aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
| * | | | | | | | | | | unbound: fix odhcpd link and axfr zone scriptsEric Luehrsen2018-10-24
| |/ / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - fix AXFR zones to delay a potentially large download with ntp-hotplug - fix odhcpd link script to properly delete expired lease data from DNS Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
* | | | | | | | | | | Merge pull request #7247 from TDT-AG/pr/20181023-mwan3Dirk Brenken2018-10-25
|\ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / |/| | | | | | | | | | net/mwan3: improvements
| * | | | | | | | | | net/mwan3: update version to 2.7.5Florian Eckert2018-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | | | | | net/mwan3: add online_metric for local_source noneFlorian Eckert2018-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If we set the option "local_source" in the globals mwan3 section to "none", traffic generated by the router it self will always use the default route from the wan interface with the lowest metric. If this interface is down the router traffic still uses the connection with the lowest metric but this is disconnected. Load balancing and failover from the lan site is still possible. Only router generated traffic is not load balanced and could not use failover. To solve this issue with router initiated traffic add the additional option "online_metric" to the mwan3 interface section. If the interface is connected then this lower "online metric" is set in the default routing table. With this change we have at least a failover with router initiated traffic. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | | | | | net/mwan3: add dynamic ipsets to mwan3_connected ipsetsFlorian Eckert2018-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | During runntime of mwan3 we could add dynamicly networks to this ipset which would then treated as connected networks by mwan3. This is also usefull for ipsec. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | | | | | net/mwan3: add custom address from ip tables to connected ipsetFlorian Eckert2018-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With the list param "rt_table_lookup" in the mwan3 section globals, it is now possible to add a additional routing table numbers which would get also parsed and will be added to the connected network. So mwan3 will treat them as they are directly connected to this device. This could be usefull if we use ipsec. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | | | | | net/mwan3: cleanup egrep ipv6 regexFlorian Eckert2018-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The IPv6 egrep regex is confusing and hard to maintain. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | | | | | net/mwan3: enhance ipset status generationFlorian Eckert2018-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change should optimize and speed up the status output generation. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | | | | | net/mwan3: reduce duplicate codeFlorian Eckert2018-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The generation for reporting the policies uses the same code add a common function to reduce duplication. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | | | | | | net/mwan3: cleanup/prettify 80 characters code boundaryFlorian Eckert2018-10-23
| | |_|_|_|_|_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Prettify and cleanup source Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* / | | | | | | | | gnunet: adapt uci-defaults to renamed namestore-flat -> -heapDaniel Golle2018-10-25
|/ / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | | | | clamav: Update to 0.100.2Rosen Penev2018-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2018-15378. Added PKG_CPE_ID for proper CVE tracking. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | gnunet: update sourceDaniel Golle2018-10-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | | | | openssh: fixes issues with some openssl optionsPeter Wagner2018-10-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds a couple of patches when setting some openssl options: * ECDSA code in openssh-compat.h and libressl-api-compat.c needs to be be guarded by OPENSSL_HAS_ECC; otherwise, it will not build with openssl compiled without ECC support. * Fix openssl version number in openbsd-compat/openssl-compat.c which failed to compile --with-ssl-engine; this option is used when CONFIG_OPENSSL_ENGINE_CRYPTO=y Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | | | | | | strongswan: bump to 5.7.1Stijn Tintel2018-10-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | | | | | openssh: update to 7.9p1Peter Wagner2018-10-19
|/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | | | | | net/mosquitto: add CPE_IDKarl Palsson2018-10-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | | | | net/safe-search: new packageGregory L. Dietsche2018-10-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This package forces the use of Google and Bing safe search by default. It does this by adding hosts files for dnsmasq to use. These hosts replace the normal IP addresses for Google and Bing with addresses that force safe search to be turned on all the time. Google and Bing Safe Search are suitable for most businesses, schools, and families who wish to block adult content. This package also offers YouTube's restricted and 'restricted moderate' via a configuration option. The reason that this is not enabled is that it is probably more suitable for children rather than a wide audience. This package is designed so that other services that offer safe search can be added easily in the future. For more information about safe search please visit these URLs: - https://support.google.com/websearch/answer/186669 - https://help.bing.microsoft.com/#apex/18/en-US/10003/0 - https://support.google.com/a/answer/6212415 Signed-off-by: Gregory L. Dietsche <gregory.dietsche@cuw.edu>
* | | | | | | | net-snmp: update to 5.8Rosen Penev2018-10-17
| |_|/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Disable PCRE process searching to avoid linking against libprce, which would cause the build to fail due to a missing dependency. With the --without-pcre switch, build fails due to an undefined reference, so do it via CONFIGURE_VARS instead. Signed-off-by: Rosen Penev <rosenp@gmail.com> [disable PCRE process searching] Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | | | Merge pull request #7206 from teslamint/chilli_ipv6Dirk Brenken2018-10-17
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | coova-chilli: honor CONFIG_IPv6 option
| * | | | | | | coova-chilli: honor CONFIG_IPv6 optionJaehoon You2018-10-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes #7120. Signed-off-by: Jaehoon You <teslamint@gmail.com>
* | | | | | | | Merge pull request #7199 from Andy2244/samba4-fix_hostnameDirk Brenken2018-10-17
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | | samba4: fix hostname if not defined via Dnsmasq
| * | | | | | | samba4: fix hostname if not defined via DnsmasqAndy Walsh2018-10-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * use kernel fs to get the hostname, drop domainname Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | | | | Merge pull request #5876 from fantom-x/nlbwmon_niceKevin D-B2018-10-16
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | net/nlbwmon: run with lower priority
| * | | | | | | | net/nlbwmon: run with lower priorityMarc Benoit2018-04-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Even on a powerful platform a nlbwmon process' activities are sometimes affecting throoughput and latency. This is a backgroud process, that should not be running with default priority. Even if it is a little deplayed, that is not a worry in this case. The routing should be the main priority, bandwidth stats collection can wait a bit. Tested on Netgear R7800 Signed-off-by: Marc Benoit <marcb62185@gmail.com>
* | | | | | | | | Merge pull request #7182 from neheb/darkTed Hess2018-10-15
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | darkstat: Remove libbsd dependency
| * | | | | | | | | darkstat: Remove libbsd dependencyRosen Penev2018-10-15
| | |_|/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | darkstat includes its own strlcat and strlcpy, making the dependency somewhat pointless. Fixes compilation ever since glibc dependency on libbsd was removed. Also removed std=gnu99 as it's not needed with GCC7. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | Merge pull request #6970 from cotequeiroz/squid_4.2Marko Ratkaj2018-10-15
|\ \ \ \ \ \ \ \ \ | |_|_|/ / / / / / |/| | | | | | | | squid: update to version 4.3
| * | | | | | | | squid: update to version 4.3Eneas U de Queiroz2018-10-08
| | |_|_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added some help to the choice of TLS library in menuconfig, taken from the squid release notes. Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
* | | | | | | | Merge pull request #7122 from jonathanunderwood/stubby_uciDirk Brenken2018-10-14
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | stubby: enable configuration through uci system
| * | | | | | | | stubby: add uci support to init fileJonathan G. Underwood2018-10-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit brings UCI support to the stubby package. o All options are documented in the README.md file. o The README.md file has been re-written to include a short usage manual. o The default configuration now includes more Cloudflare addresses. o The stubby service is (re)started using procd triggers from a specified interface with a configurable time delay. o Round robin use of upstream resolvers is now activated by default. o Client privacy is now activated by default. o Options are added for specifying the log level of the daemon and command line options passed to the stubby command. Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
* | | | | | | | | Merge pull request #7142 from neheb/patch-9Dirk Brenken2018-10-14
|\ \ \ \ \ \ \ \ \ | |/ / / / / / / / |/| | | | | | | | rsyslog: Update to 8.38
| * | | | | | | | rsyslog: Update to 8.38Rosen Penev2018-10-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | Merge pull request #6707 from guidosarducci/master-fixup-stubbyDirk Brenken2018-10-14
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | stubby: some fixes, cleanup, and improvements
| * | | | | | | | | stubby: bump PKG_RELEASETony Ambardar2018-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * | | | | | | | | stubby: remove unnecessary core limitTony Ambardar2018-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove the limit setting core="unlimited", since this shouldn't be needed in production use (i.e. non-debug) and on an embedded platform, which is why it's rarely used by any existing packages. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * | | | | | | | | stubby: add SPKI pin set for Cloudflare certTony Ambardar2018-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add an SPKI pin for Cloudflare to help prevent MITM and downgrade attacks, as described in RFC7858 (DNS over TLS). The setup of SPKI and the specific SHA256 certificate hash are taken from Cloudflare's DoT configuration guide published at https://developers.cloudflare.com/1.1.1.1/dns-over-tls/. Note that the certificate is valid to March 25th 2020, 13:00 CET, which provides ample time for issuance of a backup pin to support future key rollover. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * | | | | | | | | stubby: add Cloudflare 1.0.0.1 and ::1001 serversTony Ambardar2018-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * | | | | | | | | stubby: use EDNS client-subnet privacy by defaultTony Ambardar2018-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Retain the upstream value since privacy is usually the key user motivation for using DNS-over-TLS, and simply note that those encountering sub-optimal routing may consider disabling the setting. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * | | | | | | | | stubby: fix config file definitionTony Ambardar2018-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The config file /etc/stubby/stubby.yml is not registered properly and any local changes are being overwritten on upgrade or reinstall. Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
| * | | | | | | | | stubby: rearrange Makefile for clarityTony Ambardar2018-09-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* | | | | | | | | | Merge pull request #6500 from neheb/patch-7Dirk Brenken2018-10-12
|\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | umurmur: Switch to tarball
| * | | | | | | | | | umurmur: Switch to tarballRosen Penev2018-07-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Should be a faster download Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | | | | | Merge pull request #7190 from yangfl/masterTed Hess2018-10-12
|\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | i2pd: Update to 2.21.0
| * | | | | | | | | | | i2pd: Update to 2.21.0David Yang2018-10-12
| | |_|_|_|/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: David Yang <mmyangfl@gmail.com>
* | | | | | | | | | | Merge pull request #7175 from sartura/sysrepo-release-0.7.5Hannu Nyman2018-10-12
|\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Sysrepo release 0.7.5
| * | | | | | | | | | | Netopeer2: update to 0.6-r1Mislav Novakovic2018-10-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PR includes switch to codeload tarballs and rename from netopeer2 to Netopeer2 for better codeload integration. Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
| * | | | | | | | | | | sysrepo: update to 0.7.5Mislav Novakovic2018-10-11
| |/ / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
* | | | | | | | | | | Merge pull request #7192 from salzmdan/masterHannu Nyman2018-10-12
|\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | knot: update to 2.7.3
| * | | | | | | | | | | knot: update to 2.7.3Daniel Salzman2018-10-12
| |/ / / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
Powered by cgit, Themed by Ted Yin.