aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | | | | | | | net/mosquitto: install headers for auth plugin developmentDirk Feytons2018-11-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
* | | | | | | | shadowsocks-libev: bump to version 3.2.1Yousong Zhou2018-11-12
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | | | nginx: Bump to latest releaseAnsuel Smith2018-11-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
* | | | | | | Merge pull request #7373 from dibdot/banipDirk Brenken2018-11-11
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | banip: new package to block incoming & outgoing ip addresses
| * | | | | | | banip: new package to block incoming & outgoing ip addressesDirk Brenken2018-11-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | a new script based package called "banIP" to block incoming & outgoing ip adresses/subnets via ipset. Features: * a shell script which uses ipset and iptables to ban a large number of IP addresses published in various IP blacklists (bogon, firehol etc.) * support blocking by ASN numbers * support blocking by iso country codes * support local white & blacklist (IPv4, IPv6 & CIDR notation) * auto-add unsuccessful ssh login attempts to local blacklist * auto-add the uplink subnet to local whitelist * per source configuration of SRC (incoming) and DST (outgoing) * supports IPv4 & IPv6 Strong LuCI support: * easy interface to track & change all aspects of your ipset configuration on the fly * integrated IPSet-Lookup * integrated RIPE-Lookup * Log-Viewer & online configuration of white- & blacklist LuCI-Screenshots will follow in the second post. Forum discussion: https://forum.openwrt.org/t/banip-new-project-needs-testers-feedback/16985 Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | | | webui-aria2: dummy version bumpHannu Nyman2018-11-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The source download storage contains a 0 byte version of the webui-aria2 sources, which breaks buildbot. Trigger a new download by bumping the version by a date. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | | | | | Merge pull request #6854 from neheb/apacheThomas Heil2018-11-11
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | apache: Update to 2.4.34
| * | | | | | | | apache: Update to 2.4.37Rosen Penev2018-11-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes at least: CVE-2017-15710 CVE-2017-15715 CVE-2018-1283 CVE-2018-1312 Added CPE ID for proper CVE tracking. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | Merge pull request #6931 from chris5560/radicale_masterHannu Nyman2018-11-11
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | radicale: add extra command "export_storage" to init script
| * | | | | | | | | radicale: add extra command "export_storage" to init scriptChristian Schoenebeck2018-09-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | add extra command "export_storage" to export data for use with Radicale 2.x.x remove myself as PKG_MAINTAINER, give back to the community Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
* | | | | | | | | | socat: Fix compile with deprecated APIs disabledRosen Penev2018-11-10
| |_|_|_|_|/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | nft-qos: use prerouting chain rather than inputRosy Song2018-11-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Using the input chain can only limit the upload rate in local network. Since to do the limit rate on both native and remote, we have to replace the input hook with prerouting. Signed-off-by: Rosy Song <rosysong@rosinson.com> (Added Makefile version bump) Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* | | | | | | | | Merge pull request #7377 from dibdot/adblockDirk Brenken2018-11-10
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | adblock: fix adguard source
| * | | | | | | | | adblock: fix adguard sourceDirk Brenken2018-11-10
| | |_|/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix regex for adguard blocklist source Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | | | | nlbwmon: receive dhcp interface triggersKevin Darbyshire-Bryant2018-11-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Not all interfaces may have been allocated address at nlbwmon startup so it may not collect statistics as expected/configured. Add interface triggers to catch dhcp events and restart as required. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* | | | | | | | | net: dhcpcd: bump version to 7.0.8Marko Ratkaj2018-11-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
* | | | | | | | | jool: Remove inactive maintainerDan Lüdtke2018-11-10
|/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Dan Lüdtke <mail@danrl.com>
* | | | | | | | Merge pull request #6974 from neheb/miniupnopcHannu Nyman2018-11-10
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | miniupnpc: Update to 2.1
| * | | | | | | | miniupnpc: Update to 2.1Rosen Penev2018-09-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Switched URL to official HTTPS variant. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | openvswitch: fix building intree datapath module unconditionallyYousong Zhou2018-11-10
| |_|_|_|_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes f2bf8d3 ("openvswitch: provide in-tree kmod builds") Closes openwrt/packages#7360 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | | | | Merge pull request #7321 from neheb/tgtHannu Nyman2018-11-09
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | tgt: Update to 1.0.74
| * | | | | | | | tgt: Update to 1.0.74Rosen Penev2018-11-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove KERNEL_AIO dependency to avoid recursive dependency with libaio in a future commit. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | Merge pull request #7355 from diizzyy/nginx-rtmpHannu Nyman2018-11-09
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | nginx: Update rtmp module
| * | | | | | | | | nginx: Update rtmp moduleDaniel Engberg2018-11-08
| | |_|_|_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change to ut0mt8's fork that contains several enhancements and bugfixes. Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* | | | | | | | | net/mosquitto: bump to 1.5.4Karl Palsson2018-11-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security and bugfix release. Full release notes available at: https://mosquitto.org/blog/2018/11/version-154-released/ Security: * client certificates not validated for websockets listeners. Bugfixes: * wills with disconnected clients better handled * bridge restart_timeout properly observed Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | | | | Merge pull request #7332 from sartura/squid_bump_version_to_4.4Marko Ratkaj2018-11-09
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | net: squid: bump version to 4.4
| * | | | | | | | | net: squid: bump version to 4.4Marko Ratkaj2018-11-06
| | |_|_|_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Simple bump from 4.3 to 4.4 Changelog since 4.3: netdb not saving to disk (#311) Fix memory leak when parsing SNMP packet (#313) Fix several windows build issues (#309) Certificate fields injection via %D in ERR_SECURE_CONNECT_FAIL (#306) Allow compilation with minimal OpenSSL (#281) Fixed %USER_CA_CERT_xx and %USER_CERT_xx crashes (#301) Improve const correctness for hash_link (#300) Bug #4893: Malformed %>ru URIs for CONNECT requests (#299) Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
* | | | | | | | | znc: Fix compilation without deprecated APIs in OpenSSL 1.0.2Rosen Penev2018-11-08
| |_|_|_|_|_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com> [correct configure flag from enable-ssl to enable-openssl] Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* | | | | | | | Merge pull request #7295 from neheb/unboundHannu Nyman2018-11-08
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | | unbound: Remove deprecated OpenSSL API
| * | | | | | | unbound: Remove deprecated OpenSSL APIRosen Penev2018-11-05
| | |/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will become pointless once OpenSSL 1.1.1 enters the tree. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #7315 from diizzyy/patch-16Hannu Nyman2018-11-06
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | fping: Update to 4.1
| * | | | | | | fping: Update to 4.1Daniel Engberg2018-11-05
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update fping to 4.1 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* | | | | | | Merge pull request #7316 from diizzyy/patch-17Hannu Nyman2018-11-06
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | stunnel: Update to 5.49
| * | | | | | | stunnel: Update to 5.49Daniel Engberg2018-11-05
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update stunnel to 5.49 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
* | | | | | | Merge pull request #6193 from rosysong/nqosHannu Nyman2018-11-06
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nft-qos: add new package
| * | | | | | | nft-qos: add new packageRosy Song2018-11-06
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is the nftables implementation for qos on OpenWrt, Currently, it has below features: * Static QoS : setting limit rate for devices or global network. * Dynamic/Auto QoS : setting limit rate according to the network bandwidth and adjust itself automatically (hotplug event). * Traffic Priority : this feature is like traffic shaping under tc, it uses ingress hook to handle to packets here. Signed-off-by: Rosy Song <rosysong@rosinson.com>
* / / / / / / tor-fw-helper: new packageJeffery To2018-11-06
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tor-fw-helper is a helper to automatically configuring port forwarding for tor, using UPnP or NAT-PMP NAT traversal. This is a tor-fw-helper rewrite in Go that functions as a drop in replacement for the original C code. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | Merge pull request #5781 from jefferyto/obfs4proxyHannu Nyman2018-11-04
|\ \ \ \ \ \ | | | | | | | | | | | | | | obfs4proxy: new packages (including dependencies)
| * | | | | | obfs4proxy: new packages (including dependencies)Jeffery To2018-06-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | obfs4proxy is a Tor pluggable transport proxy, implementing obfs4. This commit also includes obfs4proxy's build time dependencies: * golang-github-agl-ed25519: Go implementation of Ed25519 signature algorithm * golang-github-dchest-siphash: Go implementation of SipHash-2-4 * golang-golang-x-crypto: Go supplementary cryptography libraries * golang-golang-x-net: Go supplementary network libraries * golang-golang-x-sys: Go packages for interaction with the OS * golang-golang-x-text: Go text processing support * golang-torproject-pluggable-transports-goptlib: Tor pluggable transports library for Go Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | | tor:update to 0.3.4.9Peter Wagner2018-11-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | | | | Merge pull request #7258 from jonathanunderwood/stubby_documentationDirk Brenken2018-11-04
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | stubby: add reload_config to documentation
| * | | | | | | stubby: add reload_config to documentationJonathan G. Underwood2018-10-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
* | | | | | | | Merge pull request #7257 from jonathanunderwood/stubby_fix_initDirk Brenken2018-11-04
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | stubby: fix loading of config file
| * | | | | | | | stubby: fix loading of config fileJonathan G. Underwood2018-10-27
| |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
* | | | | | | | stubby: add Jonathan Underwood as co-maintainer (#7307)jonathanunderwood2018-11-04
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
* | | | | | | | Merge pull request #7278 from neheb/seafileHannu Nyman2018-11-03
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | seafile-ccnet: Update to 6.3.4
| * | | | | | | | seafile-ccnet: Update to 6.3.4Rosen Penev2018-10-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Switched to codeload for easier package bumping. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | Merge pull request #6811 from Robby-/master-freeradius3-eap-pwdHannu Nyman2018-11-03
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | freeradius3: Enable the EAP-PWD module.
| * | | | | | | | | freeradius3: Enable the EAP-PWD module.Robby K2018-08-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This enables the EAP-PWD module, which allows for logging in with only a username and password, while still being secure (see the links below for the details of this EAP method, if interested). https://en.wikipedia.org/wiki/Extensible_Authentication_Protocol#EAP_Password_(EAP-PWD) Also found this blog post which talks about EAP-PWD and its benefits: https://dustri.org/b/eap-pwd-wifi-security-done-right.html Signed-off-by: Robby K <robbyke@gmail.com>
* | | | | | | | | | haproxy: Update all patches for HAProxy v1.8.14Christian Lachner2018-11-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Add new patches (see https://www.haproxy.org/bugs/bugs-1.8.14.html) - Raise PKG_RELEASE to 4 Signed-off-by: Christian Lachner <gladiac@gmail.com>