aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* samba4: fix hostname if not defined via DnsmasqAndy Walsh2018-10-15
| | | | | | * use kernel fs to get the hostname, drop domainname Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* Merge pull request #7122 from jonathanunderwood/stubby_uciDirk Brenken2018-10-14
|\ | | | | stubby: enable configuration through uci system
| * stubby: add uci support to init fileJonathan G. Underwood2018-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit brings UCI support to the stubby package. o All options are documented in the README.md file. o The README.md file has been re-written to include a short usage manual. o The default configuration now includes more Cloudflare addresses. o The stubby service is (re)started using procd triggers from a specified interface with a configurable time delay. o Round robin use of upstream resolvers is now activated by default. o Client privacy is now activated by default. o Options are added for specifying the log level of the daemon and command line options passed to the stubby command. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
* | Merge pull request #7142 from neheb/patch-9Dirk Brenken2018-10-14
|\ \ | |/ |/| rsyslog: Update to 8.38
| * rsyslog: Update to 8.38Rosen Penev2018-10-05
| | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | Merge pull request #6707 from guidosarducci/master-fixup-stubbyDirk Brenken2018-10-14
|\ \ | | | | | | stubby: some fixes, cleanup, and improvements
| * | stubby: bump PKG_RELEASETony Ambardar2018-09-23
| | | | | | | | | | | | Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * | stubby: remove unnecessary core limitTony Ambardar2018-09-23
| | | | | | | | | | | | | | | | | | | | | | | | Remove the limit setting core="unlimited", since this shouldn't be needed in production use (i.e. non-debug) and on an embedded platform, which is why it's rarely used by any existing packages. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * | stubby: add SPKI pin set for Cloudflare certTony Ambardar2018-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add an SPKI pin for Cloudflare to help prevent MITM and downgrade attacks, as described in RFC7858 (DNS over TLS). The setup of SPKI and the specific SHA256 certificate hash are taken from Cloudflare's DoT configuration guide published at https://developers.cloudflare.com/1.1.1.1/dns-over-tls/. Note that the certificate is valid to March 25th 2020, 13:00 CET, which provides ample time for issuance of a backup pin to support future key rollover. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * | stubby: add Cloudflare 1.0.0.1 and ::1001 serversTony Ambardar2018-09-23
| | | | | | | | | | | | Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * | stubby: use EDNS client-subnet privacy by defaultTony Ambardar2018-09-23
| | | | | | | | | | | | | | | | | | | | | | | | Retain the upstream value since privacy is usually the key user motivation for using DNS-over-TLS, and simply note that those encountering sub-optimal routing may consider disabling the setting. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * | stubby: fix config file definitionTony Ambardar2018-09-23
| | | | | | | | | | | | | | | | | | | | | The config file /etc/stubby/stubby.yml is not registered properly and any local changes are being overwritten on upgrade or reinstall. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * | stubby: rearrange Makefile for clarityTony Ambardar2018-09-23
| | | | | | | | | | | | Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* | | Merge pull request #6500 from neheb/patch-7Dirk Brenken2018-10-12
|\ \ \ | | | | | | | | umurmur: Switch to tarball
| * | | umurmur: Switch to tarballRosen Penev2018-07-16
| | | | | | | | | | | | | | | | | | | | | | | | Should be a faster download Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | Merge pull request #7190 from yangfl/masterTed Hess2018-10-12
|\ \ \ \ | | | | | | | | | | i2pd: Update to 2.21.0
| * | | | i2pd: Update to 2.21.0David Yang2018-10-12
| | | | | | | | | | | | | | | | | | | | Signed-off-by: David Yang <mmyangfl@gmail.com>
* | | | | Merge pull request #7175 from sartura/sysrepo-release-0.7.5Hannu Nyman2018-10-12
|\ \ \ \ \ | | | | | | | | | | | | Sysrepo release 0.7.5
| * | | | | Netopeer2: update to 0.6-r1Mislav Novakovic2018-10-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PR includes switch to codeload tarballs and rename from netopeer2 to Netopeer2 for better codeload integration. Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
| * | | | | sysrepo: update to 0.7.5Mislav Novakovic2018-10-11
| |/ / / / | | | | | | | | | | | | | | | Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
* | | | | Merge pull request #7192 from salzmdan/masterHannu Nyman2018-10-12
|\ \ \ \ \ | | | | | | | | | | | | knot: update to 2.7.3
| * | | | | knot: update to 2.7.3Daniel Salzman2018-10-12
| |/ / / / | | | | | | | | | | | | | | | Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
* | | | | net/mwan3: update version to 2.7.4Florian Eckert2018-10-12
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | net/mwan3: add downtime ubus informationFlorian Eckert2018-10-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Get downtime information for the tracked mwan3 wan interfaces. The information shows how long this interface is in disconnected state. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | net/mwan3: add uptime ubus informationFlorian Eckert2018-10-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Get uptime information for the tracked mwan3 wan interfaces. The information shows how long this interface is in connected state. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | net/mwan3: also add the metric to the default interface routing tableFlorian Eckert2018-10-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is now the same route as in the main table. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | net/mwan3: fixup parse json_load an null messageKyson Lok2018-10-12
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | If a interface is down, call ubus will return an null message which is used to json_load, it causes json_get_vars gets value from last load and l3_device various is nonzero. Signed-off-by: Kyson Lok <kysonlok@gmail.com>
* | | | Merge pull request #7166 from ptpt52/mwan3-fixHannu Nyman2018-10-10
|\ \ \ \ | | | | | | | | | | mwan3: rtmon: filter out linkdown routing table
| * | | | net/mwan3: update version to 2.7.3Chen Minqiang2018-10-10
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
| * | | | mwan3: rtmon: filter out linkdown routing tableChen Minqiang2018-10-10
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* | | | | Merge pull request #7159 from EricLuehrsen/o1901_ub_181Hannu Nyman2018-10-10
|\ \ \ \ \ | | | | | | | | | | | | unbound: update to 1.8.1
| * | | | | unbound: update to 1.8.1Eric Luehrsen2018-10-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bug fixes for memory leaks bug fixes for DNS over TLS Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
* | | | | | sqm-scripts: select luci-base instead of depending on itJo-Philipp Wich2018-10-10
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently luci-app-sqm provided by sqm-scripts depends on luci-base instead of selecting it, this leads to an indirect circular dependency in kconfig: tmp/.config-package.in:34646:error: recursive dependency detected! For a resolution refer to Documentation/kbuild/kconfig-language.txt subsection "Kconfig recursive dependency limitations" tmp/.config-package.in:34646: symbol PACKAGE_iptables is selected by PACKAGE_sqm-scripts For a resolution refer to Documentation/kbuild/kconfig-language.txt subsection "Kconfig recursive dependency limitations" tmp/.config-package.in:961: symbol PACKAGE_sqm-scripts is selected by PACKAGE_luci-app-sqm For a resolution refer to Documentation/kbuild/kconfig-language.txt subsection "Kconfig recursive dependency limitations" tmp/.config-package.in:22421: symbol PACKAGE_luci-app-sqm depends on PACKAGE_luci-base For a resolution refer to Documentation/kbuild/kconfig-language.txt subsection "Kconfig recursive dependency limitations" tmp/.config-package.in:21387: symbol PACKAGE_luci-base is selected by PACKAGE_luci-lib-iptparser For a resolution refer to Documentation/kbuild/kconfig-language.txt subsection "Kconfig recursive dependency limitations" tmp/.config-package.in:22899: symbol PACKAGE_luci-lib-iptparser is selected by PACKAGE_luci-app-splash For a resolution refer to Documentation/kbuild/kconfig-language.txt subsection "Kconfig recursive dependency limitations" tmp/.config-package.in:22402: symbol PACKAGE_luci-app-splash is selected by PACKAGE_luci-mod-freifunk-community For a resolution refer to Documentation/kbuild/kconfig-language.txt subsection "Kconfig recursive dependency limitations" tmp/.config-package.in:21552: symbol PACKAGE_luci-mod-freifunk-community depends on PACKAGE_iptables Solve the issue by turning the dependencies into selecting ones which also matches the behaviour of other LuCI applications. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* | | | | wifidog: Change to use TLS above 1.0Rosen Penev2018-10-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This should fix compilation as wolfSSL currently does not define wolfTLSv1_client_method. And as the comment suggests, this is only TLS 1, not 1.0 and above. SSLv23 is TLS 1.1 and above as currently configured in the wolfssl package Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | net/ipvsadm: add Virtual Server Administration ToolFlorian Eckert2018-10-10
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | Add the ipvsadm command line tool to set up, maintain or inspect the virtual server table in the Linux kernel. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | Merge pull request #7156 from pacien/181008-pkg-tincSaverio Proto2018-10-09
|\ \ \ \ | | | | | | | | | | tinc: update to 1.0.35 (security update)
| * | | | tinc: update to 1.0.35Pacien TRAN-GIRARD2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Critical security update for: * CVE-2018-16737, * CVE-2018-16738, * CVE-2018-16758 Announcement: https://www.tinc-vpn.org/pipermail/tinc/2018-October/005311.html Signed-off-by: Pacien TRAN-GIRARD <pacien.trangirard@pacien.net>
* | | | | Merge pull request #7161 from Ansuel/nginxupThomas Heil2018-10-09
|\ \ \ \ \ | |/ / / / |/| | | | nginx: update to latest release
| * | | | nginx: update to latest releaseAnsuel Smith2018-10-09
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
* | | | | keepalived: disable libnlStijn Tintel2018-10-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When libnl is enabled and libnl-genl is disabled, libnl-genl-3.so.200 is installed by InstallDev, and keepalived picks it up anyway. This causes build to fail with the following error: Package keepalived is missing dependencies for the following libraries: libnl-genl-3.so.200 Instead of having a conditional dependency it is better to have a consistent build. Disable libnl to enforce this. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | strongswan: bump to 5.7.0Stijn Tintel2018-10-07
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | git: update to 2.19.1Peter Wagner2018-10-06
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | | strongswan: backport upstream fixes for CVEs in gmp pluginMagnus Kroken2018-10-06
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes: * CVE-2018-16151 * CVE-2018-16152 * CVE-2018-17540 Details: https://strongswan.org/blog/2018/09/24/strongswan-vulnerability-(cve-2018-16151,-cve-2018-16152).html https://strongswan.org/blog/2018/10/01/strongswan-vulnerability-(cve-2018-17540).html Signed-off-by: Magnus Kroken <mkroken@gmail.com>
* | | | Merge pull request #7140 from dibdot/travelmateDirk Brenken2018-10-05
|\ \ \ \ | | | | | | | | | | travelmate: update 1.2.4
| * | | | travelmate: update 1.2.4Dirk Brenken2018-10-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * with the config option 'trm_radio' you can now restrict travelmate to a single radio (e.g. 'radio1') or change the overall scanning order (e.g. 'radio1 radio2 radio0') * LuCI: show QR codes now inline on the overview page (collapsed by default) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | Merge pull request #7121 from Ansuel/nginxupHannu Nyman2018-10-02
|\ \ \ \ \ | | |/ / / | |/| | | nginx: update to latest release
| * | | | nginx: update to latest releaseAnsuel Smith2018-09-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
* | | | | gnurl: build without libpslDaniel Golle2018-10-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make sure gnURL doesn't link against libpsl. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | ola: depend on libftdi1Daniel Golle2018-09-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Building against libftdi1 can't be avoided in the presence of libftdi1 headers apparently. As it might be useful for some DMX adapters and such, depend on libftdi1 from now on. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | gnurl: update to version 7.61.1Daniel Golle2018-09-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | No release tarball has been published yet, use v7.61.1 git tag instead. Signed-off-by: Daniel Golle <daniel@makrotopia.org>