aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* gsocket: add a new package with version 1.4.37Ralf Kaiser2022-07-13
| | | | | | | | | | | | | | | | | | | | | | | | | | Global Socket allows two workstations on different private networks to communicate with each other. Through firewalls and through NAT - like there is no firewall. The TCP connection is secured with AES-256 and using OpenSSL's SRP protocol (RFC 5054). It does not require a PKI and has forward secrecy and (optional) TOR support. The gsocket tools derive temporary session keys and IDs and connect two TCP pipes through the Global Socket Relay Network (GSRN). This is done regardless and independent of the local IP Address or geographical location. The session keys (secrets) never leave the workstation. The GSRN sees only the encrypted traffic. The workhorse is 'gs-netcat' which opens a ssh-like interactive PTY command shell to a remote workstation (which resides on a private and remote network and/or behind a firewall). Also added test.sh file to run test it inside containeer Signed-off-by: Ralf Kaiser <skyper@thc.org>
* pdns-recursor: update to 4.7.1Peter van Dijk2022-07-13
| | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* pdns: update to 4.6.3Peter van Dijk2022-07-13
| | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* Merge pull request #18913 from jempatel/improve_apinger-procd-uciFlorian Eckert2022-07-12
|\ | | | | apinger: improve uci and procd support
| * apinger: improve uci and procd supportJaymin Patel2022-07-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - convert apinger into procd instances - generate instance specific apinger.conf from uci - hotplug handling for apinger alarms - restart apinger interface instance on ifup action of interface - don't exit on packet count mismatch, allows to use apinger as monitor for multiple targets handling - add srcip option to target configuration, allows specifying source ip used to monitor target - allow creating status file in script parseable format Patches are ported against latest version of apinger and referenced from https://git.pld-linux.org/?p=packages/apinger.git;a=summary Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
* | Merge pull request #18811 from turris-cz/bindJosef Schlehofer2022-07-11
|\ \ | | | | | | bind: update to version 9.18.4
| * | bind: update to version 9.18.4Josef Schlehofer2022-06-24
| | | | | | | | | | | | | | | | | | | | | Fixes: - CVE-2022-1183 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | softethervpn: get rid of external iconvRosen Penev2022-07-10
| | | | | | | | | | | | | | | | | | Not really needed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | transmission: get rid of iconv dependencyRosen Penev2022-07-10
| | | | | | | | | | | | | | | | | | No need for an external one. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | ser2net: schedule start later during boot (fixes #18872)Michael Heimpold2022-07-09
| | | | | | | | | | | | | | | | | | | | | Usually, no other local service depends on the start of ser2net, so let's start it later in the boot process. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | clamav: fix compilation without libiconv-stubRosen Penev2022-07-08
| | | | | | | | | | | | | | | | | | Ported similar patch from hidapi. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | dnslookup: Update to 1.7.1Tianling Shen2022-07-07
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | cloudflared: Update to 2022.7.1Tianling Shen2022-07-07
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | travelmate: update 2.0.9Dirk Brenken2022-07-06
| |/ |/| | | | | | | | | | | * various vpn fixes/optimizations (run tested by forum users) * refine several log statements Signed-off-by: Dirk Brenken <dev@brenken.org>
* | xfrpc: update to 1.06.579Dengfeng Liu2022-07-05
| | | | | | | | Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
* | xfrpc: set xfrpc's disabled default value to 0Dengfeng Liu2022-07-05
| | | | | | | | | | | | change this to satisfy luci-app-xfrpc's need Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
* | modemmanager: explicitly disconnect even if no bearers foundAleksander Morgado2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A network restart where netifd is cleanly restarted involves bringing the network interfaces down. The 'modemmanager' protocol handler will run a mmcli --simple-disconnect in this case, but only if there are bearer objects found. If the network restart happened *during* the connection attempt procedure, while the modem is e.g. being registered in the network, no bearer objects exist yet, and so, we would skip doing anything during the interface teardown operation. This would lead to the original connection attempt succeeding, so leaving the modem in ModemManager in connected state, while the associated interface in netifd is reported down. Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
* | kea: create /var/run/kea in init scriptStijn Tintel2022-07-05
| | | | | | | | | | | | | | | | Kea expects /var/run/kea to exist. Without it, errors occur: Mon Jun 13 10:31:45 2022 daemon.err kea-dhcp6[2977]: Unable to use interprocess sync lockfile (No such file or directory): /var/run/kea/logger_lockfile Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | tor: bump to 0.4.7.8 stableRui Salvaterra2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the changelog… o Major bugfixes (congestion control, TROVE-2022-001): - Fix a scenario where RTT estimation can become wedged, seriously degrading congestion control performance on all circuits. This impacts clients, onion services, and relays, and can be triggered remotely by a malicious endpoint. Tracked as CVE-2022-33903. Fixes bug 40626; bugfix on 0.4.7.5-alpha. o Minor features (fallbackdir): - Regenerate fallback directories generated on June 17, 2022. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2022/06/17. o Minor bugfixes (linux seccomp2 sandbox): - Allow the rseq system call in the sandbox. This solves a crash issue with glibc 2.35 on Linux. Patch from pmu-ipf. Fixes bug 40601; bugfix on 0.3.5.11. o Minor bugfixes (logging): - Demote a harmless warn log message about finding a second hop to from warn level to info level, if we do not have enough descriptors yet. Leave it at notice level for other cases. Fixes bug 40603; bugfix on 0.4.7.1-alpha. - Demote a notice log message about "Unexpected path length" to info level. These cases seem to happen arbitrarily, and we likely will never find all of them before the switch to arti. Fixes bug 40612; bugfix on 0.4.7.5-alpha. o Minor bugfixes (relay, logging): - Demote a harmless XOFF log message to from notice level to info level. Fixes bug 40620; bugfix on 0.4.7.5-alpha. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* | autossh: improve uci and procd supportJaymin Patel2022-07-05
| | | | | | | | | | | | | | | | | | | | - convert autossh into procd instances - add new uci config options to handle local and remote port forwarding - remove hotplug down actions causing service to stop on any interface down event Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
* | netifyd: Updated to v4.2.0.Darryl Sokoloski2022-07-05
| | | | | | | | Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
* | zerotier: update to 1.10.1Moritz Warning2022-07-04
| | | | | | | | Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | radsecproxy: update to 1.9.1Nick Hainke2022-07-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove upstreamed patches: - 100-fix-setstacksize-for-glibc-2.34.patch Refresh patches: - 200-logdest-on-foreground.patch Changes: Misc: - OpenSSL 3.0 compatibility Bug Fixes: - Fix refused startup with openssl <1.1 - Fix compiler issue for Fedora 33 on s390x - Fix small memory leak in config parser - Fix lazy certificate check when connecting to TLS servers - Fix connect is aborted if first host in list has invalid certificate - Fix setstacksize for glibc 2.34 - Fix system defaults/settings for TLS version not honored Signed-off-by: Nick Hainke <vincent@systemli.org>
* | usteer: bump to git HEADStijn Tintel2022-07-02
| | | | | | | | | | | | | | | | | | | | 5be6819 policy: allow disabling load balancing 80b0b65 main: disable load balancing by default fca4b87 policy: improve readability 73c424b usteer: add option for probe steering 87de1ab main: disable probe steering by default Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | tgt: update to 1.0.83Maxim Storchak2022-07-01
| | | | | | | | Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
* | travelmate: update 2.0.8-3Dirk Brenken2022-06-27
| | | | | | | | | | | | * refine vpn timeout Signed-off-by: Dirk Brenken <dev@brenken.org>
* | travelmate: update 2.0.8-2Dirk Brenken2022-06-25
|/ | | | | | * make vpn handling more reliable Signed-off-by: Dirk Brenken <dev@brenken.org>
* dnsdist: switch from liblua to luajitPeter van Dijk2022-06-23
| | | | | | | | | luajit provides higher performance for requests handled in Lua hooks. It also enables access to dnsdist functionality only exposed via FFI, and allows configurations/hooks to call functions in any C library without providing separate bindings. Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* travelmate: update 2.0.8Dirk Brenken2022-06-23
| | | | | | * the domain whitelist feature has been extended to free up multiple nested captive portal domains. Signed-off-by: Dirk Brenken <dev@brenken.org>
* knot-resolver: update to version 5.5.1Josef Schlehofer2022-06-22
| | | | | | | | | | | | | | | Changelog for versions: - 5.4.4 [1] - 5.5.0 [2] - 5.5.1 [3] [1] https://www.knot-resolver.cz/2022-01-05-knot-resolver-5.4.4.html [2] https://www.knot-resolver.cz/2022-03-15-knot-resolver-5.5.0.html [3] https://www.knot-resolver.cz/2022-06-14-knot-resolver-5.5.1.html And refresh patch to avoid offset Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* xtables-addons: update to 3.21Ivan Pavlov2022-06-22
| | | | | | updated to kernel 5.10.121+ changes Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
* haproxy: Update HAProxy to v2.6.1Christian Lachner2022-06-22
| | | | | | | | - New major LTS release (https://www.mail-archive.com/haproxy@formilux.org/msg42371.html) - Sadly, no QUIC/H3 support for now because the QuicTLS library - which is a fork of OpenSSL - would be needed. However, we do not have a package for that and I currently do not want to build and statically link it into the haproxy package - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* samba4: drop maintainershipAndy Walsh2022-06-21
| | | | | | | | | | | | | drop maintainership: * samba4 * ksmbd-tools * perl-parse-yapp * libtirpc * softethervpn5 * wsdd2 * rpcsvc-proto Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* ksmbd-tools: fix meson buildRosen Penev2022-06-21
| | | | | | | It changed the binaries from sbin to bin, breaking the init script. Change it back. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* xray-core: Update to 1.5.8Tianling Shen2022-06-20
| | | | | | Updated geodata to latest version while at it. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* unbound: update to 1.16.0Stijn Segers2022-06-19
| | | | Signed-off-by: Stijn Segers <foss@volatilesystems.org>
* cloudflared: Update to 2022.6.2Tianling Shen2022-06-19
| | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* v2raya: Update to 1.5.8.1Tianling Shen2022-06-19
| | | | | | | 1. Switched to use prebuilt web files to get rid of massive Node.js. 2. Increased nofile limitation to avoid "too many open files" error. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* treewide: remove PKG_INSTALL for meson projectsRosen Penev2022-06-15
| | | | | | It doesn't seem to be used by meson. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* Merge pull request #18739 from mhei/ser2net-updateMichael Heimpold2022-06-15
|\ | | | | Update gensio to 2.4.2 and ser2net to 4.3.6
| * ser2net: update to 4.3.6Michael Heimpold2022-06-11
| | | | | | | | | | | | | | We need to add an upstream patch as well, which fixes disabling the newly introduced PAM support. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
| * gensio: update to 2.4.2Michael Heimpold2022-06-10
| | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | dnsdist: update to 1.7.2Peter van Dijk2022-06-14
| | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | dawn: update to 2022-06-13Nick Hainke2022-06-13
| | | | | | | | | | | | 88c78b4 memory_utils: fix reallocation Signed-off-by: Nick Hainke <vincent@systemli.org>
* | ksmbd-tools: add meson buildRosen Penev2022-06-12
| | | | | | | | | | | | Avoids iconv problems. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | dawn: update to 2022-06-11Nick Hainke2022-06-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 4cf9d0b treewide: code and documentation cleanup 48b12ee datastorage: Minor chnages to kicking algorithm to tidy up some handling. 7b615b6 treewide: improve beacon/probe logging 185f31b treewide: improve beacon request handling 0c2e713 datastorage/ubus: Add "soft" kicking algorithm 38f60c5 treewide: RSSI / RCPI handling updates aba3e81 documentation: Parameter defaults and documentation 3979fdf treewide: cleanup code e3b3753 scoring: improve scoring algorithm 33f380f treewide: cleanup code b42193f kicking: improve kicking algorithm 16deab3 treewide: improve mutex handling 31f0a37 test: cleanup tests and add some test scripts 43ca8b8 treewide: fix bugs from Coverity Scan 8ae2a42 utils/storage: improve descriptions 9a9b4dd ubus: Simplify loops and scans in generating hearing map c833064 treewide: rework mutex 1df5bc5 (master) network: cleanup and improve network handling 3bd349a utils: cleanup a855087 utils/storage: cleanup 439fe95 ubus/datastorage/msghandler: cleanup 335ace2 datastorage: improve linked list 40ebf48 ubus/datastorage: cleanup c13c285 utils: cleanup 0e4fc50 documentation: Heavily revised Markdown documentation files Signed-off-by: Nick Hainke <vincent@systemli.org>
* | cshark: fix compilation with GCC12Rosen Penev2022-06-10
|/ | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* lighttpd: update to lighttpd 1.4.65 release hashGlenn Strauss2022-06-09
| | | | | | | * update to lighttpd 1.4.65 release hash * specify lua version w/ -Dlua_version=lua to avoid patching meson.build Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
* xtables-addons: update to 3.20Nick Hainke2022-06-09
| | | | | | | | | | 866bc7f Xtables-addons 3.20 aa70669 doc: move changelog to rST d7de2a9 doc: remove old changelog entries d7e49a8 build: bump supported kernel version to 5.17 966fa43 extensions: replace PDE_DATA Signed-off-by: Nick Hainke <vincent@systemli.org>
* xtables-addons: add PKG_LICENSE_FILES and use SPDXNick Hainke2022-06-09
| | | | | | Add PKG_LICENSE_FILES. Use SPDX. Signed-off-by: Nick Hainke <vincent@systemli.org>
Powered by cgit, Themed by Ted Yin.