aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* lftp: update to 4.9.2Rosen Penev2020-08-27
| | | | | | Remove upstreamed patch. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* Merge pull request #13218 from neheb/waveRosen Penev2020-08-27
|\ | | | | wavemon: fix compilation with glibc
| * wavemon: fix compilation with glibcRosen Penev2020-08-26
| | | | | | | | | | | | -lpthread is needed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | Merge pull request #13220 from aaronjg/openfortivpn/config-varname-fixRosen Penev2020-08-27
|\ \ | | | | | | openfortivpn: use more standard config option names
| * | openfortivpn: use more standard config option namesAaron Goodman2020-08-26
| |/ | | | | | | | | | | | | | | | | change 'server' to 'peeraddr' change 'iface_name' to 'tunlink' fix some indentation issues Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
* | ovn: include ovn-appctlYousong Zhou2020-08-27
| | | | | | | | | | | | | | | | | | Required by ovn-ctl for stopping ovn ovsdb instances This utility was introduced since 20.03.0 after the project was maintained in its own repo Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | curl: add optional zlib supportTony Butler2020-08-26
| | | | | | | | | | | | | | | | | | | | | | | | | | Package libcurl is missing dependencies for the following libraries: libzstd.so.1 Previous patch by Hans Dedecker <dedeckeh@gmail.com> took the easy way out :) Suggested-by: Syrone Wong <wong.syrone@gmail.com> Signed-off-by: Tony Butler <spudz76@gmail.com> [fixed title] Signed-off-by: Paul Spooren <mail@aparcar.org>
* | curl: Use wolfssl by defaultHauke Mehrtens2020-08-26
| | | | | | | | | | | | | | | | Instead of using mbedtls by default use wolfssl. We now integrate wolfssl in the default build so use it also as default ssl library for curl. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | curl: Fix build with wolfsslHauke Mehrtens2020-08-26
| | | | | | | | | | | | | | | | | | Backport a commit from upstream curl to fix a problem in configure with wolfssl. checking size of time_t... configure: error: cannot determine a size for time_t Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | curl: add package (previously in base)Paul Spooren2020-08-26
|/ | | | | | | Move package over from openwrt.git based on the Hamburg 2019 decision that non essential packages should be maintained in packages.git Signed-off-by: Paul Spooren <mail@aparcar.org>
* dawn: bump versionNick Hainke2020-08-26
| | | | | | | Includes: - datastorage: fix hearingmap not synced Signed-off-by: Nick Hainke <vincent@systemli.org>
* Merge pull request #13139 from aaronjg/openfortivpn/ppp-netifd-fixRosen Penev2020-08-25
|\ | | | | openfortivpn: fix routes passed to netifd
| * openfortivpn: fix routes passed to netifdAaron Goodman2020-08-22
| | | | | | | | | | | | | | | | | | | | The openfortivpn routes are a bit different than the standard ppp routes so we need to handle them with a custom ppp-up script. Gateway should not be set, and src should be set to the PPP local ip address. Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
* | ovn: bump to version 20.06.2Yousong Zhou2020-08-25
| | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | openvswitch: bump to version 2.14.0Yousong Zhou2020-08-25
| | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | sshtunnel: correct access of config fileRosen Penev2020-08-24
| | | | | | | | | | | | | | With this change the `/etc/config/sshtunnel` file has the correct access. It's a sensible file. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | Merge pull request #12762 from ngrsdhbw/feature_ddns_cloudflare_bearerRosen Penev2020-08-24
|\ \ | | | | | | ddns-scripts: Support Bearer Token for Cloudflare
| * | ddns-scripts: cloudflare.com-v4: Simplify Bearer Token supportNorman Gehrsitz2020-08-18
| | | | | | | | | | | | Signed-off-by: Norman Gehrsitz <gehrsitz.norman@student.dhbw-kahlsruhe.de>
* | | Merge pull request #13193 from sartura/sysrepoRosen Penev2020-08-24
|\ \ \ | | | | | | | | Update sysrepo, libyang, libnetconf2 and netopeer2 packages to latest versions
| * | | netopeer2: update to 1.1.39Jakov Smolic2020-08-22
| | | | | | | | | | | | | | | | Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>
| * | | sysrepo: update to 1.4.70Jakov Smolic2020-08-22
| | | | | | | | | | | | | | | | Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>
* | | | Merge pull request #13174 from neheb/davRosen Penev2020-08-24
|\ \ \ \ | | | | | | | | | | davfs2: update to 1.6.0
| * | | | davfs2: update to 1.6.0Rosen Penev2020-08-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Removed now unnecessary gcc10 patch. Removed neon patch. It's now upstream. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | Merge pull request #13192 from peter-stadler/nginxRosen Penev2020-08-23
|\ \ \ \ \ | | | | | | | | | | | | nginx: update to version 1.19.2
| * | | | | nginx: update to version 1.19.2Peter Stadler2020-08-22
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
* | | | | | bind: New upstream version 9.16.6Noah Meyerhans2020-08-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Several security issures are addressed: - CVE-2020-8620 It was possible to trigger an assertion failure by sending a specially crafted large TCP DNS message. - CVE-2020-8621 named could crash after failing an assertion check in certain query resolution scenarios where QNAME minimization and forwarding were both enabled. To prevent such crashes, QNAME minimization is now always disabled for a given query resolution process, if forwarders are used at any point. - CVE-2020-8622 It was possible to trigger an assertion failure when verifying the response to a TSIG-signed request. - CVE-2020-8623 When BIND 9 was compiled with native PKCS#11 support, it was possible to trigger an assertion failure in code determining the number of bits in the PKCS#11 RSA public key with a specially crafted packet. - CVE-2020-8624 update-policy rules of type subdomain were incorrectly treated as zonesub rules, which allowed keys used in subdomain rules to update names outside of the specified subdomains. The problem was fixed by making sure subdomain rules are again processed as described in the ARM. Full release notes are available at https://ftp.isc.org/isc/bind9/9.16.6/doc/arm/html/notes.html#notes-for-bind-9-16-6 Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | | | | | Merge PR #13179 via local branch.Michael Heimpold2020-08-23
|\ \ \ \ \ \
| * | | | | | net/u2pnpd: convert init to procdKarl Palsson2020-08-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Drops pid files, no longer needed with procd management. Now properly reloads on reload_config after UCI changes. Signed-off-by: Karl Palsson <karlp@etactica.com> [ Fixed two shellcheck warnings and bump PKG_RELEASE ] Signed-off-by: Michael Heimpold <mhei@heimpold.de>
* | | | | | | Merge pull request #13137 from neheb/iscRosen Penev2020-08-23
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | isc-dhcp: fix compilation with GCC 10
| * | | | | | | isc-dhcp: fix compilation with GCC 10Rosen Penev2020-08-15
| | |_|_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #13191 from Foxtrot/add-fakepopRosen Penev2020-08-23
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | fakepop: add new package
| * | | | | | | fakepop: Fix PKG_LICENSE, remove libc dependencyMarc Egerton2020-08-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Marc Egerton <foxtrot@realloc.me>
| * | | | | | | fakepop: new packageMarc Egerton2020-08-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fakepop is a fake pop3 daemon. It returns always the same messages to all users, it does not care about usernames and passwords. All user/pass combinations are accepted. Signed-off-by: Marc Egerton <foxtrot@realloc.me>
* | | | | | | | i2pd: Update to 2.32.1David Yang2020-08-23
| |_|_|/ / / / |/| | | | | | | | | | | | | | | | | | | | Signed-off-by: David Yang <mmyangfl@gmail.com>
* | | | | | | Merge pull request #13097 from lzto/nft-qos-macRosen Penev2020-08-21
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | nft-qos: support mac address based speed limit
| * | | | | | | nft-qos: support mac address based speed limitTong Zhang2020-08-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch makes it possible to configure and limit per-client internet speed based on MAC address and it can work with SQM. This feature is what OpenWRT currently lacks. This patch is largely based on static.sh and the configuration file is similar to original nft-qos. New configuration options and examples are listed below config default 'default' option limit_mac_enable '1' config client option drunit 'kbytes' option urunit 'kbytes' option hostname 'tv-box' option macaddr 'AB:CD:EF:01:23:45' option drate '1000' option urate '50' config client option drunit 'kbytes' option urunit 'kbytes' option hostname 'my-pc' option macaddr 'AB:CD:EF:01:23:46' option drate '3000' option urate '2000' limit_mac_enable - enable rate limit based on MAC address drunit - download rate unit urunit - upload rate unit macaddr - client MAC address drate - download rate urate - upload rate Signed-off-by: Tong Zhang <ztong0001@gmail.com>
* | | | | | | | simple-adblock: bugfix: update config; use command -vStan Grishin2020-08-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* | | | | | | | Merge pull request #13184 from PolynomialDivision/feature/dawnupdateRosen Penev2020-08-21
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | dawn: bump to latest version
| * | | | | | | | dawn: bump to latest versionNick Hainke2020-08-22
| | |_|_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes: - dawn_uci: fix crashing when uci config is received - tcpsocket: add option to add server ip A new config option allows to add a server ip option server_ip '10.0.0.2' However, this server does not send anything back. Therefore it is not possible to change the node configuration. This will probably be added soon. The main goal of this commit is to allow monitoring of all nodes in a network with DAWN, e.g. clients, channel utilization, ... Also a network option (3) has been added which allows to use TCP but not to announce your daemon in the broadcast domain. This allows you to create a monitor-only node that holds only the local information and forwards it to the central server. A monitor-only node could be configured like option server_ip '10.0.0.1' option tcp_port '1026' option network_option '3' Another possible config is option server_ip '10.0.0.1' option tcp_port '1026' option network_option '2' Here, the node shares information with a central server, which can be located outside the broadcast domain. Nevertheless, it also shares information within its broadcast domain and can therefore perform client steering. Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | | | | | Merge pull request #13175 from neheb/fpiRosen Penev2020-08-21
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | | fping: update to 5.0
| * | | | | | | fping: update to 5.0Rosen Penev2020-08-19
| | |_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Minor cleanups. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | | | Merge pull request #13177 from aleksander0m/aleksander/mm-1-14-2Rosen Penev2020-08-20
|\ \ \ \ \ \ \ | |_|_|_|_|/ / |/| | | | | | modemmanager: bump to 1.14.2
| * | | | | | modemmanager: bump to 1.14.2Aleksander Morgado2020-08-20
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | https://lists.freedesktop.org/archives/modemmanager-devel/2020-August/008099.html Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
* | | | | | Merge pull request #13111 from neheb/tgtRosen Penev2020-08-20
|\ \ \ \ \ \ | |/ / / / / |/| | | | | tgt: remove bzero usage
| * | | | | tgt: remove bzero usageRosen Penev2020-08-13
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | bzero is deprecated and replaced by memset. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | net/mosquitto: Update to 1.6.12Karl Palsson2020-08-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security release. From the changelog: - In some circumstances, Mosquitto could leak memory when handling PUBLISH messages. This is limited to incoming QoS 2 messages, and is related to the combination of the broker having persistence enabled, a clean session=false client, which was connected prior to the broker restarting, then has reconnected and has now sent messages at a sufficiently high rate that the incoming queue at the broker has filled up and hence messages are being dropped. This is more likely to have an effect where max_queued_messages is a small value. This has now been fixed. Closes https://github.com/eclipse/mosquitto/issues/1793 Changelog: https://mosquitto.org/blog/2020/08/version-1-6-12-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | Merge pull request #13041 from aaronjg/mwan3-startup-performanceFlorian Eckert2020-08-19
|\ \ \ \ \ | |_|/ / / |/| | | | mwan3: startup performance improvements and other fixes
| * | | | mwan3: improve startup performance; version 2.9.0Aaron Goodman2020-08-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | improve startup and runtime performance by 1) moving common startup procedures out of hotplug script when called from mwan3 start 2) reducing calls to iptables to check status of rules 3) consolidating iptables updates and updating with iptables-restore 4) do not wait for kill if nothing was killed 5) running interface hotplug scripts in parallel 6) eliminate operations in hotplug script that check status on every single interface unnecessarily 7) consolidate how mwan3track makes hotplug calls 8) do not restart mwan3track on connected events This is a significant refactor, but should not result in any breaking changes or require users to update their configurations. version bump to 2.9.0 Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
| * | | | mwan3: use ip monitor route to detect routing changesAaron Goodman2020-08-15
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | use only committed uci changes for updating routing table use functions.sh functions rather than uci command line tool to find interfaces for routing table. consolidate rtmon_ipv4 and rtmon_ipv6 functions into a single function Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
* | | / python3: Use hash-checking mode when installing host pip packagesJeffery To2020-08-17
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In hash-checking mode[1], pip will verify downloaded package archives (source tarballs in our case) against known SHA256 hashes before installing the packages. As a consequence, this requires the use of requirements files[2] and pinning packages to known versions. The syntax for package Makefiles has changed slightly; HOST_PYTHON3_PACKAGE_BUILD_DEPENDS no longer accepts requirement specifiers like "foo>=1.0", only requirements file names (which are the same as package names in the most common case). This also updates affected packages, in particular: * python-zipp: "setuptools_scm[toml]" has been split into "setuptools-scm toml" to reuse the requirements file for setuptools-scm (the extra depends installed by "setuptools_scm[toml]" is toml). * python-pycparser: This previously used ply 3.10, whereas the requirements file will now install 3.11. [1]: https://pip.pypa.io/en/stable/reference/pip_install/#hash-checking-mode [2]: https://pip.pypa.io/en/stable/user_guide/#requirements-files Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Powered by cgit, Themed by Ted Yin.