aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
| * | | chrony: Avoid building unused gnutls and ca dependenciesBoris Krasnovskiy2022-07-30
| | | | | | | | | | | | | | | | | | | | | | | | Avoid building unused gnutls and ca dependencies Signed-off-by: Boris Krasnovskiy <borkra@gmail.com>
* | | | Merge pull request #19073 from jempatel/apinger-rrd-graphFlorian Eckert2022-07-29
|\ \ \ \ | | | | | | | | | | apinger: add rrd graph support
| * | | | apinger: add rrd graph supportJaymin Patel2022-07-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - add package apinger-rrd for RRD graphs - add RPC to get an overview and update graphs - fix interface hotplug to restart apinger instance - add patch to split alarms list in the status Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
* | | | | stunnel: update version to 5.65Florian Eckert2022-07-28
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | frr: update to 8.3.0Lucian Cristian2022-07-28
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | rclone: update to 1.59.0ZiMing Mo2022-07-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release note: https://rclone.org/changelog/#v1-59-0-2022-07-09 Signed-off-by: ZiMing Mo <msylgj@immortalwrt.org>
* | | | | Merge pull request #18930 from pprindeville/isc-dhcp-drop-allow-updatePhilip Prindeville2022-07-27
|\ \ \ \ \ | | | | | | | | | | | | isc-dhcp: don't use allow-update in bind config
| * | | | | isc-dhcp: don't use allow-update in bind configPhilip Prindeville2022-07-13
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | Merge pull request #18914 from stangri/master-nebulaStan Grishin2022-07-26
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | nebula: update to 1.6.0
| * | | | | nebula: update to 1.6.0Stan Grishin2022-07-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Update to https://github.com/slackhq/nebula/releases/tag/v1.6.0 * Update maintainer's email address * Update for newest shellcheck Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | | xfrpc: Update to 1.07.582Dengfeng Liu2022-07-25
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
* | | | | | modemmanager: fix mm_log() invocations in 25-modemmanager* filesArkadiusz Drabczyk2022-07-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Definition of mm_log() was changed in 45a56a889943b437f78fa2bfca3d5d8ac555c77e but 25-modemmanager* weren't changed. Signed-off-by: Arkadiusz Drabczyk <arkadiusz@drabczyk.org>
* | | | | | dawn: update to 2022-07-24Nick Hainke2022-07-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | edca4d2 network: rework network status callbacks Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | | curl: switch default SSL to mbedTLSRosen Penev2022-07-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The decision to switch the default to wolfSSL was taken because of hostapd back from when curl was in base. Unfortunately, not only is wolfSSL bigger but it has also been causing issues recently. There's also no relation between hostapd and curl. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | dawn: update to 2022-07-22Nick Hainke2022-07-22
| |_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | 10fb043 network: dump detail on ping pong received Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | dawn: update to 2022-07-21Nick Hainke2022-07-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bb362db datastorage: fix ap_array_unlink_entry always returns NULL 47e98ef network: ping pong keepalive for tcp connections eba0354 network: add timeout for client connections In the dawn config the con_timeout needs to be added: option con_timeout '60' Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | usteer: update to latest HEADDavid Bauer2022-07-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 9059b9a ubus: derive RSSI from measurement report Signed-off-by: David Bauer <mail@david-bauer.net>
* | | | | geth: update to 1.10.20Rosen Penev2022-07-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix compilation with latest iconv changes. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | wifidog: fix compilation with more recent wolfsslRosen Penev2022-07-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Needs an extra header. pthread.h is also no longer implicitly included. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | curl: fix compilation with wolfSSLRosen Penev2022-07-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | options.h header is needed now. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | unbound: update to 1.16.1Pascal Ernster2022-07-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: @EricLuehrsen Compile tested: realtek/rtl838x, x86/64 Run tested: realtek/rtl838x, x86/64 Description: Update to 1.16.1 Signed-off-by: Pascal Ernster <git@hardfalcon.net>
* | | | | dawn: update to 2022-07-18Nick Hainke2022-07-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | e596ff1 ubus.c: only add nr entries matching our own SSID Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | xray-core: Update to 1.5.9Tianling Shen2022-07-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updated geodata to latest version while at it. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | Merge pull request #18854 from Torxgewinde/restic_rest_server_updateJeffery To2022-07-18
|\ \ \ \ \ | | | | | | | | | | | | restic-rest-server: update to 0.11.0
| * | | | | restic-rest-server: update to 0.11.0Tom Stöveken2022-07-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Maintainer: Tom Stöveken <tom@naaa.de>, Markus Weippert handed over, see: https://github.com/openwrt/packages/pull/18715#issuecomment-1153567619 Compile tested: SDK for OpenWrt 21.02.3 Run tested: x86/64, J&W Technologies I1171D001 Intel(R) Celeron(R) CPU N3160 @ 1.60GHz, OpenWrt 21.02.3 Description: Updated to version 0.11.0 Added new configuration parameters Signed-off-by: Tom Stöveken <tom@naaa.de>
* | | | | | netsniff-ng: Update to version 0.6.8Martin Blumenstingl2022-07-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The update fixes GCC-10 (or newer) builds. Remove 010-uclibc.patch as it has been applied upstream in this new version. Signed-off-by: Martin Blumenstingl <martin.blumenstingl@googlemail.com>
* | | | | | softethernetvpn: remove libiconv/host dependencyRosen Penev2022-07-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | No longer present and with the nls.mk removal, no longer needed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | travelmate: update 2.0.9-2Dirk Brenken2022-07-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix another vpn corner case * add support for javascript based captive portals (location.href) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | dawn: update to 2022-07-16Nick Hainke2022-07-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0689b5e ubus: add missing lock for ubus hearing_map 4b7db09 CONFIGURE.md: fix typo b3f61d4 CONFIGURE.md: adjust documentation about log levels Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | | spoofer: update to 1.4.8Rosen Penev2022-07-14
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | gsocket: add a new package with version 1.4.37Ralf Kaiser2022-07-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Global Socket allows two workstations on different private networks to communicate with each other. Through firewalls and through NAT - like there is no firewall. The TCP connection is secured with AES-256 and using OpenSSL's SRP protocol (RFC 5054). It does not require a PKI and has forward secrecy and (optional) TOR support. The gsocket tools derive temporary session keys and IDs and connect two TCP pipes through the Global Socket Relay Network (GSRN). This is done regardless and independent of the local IP Address or geographical location. The session keys (secrets) never leave the workstation. The GSRN sees only the encrypted traffic. The workhorse is 'gs-netcat' which opens a ssh-like interactive PTY command shell to a remote workstation (which resides on a private and remote network and/or behind a firewall). Also added test.sh file to run test it inside containeer Signed-off-by: Ralf Kaiser <skyper@thc.org>
* | | | | | pdns-recursor: update to 4.7.1Peter van Dijk2022-07-13
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | | | | | pdns: update to 4.6.3Peter van Dijk2022-07-13
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | | | | | Merge pull request #18913 from jempatel/improve_apinger-procd-uciFlorian Eckert2022-07-12
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | apinger: improve uci and procd support
| * | | | | apinger: improve uci and procd supportJaymin Patel2022-07-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - convert apinger into procd instances - generate instance specific apinger.conf from uci - hotplug handling for apinger alarms - restart apinger interface instance on ifup action of interface - don't exit on packet count mismatch, allows to use apinger as monitor for multiple targets handling - add srcip option to target configuration, allows specifying source ip used to monitor target - allow creating status file in script parseable format Patches are ported against latest version of apinger and referenced from https://git.pld-linux.org/?p=packages/apinger.git;a=summary Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
* | | | | | Merge pull request #18811 from turris-cz/bindJosef Schlehofer2022-07-11
|\ \ \ \ \ \ | | | | | | | | | | | | | | bind: update to version 9.18.4
| * | | | | | bind: update to version 9.18.4Josef Schlehofer2022-06-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: - CVE-2022-1183 Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | | softethervpn: get rid of external iconvRosen Penev2022-07-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Not really needed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | transmission: get rid of iconv dependencyRosen Penev2022-07-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | No need for an external one. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | ser2net: schedule start later during boot (fixes #18872)Michael Heimpold2022-07-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Usually, no other local service depends on the start of ser2net, so let's start it later in the boot process. Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | | clamav: fix compilation without libiconv-stubRosen Penev2022-07-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ported similar patch from hidapi. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | dnslookup: Update to 1.7.1Tianling Shen2022-07-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | | cloudflared: Update to 2022.7.1Tianling Shen2022-07-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | | | travelmate: update 2.0.9Dirk Brenken2022-07-06
| |/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * various vpn fixes/optimizations (run tested by forum users) * refine several log statements Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | xfrpc: update to 1.06.579Dengfeng Liu2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
* | | | | | xfrpc: set xfrpc's disabled default value to 0Dengfeng Liu2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | change this to satisfy luci-app-xfrpc's need Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
* | | | | | modemmanager: explicitly disconnect even if no bearers foundAleksander Morgado2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A network restart where netifd is cleanly restarted involves bringing the network interfaces down. The 'modemmanager' protocol handler will run a mmcli --simple-disconnect in this case, but only if there are bearer objects found. If the network restart happened *during* the connection attempt procedure, while the modem is e.g. being registered in the network, no bearer objects exist yet, and so, we would skip doing anything during the interface teardown operation. This would lead to the original connection attempt succeeding, so leaving the modem in ModemManager in connected state, while the associated interface in netifd is reported down. Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
* | | | | | kea: create /var/run/kea in init scriptStijn Tintel2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Kea expects /var/run/kea to exist. Without it, errors occur: Mon Jun 13 10:31:45 2022 daemon.err kea-dhcp6[2977]: Unable to use interprocess sync lockfile (No such file or directory): /var/run/kea/logger_lockfile Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | | tor: bump to 0.4.7.8 stableRui Salvaterra2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From the changelog… o Major bugfixes (congestion control, TROVE-2022-001): - Fix a scenario where RTT estimation can become wedged, seriously degrading congestion control performance on all circuits. This impacts clients, onion services, and relays, and can be triggered remotely by a malicious endpoint. Tracked as CVE-2022-33903. Fixes bug 40626; bugfix on 0.4.7.5-alpha. o Minor features (fallbackdir): - Regenerate fallback directories generated on June 17, 2022. o Minor features (geoip data): - Update the geoip files to match the IPFire Location Database, as retrieved on 2022/06/17. o Minor bugfixes (linux seccomp2 sandbox): - Allow the rseq system call in the sandbox. This solves a crash issue with glibc 2.35 on Linux. Patch from pmu-ipf. Fixes bug 40601; bugfix on 0.3.5.11. o Minor bugfixes (logging): - Demote a harmless warn log message about finding a second hop to from warn level to info level, if we do not have enough descriptors yet. Leave it at notice level for other cases. Fixes bug 40603; bugfix on 0.4.7.1-alpha. - Demote a notice log message about "Unexpected path length" to info level. These cases seem to happen arbitrarily, and we likely will never find all of them before the switch to arti. Fixes bug 40612; bugfix on 0.4.7.5-alpha. o Minor bugfixes (relay, logging): - Demote a harmless XOFF log message to from notice level to info level. Fixes bug 40620; bugfix on 0.4.7.5-alpha. Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* | | | | | autossh: improve uci and procd supportJaymin Patel2022-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - convert autossh into procd instances - add new uci config options to handle local and remote port forwarding - remove hotplug down actions causing service to stop on any interface down event Signed-off-by: Jaymin Patel <jem.patel@gmail.com>