aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | | banip: release 0.9.0-1Dirk Brenken2023-07-16
|/ / | | | | | | | | | | | | | | | | | | * supports allowing / blocking of certain VLAN forwards in segregated network environments, set 'ban_vlanallow', ''ban_vlanblock' accordingly * simplified the code/JSON to generate/parse the banIP status * enclose nft related devices in quotation marks , e.g. to handle devices which starts with a number '10g-1' * made the new vlan options available to LuCI (separate commit) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | cloudflared: Update to 2023.7.0Tianling Shen2023-07-14
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | ooniprobe: Update to 3.18.0Jeffery To2023-07-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This version includes support for Go 1.20 (specifically 1.20.5). This also: * Adds a workaround for musl 1.2.4 compatibility in mattn/go-sqlite3[1] * Sets GO_PKG_BUILD_PKG to build the main binary (ooniprobe) only * Updates the package license; the project was relicensed in 3.13.0[2] [1]: https://github.com/mattn/go-sqlite3/issues/1164 [2]: https://github.com/ooni/probe-cli/pull/446 Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* | adguardhome: bump to 0.107.33Dobroslaw Kijowski2023-07-13
| | | | | | | | | | | | | | | | | | | | * Full changelog available at: * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.30 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.31 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.32 * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.33 Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
* | ocserv: updated to 1.2.0Nikos Mavrogiannopoulos2023-07-11
| | | | | | | | Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
* | nginx-util: fix compilation with GCC13Rosen Penev2023-07-11
| | | | | | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* | tailscale: update to 1.44.0Zephyr Lykos2023-07-10
| | | | | | | | Signed-off-by: Zephyr Lykos <git@mochaa.ws>
* | snort3: update to 3.1.65.0John Audia2023-07-10
| | | | | | | | | | | | | | | | | | | | Upstream bump Build system: x86_64 Build-tested: x86_64/AMD 5800U Run-tested: x86_64/AMD 5800U Signed-off-by: John Audia <therealgraysky@proton.me>
* | iperf3: update to 3.14John Audia2023-07-10
| | | | | | | | | | | | | | Release Notes: https://github.com/esnet/iperf/blob/master/RELNOTES.md Signed-off-by: John Audia <therealgraysky@proton.me>
* | banip: update 0.8.9-4Dirk Brenken2023-07-09
| | | | | | | | | | | | * made the etag id parsing more bulletproof (to catch unverified etags as well) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | banip: update 0.8.9-3Dirk Brenken2023-07-08
| | | | | | | | | | | | | | * prevent superflous etag function calls during start action (on start backups will be used anyway) * changed the ipthreat feed download URL (load a compressed file variant to save bandwidth) Signed-off-by: Dirk Brenken <dev@brenken.org>
* | pdns: update to 4.8.1Peter van Dijk2023-07-08
| | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | frp: update to 0.51.0Van Waholtz2023-07-08
| | | | | | | | | | | | | | | | | | | | | | XTCP is incompatible with previous versions since 0.49.0. Changelog: https://github.com/fatedier/frp/releases/tag/v0.49.0 https://github.com/fatedier/frp/releases/tag/v0.50.0 https://github.com/fatedier/frp/releases/tag/v0.51.0 Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | banip: update 0.8.9-2Dirk Brenken2023-07-07
| | | | | | | | | | | | * fix a corner case backup issue with empty feed downloads Signed-off-by: Dirk Brenken <dev@brenken.org>
* | banip: release 0.8.9-1Dirk Brenken2023-07-07
| | | | | | | | | | | | | | | | | | * added HTTP ETag or entity tag support to download only ressources that have been updated on the server side, to save bandwith and speed up banIP reloads * added 4 new feeds: binarydefense, bruteforceblock, etcompromised, ipblackhole (see readme) * updated the readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | pdns-recursor: update to 4.9.0Peter van Dijk2023-07-07
| | | | | | | | Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
* | Merge pull request #21496 from Ansuel/add-mtoolsJosef Schlehofer2023-07-07
|\ \ | | | | | | net-mtools: Add new package to debug multicast setups
| * | net-mtools: Add new package to debug multicast setupsChristian Marangi2023-07-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add new package to debug multicast setups. This is required to use kselftests script for network testing. net-mtools is used instead of mtools as it does conflicts with another package that is also called mtools. Some additional patch from Vladimir Oltean are added to make the tool works on kernel selftests scripts. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: don't install all module for FULL variantChristian Marangi2023-07-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We currently have a more or less circular dependency with nginx ssl and full variant. FULL variant depends on every nginx module. Every nginx module depends on nginx-ssl. Since nginx-full depends on an nginx module, nginx-ssl is installed as module depends on it and then the installation fails as nginx-full conflicts with nginx-ssl. nginx-full in it's meaning is nginx built with every config selected and it should not have module as dependency. In fact an user should always install them separetly as while other things, local modification to the nginx config file are required to include the just installed module. To fix this circular dependency problem, drop the dependency of every nginx module for FULL variant. Fixes: #21300 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: add quic modueTiago Gaspar2023-07-05
| | | | | | | | | | | | | | | | | | | | | | | | This commit adds support for http/3. This is an experimental version and isn't fully supported because nginx is being built with the regular OpenSSL and the regular one doesn't support quic. Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
* | | nginx: update to 1.25.1Tiago Gaspar2023-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update nginx to 1.25.1. *) Feature: the "http2" directive, which enables HTTP/2 on a per-server basis; the "http2" parameter of the "listen" directive is now deprecated. *) Change: HTTP/2 server push support has been removed. *) Change: the deprecated "ssl" directive is not supported anymore. *) Bugfix: in HTTP/3 when using OpenSSL. Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com> [ improve commit title and add nginx changelog ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: add support for MaxMind GeoIP2 databasesJavier Marcet2023-07-05
| | | | | | | | | | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* | | haproxy: update to v2.8.1Christian Lachner2023-07-05
| | | | | | | | | | | | | | | | | | | | | - Update haproxy PKG_VERSION and PKG_HASH - See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | rclone: Update to 1.63.0Tianling Shen2023-07-04
| | | | | | | | | | | | | | | | | | While at it fixed a typo error of license files variable. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | dnsproxy: Update to 0.51.0Tianling Shen2023-07-03
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | sing-box: update to 1.3.0Van Waholtz2023-07-01
| | | | | | | | | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | | netbird: update to 0.21.7Salem Huang2023-07-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. Release notes: https://github.com/netbirdio/netbird/releases/tag/v0.21.2 https://github.com/netbirdio/netbird/releases/tag/v0.21.3 https://github.com/netbirdio/netbird/releases/tag/v0.21.4 https://github.com/netbirdio/netbird/releases/tag/v0.21.5 https://github.com/netbirdio/netbird/releases/tag/v0.21.6 https://github.com/netbirdio/netbird/releases/tag/v0.21.7 2. Update GO_PKG_LDFLAGS, because of https://github.com/netbirdio/netbird/commit/292ee260ad564d1e65199b1cb3430b0cd7ba9646 3. Define the configuration file. Signed-off-by: Salem Huang <solohoh@hotmail.com>
* | | inadyn: update to 2.11.0Robert Högberg2023-07-01
| | | | | | | | | | | | Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>
* | | strongswan: Update to 5.9.11Philip Prindeville2023-06-30
| | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | adblock: update to 4.1.5-8Dirk Brenken2023-06-30
| | | | | | | | | | | | | | | | | | * adapt adguard_tracking source changes Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | coova-chilli: fix kernel >= 5.17 compileJohn Thomson2023-06-29
| | | | | | | | | | | | Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
* | | snort3: update to 3.1.64.0John Audia2023-06-30
|/ / | | | | | | | | | | Upstream bump Signed-off-by: John Audia <therealgraysky@proton.me>
* | netsniff-ng: backport patch fixing wrong args handling with muslChristian Marangi2023-06-29
| | | | | | | | | | | | | | | | Backport a patch from upstream fixing wrong args handling with musl. Before this patch non args must be passed at the end of the command due to a musl limitation. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | Merge pull request #21410 from pprindeville/isc-dhcp-dont-require-poolsPhilip Prindeville2023-06-27
|\ \ | | | | | | isc-dhcp: don't require subnet pools
| * | isc-dhcp: don't require subnet poolsPhilip Prindeville2023-06-19
| | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | knot: update to version 3.2.8Jan Hák2023-06-26
| | | | | | | | | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz>
* | | bind: bump to 9.18.16Noah Meyerhans2023-06-25
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVEs: - CVE-2023-2828: The overmem cleaning process has been improved, to prevent the cache from significantly exceeding the configured max-cache-size limit. - CVE-2023-2911: A query that prioritizes stale data over lookup triggers a fetch to refresh the stale data in cache. If the fetch is aborted for exceeding the recursion quota, it was possible for named to enter an infinite callback loop and crash due to stack overflow. The complete list of changes is available in the upstream release notes at https://ftp.isc.org/isc/bind9/cur/9.18/doc/arm/html/notes.html#notes-for-bind-9-18-16 Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | Merge pull request #21366 from zhanhb/haproxyJeffery To2023-06-24
|\ \ | | | | | | haproxy: update to v2.8.0
| * | haproxy: update to v2.8.0Huangbin Zhan2023-06-23
| | | | | | | | | | | | | | | | | | - New major LTS release (https://www.mail-archive.com/haproxy@formilux.org/msg43600.html) Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
* | | banip: update 0.8.8-2Dirk Brenken2023-06-24
|/ / | | | | | | | | | | | | | | * process local lists in strict sequential order to prevent possible race conditions * support ranges in the IP search, too * fix some minor search issues Signed-off-by: Dirk Brenken <dev@brenken.org>
* | vsftpd: fix compilation with musl 1.2.4Tianling Shen2023-06-23
| | | | | | | | | | | | | | | | | | musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so just having _GNU_SOURCE defined is not enough anymore. Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | dnsdist: Move the configuration to Config.inRemi Gacogne2023-06-22
| | | | | | | | Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
* | dnsdist: Split in two packages `dnsdist` and `dnsdist-full`Remi Gacogne2023-06-22
| | | | | | | | | | | | | | | | | | | | `dnsdist-full` has all optional features enabled, but is a big package in term of both flash and memory footprint. `dnsdist` only keeps the features that make the most sense on embeded devices, but can also be customised to match the user's needs, up to the point where it matches `dnsdist-full`. Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
* | linuxptp: Update to 4.0Wojciech Dubowik2023-06-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Major changes since version 3.1.1: * Officially supports the 2019 version of IEEE 1588 * Improved unicast messaging * Enhanced G.8275.2 profile * More flexible Pulse Per Second (PPS) handling * Virtual clock support * Power profile support * VLAN over bond support. * Parallel Redundancy Protocol (PRP) trailer handling. * Non-privileged read-only monitoring port. * New statistics reporting. [V2] * reset package release * adapt license name to the new format Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@westermo.com>
* | Merge pull request #21147 from cottsay/openelpJeffery To2023-06-22
|\ \ | | | | | | openelp: Add new package
| * | openelp: Add new packageScott K Logan2023-06-20
| | | | | | | | | | | | | | | | | | | | | | | | OpenELP is an open source EchoLink proxy for Linux and Windows. It aims to be efficient and maintain a small footprint, while still implementing all of the features present in the official EchoLink proxy. Signed-off-by: Scott K Logan <logans@cottsay.net>
* | | cloudflared: Update to 2023.6.1Tianling Shen2023-06-21
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | banip: release 0.8.8-1Dirk Brenken2023-06-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | * Support MAC-/IPv4/IPv6 ranges in CIDR notation * Support concatenation of local MAC addresses with IPv4/IPv6 addresses, e.g. to enforce dhcp assignments (see readme) * small fixes & cosmetics * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #21378 from TDT-AG/pr/20230615-modemmanagerFlorian Eckert2023-06-21
|\ \ \ | | | | | | | | modemmanager: do not cache virtual device events
| * | | modemmanager: if an alias name is used do not check sysfs pathFlorian Eckert2023-06-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If an alias name is used for the modem, then a check if the device exists in sysfs does not work. To fix this remove the check if the sysfs device exists. The protocoll handler already checks if the modem is responsible for this device on the next line. Signed-off-by: Florian Eckert <fe@dev.tdt.de>