall list, too * cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #4629 from marcin1j/pr/20170725-mwan3-tracking-methodsHannu Nyman2017-08-03
|\ \ \ | |_|/ |/| | mwan3: support various interface tracking methods
| * | mwan3: support various interface tracking methodsMarcin Jurkowski2017-08-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds support for interface tracking using either ping, arping or httping. This allows to track interface status on networks with filtered ICMP traffic or simply to monitor data link layer etc. To facilitate binding to a specified interface its IP address is passed as a new mwan3track parameter. It's currently required by httping and possibly by other tools that may be added in the future. Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
* | | nlbwmon: update to latest versionJo-Philipp Wich2017-08-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes since last update: 32fc092 build: remove extraneous _GNU_SOURCE defines 096aaa3 build: compile with -D_GNU_SOURCE 76487b5 transform to source-only repository Fixes build with uClibc and eglibc toolchains. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* | | Merge pull request #4662 from commodo/ovs-updateHannu Nyman2017-08-02
|\ \ \ | | | | | | | | openvswitch: bump to version 2.7.2
| * | | openvswitch: bump to version 2.7.2Alexandru Ardelean2017-08-02
| | | | | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | shadowsocks-libev: backport patch for logging with daemon facilityYousong Zhou2017-08-02
| | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | shadowsocks-libev: add ipv6_first option supportYousong Zhou2017-08-02
| | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | Merge pull request #4631 from marcin1j/pr/20170725-httpingHannu Nyman2017-08-02
|\ \ \ \ | |/ / / |/| | | httping: import from oldpackages and upgrade to version 2.5
| * | | httping: import from oldpackages and upgrade to version 2.5Marcin Jurkowski2017-07-26
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | Package version upgraded to 2.5 with patches: - Fixed compiler warnings - Fixed miscalculated response time - Reduced binary size by stripping unused code Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
* | | wireguard: version bumpJason A. Donenfeld2017-07-31
| | | | | | | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* | | shadowsocks-libev: bump to version 3.0.8Yousong Zhou2017-07-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | Notable changes since 3.0.7 - ss-local, ss-redir: ipv6_first awareness - ss-server: ppbloom_add only after 1st decryption succeeds Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | Merge pull request #4646 from jow-/introduce-nlbwmonJo-Philipp Wich2017-07-30
|\ \ \ | | | | | | | | nlbwmon: add package
| * | | nlbwmon: add packageJo-Philipp Wich2017-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit introduces nlbwmon, the lightweight NetLink BandWidth Montor. The nlbwmon daemon gathers per-host traffic statistics by querying netlink accounting data. Due to this approach, the executable is very small and does not rely on libpcap and CPU intensive raw sockets to monitor traffic. Besides raw per-host traffic counters, nlbwmon also support rudimentary traffic classification by observing IP protocols and used port numbers. Gathered accounting data is stored into a series of database files which are regularily committed to persistent storage. Refresh, commit and accounting intervals are freely configurable as well as the layer7 protocol mapping rules and observed source subnets. This package also bundles a cli client which can be used to dump the gathered traffic data as JSON, CSV or plaintext data. A pull request to add a graphical LuCI frontend for nlbwmon is pending. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* | | | Merge pull request #4651 from dibdot/travelmatechamptar2017-07-29
|\ \ \ \ | | | | | | | | | | travelmate: update 0.9.1
| * | | | travelmate: update 0.9.1Dirk Brenken2017-07-29
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0.9.1 backend: * load procd reload trigger only in 'manual' mode * documentation update frontend: * further optimized Station Overview & Scan page, especially for mobile devices * add a "Rescan" button in manual mode on overview page * XHTML fixes Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | Merge pull request #4469 from chris5560/masterchamptar2017-07-29
|\ \ \ \ | | | | | | | | | | privoxy: clear PKG_MAINTAINER
| * | | | privoxy: clear PKG_MAINTAINERChristian Schoenebeck2017-07-29
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | I do not use this software any more and due to lack of time, I give the maintenance responsibility back to the community. Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
* / | | ipsec-tools: Fix CVE-2016-10396Noah Meyerhans2017-07-29
|/ / / | | | | | | | | | | | | | | | | | | Use patch pulled from Debian's packaging at https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867986 Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | | Merge pull request #4634 from pprindeville/ntp-add-uci-supporttripolar2017-07-28
|\ \ \ | | | | | | | | ntpd: use UCI to synthesize minimal conf file
| * | | ntpd: use UCI to synthesize minimal conf filePhilip Prindeville2017-07-27
| |/ / | | | | | | | | | | | | | | | Borrowed code from Busybox's sysntpd. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | shadowsocks-libev: use xargs -r just in caseYousong Zhou2017-07-28
| | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | shadowsocks-libev: fix compiling with stale object filesYousong Zhou2017-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will cause various kinds of failures in the buildbot ➜ shadowsocks-libev-3.0.7 git:(master) find . -name '*.o' -o -name '*.lo' ./libbloom/murmur2/libbloom_la-MurmurHash2.o ./libbloom/murmur2/libbloom_la-MurmurHash2.lo ./libbloom/libbloom_la-bloom.lo ./libbloom/libbloom_la-bloom.o ➜ shadowsocks-libev-3.0.7 git:(master) ls -l libbloom/murmur2 total 24 -rw-r--r-- 1 yousong yousong 324 Jun 27 14:17 libbloom_la-MurmurHash2.lo -rw-r--r-- 1 yousong yousong 4168 Jun 27 14:17 libbloom_la-MurmurHash2.o -rw-r--r-- 1 yousong yousong 1344 Feb 17 08:47 MurmurHash2.c -rw-r--r-- 1 yousong yousong 142 Feb 17 08:47 murmurhash2.h -rw-r--r-- 1 yousong yousong 213 Feb 17 08:47 README ➜ shadowsocks-libev-3.0.7 git:(master) file ./libbloom/murmur2/libbloom_la-MurmurHash2.o ./libbloom/murmur2/libbloom_la-MurmurHash2.o: ELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), not stripped ➜ shadowsocks-libev-3.0.7 git:(master) Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Powered by cgit, Themed by Ted Yin.