| Commit message (Collapse) | Author | Age |
... | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
* https://curl.se/changes.html#7_88_1
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
| |_|_|/
|/| | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Maintainer : @yangfl (David Yang)
Build system : Arch Linux x86_64
Build tested : r7800 OpenWrt git master (r22104-01262c921c)
Run tested : r7800 OpenWrt git master (r22104-01262c921c)
Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Update crowdsec to latest upstream release version 1.4.6
Signed-off-by: S. Brusch <ne20002@gmx.ch>
Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.3
|
| |/ /
|/| |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* add oisdbig as new feed
* LuCI frontend preparation:
- the json feed file points always to /etc/banip/banip.feeds (and is no longer compressed)
- supply country list in /etc/banip/banip.countries
* update readme
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* add missing wan-forward chain (incl. report/mail adaption)
* changed options:
- old: ban_blockforward, new: ban_blockforwardwan and ban_blockforwardlan
- old: ban_logforward, new: ban_logforwardwan and ban_logforwardlan
* add missing dhcp(v6) rules/exceptions
* update readme
Previously run tested by certain forum users (and by me).
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Maintainers : @hauke (Hauke Mehrtens) and @tripolar (Peter Wagner)
Build system : Arch Linux x86_64
Build tested : r7800 OpenWrt git master (r22104-01262c921c)
Run tested : r7800 OpenWrt git master (r22104-01262c921c)
Signed-off-by: Daniel Bermond <danielbermond@gmail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Zuev Aleksandr <A.Zuev@stdev.su>
|
|\ \ \
| |_|/
|/| | |
ddns-scripts: enable IPv6 for easydns.com
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
easydns.com has supported IPv6 for awhile now using
the same update URL as IPv4. This duplicates the IPv4
entry for IPv6 to enable support for it.
Signed-off-by: James Buren <braewoods+mgh@braewoods.net>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Moritz Warning <moritzwarning@web.de>
|
|\ \ \
| |/ /
|/| | |
https-dns-proxy: 2022-10-15-11 update
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* config file update
* introduce boot() function
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|/ /
| |
| |
| |
| |
| | |
Fixes CVE-2023-22490, CVE-2023-23946
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
|
| |
| |
| |
| |
| |
| | |
* remove bogus log limit
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
|\ \
| | |
| | | |
lighttpd: update to lighttpd 1.4.69 release hash
|
| | |
| | |
| | |
| | | |
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
add lighttpd-mod-webdav_min package alternative to lighttpd-mod-webdav
lighttpd-mod-webdav_min is more minimal than full lighttpd-mod-webdav.
lighttpd-mod-webdav_min does not support PROPPATCH, LOCK, UNLOCK, and
by not supporting those methods, removes dependencies on libxml2,
libsqlite3, and libuuid.
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* properly initialize the 'proto' variable in the log service
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
| |/
|/|
| |
| | |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
| |
| |
| |
| |
| |
| |
| | |
* fix a potential race condition during initial startup (after flash) which leads to a "disabled" service
Signed-off-by: Dirk Brenken <dev@brenken.org
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
|\ \
| | |
| | | |
treewide: prepare packages for OpenSSL 3.0 update
|
| | |
| | |
| | |
| | |
| | |
| | | |
This adds an upstream commit to allow building with OpenSSL 3.0.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
This adds a patch from upstream allowing to build with OpenSSL 3.0.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
Remove a call to CRYPTO_mem_ctrl(), which is used only for debugging,
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
This is the latest version and brings compatibility with OpenSSL 3.0.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This version adds compatibility with OpenSSL 3.0.
There's a patch, submitted upstream, to fix building without SSL.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Add -Wno-error=deprecated-declarations to CFLAGS to allow usage of
deprecated API.
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Jan Hák <jan.hak@nic.cz>
|
|\ \ \
| |_|/
|/| | |
transmission: retrieve boolean config opts using `config_get_bool`
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
The tranmission UCI config options
- `config_overwrite`
- `incomplete_dir_enabled`
- `watch_dir_enabled`
are all booleans, so we have to retrieve them using `config_get_bool` in order
to make sure they are properly interpreted in case the user sets them to a
keyword (`true`/`false`, `on`/`off` etc.) and not an integer (`0`/`1`).
Signed-off-by: Salim B <git@salim.space>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* implement procd_boot_wan_timeout support
* update config with oisd ABPlus and domains lists
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|\ \ \
| | | |
| | | | |
simple-adblock: update to 1.9.4-1
|
| | |/
| |/|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* update default config for new oisd.nl lists
* conf.update file to migrate oisd.nl lists to the new format
* introduce AdBlockPlus lists support (new oisd.nl format)
* longer wait for WAN up/gateway detection
* make load_environemnt only execute once to suppress duplicate
warnings/errors
PS. While I was testing this, oisd.nl has brought back the old domains
lists as well, so this version supports both as I'm unclear as to
why the "big" ABPlus list is only 6.2Mb where as the "big" domains
list is whopping 19.9Mb.
Signed-off-by: Stan Grishin <stangri@melmac.ca>
|
|\ \ \
| | | |
| | | | |
banip: release 0.8.0 (nft rewrite)
|
| | |/
| |/|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
- complete rewrite of banIP to support nftables
- all sets are handled in a separate nft table/namespace 'banIP'
- for incoming blocking it uses the inet input hook, for outgoing blocking it uses the inet forward hook
- full IPv4 and IPv6 support
- supports nft atomic set loading
- supports blocking by ASN numbers and by iso country codes
- 42 preconfigured external feeds are available, plus local allow- and blocklist
- supports local allow- and blocklist (IPv4, IPv6, CIDR notation or domain names)
- auto-add the uplink subnet to the local allowlist
- provides a small background log monitor to ban unsuccessful login attempts in real-time
- the logterms for the log monitor service can be freely defined via regex
- auto-add unsuccessful LuCI, nginx, Asterisk or ssh login attempts to the local blocklist
- fast feed processing as they are handled in parallel as background jobs
- per feed it can be defined whether the input chain or the forward chain should be blocked (default: both chains)
- automatic blocklist backup & restore, the backups will be used in case of download errors or during startup
- automatically selects one of the following download utilities with ssl support: aria2c, curl, uclient-fetch or wget
- supports a 'allowlist only' mode, this option restricts internet access from/to a small number of secure websites/IPs
- provides comprehensive runtime information
- provides a detailed set report
- provides a set search engine for certain IPs
- feed parsing by fast & flexible regex rulesets
- minimal status & error logging to syslog, enable debug logging to receive more output
- procd based init system support (start/stop/restart/reload/status/report/search)
- procd network interface trigger support
- ability to add new banIP feeds on your own
- add a readme with all available options/feeds to customize your installation to your needs
- a new LuCI frontend will be available in due course
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* adapted changed oisd downloads (again), fixed #20516
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
| | |
| | |
| | |
| | |
| | |
| | | |
add support for port-range dailer, port-range listener
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
|
| |/
|/|
| |
| |
| |
| | |
Dropped architectures that are no longer supported by upstream.
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
| |
| |
| |
| | |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
| |
| |
| |
| | |
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
|
|/
|
|
|
|
|
|
|
|
| |
* adapted changed oisd namings / download locations
oisd_big (old: oisd_full), oisd_small (old: oisdb_basic)
* added antipopads as new sources
* removed broken energized source
* fixed readme
Signed-off-by: Dirk Brenken <dev@brenken.org>
|
|
|
|
| |
Signed-off-by: Ralf Kaiser <skyper@thc.org>
|
|\
| |
| | |
unbound: update to version 1.17.1
|
| |
| |
| |
| |
| |
| |
| | |
- Refreshed one patch
- Removed deprecated AUTORELEASE
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
|
| |
| |
| |
| | |
Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
|