aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* mwan3: update version to 2.11.0Florian Eckert2022-03-14
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: dump iptables and ipset command for debuggingFlorian Eckert2022-03-14
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: unify error messagesFlorian Eckert2022-03-14
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: add sleep to release ipset referenceFlorian Eckert2022-03-14
| | | | | | | | It turns out that under high system load, ipsets cannot be deleted. This is because there is still a reference in iptables. A short sleep should give the system time to clean this up. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: remove not needed ipset del cmdFlorian Eckert2022-03-14
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: Split ipsets into separate ipv4 and ipv6 setsFlorian Eckert2022-03-14
| | | | | | | | | | Nft does not directly support ipsets, nft sets must be used instead. The mwan3 uses ipsets for certain tasks. They can be combinded. So called an ipset of ipsets. This list type is not available in nft. So that mwan3 could be ported to nft in the feature, the ipset handling should be split. So we have for each ipset an iptables rule. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: use mwan3_push_update function for mwan3_delete_iface_iptablesFlorian Eckert2022-03-14
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: remove ipset generation from mwan3_set_general_iptablesFlorian Eckert2022-03-14
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: use sticky ipset generation mwan3_push_update patternFlorian Eckert2022-03-14
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: do not create dynamic ipset for IPv6 if not supportedFlorian Eckert2022-03-14
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: do not add mwan3_custom_v6 set if ipv6 is not availableFlorian Eckert2022-03-14
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: use also ipset restore for connected ipv4 setsFlorian Eckert2022-03-14
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: move command definitions to common.shFlorian Eckert2022-03-14
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* mwan3: update iptables dependenciesFlorian Eckert2022-03-14
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* geoipupdate: update to 4.9.0Matthew Hagan2022-02-23
| | | | Signed-off-by: Matthew Hagan <mnhagan88@gmail.com>
* frp: update to 0.39.0Van Waholtz2022-02-23
| | | | Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
* frp: add service_triggerVan Waholtz2022-02-23
| | | | Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
* frpc: add anonymous proxy config supportVan Waholtz2022-02-23
| | | | Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
* tcpreplay: bump to version 4.4.1Alexandru Ardelean2022-02-23
| | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* bwping: update to version 2.5Oleg Derevenetz2022-02-23
| | | | Signed-off-by: Oleg Derevenetz <oleg-derevenetz@yandex.ru>
* shorewall-core: fix build on macosSergey V. Lobanov2022-02-23
| | | | | | | | | | | | shorewall-core macos build fails due to: 1. MacOS bash is too old (3.x), but shorewall-core requires bash>4 This patch uses OpenWrt tools/bash built for macos (bash 5.x) 2. install.sh detects Darwin using uname and changes install logic, but it fails in case of cross-platform build This patch uses fakeuname/host tool to avoid Darwin detection Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* shorewall: fix build on macosSergey V. Lobanov2022-02-23
| | | | | | | | | | | | shorewall macos build fails due to: 1. MacOS bash is too old (3.x), but shorewall requires bash>4 This patch uses OpenWrt tools/bash built for macos (bash 5.x) 2. install.sh detects Darwin using uname and changes install logic, but it fails in case of cross-platform build This patch uses fakeuname/host tool to avoid Darwin detection Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* shorewall6-lite: fix build on macosSergey V. Lobanov2022-02-23
| | | | | | | | | | | | | | | | shorewall6-lite macos build fails due to: 1. MacOS bash is too old (3.x), but shorewall6-lite requires bash>4 This patch uses OpenWrt tools/bash built for macos (bash 5.x) 2. install.sh detects Darwin using uname and changes install logic, but it fails in case of cross-platform build This patch uses fakeuname/host tool to avoid Darwin detection 3. fakeuname does not work in install.sh because install.sh redefines PATH. This patch removes PATH=... from install.sh on macos Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* shorewall6: fix build on macosSergey V. Lobanov2022-02-23
| | | | | | | | | | | | shorewall6 macos build fails due to: 1. MacOS bash is too old (3.x), but shorewall6 requires bash>4 This patch uses OpenWrt tools/bash built for macos (bash 5.x) 2. install.sh detects Darwin using uname and changes install logic, but it fails in case of cross-platform build This patch uses fakeuname/host tool to avoid Darwin detection Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* shorewall-lite: fix build on macosSergey V. Lobanov2022-02-23
| | | | | | | | | | | | | | | | | shorewall-lite macos build fails due to: 1. MacOS bash is too old (3.x), but shorewall-lite requires bash>4 This patch uses OpenWrt tools/bash built for macos (bash 5.x) 2. install.sh detects Darwin using uname and changes install logic, but it fails in case of cross-platform build This patch uses fakeuname/host tool to avoid Darwin detection 3. fakeuname does not work in install.sh because install.sh redefines PATH. This patch removes PATH=... from install.sh on macos Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* i2pd: Update packageR4SAS I2P2022-02-23
| | | | | | | * Update to 2.41.0 * Added use AUTORELEASE Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
* htpdate: drop www.freebsd.org from default server listJo-Philipp Wich2022-02-22
| | | | | | | | | | The FreeBSD project stopped publishing HTTP date headers and seeks to limit further resource taxing by distributed htpdate clients using the www.freebsd.org host as default time source. Fixes: #17924 Reported-by: Allan Jude <allanjude@freebsd.org> Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* yggdrasil: bump to 0.4.3George Iv2022-02-21
| | | | Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>
* gnunet: packaging fixesDaniel Golle2022-02-20
| | | | | | | * include gnunet-service-zonemaster-monitor in gnunet-gns package * rename namestore-heap back to namestore-flat Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* usteer: update to latest git headDavid Bauer2022-02-19
| | | | | | | | | | | 98247d1 usteer: track RRM and BSS-TM support per connection 6ec60fc ubus: add BSS-transition-management support f462de0 local-node: fetch bss-transition-management support c5242dd ubus: add supported beacon-measurement modes 0dd47b1 local-node: convert kick-dely to absolute time 96976ba readme: add initial README Signed-off-by: David Bauer <mail@david-bauer.net>
* haproxy: Update HAProxy to v2.4.13Christian Lachner2022-02-17
| | | | | | | - Update haproxy download URL and hash - Updated upstream patches Signed-off-by: Christian Lachner <gladiac@gmail.com>
* uacme: proper ualpn integrationLucian Cristian2022-02-17
| | | | | | ualpn works only with openssl and gnutls, so default build will not have this included Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* dnsproxy: Update to 0.41.2Tianling Shen2022-02-17
| | | | | | Fixed typo error: `AUTORELESE` -> `AUTORELEASE`. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* uacme: pack ualpn.shLucian Cristian2022-02-16
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* frr: branch update, mips64 fixLucian Cristian2022-02-16
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* Merge pull request #17850 from BKPepe/unboundJosef Schlehofer2022-02-16
|\ | | | | unbound: update to version 1.15.0
| * unbound: update to version 1.15.0Josef Schlehofer2022-02-11
| | | | | | | | | | | | Refresh patch Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | openvpn-easy-rsa: make it reproducibleLuiz Angelo Daros de Luca2022-02-15
| | | | | | | | | | | | | | | | | | The "build" script was replacing a ~DATE~ with current date. Now it uses $(SOURCE_DATE_EPOCH). Fixes #17848 Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
* | ksmbd-tools: update to 3.4.4Rosen Penev2022-02-14
| | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | obfs4proxy: Update to 0.0.13Jeffery To2022-02-14
| | | | | | | | Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | phantap: switch to nftablesEtienne Champetier2022-02-12
| | | | | | | | | | | | | | | | e80be64 Remove disable_eap_hack b066ce2 Switch to nftables / firewall4 4d88b0b Do not harcode build flags Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | ipvsadm: fix build on macosSergey V. Lobanov2022-02-12
| | | | | | | | | | | | | | | | | | | | | | | | ipvsadm build fails on macos due to libipvs Makefiles uses system `ar` that is not compatible with the objectes generated by OpenWrt GCC Toolchain. This commit adds patch to allow ar redefining This commit modifes an old patch (removing CC=gcc is not required due to it is redefinable) Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* | modemmanager: bump to 1.18.4 with patchNicholas Smith2022-02-11
|/ | | | | | | | | | | | | | The included patch corrects an issue preventing udev rules from being parsed correctly. [1][2] This patch should not be needed after the next release. [3] More information: [1] https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/commit/e9f254ba3f923248efffe4fd458dc5e5469e0f73 [2] https://lists.freedesktop.org/archives/modemmanager-devel/2021-December/009024.html [3] https://lists.freedesktop.org/archives/modemmanager-devel/2021-December/009022.html Signed-off-by: Nicholas Smith <nicholas@nbembedded.com>
* openssh-server: manually set path to passwd binaryRucke Teg2022-02-10
| | | | | | | | In the build environment the autotools finds the `passwd` binary in /usr/bin. But in the target image it is available under /bin instead. Manually set the path to `passwd` binary to `/bin/passwd` Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
* openssh-server: change sshd.failsafeRucke Teg2022-02-10
| | | | | | | There is no need to remove root password from /etc/shadow as the password in the file is blank anyway in the failsafe mode. Signed-off-by: Rucke Teg <rucketeg@protonmail.com>
* jool: update default configTiago Gaspar2022-02-10
| | | | | | | | Update the default configuration files to match the upstream example ones. Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
* dnsproxy: Update to 0.41.1Tianling Shen2022-02-10
| | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* mbusd: Repair UCI config file about parityChip Lee2022-02-10
| | | | | | in mbusd, parity must be N, E or O, can't be y. Signed-off-by: Chip Lee <chplee@gmail.com>
* Merge pull request #17829 from neheb/6Dirk Brenken2022-02-10
|\ | | | | banip: make reproducible
| * banip: make reproducibleRosen Penev2022-02-07
| | | | | | | | | | | | Timestamp needs to be removed. Signed-off-by: Rosen Penev <rosenp@gmail.com>