aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | | | beanstalkd: switch to xz compression and add PKG_HASHPhilip Prindeville2017-07-13
| | | | | | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | Merge pull request #4044 from pprindeville/add-beanstalkd-serverDaniel Golle2017-07-13
|\ \ \ \ | |/ / / |/| | | beanstalkd: add package
| * | | beanstalkd: add packagePhilip Prindeville2017-07-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For now building from git using latest SHA (commits are relatively infrequent). Set priority to come up immediately after network interfaces are brought up. Patches have been submitted upstream (but not yet accepted) to fix: * a somewhat cross-compile unfriendly makefile; * a header inclusion issue which causes MUSL compilation warnings; * using the somewhat arcane posix_fallocate() in favor of the more ubiquitous ftruncate() system call instead. Hopefully the next release will include our submitted fixes and we can transition to a numbered release. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | Merge pull request #4570 from pprindeville/lighttpd-init-reloadPhilip Prindeville2017-07-11
|\ \ \ \ | | | | | | | | | | lighttpd: add 'reload' to init script to make logrotate-friendly
| * | | | lighttpd: add 'reload' to init script to make logrotate-friendlyPhilip Prindeville2017-07-10
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | If lighttpd's scripts are rotated from under it while they're still open, this will cause some weird things to happen. Give it a heads up that the logs have moved. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | | Merge pull request #4561 from wertarbyte/package_libnetJo-Philipp Wich2017-07-11
|\ \ \ \ | | | | | | | | | | libnet-1.2.x: simplify build dep installation
| * | | | netdiscover: use simplified libnet header locationStefan Tomanek2017-07-09
| |/ / / | | | | | | | | | | | | | | | | | | | | Use the common location for libnet include files and libraries. Signed-off-by: Stefan Tomanek <stefan.tomanek@wertarbyte.de>
* | | | mosquitto: update to 1.4.14Karl Palsson2017-07-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes a regression due to the CVE fix in the recently released 1.4.13. https://mosquitto.org/2017/07/version-1-4-14-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | Merge pull request #4566 from dedeckeh/pr-netsnmp-configStijn Tintel2017-07-11
|\ \ \ \ | | | | | | | | | | netsnmp: add global enabled config option
| * | | | netsnmp: add global enabled config optionHans Dedecker2017-07-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add enabled config option in the global uci section; it allows to put into place the snmpd config but not yet start the netsnmp daemon. If config option is unset; netsnmp daemon will be started as before. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* | | | | mosquitto: update to 1.4.13Karl Palsson2017-07-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Primarily a bugfix release for a CVE that doesn't affect lede/openwrt, but also includes some websockets perfomance fixes. Release notes at https://mosquitto.org/2017/07/version-1-4-13-released/ Signed-off-by: Karl Palsson <karlp@etactica.com>
* | | | | irssi: update to 1.0.4Peter Wagner2017-07-10
|/ / / / | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
* | | | Merge pull request #4556 from zx2c4/masterHannu Nyman2017-07-09
|\ \ \ \ | | | | | | | | | | wireguard: fix routing of allowed IPs when no CIDR is specified
| * | | | wireguard: version bumpJason A. Donenfeld2017-07-07
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
| * | | | wireguard: assume /32 or /128 if no CIDR is givenJason A. Donenfeld2017-07-07
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | This brings the route_allowed_ips option into parity with the addresses option, which makes these same assumption. The parsing selection is made to be identical between these two settings. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* | | | Merge pull request #4557 from dibdot/travelmateHannu Nyman2017-07-09
|\ \ \ \ | |/ / / |/| / / | |/ / travelmate: update 0.8.2
| * | travelmate: update 0.8.2Dirk Brenken2017-07-07
| | | | | | | | | | | | | | | | | | | | | * change start priority to 90 and revert hostapd stuff from last commit * cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | clamav: Fix OpenSSL dependencyLucian Cristian2017-07-06
| | | | | | | | | | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* | | Merge pull request #4552 from dibdot/travelmateHannu Nyman2017-07-06
|\| | | | | | | | travelmate: update 0.8.1
| * | travelmate: update 0.8.1Dirk Brenken2017-07-06
| | | | | | | | | | | | | | | | | | | | | | | | * wait for hostapd comes up during boot * remove needless ubus call during script startup * remove needless iwinfo check (covered by package dependency) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | subversion: update to v1.9.6Val Kulkov2017-07-06
| | | | | | | | | | | | | | | | | | Update Subversion packages to the latest release, v1.9.6. Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
* | | Merge pull request #4545 from dibdot/adblockHannu Nyman2017-07-05
|\ \ \ | | | | | | | | adblock: update 2.8.3
| * | | adblock: update 2.8.3Dirk Brenken2017-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * refine manual/backup mode (exclude local blacklist processing) * cosmetics Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | tor: update to version 0.2.9.11Hauke Mehrtens2017-07-03
| | | | | | | | | | | | | | | | | | | | | | | | This fixes CVE-2017-0376 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* | | | shadowsocks-libev: disable documentationYousong Zhou2017-07-03
| | | | | | | | | | | | | | | | | | | | | | | | This should also fix build by removing dependency on asciidoc Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | shadowsocks-libev: rewriteYousong Zhou2017-07-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Selecting only a single or subset of all components of shadowsocks-libev is now possible (this is the main motivation behind the rewrite) - Configuring multiple instances of the same component is now also possible - Same option names as with the json config - Unified configuration generation method for each component - Add support for ss-local, ss-tunnel, ss-server - Most data validation is now done with validate_data - USE_PROCD=1 - Update ss-rules with the one from shadowsocks/luci-app-shadowsocks - Add README.md - Set myself as the maintainer Addresses #4435 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | gnunet: update sourceDaniel Golle2017-07-01
| | | | | | | | | | | | | | | | | | | | | | | | also package missing block plugins Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* | | | nmap: bump version to 7.50Nuno Goncalves2017-07-01
| | | | | | | | | | | | | | | | Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
* | | | wireguard: version bumpJason A. Donenfeld2017-06-29
| | | | | | | | | | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* | | | Merge pull request #4524 from commodo/more-fix-ovsHannu Nyman2017-06-29
|\ \ \ \ | | | | | | | | | | openvswitch: fix build
| * | | | openvswitch: make dependencies conditional for openvswitch-python subpackageAlexandru Ardelean2017-06-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Apparently, even if you don't select the `openvswitch-python` package, Python still gets built (for the target build). But, if the python dependencies are conditional on the `PACKAGE_openvswitch-python` symbol then they aren't build. This should improve build times, if you only want to build the `openvswitch` package. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
| * | | | openvswitch: add CONFIG_PACKAGE_openvswitch-python to PKG_BUILD_DEPENDSAlexandru Ardelean2017-06-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | That way, OVS gets rebuilt if the openvswitch-python package is selected or unselected. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
| * | | | openvswitch: enforce the use of the python binary from `packages`Alexandru Ardelean2017-06-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Seems it was not failing for me because it was probably using my host Python, which may have the `six` package available. This patch enforces the use of the packaged Python. That way, it's more consistent that the python-six package is available. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
* | | | | Merge pull request #4525 from dibdot/adblockHannu Nyman2017-06-29
|\ \ \ \ \ | | |/ / / | |/| | | adblock: update 2.8.2
| * | | | adblock: update 2.8.2Dirk Brenken2017-06-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * made DNS restart conditional (compare list hash values), to prevent needless restarts of the DNS backend Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | Merge pull request #4523 from dibdot/adblockHannu Nyman2017-06-29
|\| | | | | |/ / / |/| | | adblock: update 2.8.1
| * | | adblock: update 2.8.1Dirk Brenken2017-06-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * revert 'wan6' interface trigger in default config due to current procd limitation (see: #4521) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | lighttpd: backport more mod_cgi fixes queued for 1.4.46Rafał Miłecki2017-06-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The most important change is local redirects being disabled by default. There is an option called cgi.local-redir that allows enabling this optimization manually back if needed. Local redirects were initially introduced in 1.4.40 but caused many problems for *some* web services. One of problems is breaking Post/Redirect/Get design pattern. With redirects handled on server side there is no browser redirection making it "lose" the POST data. Another possible issue are HTML forms with action="". With CGI local redirects browser may be sending form data to the wrong URL (the one that was supposed to redirect the browser). Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* | | | Merge pull request #4483 from andor-pierdelacabeza/patch-1Hannu Nyman2017-06-28
|\ \ \ \ | | | | | | | | | | ddns: Fix dnsmadeeasy ddns url
| * | | | Fix http/https, increase PKG_RELEASEAlvaro [Andor]2017-06-27
| | | | |
| * | | | Fix dnsmadeeasy ddns urlAlvaro [Andor]2017-06-15
| | | | | | | | | | | | | | | Dnsmadeeasy dyndns service url was wrong, fixed both the address, the parameters, and the ssl connection.
* | | | | wireguard: version bumpJason A. Donenfeld2017-06-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | From upstream's changelog: * main: annotate init/exit functions to save memory * selftest: remove antique siphash self test * haskell: re-add updated haskell example * socket: use ip_rt_put instead of dst_release * device: avoid double icmp send on routing loop * compat: clean up cruft * global: cleanup IP header checking * compat: do not export symbols unnecessarily Various cleanups and updates. * device: netdevice destruction logic change for 4.12 When Linux 4.12 is released next week, we're good to go. * device: only use one sleep notifier Rather than have a separate sleep notification for every interface, we now have a single notifier for every interface. This improves performance, especially when creating many interfaces at once. * device: remove icmp conntrack hacks We're moving hacks upstream the proper way, and then backporting them to compat. * receive: extend rate limiting to 1 second after under load detection After we determine that we're under load, we now wait 1 second before not being under load again, a timer which is global across all interfaces on a given system. * curve25519: satisfy sparse and use short types * curve25519: keep certain sandy2x functions in C Certain functions have been made into C, which should improve stack frames and reliability. * ratelimiter: rewrite from scratch This is a big change. We no longer rely on x_tables or xt_hashlimit, instead using a super minimal and sleek token bucket ratelimiter. This works much better than the old cruft and should allow us to run more places. It also has the benefit of being global, so that it's possible to have thousands of interfaces without killing the system with separate GCs and vmallocs, which is what happened prior. * socket: verify saddr belongs to interface We now more quickly react to changes of the v4 routing table, by ensuring that the sticky source address is actually still valid. * wg-quick: properly match IPv6 endpoint wg-quick now works better with IPv6. * wg-quick: use printf -v instead of namerefs for bash 4.2 This adds support for old bash, which means wg-quick should be generically "bash 4 and up". I'm not happy about this but EL7 uses old bash, so we're stuck with it. * compat: support EL7.3 Support for RHEL, CentOS, ScientificLinux, and so forth. * compat: support Ubuntu 14.04 An old crufty Ubuntu is now supported, since it's LTS.
* | | | | unbound: update to 1.6.4Eric Luehrsen2017-06-27
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
* | | | | Merge pull request #4517 from dibdot/adblockHannu Nyman2017-06-27
|\ \ \ \ \ | | |/ / / | |/| | | adblock: update 2.8.0 (release 2)
| * | | | adblock: update 2.8.0 (release 2)Dirk Brenken2017-06-27
| | | | | | | | | | | | | | | | | | | | | | | | | * fix a logical glitch Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | Merge pull request #4516 from dibdot/adblockHannu Nyman2017-06-27
|\| | | | | | | | | | | | | | adblock: update 2.8.0
| * | | | adblock: update 2.8.0Dirk Brenken2017-06-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * add bind support (see readme) * export all blocked domains in one central file (adb_list.overall) * prerequisite for proper bind support * much faster sort operation with less memory consumption * backups are still handled per source separately, to be more flexible in adding/removing block list sources * add additional 'wan6' interface trigger in default configuration * various small fixes & optimizations Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | | | Merge pull request #4494 from yousong/openconnectNikos Mavrogiannopoulos2017-06-26
|\ \ \ \ \ | | | | | | | | | | | | openconnect: openconnect-wrapper: rewrite
| * | | | | openconnect: openconnect-wrapper: rewriteYousong Zhou2017-06-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - use exec directly to eliminate a level in the process tree - use "$@" instead of "$*" to pass arguments to openconnect According to openconnect(8), openconnect will call vpnc-script to cleanup before quit when it received SIGINT(2) and will quit immediately when it received SIGTERM (the default signal by kill command) Before and after the change, openconnect process will be killed first with SIGINT sent from netifd. This was decided by the 'proto_kill_command "$config" 2' notify call in the proto script. SIGKILL is the only other signal that can be sent from netifd when the process did not quit on SIGINT on time. There should be no need to trap on signal 1 3 6 9 (HUP QUIT ABRT KILL) Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* | | | | | git: update to 2.13.2Peter Wagner2017-06-25
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Wagner <tripolar@gmx.at>
Powered by cgit, Themed by Ted Yin.