aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | Merge pull request #21666 from pprindeville/isc-dhcp-drop-uci_get_statePhilip Prindeville2023-07-26
|\ \ | | | | | | isc-dhcp: deprecate use of uci_get_state in client scripts
| * | isc-dhcp: use network_get_device in client scriptsPhilip Prindeville2023-07-25
| | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | openvpn: update to 2.6.5 and add DCO supportMartin Schiller2023-07-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit updates openvpn to version 2.6.5 and add DCO support. There are several changes: - Starting with version 2.6.0, the sources are only provided as .tar.gz file. - removed OPENVPN_<variant>_ENABLE_MULTIHOME: multihome support is always included and cannot be disabled anymore with 2.6.x. - removed OPENVPN_<variant>_ENABLE_DEF_AUTH: deferred auth support is always included and cannot be disabled anymore with 2.6.x. - removed OPENVPN_<variant>_ENABLE_PF: PF (packet filtering) support was removed in 2.6.x. - The internal lz4 library was removed in 2.6.x; we now use the liblz4 package if needed - To increase reproducibility, _DATE_ is only used for development builds and not in release builds in 2.6.x. - wolfSSL support was integrated into upstream openvpn - DES support was removed from openvpn The first two wolfSSL patches were created following these 2 commits: https://github.com/OpenVPN/openvpn/commit/4cf01c8e4381403998341aa32f79f4bf24c7ccb1 https://github.com/OpenVPN/openvpn/commit/028b501734b4a57dc53edb8b11a4b370f5b99e38 Signed-off-by: Martin Schiller <ms@dev.tdt.de>
* | | transmission: add copy_file_range syscall to seccompMarius Dinu2023-07-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes this crash: root@RPi3OpenWrt:/# grep -i seccomp /var/log/audit/audit.log type=SECCOMP msg=audit(1689503903.597:16): auid=4294967295 uid=224 gid=1012 ses=4294967295 pid=1752 comm="transmission-da" exe="/usr/bin/transmission-daemon" sig=31 arch=c00000b7 syscall=285 compat=0 ip=0x7fa3b0eefc code=0x80000000 root@RPi3OpenWrt:/# ausyscall 285 copy_file_range root@RPi3OpenWrt:/# Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
* | | knxd: new upstream version 0.14.59Othmar Truniger2023-07-24
| | | | | | | | | | | | Signed-off-by: Othmar Truniger <github@truniger.ch>
* | | modemmanager: improve 'simple connection' option handlingFlorian Eckert2023-07-24
| | | | | | | | | | | | | | | | | | | | | | | | The line to generate the argument list for 'simple connect' is quite long and is not maintainable. To improve the handling a function 'append_param' was added for appending the 'simple connect' options. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | modemmanager: Adding support for 'allow_roaming' optionFrancisco Jose Alvarez2023-07-24
| | | | | | | | | | | | | | | | | | | | | Signed-off-by: Francisco Jose Alvarez <francisco.alvarez@galgus.net> * Update commit head * Rebase patch to the latest changes Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | modemmanger: add missing proto_init_update in teardownFlorian Eckert2023-07-24
| | | | | | | | | | | | | | | | | | | | | Inform netifd with missing 'proto_update', that the interface is not up anymore. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | modemmanager: do not set proto_notify_error on teardownFlorian Eckert2023-07-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If on teardown the 'proto_notify_error' is set to 'MM_TEARDOWN_IN_PROGRESS', then an error which is set on 'setup' is not visible in the ubus network.interface.<iface> status output. { "up": false, "pending": false, "available": true, "autostart": false, "dynamic": false, "proto": "modemmanager", "data": { }, "errors": [ { "subsystem": "dualsim", "code": "MM_TEARDOWN_IN_PROGRESS" } ] } It alway shows the code 'MM_TEARDWON_IN_PROGRESS'! By removing the line 'proto_notify_error "${interface}" MM_TEARDOWN_IN_PROGRESS' in teardown, the last error is show in the proto stack from setup. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | Merge pull request #16300 from maxrd2/modemmanager-plmn-supportFlorian Eckert2023-07-24
|\ \ \ | | | | | | | | modemmanager: support setting plmn
| * | | modemmanager: support setting plmnMladen Milinkovic2023-07-21
| | | | | | | | | | | | | | | | Signed-off-by: Mladen Milinkovic <maxrd2@smoothware.net>
* | | | Merge pull request #21631 from stangri/master-https-dns-proxyStan Grishin2023-07-23
|\ \ \ \ | | | | | | | | | | https-dns-proxy: improve CLI messaging
| * | | | https-dns-proxy: improve CLI messagingStan Grishin2023-07-23
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | Merge pull request #21431 from stangri/master-nebulaStan Grishin2023-07-23
|\ \ \ \ \ | |_|_|_|/ |/| | | | nebula: update to 1.7.2 (and cosmetic fixes)
| * | | | nebula: update to 1.7.2 (and cosmetic fixes)Stan Grishin2023-06-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update binaries to 1.7.2 * move sharedMemoryOutput variable declaration into output function as it doesn't need to be global * rename parse_yaml function to yaml_parse * add TODOs for future development * update copyright datestamps Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | Merge pull request #21628 from stangri/master-simple-adblockStan Grishin2023-07-23
|\ \ \ \ \ | | | | | | | | | | | | simple-adblock: dnsmasq access bugfix & misc improvements
| * | | | | simple-adblock: dnsmasq access bugfix & misc improvementsStan Grishin2023-07-23
| | |/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix permission to dnsmasq files for ad-blocking * add pause function to pause the ad-blocking temporarily * introduce pause_timeout option to control default pause time * update default config and config-update file * use $param instead of $1 in adb_start() Signed-off-by: Stan Grishin <stangri@melmac.ca>
* / | | | softflowd: bump to 1.1.0Stijn Tintel2023-07-23
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tag is now prefixed with v; update PKG_SOURCE_URL and PKG_BUILD_DIR to reflect this. Drop upstreamed patches. Refresh leftover patch. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | snort3: update to 3.1.66.0John Audia2023-07-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upstream bump Build system: x86/64 Build-tested: x86/64 Run-tested: x86/64 Signed-off-by: John Audia <therealgraysky@proton.me>
* | | | rclone: Update to 1.63.1Tianling Shen2023-07-22
| |/ / |/| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | dnsproxy: Update to 0.52.0Tianling Shen2023-07-19
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | cloudflared: Update to 2023.7.1Tianling Shen2023-07-19
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | snowflake: update to 2.6.0Nick Hainke2023-07-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Tor projects tries to migrate away from git.torproject.org [0,1]. We need to adjust PKG_SOURCE and GO_PKG name. Further, we need to backport patches to fix compiling on riscv64, so add: - 0001-Bump-minimum-required-version-of-go.patch - 0002-Update-dependencies.patch Changelog: https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/commit/2fa8fd9188078eaa169f1edd16815deae4004c6c [0] - https://gitlab.torproject.org/tpo/anti-censorship/team/-/issues/86 [1] - https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/commit/82cc0f38f73c4ca4e12d22173562a092ebd4dea0 Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | transmission: add ftruncate syscall to seccompMarius Dinu2023-07-18
| |/ |/| | | | | | | | | Fixes many crashes. Signed-off-by: Marius Dinu <m95d+git@psihoexpert.ro>
* | Merge pull request #21577 from commodo/tcpreplayAlexandru Ardelean2023-07-16
|\ \ | | | | | | tcpreplay: bump to version 4.4.4
| * | tcpreplay: bump to version 4.4.4Alexandru Ardelean2023-07-16
| | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
* | | banip: release 0.9.0-1Dirk Brenken2023-07-16
|/ / | | | | | | | | | | | | | | | | | | * supports allowing / blocking of certain VLAN forwards in segregated network environments, set 'ban_vlanallow', ''ban_vlanblock' accordingly * simplified the code/JSON to generate/parse the banIP status * enclose nft related devices in quotation marks , e.g. to handle devices which starts with a number '10g-1' * made the new vlan options available to LuCI (separate commit) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | cloudflared: Update to 2023.7.0Tianling Shen2023-07-14
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | ooniprobe: Update to 3.18.0Jeffery To2023-07-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This version includes support for Go 1.20 (specifically 1.20.5). This also: * Adds a workaround for musl 1.2.4 compatibility in mattn/go-sqlite3[1] * Sets GO_PKG_BUILD_PKG to build the main binary (ooniprobe) only * Updates the package license; the project was relicensed in 3.13.0[2] [1]: https://github.com/mattn/go-sqlite3/issues/1164 [2]: https://github.com/ooni/probe-cli/pull/446 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | adguardhome: bump to 0.107.33Dobroslaw Kijowski2023-07-13
| | | | | | | | | | | | | | | | | | | | * Full changelog available at: * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.30 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.31 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.32 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.33 Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
* | ocserv: updated to 1.2.0Nikos Mavrogiannopoulos2023-07-11
| | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* | nginx-util: fix compilation with GCC13Rosen Penev2023-07-11
| | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | tailscale: update to 1.44.0Zephyr Lykos2023-07-10
| | | | | | | | Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | snort3: update to 3.1.65.0John Audia2023-07-10
| | | | | | | | | | | | | | | | | | | | Upstream bump Build system: x86_64 Build-tested: x86_64/AMD 5800U Run-tested: x86_64/AMD 5800U Signed-off-by: John Audia <therealgraysky@proton.me>
* | iperf3: update to 3.14John Audia2023-07-10
| | | | | | | | | | | | | | Release Notes: https://github.com/esnet/iperf/blob/master/RELNOTES.md Signed-off-by: John Audia <therealgraysky@proton.me>
* | banip: update 0.8.9-4Dirk Brenken2023-07-09
| | | | | | | | | | | | * made the etag id parsing more bulletproof (to catch unverified etags as well) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | banip: update 0.8.9-3Dirk Brenken2023-07-08
| | | | | | | | | | | | | | * prevent superflous etag function calls during start action (on start backups will be used anyway) * changed the ipthreat feed download URL (load a compressed file variant to save bandwidth) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | pdns: update to 4.8.1Peter van Dijk2023-07-08
| | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | frp: update to 0.51.0Van Waholtz2023-07-08
| | | | | | | | | | | | | | | | | | | | | | XTCP is incompatible with previous versions since 0.49.0. Changelog: https://github.com/fatedier/frp/releases/tag/v0.49.0 https://github.com/fatedier/frp/releases/tag/v0.50.0 https://github.com/fatedier/frp/releases/tag/v0.51.0 Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | banip: update 0.8.9-2Dirk Brenken2023-07-07
| | | | | | | | | | | | * fix a corner case backup issue with empty feed downloads Signed-off-by: Dirk Brenken <dev@brenken.org>
* | banip: release 0.8.9-1Dirk Brenken2023-07-07
| | | | | | | | | | | | | | | | | | * added HTTP ETag or entity tag support to download only ressources that have been updated on the server side, to save bandwith and speed up banIP reloads * added 4 new feeds: binarydefense, bruteforceblock, etcompromised, ipblackhole (see readme) * updated the readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | pdns-recursor: update to 4.9.0Peter van Dijk2023-07-07
| | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | Merge pull request #21496 from Ansuel/add-mtoolsJosef Schlehofer2023-07-07
|\ \ | | | | | | net-mtools: Add new package to debug multicast setups
| * | net-mtools: Add new package to debug multicast setupsChristian Marangi2023-07-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add new package to debug multicast setups. This is required to use kselftests script for network testing. net-mtools is used instead of mtools as it does conflicts with another package that is also called mtools. Some additional patch from Vladimir Oltean are added to make the tool works on kernel selftests scripts. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: don't install all module for FULL variantChristian Marangi2023-07-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We currently have a more or less circular dependency with nginx ssl and full variant. FULL variant depends on every nginx module. Every nginx module depends on nginx-ssl. Since nginx-full depends on an nginx module, nginx-ssl is installed as module depends on it and then the installation fails as nginx-full conflicts with nginx-ssl. nginx-full in it's meaning is nginx built with every config selected and it should not have module as dependency. In fact an user should always install them separetly as while other things, local modification to the nginx config file are required to include the just installed module. To fix this circular dependency problem, drop the dependency of every nginx module for FULL variant. Fixes: #21300 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: add quic modueTiago Gaspar2023-07-05
| | | | | | | | | | | | | | | | | | | | | | | | This commit adds support for http/3. This is an experimental version and isn't fully supported because nginx is being built with the regular OpenSSL and the regular one doesn't support quic. Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
* | | nginx: update to 1.25.1Tiago Gaspar2023-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update nginx to 1.25.1. *) Feature: the "http2" directive, which enables HTTP/2 on a per-server basis; the "http2" parameter of the "listen" directive is now deprecated. *) Change: HTTP/2 server push support has been removed. *) Change: the deprecated "ssl" directive is not supported anymore. *) Bugfix: in HTTP/3 when using OpenSSL. Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com> [ improve commit title and add nginx changelog ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: add support for MaxMind GeoIP2 databasesJavier Marcet2023-07-05
| | | | | | | | | | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* | | haproxy: update to v2.8.1Christian Lachner2023-07-05
| | | | | | | | | | | | | | | | | | | | | - Update haproxy PKG_VERSION and PKG_HASH - See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | rclone: Update to 1.63.0Tianling Shen2023-07-04
| | | | | | | | | | | | | | | | | | While at it fixed a typo error of license files variable. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Powered by cgit, Themed by Ted Yin.