aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
| * | | | | mwan3: fix interface-bound traffic when interface is offlineMarcin Jurkowski2017-09-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit fixed what 6d99b602 was supposed to fix without affecting interface-bound traffic. Before 6d99b602 interface-bound traffic was working normally as long as at least one interface was online. However when the last interface went offline, it was impossible to ping and such state was unrecoverable. Commit 6d99b602 fixed unrecoverable offline state problem (it was possible to ping -I iface) but messed inteface-bound traffic. Traffic with interface source address was not working if the interface was in "offline" state, even if another interface was online. The problem was caused by an inconsistent "offline" interface state: iptables-related rules were kept while routing table and policy were deleted. The idea behind this commit is to: 1. Keep all the rules for each interface (iptables, routing table, policy) regardless of its state. This ensures consistency, 2. Make interface state hotplug events affect only iptables' mwan3_policy_* rules. Interface-related iptables, routing table and policy is removed only when mwan3 is manually stopped. To make such changes possible, it's necessary to change the way mwan3_policy_* rule generator keeps track of interface state hotplug events. Until now, it checked for the existence of custom interface-related routing table (table id 1, 2, 3, ...). Clearly we can no longer rely on that so each interface state is stored explicitly in file. Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
* | | | | | Merge pull request #4820 from dibdot/adblockHannu Nyman2017-09-12
|\ \ \ \ \ \ | |/ / / / / |/| | | / / | | |_|/ / | |/| | | adblock: bugfix 3.0.1
| * | | | adblock: bugfix 3.0.1Dirk Brenken2017-09-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * fix startup issues with backends like dnscrypt-proxy or kresd which does not come up without an existing block list * fix a small 'chown' issue Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | net/nut: Fix typo is serial config optionKarl Palsson2017-09-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: 5503dac80676 "Add back serial support" Reported-by: Znevna on irc Signed-off-by: Karl Palsson <karlp@tweak.net.au>
* | | | | Merge pull request #4816 from dibdot/adblockHannu Nyman2017-09-10
|\| | | | | |_|/ / |/| | | adblock: release 3.0
| * | | adblock: release 3.0Dirk Brenken2017-09-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add kresd & turris omnia support * add dnscrypt-proxy support * change start priority to 30, to fix possible trigger issues on slow booting hardware * simplify suspend/resume handling (no longer use a hideout directory) * enhanced LuCI frontend * many small changes & improvements * default config change (please update your config!), adblock is now disabled by default * documentation update Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | wireguard: bump to release 0.0.20170907Kevin Darbyshire-Bryant2017-09-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Compile & run tested: ar71xx: archer c7 v2 Add myself as another co-maintainer of the package. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* | | | tinc: version bump 1.0.32Ryan Mounce2017-09-05
| | | | | | | | | | | | | | | | Signed-off-by: Ryan Mounce <ryan@mounce.com.au>
* | | | memcached: bump to version 1.5.1Thomas Heil2017-09-03
| | | | | | | | | | | | | | | | Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
* | | | net/mwan3: update versionFlorian Eckert2017-09-01
| | | | | | | | | | | | | | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | net/mwan3: fix /var/state issue in 14-mwan3 hotplugFlorian Eckert2017-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use common function to toggle ip address in /var/state/mwan3. Change also to use toggle function and not set function. If ip address is often changed every change is saved to /var/state/mwan3. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | net/mwan3: if initial_state is offline set status to unknownFlorian Eckert2017-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | To show that the status of the interface is neither offline nor online set the status to unknown. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | net/mwan3: mwan3track skip track ips if realibility is accomplishedFlorian Eckert2017-09-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | If enough tracking ip are pinged skip the reset. They are not needed anymore to mark the interface as up. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | knxd: fixup PKG_MIRROR_HASHEtienne Champetier2017-08-30
| | | | | | | | | | | | | | | | Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | | | Merge pull request #4779 from tru7/masterMichael Heimpold2017-08-30
|\ \ \ \ | | | | | | | | | | knxd: adopt structure and versioning from new upstream stable release
| * | | | knxd: adopt structure and versioning from new upstream stable releaseOthmar Truniger2017-08-28
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Othmar Truniger <github@truniger.ch>
* | | | | shadowsocks-libev: more common default configYousong Zhou2017-08-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | shadowsocks-libev: ss-rules: query resolveip only for ipv4 addressesYousong Zhou2017-08-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | treewide: run "make check FIXUP=1"Etienne Champetier2017-08-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fix Makefile chmod (644) replace MD5SUM with HASH add PKG_MIRROR_HASH when PKG_SOURCE_PROTO:=git (PKG_SOURCE_PROTO:=svn tarballs are not reproducible for now) Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
* | | | | shadowsocks-libev: ss-rules: fix multiple continous \x20 in $o_ifnamesYousong Zhou2017-08-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | shadowsocks-libev: shorten init script by 2 linesYousong Zhou2017-08-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | shadowsocks-libev: ss-rules: resolve server names before adding to ipsetYousong Zhou2017-08-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ipset command line utility supports ranges of address: IP-IP, but the dash character is also valid character in host names. If we have a remote server ss-00.example.com, ipset may complain that ipset v6.32: Syntax error: cannot parse ss: resolving to IPv4 address failed Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | shadowsocks-libev: fix validation of list optionYousong Zhou2017-08-30
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ubox 'list' type is for validating multiple elements separated by tabs/whitespaces in a single value. E.g. The following should not be accepted list src_ip_bypass '1.2.3.4 4.3.2.1' Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | strongswan: bump to 5.6.0Stijn Tintel2017-08-28
| | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2017-11185. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | Merge pull request #4768 from pprindeville/isc-dhcp-update-4.3.6Philip Prindeville2017-08-28
|\ \ \ \ | | | | | | | | | | isc-dhcp: update to 4.3.6
| * | | | isc-dhcp: update to 4.3.6Philip Prindeville2017-08-27
| |/ / / | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | kplex: copy config file to /etc/Caesar Schinas2017-08-27
| | | | | | | | | | | | | | | | Signed-off-by: Caesar Schinas <caesar@caesarschinas.com>
* | | | kplex: update to v1.3.4Caesar Schinas2017-08-27
| | | | | | | | | | | | | | | | | | | | | | | | Use stable release instead of git commit hash. Signed-off-by: Caesar Schinas <caesar@caesarschinas.com>
* | | | aria2: Add missing 'or' in section validate functionHsing-Wang Liao2017-08-25
| | | | | | | | | | | | | | | | Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>
* | | | aria2: Enable Bittorrent support by defaultHsing-Wang Liao2017-08-25
| | | | | | | | | | | | | | | | | | | | | | | | Most user need this Bittorrent download support, and this fature can only depends on libssl. Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>
* | | | aria2: Add some build config optionsHsing-Wang Liao2017-08-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ======================== ======================================== features dependency ======================== ======================================== HTTPS OSX or GnuTLS or OpenSSL or Windows SFTP libssh2 BitTorrent None. Optional: libnettle+libgmp or libgcrypt or OpenSSL Metalink libxml2 or Expat. Checksum None. Optional: OSX or libnettle or libgcrypt or OpenSSL or Windows gzip, deflate in HTTP zlib Async DNS C-Ares Firefox3/Chromium cookie libsqlite3 XML-RPC libxml2 or Expat. JSON-RPC over WebSocket libnettle or libgcrypt or OpenSSL ======================== ======================================== Add 'CONFIG_' to 'PKG_CONFIG_DEPENDS'. Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>
* | | | aria2: Rewrite init scriptHsing-Wang Liao2017-08-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add aria2 user and group. * Use procd to start service. * Add more supported options. Compatible with previous version. Signed-off-by: Hsing-Wang Liao <kuoruan@gmail.com>
* | | | bind: disable lmdbStijn Tintel2017-08-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When building on hosts with lmdb installed, bind configure phase fails: configure: error: found lmdb include but not library. Solve this by disabling lmdb. Fixes #4748. Fixes: eab56b6bee5d ("bind: version update to 9.11.2") Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | | | Merge pull request #4740 from EricLuehrsen/masterHannu Nyman2017-08-22
|\ \ \ \ | | | | | | | | | | unbound: update to 1.6.5
| * | | | unbound: update to 1.6.5Eric Luehrsen2017-08-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes the root.key file if created when unbound is installed between sep11 and oct11 2017 Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
* | | | | shadowsocks-libev: ss-rules: new bool option --dst-forward-recentrstYousong Zhou2017-08-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | shadowsocks-libev: ss-rules: rename usage funcYousong Zhou2017-08-22
|/ / / / | | | | | | | | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* / / / travelmate: update to 0.9.3Dirk Brenken2017-08-21
|/ / / | | | | | | | | | | | | | | | | | | * backend/frontend: supports a Connection Limit ('trm_maxretry') of '0', to disable this feature (unlimited retries) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | shadowsocks-libev: rewrite ss-rulesYousong Zhou2017-08-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - New UCI options ifnames, dst_default - UCI options src_ips_xxx now accept cidr as their values - Export ipset names as part of the interface so that it can be depended on and used by other programs - Bypass only remote servers used ss-redir instances, so that it's possible to let other servers to go through existing re-redir instances Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | shadowsocks-libev: Update AEAD cipher names.Leong Hui Wong2017-08-19
| | | | | | | | | | | | Signed-off-by: Leong Hui Wong <wong.leonghui@gmail.com>
* | | cgi-io: fix stray semicolonJo-Philipp Wich2017-08-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove an improperly placed semicolon in order to solve the following compiler error: .../main.c:144:3: error: this 'if' clause does not guard... [-Werror=misleading-indentation] if (execl("/bin/busybox", "/bin/busybox", "md5sum", file, NULL)); ^~ .../main.c:145:4: note: ...this statement, but the latter is misleadingly indented as if it were guarded by the 'if' return NULL; ^~~~~~ cc1: all warnings being treated as errors Fixes #4723. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* | | Merge pull request #4683 from pprindeville/bind-build-deprecatedNoah Meyerhans2017-08-17
|\ \ \ | | | | | | | | bind: patch unneeded if openssl is build w/ deprecated
| * | | bind: patch unneeded if openssl is build w/ deprecatedPhilip Prindeville2017-08-08
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | Merge pull request #4713 from philjohn/patch-1Hannu Nyman2017-08-17
|\ \ \ \ | | | | | | | | | | ddns-scripts: add support for dynu.com IPv6 update
| * | | | ddns-scripts: update PKG_RELEASE in MakefilePhil John2017-08-16
| | | | | | | | | | | | | | | | | | | | | | | | | As requested, bumping the PKG_RELEASE Signed-off-by: Phil John <philjohn@gmail.com>
| * | | | ddns-scripts: add support for dynu.com IPv6 updatePhil John2017-08-14
| | | | | | | | | | | | | | | | | | | | | | | | | Dynu.com already support IPV6 updates using the parameter myipv6, adding to services_ipv6 to enable support in OpenWRT/LEDE Signed-off-by: Phil John <philjohn@gmail.com>
* | | | | mwan3: fix bugs introduced in 815e83d4Marcin Jurkowski2017-08-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes the following bugs introduced in commit 815e83d4: - hotplug: invalid parameter order when initial interface state is "online", mwan3track expects initial state to be the third argument - hotplug: missing source ip address when initial interface state is "offline" - mwan3track: source ip address should be the fourth argument Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
* | | | | memcached: bump to version 1.5.0Thomas Heil2017-08-17
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
* | | | | apache: update to 2.4.47Thomas Heil2017-08-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - fixes security issues CVE-2017-7679, CVE-2017-7668, CVE-2017-7659, CVE-2017-3169 CVE-2017-3167, CVE-2017-9788, CVE-2017-9789 Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
* | | | | haproxy: update to 1.7.8 and pending patchesThomas Heil2017-08-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - fixes reload issue with hanging process Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
Powered by cgit, Themed by Ted Yin.