aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
* haproxy: Update HAProxy to v2.4.0Christian Lachner2021-05-18
| | | | | | | | | | - New upstream major release with tons of new features and LTS (see: https://www.haproxy.com/blog/announcing-haproxy-2-4/) - Update haproxy download URL and hash - Activate promtheus exporter support the new way (using USE_PROMEX=1) - Cleaned up haproxy-specific CFLAGS - Changed the halog build to make use of the new Makefile target (admin/halog/halog) Signed-off-by: Christian Lachner <gladiac@gmail.com>
* Merge pull request #15601 from pprindeville/strongswan-make-swanctl-defaultPhilip Prindeville2021-05-14
|\ | | | | strongswan: make default bundle use swanctl
| * strongswan: make default bundle use swanctlPhilip Prindeville2021-05-10
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | rsync: Add rrsync scriptMatt Reeve2021-05-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Rrsync is a perl script that is supplied as an extra with the rsync program. It must be used in conjunction with openssh-server or openssh-server-pam as it requires ~/.ssh/authorized_keys which is not supported by dropbear. Rrsync allows selective access to subdirectories in either read-only, write-only or read-write, depending on settings in authorized_keys. This allows for safe, restrictive access. It's particularly useful for automated backup purposes. An example usage would be this entry: command="/usr/bin/rrsync -ro /home" <public key here> This would allow a system connecting with this public key to be able to rsync FROM the /home directory tree only. It could not write to this directory, nor read from any other directory. Signed-off-by: Matt Reeve <matt@mreeve.com>
* | atlas-sw-probe: fix missing link on sysupgradeAnsuel Smith2021-05-14
| | | | | | | | | | | | Recreate symbolic link if it's missing after a sysupgrade with a private and public key present in /etc/atlas/ Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
* | chrony: update to 4.1Miroslav Lichvar2021-05-14
| | | | | | | | Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
* | knot: update to version 3.0.6Jan Hak2021-05-13
| | | | | | | | Signed-off-by: Jan Hak <jan.hak@nic.cz>
* | Merge pull request #15593 from flyn-org/snort3Rosen Penev2021-05-11
|\ \ | | | | | | Update snort3 and libdaq3 packages
| * | snort3: update to 3.1.4.0W. Michael Petullo2021-05-11
| | | | | | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* | | Merge pull request #15608 from dobo90/adguardhome_v0.106.2Rosen Penev2021-05-11
|\ \ \ | | | | | | | | adguardhome: bump to 0.106.2
| * | | adguardhome: bump to 0.106.2Dobroslaw Kijowski2021-05-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * Full changelog available at: * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.2 Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
* | | | Merge pull request #15603 from ja-pa/knot-resolver-5.3.2Rosen Penev2021-05-11
|\ \ \ \ | |/ / / |/| | | knot-resolver: update to version 5.3.2
| * | | knot-resolver: update to version 5.3.2Jan Pavlinec2021-05-11
| | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | Merge pull request #15594 from flyn-org/snortRosen Penev2021-05-10
|\ \ \ \ | | | | | | | | | | snort: update 2.9.17.1
| * | | | snort: update 2.9.17.1W. Michael Petullo2021-05-10
| | |/ / | |/| | | | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* | | | Merge pull request #15589 from flyn-org/krb5Rosen Penev2021-05-10
|\ \ \ \ | | | | | | | | | | krb5: update to 1.19.1
| * | | | krb5: update to 1.19.1W. Michael Petullo2021-05-10
| |/ / / | | | | | | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* | | | Merge pull request #15597 from flyn-org/scapyRosen Penev2021-05-10
|\ \ \ \ | | | | | | | | | | scapy: update to 2.4.5
| * | | | scapy: update to 2.4.5W. Michael Petullo2021-05-10
| |/ / / | | | | | | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* | | | Merge pull request #15588 from flyn-org/nfdumpRosen Penev2021-05-10
|\ \ \ \ | | | | | | | | | | nfdump: update to 1.6.23
| * | | | nfdump: update to 1.6.23W. Michael Petullo2021-05-10
| |/ / / | | | | | | | | | | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* | | | Merge pull request #15585 from ja-pa/tailscale-1.8.1Rosen Penev2021-05-10
|\ \ \ \ | |/ / / |/| | | tailscale: update to version 1.8.1
| * | | tailscale: update to version 1.8.1Jan Pavlinec2021-05-10
| |/ / | | | | | | | | | | | | | | | Add readme with simple tailscale howto. Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | Merge pull request #15575 from ↵Philip Prindeville2021-05-07
|\ \ \ | | | | | | | | | | | | | | | | pprindeville/strongswan-always-generate-var-strongswan strongswan: swanctl init script doesn't load connections
| * | | strongswan: swanctl init script doesn't load connectionsPhilip Prindeville2021-05-05
| | |/ | |/| | | | | | | | | | | | | Fixes issue #15446 Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | Merge pull request #15474 from ja-pa/unbound-ttl-negRosen Penev2021-05-07
|\ \ \ | |_|/ |/| | unbound: add cache-max-negative-ttl config option
| * | unbound: add cache-max-negative-ttl config optionJan Pavlinec2021-04-20
| | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | Merge pull request #15553 from PolynomialDivision/add-samplicatorRosen Penev2021-05-06
|\ \ \ | | | | | | | | samplicator: add samplicator
| * | | samplicator: add samplicatorNick Hainke2021-05-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Samplicator receives UDP datagrams on a given port and resends those datagrams to a specified set of receivers. Use Cases: - replicate Flow Samples to multiple receivers - use with conntrackd to synchronize via unicast to multiple targets Signed-off-by: Nick Hainke <vincent@systemli.org>
* | | | Merge pull request #15539 from ja-pa/tailscaleRosen Penev2021-05-06
|\ \ \ \ | | | | | | | | | | tailscale: add new package
| * | | | tailscale: add new packageJan Pavlinec2021-04-29
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* | | | | samba4: update to 4.13.8Andy Walsh2021-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * update to 4.13.8 * remove faulty io_uring kernel detection * fixes CVE's: CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2020-27840, CVE-2021-20277, CVE-2021-20254 * resolves #15512 Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
* | | | | Merge pull request #15537 from aaronjg/mwan3/notrackFlorian Eckert2021-05-06
|\ \ \ \ \ | | | | | | | | | | | | mwan3: allow interfaces with no tracking IPs
| * | | | | mwan3: allow interfaces with no tracking IPsAaron Goodman2021-05-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In the procd refactor, support for interfaces with no tracking IPs was inadvertentiy removed. This commit restores the previous behavior Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
* | | | | | Merge pull request #15562 from TDT-AG/pr/20200503-mwan3Florian Eckert2021-05-06
|\ \ \ \ \ \ | |_|_|_|_|/ |/| | | | | mwan3: update ubus status for no tracked interfaces
| * | | | | mwan3: update ubus status for not tracked interfacesFlorian Eckert2021-05-03
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | | | mwna3: fix whitespaceFlorian Eckert2021-05-03
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | | | Merge pull request #15554 from pprindeville/fix-dhcp-route-whitespacesPhilip Prindeville2021-05-05
|\ \ \ \ \ \ | | | | | | | | | | | | | | isc-dhcpd: handle extra spaces in routes
| * | | | | | isc-dhcpd: handle extra spaces in routesPhilip Prindeville2021-05-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | | | | tcpreplay: bump to version 4.3.4Alexandru Ardelean2021-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | | | | adguardhome: bump to 0.106.1Dobroslaw Kijowski2021-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Create working directory when it is not present. Apparently some recent change made adguardhome fail to start when working directory is missing. * Full changelog available at: * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.106.1 Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
* | | | | | | banip: update to 0.7.8Dirk Brenken2021-05-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix pid file processing of the background monitor plus child processes (bug reported in the forum) * made the enabled/disabled switch of the background monitor functional Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | | | Merge pull request #15532 from dangowrt/bunch-of-updatesEneas U de Queiroz2021-05-03
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | | a bunch of package updates
| * | | | | | opentracker: update to git HEADDaniel Golle2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
| * | | | | | gnunet-fuse: update to version 0.14.0Daniel Golle2021-04-29
| | |/ / / / | |/| | | | | | | | | | | | | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | | haproxy: Update HAProxy to v2.2.14Christian Lachner2021-05-01
| |_|_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | nextdns: Update to version 1.32.1Olivier Poitrey2021-04-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | | adblock: update to 4.1.2Dirk Brenken2021-04-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * preserve DNS cache after adblock processing (unbound & bind) * fix redirect issue with oisd basic url * cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | bind: bump to 9.17.12Noah Meyerhans2021-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes the following security issues: * CVE-2021-25215 - named crashed when a DNAME record placed in the ANSWER section during DNAME chasing turned out to be the final answer to a client query. * CVE-2021-25214 - Insufficient IXFR checks could result in named serving a zone without an SOA record at the apex, leading to a RUNTIME_CHECK assertion failure when the zone was subsequently refreshed. This has been fixed by adding an owner name check for all SOA records which are included in a zone transfer. Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | | | | knxd: pumb to upstream version 0.14.51Othmar Truniger2021-04-28
| |_|/ / |/| | | | | | | | | | | Signed-off-by: Othmar Truniger <github@truniger.ch>