aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* shadowsocks-libev: rewriteYousong Zhou2017-07-02
| | | | | | | | | | | | | | | | | | - Selecting only a single or subset of all components of shadowsocks-libev is now possible (this is the main motivation behind the rewrite) - Configuring multiple instances of the same component is now also possible - Same option names as with the json config - Unified configuration generation method for each component - Add support for ss-local, ss-tunnel, ss-server - Most data validation is now done with validate_data - USE_PROCD=1 - Update ss-rules with the one from shadowsocks/luci-app-shadowsocks - Add README.md - Set myself as the maintainer Addresses #4435 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* gnunet: update sourceDaniel Golle2017-07-01
| | | | | | also package missing block plugins Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* nmap: bump version to 7.50Nuno Goncalves2017-07-01
| | | | Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
* wireguard: version bumpJason A. Donenfeld2017-06-29
| | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* Merge pull request #4524 from commodo/more-fix-ovsHannu Nyman2017-06-29
|\ | | | | openvswitch: fix build
| * openvswitch: make dependencies conditional for openvswitch-python subpackageAlexandru Ardelean2017-06-29
| | | | | | | | | | | | | | | | | | | | | | | | | | Apparently, even if you don't select the `openvswitch-python` package, Python still gets built (for the target build). But, if the python dependencies are conditional on the `PACKAGE_openvswitch-python` symbol then they aren't build. This should improve build times, if you only want to build the `openvswitch` package. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
| * openvswitch: add CONFIG_PACKAGE_openvswitch-python to PKG_BUILD_DEPENDSAlexandru Ardelean2017-06-29
| | | | | | | | | | | | | | That way, OVS gets rebuilt if the openvswitch-python package is selected or unselected. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
| * openvswitch: enforce the use of the python binary from `packages`Alexandru Ardelean2017-06-29
| | | | | | | | | | | | | | | | | | | | | | | | Seems it was not failing for me because it was probably using my host Python, which may have the `six` package available. This patch enforces the use of the packaged Python. That way, it's more consistent that the python-six package is available. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | Merge pull request #4525 from dibdot/adblockHannu Nyman2017-06-29
|\ \ | | | | | | adblock: update 2.8.2
| * | adblock: update 2.8.2Dirk Brenken2017-06-29
| | | | | | | | | | | | | | | | | | | | | * made DNS restart conditional (compare list hash values), to prevent needless restarts of the DNS backend Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #4523 from dibdot/adblockHannu Nyman2017-06-29
|\| | | |/ |/| adblock: update 2.8.1
| * adblock: update 2.8.1Dirk Brenken2017-06-29
| | | | | | | | | | | | | | * revert 'wan6' interface trigger in default config due to current procd limitation (see: #4521) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | lighttpd: backport more mod_cgi fixes queued for 1.4.46Rafał Miłecki2017-06-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The most important change is local redirects being disabled by default. There is an option called cgi.local-redir that allows enabling this optimization manually back if needed. Local redirects were initially introduced in 1.4.40 but caused many problems for *some* web services. One of problems is breaking Post/Redirect/Get design pattern. With redirects handled on server side there is no browser redirection making it "lose" the POST data. Another possible issue are HTML forms with action="". With CGI local redirects browser may be sending form data to the wrong URL (the one that was supposed to redirect the browser). Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* | Merge pull request #4483 from andor-pierdelacabeza/patch-1Hannu Nyman2017-06-28
|\ \ | | | | | | ddns: Fix dnsmadeeasy ddns url
| * | Fix http/https, increase PKG_RELEASEAlvaro [Andor]2017-06-27
| | |
| * | Fix dnsmadeeasy ddns urlAlvaro [Andor]2017-06-15
| | | | | | | | | Dnsmadeeasy dyndns service url was wrong, fixed both the address, the parameters, and the ssl connection.
* | | wireguard: version bumpJason A. Donenfeld2017-06-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From upstream's changelog: * main: annotate init/exit functions to save memory * selftest: remove antique siphash self test * haskell: re-add updated haskell example * socket: use ip_rt_put instead of dst_release * device: avoid double icmp send on routing loop * compat: clean up cruft * global: cleanup IP header checking * compat: do not export symbols unnecessarily Various cleanups and updates. * device: netdevice destruction logic change for 4.12 When Linux 4.12 is released next week, we're good to go. * device: only use one sleep notifier Rather than have a separate sleep notification for every interface, we now have a single notifier for every interface. This improves performance, especially when creating many interfaces at once. * device: remove icmp conntrack hacks We're moving hacks upstream the proper way, and then backporting them to compat. * receive: extend rate limiting to 1 second after under load detection After we determine that we're under load, we now wait 1 second before not being under load again, a timer which is global across all interfaces on a given system. * curve25519: satisfy sparse and use short types * curve25519: keep certain sandy2x functions in C Certain functions have been made into C, which should improve stack frames and reliability. * ratelimiter: rewrite from scratch This is a big change. We no longer rely on x_tables or xt_hashlimit, instead using a super minimal and sleek token bucket ratelimiter. This works much better than the old cruft and should allow us to run more places. It also has the benefit of being global, so that it's possible to have thousands of interfaces without killing the system with separate GCs and vmallocs, which is what happened prior. * socket: verify saddr belongs to interface We now more quickly react to changes of the v4 routing table, by ensuring that the sticky source address is actually still valid. * wg-quick: properly match IPv6 endpoint wg-quick now works better with IPv6. * wg-quick: use printf -v instead of namerefs for bash 4.2 This adds support for old bash, which means wg-quick should be generically "bash 4 and up". I'm not happy about this but EL7 uses old bash, so we're stuck with it. * compat: support EL7.3 Support for RHEL, CentOS, ScientificLinux, and so forth. * compat: support Ubuntu 14.04 An old crufty Ubuntu is now supported, since it's LTS.
* | | unbound: update to 1.6.4Eric Luehrsen2017-06-27
| | | | | | | | | | | | Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
* | | Merge pull request #4517 from dibdot/adblockHannu Nyman2017-06-27
|\ \ \ | | |/ | |/| adblock: update 2.8.0 (release 2)
| * | adblock: update 2.8.0 (release 2)Dirk Brenken2017-06-27
| | | | | | | | | | | | | | | * fix a logical glitch Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #4516 from dibdot/adblockHannu Nyman2017-06-27
|\| | | | | | | | adblock: update 2.8.0
| * | adblock: update 2.8.0Dirk Brenken2017-06-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add bind support (see readme) * export all blocked domains in one central file (adb_list.overall) * prerequisite for proper bind support * much faster sort operation with less memory consumption * backups are still handled per source separately, to be more flexible in adding/removing block list sources * add additional 'wan6' interface trigger in default configuration * various small fixes & optimizations Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #4494 from yousong/openconnectNikos Mavrogiannopoulos2017-06-26
|\ \ \ | | | | | | | | openconnect: openconnect-wrapper: rewrite
| * | | openconnect: openconnect-wrapper: rewriteYousong Zhou2017-06-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - use exec directly to eliminate a level in the process tree - use "$@" instead of "$*" to pass arguments to openconnect According to openconnect(8), openconnect will call vpnc-script to cleanup before quit when it received SIGINT(2) and will quit immediately when it received SIGTERM (the default signal by kill command) Before and after the change, openconnect process will be killed first with SIGINT sent from netifd. This was decided by the 'proto_kill_command "$config" 2' notify call in the proto script. SIGKILL is the only other signal that can be sent from netifd when the process did not quit on SIGINT on time. There should be no need to trap on signal 1 3 6 9 (HUP QUIT ABRT KILL) Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | git: update to 2.13.2Peter Wagner2017-06-25
| | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | gnunet: update source and init scriptDaniel Golle2017-06-24
| | | | | | | | | | | | | | | | | | | | | | | | Fixes starting EXIT service when offering services. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | gnunet: update sourceDaniel Golle2017-06-23
| | | | | | | | | | | | | | | | | | | | | | | | fixes namestore iterator and other bugs when using PostgreSQL Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | Merge pull request #4454 from poranje/fs#785Hannu Nyman2017-06-23
|\ \ \ \ | | | | | | | | | | unbound: manage resolv.conf iff when listening on 127.0.0.1#53
| * | | | unbound: manage resolv.conf iff when listening on 127.0.0.1#53Paul Oranje2017-06-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With this patch the unbound init routines manage resolv.conf if and only if when unbound will listen on 127.0.0.1#53 and dnsmasq is not. Also logs some cases where config values are overriden with sane defaults. Fixes (partially) LEDE FS#785 Fixes openwrt/packages#4487 Signed-off-by: Paul Oranje <por@xs4all.nl>
* | | | | net/mwan3: update versionFlorian Eckert2017-06-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | net/mwan3: simplify tracking status statement commandFlorian Eckert2017-06-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | net/mwan3: add lock for mwan3 hotplug scriptFlorian Eckert2017-06-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If more then one interface get up/down at once mwan3 could be in a undefined state, because more then one mwan3 hotplug script are running and editing the iptables. Lock the critical section should solve this issue. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | net-snmp: add symlink for net-snmp-config into usr/binPhilip Prindeville2017-06-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A lot of autoconf-based scripts expect --with-foo-dir=$(STAGING_DIR)/usr and break if they can't find bin/foo-config as a child of that path. Putting things in $(STAGING_DIR)/host/bin seems to be suboptimal; I could change the install path but there's no saying what that would break. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | Merge pull request #4273 from dedeckeh/pr-netsnmp-trapStijn Tintel2017-06-20
|\ \ \ \ \ | | | | | | | | | | | | net-snmp: add notification config options
| * | | | | net-snmp: add notification config optionsHans Dedecker2017-06-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add config support which allow snmpd to take a more active role by sending traps. Following config options are supported which map directly on snmpd directives: -trapcommunity -trapsink -trap2sink -informsink -authtrapenable -v1trapaddress -trapsess Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* | | | | | usbip: use libudev-fbsd instead of eudevDaniel Golle2017-06-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | eudev was removed, switch to libudev-fbsd Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | Merge pull request #4495 from dibdot/travelmateHannu Nyman2017-06-19
|\ \ \ \ \ \ | | | | | | | | | | | | | | travelmate: update 0.8.0
| * | | | | | travelmate: update 0.8.0Dirk Brenken2017-06-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * use iwinfo instead iw for wlan scanning, scanning now works on radio-level * enhance multiple radio support: * support STA-only radio configurations, e.g first radio with local AP, second radio with a bunch of STAs (without APs) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | | cgi-io: merge changes from luci2-io-helperDaniel Golle2017-06-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | luci2-io-helper: bugfix buckup script read timeout Reading files from stdin will block for ever. The uhttpd is killing the backup process after script_timeout. Switching read to non blocking mode and add a waitpid for the slave process does not end in a script_timeout anymore. Signed-off-by: Florian Eckert <Eckert.Florian@googlemail.com> Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | | zerotier: Allow building with older GCC 4.8Florian Fainelli2017-06-18
| |_|_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ZeroTier builds fine with GCC 4.8, so relax the check to make that possible. Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* | | | | | gnurl: update to version 7.54.1Daniel Golle2017-06-19
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | opentracker: bump sourceDaniel Golle2017-06-19
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | cgi-io: Find and search for libubus.hFlorian Fainelli2017-06-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes build errors with external toolchains: [ 33%] Building C object CMakeFiles/cgi-io.dir/main.c.o /home/florian/dev/openwrt/trunk/build_dir/target-mipsel-unknown-linux-gnu_glibc/cgi-io/main.c:30:21: fatal error: libubus.h: No such file or directory #include <libubus.h> ^ compilation terminated. Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* | | | | | fping: Set -std=gnu99 to fix build errors due to C99 constructsFlorian Fainelli2017-06-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes build errors such as: mipsel-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I.. -I/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/usr/include -I/home/florian/dev/openwrt/trunk/staging_dir/target-mipsel-unknown-linux-gnu_glibc/include -I/home/florian/dev/toolchains/stbgcc-4.8-1.5/usr/include -I/home/florian/dev/toolchains/stbgcc-4.8-1.5/include -Wall -Wextra -Wno-sign-compare -DIPV6 -Os -pipe -mno-branch-likely -mips32r2 -mtune=24kc -fno-caller-saves -Wno-unused-result -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro -MT fping-optparse.o -MD -MP -MF .deps/fping-optparse.Tpo -c -o fping-optparse.o `test -f 'optparse.c' || echo './'`optparse.c optparse.c: In function 'permute': optparse.c:55:5: error: 'for' loop initial declarations are only allowed in C99 mode for (int i = index; i < options->optind - 1; i++) ^ optparse.c:55:5: note: use option -std=c99 or -std=gnu99 to compile your code optparse.c: In function 'optstring_from_long': optparse.c:160:5: error: 'for' loop initial declarations are only allowed in C99 mode for (int i = 0; !longopts_end(longopts, i); i++) { Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* | | | | | openconnect: new option mtuYousong Zhou2017-06-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to openconnect --help output: -m, --mtu=MTU Request MTU from server --base-mtu=MTU Indicate path MTU to/from server Fixes #2099 by allowing setting tunnel mtu Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | | openconnect: drop stale config: interfaceYousong Zhou2017-06-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It was introduced with 41f8d5465 ("openconnect: fix a couple of minor things and add an interface option") and not needed since 4083de9d7 ("openconnect: use proto_add_host_dependency") Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | | Merge pull request #4429 from sdwalker/cleanupHannu Nyman2017-06-17
|\ \ \ \ \ \ | | | | | | | | | | | | | | packages: cleanup Makefile variables
| * | | | | | packages: cleanup Makefile variablesStephen Walker2017-06-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Standard assignment is immediate expansion without any extraneous spacing, RFC822 compliant email addresses and consistent section assignments Signed-off-by: Stephen Walker <stephendwalker+github@gmail.com>
* | | | | | | reaver: Fix build with external toolchainsFlorian Fainelli2017-06-16
| |_|_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We would not be able to search for pcap.h because CFLAGS are not passed from src/Makefile down to src/wps/Makefile: make[4]: Entering directory '/home/florian/dev/openwrt/trunk/build_dir/target-mipsel-unknown-linux-gnu_glibc/reaver-1.4/src/wps' mipsel-linux-gnu-gcc -I../utils -I ../ wps_attr_build.c -c mipsel-linux-gnu-gcc -I../utils -I ../ wps_attr_parse.c -c mipsel-linux-gnu-gcc -I../utils -I ../ wps_attr_process.c -c mipsel-linux-gnu-gcc -I../utils -I ../ wps.c -c mipsel-linux-gnu-gcc -I../utils -I ../ wps_common.c -c mipsel-linux-gnu-gcc -I../utils -I ../ wps_dev_attr.c -c mipsel-linux-gnu-gcc -I../utils -I ../ wps_enrollee.c -c mipsel-linux-gnu-gcc -I../utils -I ../ wps_registrar.c -c In file included from ../misc.h:41:0, from wps_registrar.c:27: ../defs.h:43:18: fatal error: pcap.h: No such file or directory #include <pcap.h> ^ compilation terminated. Makefile:28: recipe for target 'wps_registrar.o' failed Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
* | | | | | wireguard: remove misspelled debugging lineJason A. Donenfeld2017-06-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There are no other "echo" debug lines in this file, and it seems clear that this one was accidentally left as a debugging line, since it misspelled "dependency". So, we just remove this line. We don't bump the package version, though, because this is pretty inconsequential. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Powered by cgit, Themed by Ted Yin.