aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* nextdns: Update to version 1.41.0Olivier Poitrey2023-10-08
| | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* sshtunnel: update version to 5.1Sergey Ponomarev2023-10-08
| | | | | | Make it depends on ether Dropbear dbclient or OpenSSH client Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* sshtunnel: allow empty port and userSergey Ponomarev2023-10-08
| | | | | | | | A user may have some host configured in the .ssh/config with user and port. But we anyway have to specify them in the sshtunnel. The change fixes this Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* sshtunnel: add enabled optionSergey Ponomarev2023-10-08
| | | | Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* sshtunnel: allow empty remoteaddressSergey Ponomarev2023-10-08
| | | | | | Just empty or * may have some semantic difference on a server Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* sshtunnel: StrictHostKeyChecking for DropbearSergey Ponomarev2023-10-08
| | | | | | | | | | | | | | | | | The dbclient doesn't support the -o StrictHostKeyChecking but it has it's own -y option: -y Always accept remote host key if unknown -y -y Don't perform any remote host key checking (caution) So we can add these options to make the StrictHostKeyChecking working. The dbclient will ignore -o StrictHostKeyChecking but use the -y or -yy instead. The only problem is that the -y flag is also used by the openssh-client: -y Send log information using the syslog(3) system module. By default this information is sent to stderr. This is not critical and once the dbclient start to support the StrictHostKeyChecking we can remove the -y flag. Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* sshtunnel: Use -i $IdentityFile instead of -o IdentityFile=$IdentityFileSergey Ponomarev2023-10-08
| | | | | | This makes the sshtunnel compatible with Dropbear. Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* sshtunnel: set StrictHostKeyChecking=accept-new by defaultSergey Ponomarev2023-10-08
| | | | | | | | | | Without the option the ssh will propt a user to accept the host key. So a user should perform a connection manualy and accept before useing the sshtunnel. The accept-new is a reasonable trade off. Also the LogLevel is INFO by default. Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* sshtunnel: uci_sshtunnel use example.comSergey Ponomarev2023-10-08
| | | | Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* sshtunnel: uci_sshtunnel simplifySergey Ponomarev2023-10-08
| | | | | | | | Simplify comment and make it shorter. Remove triling tab after retrydelay. Use a full path for IdentityFile because otherwise the uci validation fails with the relative path ~/.ssh Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
* Merge pull request #22309 from BKPepe/tor-fw-helperJeffery To2023-10-07
|\ | | | | tor-fw-helper: remove it
| * tor-fw-helper: remove itJosef Schlehofer2023-10-05
| | | | | | | | | | | | | | | | | | This package does not receive any update since 2015. [1] It seems unmaintained and most likely not used at all. [1] https://gitweb.torproject.org/tor-fw-helper.git/ Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | Merge pull request #22311 from stangri/master-adblock-fastStan Grishin2023-10-06
|\ \ | | | | | | adblock-fast: bugfix: properly identify hosts-files
| * | adblock-fast: bugfix: properly identify hosts-filesStan Grishin2023-10-05
| |/ | | | | | | | | | | * escape dots in grep command to properly identify hosts files Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | Merge pull request #22298 from TDT-AG/pr/20231004-keepalivedFlorian Eckert2023-10-06
|\ \ | | | | | | keepalived: update to version 2.2.8
| * | keepalived: add notify_up and notify_down for virtual serverFlorian Eckert2023-10-04
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | keepalived: add PING_CHECK to real_serverFlorian Eckert2023-10-04
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | keepalived: update to version 2.2.8Florian Eckert2023-10-04
| |/ | | | | | | | | | | | | See release-notes: https://www.keepalived.org/release-notes/Release-2.2.8.html Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | Merge pull request #22273 from ne20002/crowdsec-firewall-bouncerTianling Shen2023-10-06
|\ \ | | | | | | crowdsec-firewall-bouncer: new upstream release version 0.0.28
| * | crowdsec-firewall-bouncer: new upstream release version 0.0.28S. Brusch2023-10-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: S. Brusch <ne20002@gmx.ch> Maintainer: Kerma Gérald <gandalf@gk2.net> Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.0-rc3 Description: Update crowdsec-firewall-bouncer to latest upstream release version 0.0.28
* | | openssh: bump to 9.5p1John Audia2023-10-05
| |/ |/| | | | | | | | | | | | | | | | | Changelog: https://www.openssh.com/txt/release-9.5 Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne Signed-off-by: John Audia <therealgraysky@proton.me>
* | wget: Update to 1.21.4Tianling Shen2023-10-04
| | | | | | | | | | | | Removed upstreamed patches and unneeded autoreconf. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | banip: release 0.9.1-1Dirk Brenken2023-10-03
| | | | | | | | | | | | | | | | | | * drop packets silently on input and forwardwan chains or actively reject the traffic, set 'ban_blocktype' accordingly * optimized banIP boot/reload handling * removed pppoe quirk in device detection * small fixes and optimizations Signed-off-by: Dirk Brenken <dev@brenken.org>
* | Merge pull request #22280 from dynasticorpheus/irssi-1.4.5Alexandru Ardelean2023-10-03
|\ \ | | | | | | irssi: update to 1.4.5
| * | irssi: update to 1.4.5Fabian Lipken2023-10-03
| |/ | | | | | | Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
* | Merge pull request #22268 from stangri/master-adblock-fastAlexandru Ardelean2023-10-03
|\ \ | | | | | | adblock-fast: update to 1.0.0-5
| * | adblock-fast: update to 1.0.0-5Stan Grishin2023-10-02
| | | | | | | | | | | | | | | | | | | | | * improve processing of dnsmasq config files * do not run sed/show error if allow_filter is empty Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | Merge pull request #22228 from Ansuel/atftpJosef Schlehofer2023-10-03
|\ \ \ | | | | | | | | atftp: bump to release 0.8.0 + PCRE2
| * | | atftp: move to PCRE2Christian Marangi2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Move atftp to PCRE2 as PCRE is flagged as EOL and won't receive security updates anymore. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
| * | | atftp: bump to release 0.8.0Christian Marangi2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Bump to release 0.8.0. Autorecong is now needed to correctly compile the package. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | Merge pull request #22256 from Ansuel/aircrack-ng-pcre2Josef Schlehofer2023-10-03
|\ \ \ \ | |_|_|/ |/| | | aircrack-ng: bump to release 1.7 + PCRE2
| * | | aircrack-ng: backport patch and move package to pcre2Christian Marangi2023-10-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Backport patch merged upstream for PCRE2 support and move package to pcre2. Also add an additional patch pending to fix linking both pcre and pcre2 if autotools detect both library. (aircrack-ng prefer pcre2 in presence of both) Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
| * | | aircrack-ng: bump to release 1.7Christian Marangi2023-10-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bump aircrack-ng to release 1.7 Changelog from [1] Airdecap-ng: Endianness fixes Airdecap-ng: Output PCAP as little endian Airodump-ng: Fixed blank encryption field when APs have TKIP (and/or CCMP) with WPA2 Airodump-ng: Updated encryption filter (-t/--encrypt) for WPA3 and OWE Airodump-ng: Fixed out-of-order timestamp captures Airodump-ng: Ignore NULL PMKID Airodump-ng: Fixed dropping management frames with zeroed timestamp Airodump-ng: Fixed sorting where sometimes it started with a different field Airodump-ng: Allow setting colors only in AP selection mode Airodump-ng: Fix crash on 4K Linux console Airodump-ng: Fixed issue where existing clients not linked to an AP become hidden when hitting 'o' Airodump-ng: Allow use of WiFi 6E 6GHz frequencies Airodump-ng: Look for oui.txt in /usr/share/hwdata Airgraph-ng: Fixed graphviz package conflict Airgraph-ng: Fixed downloading OUI with python3 Airgraph-ng: Ensure support/ directory is created when installing Aircrack-ng: Fixed static compilation Aircrack-ng: Fix handshake replay counter logic Aircrack-ng: Handle timeout when parsing EAPOL Aircrack-ng: Fixed WEP display Aircrack-ng: Fixed spurious EXIT messages Aircrack-ng: Improved handshake selection by fixing EAPOL timing and clearing state Aircrack-ng: Ignore NULL PMKID Aircrack-ng: Added Apple M1 detection Aireplay-ng: In test mode, detect tampering of sequence number by firmware/driver Aireplay-ng: Fixed incorrectly rewritten loops affecting fragmentation attack, and in some cases, SKA fake auth Aireplay-ng: Fixed a bunch of instances where packets had their duration updated instead of the sequence number Airmon-ng: Fix avahi killing Airmon-ng: rewrite service stopping entirely Airmon-ng: Codestyle fixes and code cleanup Airmon-ng: Added a few Raspberry Pi hardware revisions Airmon-ng: Fixes for 8812au driver Airmon-ng: Fix iwlwifi firmware formatting Airmon-ng: Remove broken KVM detection Airmon-ng: Show regdomain in verbose mode Airmon-ng: Updated Raspberry Pi hardware revisions Airmon-ng: Document frequency usage Airmon-ng: Add a sleep to help predictable names due to udev sometimes renaming interface Airmon-ng: Added warning for broken radiotap headers in kernel 5.15 to 5.15.4 Airmon-ng: shellcheck fixes Airmon-ng: support systemctl as some systems don't support 'service' anymore Airmon-ng: Fixes for pciutils 3.8, backward compatible Airbase-ng: use enum for frame type/subtype Airbase-ng: remove a few IE in association responses Besside-ng: Support and detect all channels in 5GHz in Auto-Channel mode OSdep: Search additional IE for channel information OSdep: Android macro fixes Patches: Add missing patches that were on https://patches.aircrack-ng.org but not in repo Patches: Updated freeradius-wpe patch for v3.2.0 Patches: Updated hostapd-wpe patch for v2.10 Patches: Added docker containers to test WPE patches Autotools: make dist now creates VERSION file Autotools: Added maintainer mode Autotools: Initial support for Link Time Optimization (LTO) builds Integration tests: Added a new test, and improved some existing ones Airgraph-ng: switch airodump-join to Python 3 Manpages: Fixes (typos, tools name, etc.) and improvements README: Updated dependencies and their installation on various distros in README.md and INSTALLING README: Fixed typos and spelling in README.md and INSTALLING Packages: Packages on PackageCloud now support any distro using .deb and .rpm, however, it requires reinstalling repo (BREAKING CHANGE) General: Fix compilation with LibreSSL 3.5 General: Fix issues reported by Infer General: Updated buildbots General: Add Linux uclibc support General: Compilation fixes on macOS with the Apple M1 CPU General: Removed TravisCI and AppVeyor General: Use Github Actions for CI (Linux, Win, macOS, code style, and PVS-Studio) General: Added vscode devcontainer and documentation General: Fix warnings from PVS-Studio and build with pedantic (See PR2174) General: Shell script fixes thanks to shellcheck General: Fixes for GCC 10 and 11 General: Fixed cross-compilation General: Code refactoring, deduplication, cleanup, and misc code improvements General: Coverity Scan fixes, which includes memory leaks, race conditions, division by 0, and other issues General: PVS Studio improvements,fixes and updates General: Code formatting/style fixes General: Various fixes and improvements (code, CI, integration tests, coverity) General: Update bug reporting template and update the process [1] https://aircrack-ng.blogspot.com/2022/05/aircrack-ng-17.html Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | | netavark: update to 1.8.0Oskari Rauta2023-10-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | changelog: - iptables: improve error when ip6?tables commands are missing - docs: Convert markdown with go-md2man instead of mandown - iptables: drop invalid packages - bump rust edition to 2021 - Add ACCEPT rules in firewall for bridge network with internal dns - Add vrf support for bridges Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | aardvark-dns: update to 1.8.0Oskari Rauta2023-10-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | changes: - dependency updates Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | netbird: update to 0.23.6Oskari Rauta2023-10-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | A lot of changes since previous packaged openwrt version of netbird, changes available at: https://github.com/netbirdio/netbird/releases Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* | | | irssi: update to 1.4.4Fabian Lipken2023-10-01
| |_|/ |/| | | | | | | | | | | | | | | | | | | | update to 1.4.4 switch to meson remove obsolete patch Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
* | | net-snmp: move to PCRE2 libraryChristian Marangi2023-09-30
|/ / | | | | | | | | | | | | | | | | | | Add upstream patch adding support for pcre2 and update dependency to require libpcre2 instead of libpcre. --with-pcre2-8 is now needed to exclude support for pcre and only require pcre2 as net-snmp still use and try to use pcre by default. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | Merge pull request #22241 from stangri/master-adblock-fastStan Grishin2023-09-29
|\ \ | | | | | | adblock-fast: better error reporting when nothing to do
| * | adblock-fast: better error reporting when nothing to doStan Grishin2023-09-28
| | | | | | | | | | | | | | | | | | * also nicer file type output in high verbosity Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | kismet: drop the packageJosef Schlehofer2023-09-29
|/ / | | | | | | | | | | | | | | | | | | | | This package is no longer maintained in OpenWrt even though it is maintained by upstream. The last update was done in August 2016 and because we have 2023, drop this package without replacement. If anyone from the community wants to step in and retake the maintainership together with the update, feel free to do it. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | openthread-br: fix actually buildingRosen Penev2023-09-28
| | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | mdnsresponder: move libdns_sd into own directoryRosen Penev2023-09-28
| | | | | | | | | | | | Prevents conflicts with avahi, which is better maintained. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | Merge pull request #22221 from stangri/master-adblock-fastStan Grishin2023-09-27
|\ \ | | | | | | adblock-fast: bugfix: better detect ABP lists
| * | adblock-fast: bugfix: better detect ABP listsStan Grishin2023-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * bugfix: better detect ABP lists * update Makefile with BUSYBOX features dependencies * update the type of dnsmasq_instance setting * add error message when file type can't be detected * add reporting when file type can't be detected * bugfix: include URL on errors related to URL processing/parsing * rename resolver function to resolver_config to better reflect its use Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | stunnel: update version to 5.71Florian Eckert2023-09-27
| | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | bind: bump to 9.18.19Noah Meyerhans2023-09-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVEs: CVE-2023-3341 - Previously, sending a specially crafted message over the control channel could cause the packet-parsing code to run out of available stack memory, causing named to terminate unexpectedly. CVE-2023-4236 - A flaw in the networking code handling DNS-over-TLS queries could cause named to terminate unexpectedly due to an assertion failure under significant DNS-over-TLS query load. Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | | tailscale: Update to 1.50.0Zephyr Lykos2023-09-27
| | | | | | | | | | | | Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | | apache: move to PCRE2Christian Marangi2023-09-27
| | | | | | | | | | | | | | | | | | | | | Move apache to PCRE2 now that PCRE is flagged EOL and won't receive any security update. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | apache: bump to release 2.4.57Christian Marangi2023-09-27
| | | | | | | | | | | | | | | | | | Bump apache to release 2.4.57 and refresh patch automatically. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Powered by cgit, Themed by Ted Yin.