aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | | | | openssh: update to 8.9p1Michal Vasilek2022-03-16
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
* | | | | cloudflared: add new packageTianling Shen2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. Docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | haproxy: Update HAProxy to v2.4.15Christian Lachner2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | | mtr: bump version to 0.95, split package for JSON and non-JSON variantsMarc Egerton2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As per the discussion in PR #18047, split the MTR package into two, one with jansson enabled for JSON output, and one without. This commit also bumps the version to 0.95. Since the MTR project website does not seem to be updated with builds any longer, switch to GitHub Codeload instead. Also enable PKG_FIXUP:=autoreconf so that MTRs bootstrap.sh process is executed properly. Signed-off-by: Marc Egerton <marc@malloc.me>
* | | | | zerotier: update to 1.8.6Moritz Warning2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove upstreamed gcc10 and cerrno patches * disable SSO and OIDC as it needs Rust/Cargo support Signed-off-by: Moritz Warning <moritzwarning@web.de>
* | | | | chrony: enable LTOStijn Tintel2022-03-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Size difference of the ipk on qoriq: * chrony: 718571 676886 * chrony-nts: 786960 757064 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | | chrony: enable AUTORELEASEStijn Tintel2022-03-16
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | Enable AUTORELEASE in a separate commit so that the next commit can be reverted without having to manually re-introduce it. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | isc-dhcp: Update to 4.4.3Philip Prindeville2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Note that on 32-bit ARM with MUSL we don't have Unwind_GetIP() so we need to disable backtraces. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | named: don't leak mktemp files on reloadPhilip Prindeville2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Unless we're using "mktemp -u ..." (not recommended), it will create the temp file as part of its safety checking. Thus you should only create the name (file) if you're going to use it, and always remove it if you have created it. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | isc-dhcp: detect whether ddns transfers are IPv4 onlyPhilip Prindeville2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If named is configured to not listen on any IPv6 interfaces, then we should run 'nsupdate' with the '-4' argument. Also: * cleanup RFC-1918 address detection; * don't generate PTR records for domain entries that aren't RFC-1918 addresses or these will generate NOTAUTH failures; We're assuming that we're doing DNS split-horizon and that internal addresses aren't routable. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | isc-dhcp: don't leak mktemp filesPhilip Prindeville2022-03-15
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | gnunet: improve init scriptDaniel Golle2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Ensure correct ownership of /etc/gnunet. Quote variables and more or less make shellcheck happy. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | gnunet: depend on 'uci-firewall' instead of 'firewall'Daniel Golle2022-03-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To allow using gnunet on systems with firewall4, add replace direct dependency on 'firewall' with 'uci-firewall' which is satisfied by either 'firewall' or 'firewall4'. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | shorewall6-lite: add @IPV6 to DEPENDSEtienne Champetier2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | | | shorewall6: add @IPV6 to DEPENDSEtienne Champetier2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | | | keepalived: enable nftables filteringFlorian Eckert2022-03-14
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | Merge pull request #18002 from BKPepe/haproxy-conflictsJosef Schlehofer2022-03-14
|\ \ \ \ | | | | | | | | | | haproxy: Makefile polishing and add conflict to SSL/non-SSL variant
| * | | | haproxy: add conflict to packages with SSL or without SSL supportJosef Schlehofer2022-03-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Both packages provide the same packages and should conflict to each other. Fixes: ``` Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /usr/sbin/haproxy Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /etc/haproxy.cfg Packages 'haproxy' and 'haproxy-nossl' do not conflict while providing same file: /etc/init.d/haproxy ``` They should not be installed side by side. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
| * | | | haproxy: Makefile polishingJosef Schlehofer2022-03-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - There should be shorter TITLE in Package/haproxy/Default otherwise it is not shown - No need to call Build/Prepare/Default - Remove twice TITLE in non-SSL variant - Make conffiles more clear - Remove empty menu for halog Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | v2raya: add iptables as dependencyTianling Shen2022-03-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This package requires to use iptables (no matter which variant). Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | gnunet: update to version 0.16.1Daniel Golle2022-03-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * OPUS and Pulse can be configured nicely by default now, no longer need a local patch for that * mysql version checks fail when cross-compiling, add patch to remove them and always assume MySQL >8.0. * Package new services, communicators, ... This is a new major release. It breaks protocol compatibility with the 0.15.x versions. Please be aware that Git master is thus henceforth (and has been for a while) INCOMPATIBLE with the 0.15.x GNUnet network, and interactions between old and new peers will result in issues. 0.15.x peers will be able to communicate with Git master or 0.16.x peers, but some services - in particular GNS - will not be compatible. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | | treewide: remove rpath-linkRosen Penev2022-03-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Most usages seem to be outdated and fixed a long time ago. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | softethervpn: remove rpath hackRosen Penev2022-03-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This was needed when readline was a shared library. Now that it's static, this can be removed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | | dnsproxy: Update to 0.41.4Tianling Shen2022-03-09
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | | modemmanager: bump to 1.18.6Kuan-Yi Li2022-03-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove upstreamed patch. Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
* | | | | adguardhome: Update adguardhome to v0.107.5James White2022-03-08
| | | | | | | | | | | | | | | | | | | | Signed-off-by: James White <james@jmwhite.co.uk>
* | | | | coova-chilli: remove kmod dep on binary packageThibaut VARÈNE2022-03-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is no reason for the kmod to depend on the binary package itself, neither for building nor for installing. That dependency prevents phase1 from building the kmod even though support is enabled in the binary. Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
* | | | | tinc: add creation of hosts directory for each network configurationErwan MAS2022-03-08
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Erwan MAS <erwan@mas.nom.fr>
* | | | | frr: update to 8.2Lucian Cristian2022-03-08
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | | | iperf3: bump to 3.11John Audia2022-03-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update to latest upstream version Signed-off-by: John Audia <graysky@archlinux.us>
* | | | | shadowsocks-libev: remove now unused file firewall.ss-rulesYousong Zhou2022-03-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It was leftover from the previous rewrite of ss-rules. The built package has no ref to it so no need to update PKG_RELEASE Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | Merge pull request #18018 from rs/nextdns-1.37.10-masterStan Grishin2022-03-07
|\ \ \ \ \ | | | | | | | | | | | | nextdns: Update to version 1.37.10
| * | | | | nextdns: Update to version 1.37.10Olivier Poitrey2022-03-07
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Olivier Poitrey <rs@nextdns.io>
* | | | | | Merge pull request #18001 from turris-cz/chrony-conflictsJosef Schlehofer2022-03-07
|\ \ \ \ \ \ | | | | | | | | | | | | | | chrony: add conflict between without NTS and NTS variant
| * | | | | | chrony: add conflict between without NTS and NTS variantJosef Schlehofer2022-03-06
| | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Both packages provide the same files: /usr/bin/chronyc /usr/sbin/chronyd /etc/chrony/chrony.conf /etc/hotplug.d/iface/20-chrony /etc/init.d/chronyd They should not be installed side by side. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | | | adblock: 4.1.3-6Dirk Brenken2022-03-07
| |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove discontinued sources: shallalist, stalkerware * fix a logical glitch in startup trigger handling Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | Merge pull request #18004 from stangri/master-curlStan Grishin2022-03-06
|\ \ \ \ \ | | | | | | | | | | | | curl: update to 7.82.0
| * | | | | curl: update to 7.82.0Stan Grishin2022-03-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * changelog: https://curl.se/changes.html#7_82_0 Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | | | | seafile: Remove packagesJeffery To2022-03-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I believe these packages should be removed (and imported into the abandoned packages repo[1]) as Seafile Server and Seahub have been marked as broken for some time, and I do not believe I will have time to fix or update these packages in the foreseeable future. [1]: https://github.com/openwrt/packages-abandoned/pull/22 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | | | | | shadowsocks-libev: add note on nftables set restrictionYousong Zhou2022-03-07
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | | shadowsocks-libev: add nft_tcp_extra/nft_udp_extra optionsZhong Jianxin2022-03-07
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To add extra statement to tcp/udp forward rule, example: ``` config ss_rules 'ss_rules' ... option nft_tcp_extra 'tcp dport { 80, 443 }' # tcp only forward connections with dport 80 or 443 option nft_udp_extra 'udp dport { 53 }' # udp only forward connections with dport 53 ``` This somewhat restores the old ipt_args functionality. Signed-off-by: Zhong Jianxin <azuwis@gmail.com> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> (Amend README.md a bit)
* / / / / snort: add conflict with snort3Josef Schlehofer2022-03-04
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Both packages provides the same files: - /usr/bin/u2boat - /usr/bin/u2spewfoo - /usr/bin/snort - /etc/init.d/snort - /etc/config/snort So they should be in conflict. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* | | | mdnsresponder: Fix nullpointer dereference while parsing interface listMaarten Aertsen2022-03-04
| | | | | | | | | | | | | | | | | | | | | | | | This patch was backported from https://github.com/IETF-Hackathon/mDNSResponder/commit/1fb07b9524b4afed3a826c087db4dc48a7bfdb8 Signed-off-by: Maarten Aertsen <maarten@rtsn.nl>
* | | | strongswan: add missing dependenciesStijn Tintel2022-03-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix the following build failures by adding the missing dependencies: Package strongswan-mod-connmark is missing dependencies for the following libraries: libip4tc.so.2 Package strongswan-mod-forecast is missing dependencies for the following libraries: libip4tc.so.2 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | tcpproxy: fix Wformat warningRosen Penev2022-03-03
| | | | | | | | | | | | | | | | | | | | | | | | snprintf call requires one more byte for NULL termunator. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | | | dnsproxy: Update to 0.41.3Tianling Shen2022-03-03
| | | | | | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | | haproxy: Update HAProxy to v2.4.14Christian Lachner2022-03-02
| | | | | | | | | | | | | | | | | | | | | | | | - Update haproxy download URL and hash Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | | sqm-scripts: switch back to iptablesEtienne Champetier2022-03-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Following recent dependency rework, we can switch between iptables-legacy and iptables-nft, and they both PROVIDES iptables. Make it easier for user that want/need to stick to firewall3/iptables-legacy to do so. Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | | | shadowsocks-libev: update README.mdYousong Zhou2022-03-01
| | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | shadowsocks-libev: convert to using nftYousong Zhou2022-03-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It will be mostly implemented with ucode templates installed at /usr/share/ss-rules and called from init script. The generated nftables rules will be stored at /etc/nftables.d/ Incompatible changes were introduced as described in the README.md file - Netfilter ipset was replaced with nftables sets - UCI options ipt_args and dst_forward_recentrst of section ss_rules are now deprecated. The former does not apply to nftables. The later not yet implemented with nftables. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Powered by cgit, Themed by Ted Yin.