aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | | | Merge pull request #17940 from TDT-AG/pr/20220225-mwan3Florian Eckert2022-03-17
|\ \ \ \ | | | | | | | | | | mwan3: update to version 2.11.0
| * | | | mwan3: update version to 2.11.0Florian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: dump iptables and ipset command for debuggingFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: unify error messagesFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: add sleep to release ipset referenceFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It turns out that under high system load, ipsets cannot be deleted. This is because there is still a reference in iptables. A short sleep should give the system time to clean this up. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: remove not needed ipset del cmdFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: Split ipsets into separate ipv4 and ipv6 setsFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Nft does not directly support ipsets, nft sets must be used instead. The mwan3 uses ipsets for certain tasks. They can be combinded. So called an ipset of ipsets. This list type is not available in nft. So that mwan3 could be ported to nft in the feature, the ipset handling should be split. So we have for each ipset an iptables rule. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: use mwan3_push_update function for mwan3_delete_iface_iptablesFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: remove ipset generation from mwan3_set_general_iptablesFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: use sticky ipset generation mwan3_push_update patternFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: do not create dynamic ipset for IPv6 if not supportedFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: do not add mwan3_custom_v6 set if ipv6 is not availableFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: use also ipset restore for connected ipv4 setsFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: move command definitions to common.shFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | mwan3: update iptables dependenciesFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | openssh: update to 8.9p1Michal Vasilek2022-03-16
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | | | | cloudflared: add new packageTianling Shen2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. Docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | haproxy: Update HAProxy to v2.4.15Christian Lachner2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | mtr: bump version to 0.95, split package for JSON and non-JSON variantsMarc Egerton2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As per the discussion in PR #18047, split the MTR package into two, one with jansson enabled for JSON output, and one without. This commit also bumps the version to 0.95. Since the MTR project website does not seem to be updated with builds any longer, switch to GitHub Codeload instead. Also enable PKG_FIXUP:=autoreconf so that MTRs bootstrap.sh process is executed properly. Signed-off-by: Marc Egerton <marc@malloc.me>
* | | | | zerotier: update to 1.8.6Moritz Warning2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove upstreamed gcc10 and cerrno patches * disable SSO and OIDC as it needs Rust/Cargo support Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | | | | chrony: enable LTOStijn Tintel2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Size difference of the ipk on qoriq: * chrony: 718571 676886 * chrony-nts: 786960 757064 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | chrony: enable AUTORELEASEStijn Tintel2022-03-16
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | Enable AUTORELEASE in a separate commit so that the next commit can be reverted without having to manually re-introduce it. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | isc-dhcp: Update to 4.4.3Philip Prindeville2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Note that on 32-bit ARM with MUSL we don't have Unwind_GetIP() so we need to disable backtraces. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | named: don't leak mktemp files on reloadPhilip Prindeville2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Unless we're using "mktemp -u ..." (not recommended), it will create the temp file as part of its safety checking. Thus you should only create the name (file) if you're going to use it, and always remove it if you have created it. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | isc-dhcp: detect whether ddns transfers are IPv4 onlyPhilip Prindeville2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If named is configured to not listen on any IPv6 interfaces, then we should run 'nsupdate' with the '-4' argument. Also: * cleanup RFC-1918 address detection; * don't generate PTR records for domain entries that aren't RFC-1918 addresses or these will generate NOTAUTH failures; We're assuming that we're doing DNS split-horizon and that internal addresses aren't routable. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | isc-dhcp: don't leak mktemp filesPhilip Prindeville2022-03-15
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | gnunet: improve init scriptDaniel Golle2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Ensure correct ownership of /etc/gnunet. Quote variables and more or less make shellcheck happy. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | gnunet: depend on 'uci-firewall' instead of 'firewall'Daniel Golle2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To allow using gnunet on systems with firewall4, add replace direct dependency on 'firewall' with 'uci-firewall' which is satisfied by either 'firewall' or 'firewall4'. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | shorewall6-lite: add @IPV6 to DEPENDSEtienne Champetier2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | | | shorewall6: add @IPV6 to DEPENDSEtienne Champetier2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | | | keepalived: enable nftables filteringFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | Merge pull request #18002 from BKPepe/haproxy-conflictsJosef Schlehofer2022-03-14
|\ \ \ \ | | | | | | | | | | haproxy: Makefile polishing and add conflict to SSL/non-SSL variant
| * | | | haproxy: add conflict to packages with SSL or without SSL supportJosef Schlehofer2022-03-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Both packages provide the same packages and should conflict to each other. Fixes: ``` Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /usr/sbin/haproxy Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /etc/haproxy.cfg Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /etc/init.d/haproxy ``` They should not be installed side by side. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
| * | | | haproxy: Makefile polishingJosef Schlehofer2022-03-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - There should be shorter TITLE in Package/haproxy/Default otherwise it is not shown - No need to call Build/Prepare/Default - Remove twice TITLE in non-SSL variant - Make conffiles more clear - Remove empty menu for halog Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | v2raya: add iptables as dependencyTianling Shen2022-03-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This package requires to use iptables (no matter which variant). Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | gnunet: update to version 0.16.1Daniel Golle2022-03-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * OPUS and Pulse can be configured nicely by default now, no longer need a local patch for that * mysql version checks fail when cross-compiling, add patch to remove them and always assume MySQL >8.0. * Package new services, communicators, ... This is a new major release. It breaks protocol compatibility with the 0.15.x versions. Please be aware that Git master is thus henceforth (and has been for a while) INCOMPATIBLE with the 0.15.x GNUnet network, and interactions between old and new peers will result in issues. 0.15.x peers will be able to communicate with Git master or 0.16.x peers, but some services - in particular GNS - will not be compatible. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | treewide: remove rpath-linkRosen Penev2022-03-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Most usages seem to be outdated and fixed a long time ago. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | softethervpn: remove rpath hackRosen Penev2022-03-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This was needed when readline was a shared library. Now that it's static, this can be removed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | dnsproxy: Update to 0.41.4Tianling Shen2022-03-09
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | modemmanager: bump to 1.18.6Kuan-Yi Li2022-03-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove upstreamed patch. Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
* | | | | adguardhome: Update adguardhome to v0.107.5James White2022-03-08
| | | | | | | | | | | | | | | | | | | | Signed-off-by: James White <james@jmwhite.co.uk>
* | | | | coova-chilli: remove kmod dep on binary packageThibaut VARÈNE2022-03-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is no reason for the kmod to depend on the binary package itself, neither for building nor for installing. That dependency prevents phase1 from building the kmod even though support is enabled in the binary. Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
* | | | | tinc: add creation of hosts directory for each network configurationErwan MAS2022-03-08
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
* | | | | frr: update to 8.2Lucian Cristian2022-03-08
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | iperf3: bump to 3.11John Audia2022-03-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update to latest upstream version Signed-off-by: John Audia <graysky@archlinux.us>
* | | | | shadowsocks-libev: remove now unused file firewall.ss-rulesYousong Zhou2022-03-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It was leftover from the previous rewrite of ss-rules. The built package has no ref to it so no need to update PKG_RELEASE Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | Merge pull request #18018 from rs/nextdns-1.37.10-masterStan Grishin2022-03-07
|\ \ \ \ \ | | | | | | | | | | | | nextdns: Update to version 1.37.10
| * | | | | nextdns: Update to version 1.37.10Olivier Poitrey2022-03-07
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | | | Merge pull request #18001 from turris-cz/chrony-conflictsJosef Schlehofer2022-03-07
|\ \ \ \ \ \ | | | | | | | | | | | | | | chrony: add conflict between without NTS and NTS variant
| * | | | | | chrony: add conflict between without NTS and NTS variantJosef Schlehofer2022-03-06
| | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Both packages provide the same files: /usr/bin/chronyc /usr/sbin/chronyd /etc/chrony/chrony.conf /etc/hotplug.d/iface/20-chrony /etc/init.d/chronyd They should not be installed side by side. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Powered by cgit, Themed by Ted Yin.