Commit Graph

5958 Commits

Author SHA1 Message Date
Jitao Lu 061f81ff6d miniupnpd: Don't override ipv6_listening_ip
Fixes: https://github.com/openwrt/packages/issues/14145
Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
(cherry picked from commit c89a1f3e8b)
2020-12-08 23:22:46 -08:00
Jitao Lu e82884cafb miniupnpd: Pass ipv6 addr to ipv6_listening_ip
Unlike ipv4, this option is supposed to be an IP address, otherwise, an
error occurs on startup:

    can't parse "br-lan" as valid IPv6 listening address

Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
(cherry picked from commit 7077fd8c79)
2020-12-03 17:58:39 -08:00
Rosen Penev 33bd6b6afa Merge pull request #14115 from mwarning/zt
zerotier: update to 1.6.2
2020-12-02 15:50:32 -08:00
Moritz Warning ace81238c1 zerotier: update to 1.6.2
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2020-12-02 19:01:33 +01:00
Chen Minqiang 808a67b35d net/miniupnpd: ext_ip_reserved_ignore support
This add an option to ignore ext_ip reserved
Enable this option in config by default.

Fixes: #13773

Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
(cherry picked from commit b76aa99194)
2020-11-29 17:26:32 -08:00
Marco Martins 1adf9d9794 miniupnpd: Added chain rule to filter table so udp stun incoming connections rules works
Signed-off-by: Marco Martins <marcomartins86@gmail.com>
(cherry picked from commit 773b87977e)
2020-11-29 17:26:32 -08:00
Rosen Penev 4ed18c40e6 miniupnpd: update to 2.2.0
Replace daemon patch with upstream solution.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 4d824243e6)
2020-11-29 17:26:30 -08:00
Chen Minqiang 16cceb118a net/miniupnpd: check by /etc/init.d/miniupnpd running
Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
(cherry picked from commit 67b4871322)
2020-11-29 17:25:38 -08:00
Rosen Penev 93d44081c3 miniupnpd: default to IGDv1
It seems even modern stuff doesn't support v2 correctly. The miniupnp
suite does but other stacks seem to lack support. Default to v1 to
avoid the headache.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 7891124d6c)
2020-11-29 17:25:06 -08:00
Dirk Brenken 49fb6862d2 adblock: reporting fixes/tweaks
* prevents the creation of an invalid json structure
* add more space to the domain column on cli
* removed test.sh script from package

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-29 13:51:48 +01:00
Rosen Penev 613d4e19c6 Merge pull request #14029 from aaronjg/xtables-addons-fix
xtables-addons: fix compilation error
2020-11-25 21:17:20 -08:00
Aaron Goodman 12b0f8c1ab xtables-addons: patch for 4.14 route_me_harder fix
backport xtables-addons: 0ab324790015a6396be5678b6dffeeaa1cd28299

build: adjust for changed signature of ip_route_me_harder

(Cf. commit 46d6c5ae953cc0be38efd0e469284df7c4328cf8 in Linux.)

Original author: Jan Engelhardt <jengelh@inai.de>

Backported by: Aaron Goodman <aaronjg@stanford.edu>
Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-11-25 19:33:34 -05:00
Olivier Poitrey 591601446b nextdns: Update to version 1.9.4
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-11-23 22:15:03 +00:00
Olivier Poitrey c65dc2c45d nextdns: Update to version 1.9.3
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-11-23 17:01:54 +00:00
Dirk Brenken fb76302091 travelmate: refine scan interface determination
* preferably use the logical wlan interface for scanning
  (as already done in travelmate 2.0)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-18 20:21:06 +01:00
Florian Eckert 68eb1943cc mwan3: add missing dependency
Add missing rpcd dependency.

Fixes #13896

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-11 09:40:01 +01:00
Brian J. Murrell b038148cc0 mwan3: Remove fork/exec for head
Instead, let sed do the work since it's already being used.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
[ update PKG_VERSION ]
2020-11-11 09:39:46 +01:00
Christian Lachner c5d61945fc haproxy: Update HAProxy to v2.0.19
- Update haproxy download URL and hash
- Fix uclibc patch offset

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-11-08 17:47:02 +02:00
Jose Olivera d1d53a3acc xtables-addons: Support IPTV Timeshift
Solves Issue #10373 and PR #10428

Signed-off-by: Jose Olivera <oliverajeo@gmail.com>
(bumped PKG_RELEASE)
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-11-02 10:00:51 +01:00
Josef Schlehofer 3a61338ab4 bind: update to version 9.16.8
- DNS Flag Day 2020
(default EDNS buffer size changed from 4096 to 1232 bytes)

-- Added patch, which should be part of the next release
It fixes an issue while cross-compilation (I linked it in the commit
message with issue link)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d442033941)
2020-11-02 00:35:03 +01:00
Rosen Penev 089699b1ee tinyproxy: convert to procd
The path changed since 274506803a

Fixed.

Also took the time to convert to procd.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c14ba8bd77)
2020-10-29 01:51:52 +01:00
Rosen Penev 39ce334617 tinyproxy: update to 1.10.0
Added license information.

Added PKG_BUILD_PARALLEL for faster compilation.

Refreshed patches.

Updated URLs.

Ran init script through shellcheck.

Fixes: CVE-2017-11747, CVE-2012-3505
Fixes: #13793

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 274506803a)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added fixed CVEs and Github Issue]
2020-10-29 01:49:24 +01:00
Olivier Poitrey b07f752e79 nextdns: Update to version 1.8.8
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-10-26 20:45:25 +02:00
Mengyang Li 99e77a716b openconnect: allow specify --protocol from config
openconnect v8.10 supports 4 VPN protocols

  --protocol=anyconnect  Compatible with Cisco AnyConnect SSL VPN, as well as ocserv (default)
  --protocol=nc          Compatible with Juniper Network Connect
  --protocol=gp          Compatible with Palo Alto Networks (PAN) GlobalProtect SSL VPN
  --protocol=pulse       Compatible with Pulse Connect Secure SSL VPN

This patch allows user to specify protocol use the new "vpn_protocol"
option and deprecate the old option "juniper" which seems to be missing in
the current openconnect client.

Signed-off-by: Mengyang Li <mayli.he@gmail.com>
2020-10-25 21:45:31 +01:00
Dirk Brenken 37303e1f04 adblock: update 4.0.7-2
* switch all safesearch providers to dynamic ips (derived from cname)
* made the new safesearch approach compatible with bind-nslookup
* removed 3.x config compatibility code

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 4b0d029bb5)
2020-10-23 21:14:44 +02:00
Dirk Brenken 5dbbb7ebf4 adblock: update 4.0.7
* fix aria2c download options
* fix report engine with empty domains
* fix safesearch ips of safe.duckduckgo.com (get ips dynamically)
* fix safesearch ips of safesearch.pixabay.com (get ips dynamically)
* add regional blocklist for italy
* shellcheck adjustments
* add test.sh for CI testing

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit d36fd57662)
2020-10-23 21:14:24 +02:00
Matthias Schiffer a2673dc53c fastd: fix buffer leak when receiving invalid packets
Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
2020-10-19 22:10:59 +02:00
Dirk Brenken e2567b210f Merge pull request #13688 from dibdot/trm-19.07
[19.07] travelmate: bugfix single radio mode
2020-10-16 21:32:45 +02:00
Dirk Brenken 4af889f207 travelmate: bugfix single radio mode
* fix the re-connection handling in single radio mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-10-16 19:31:40 +02:00
Josef Schlehofer 70bb0b4c81 bind: update to version 9.16.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ededaf2977)
2020-10-16 17:46:00 +02:00
Alexey Dobrovolsky d05698faeb freeradius3: move "release_" from PKG_VERSION
The substring "release_" does not reflect the version number.
In addition, package names will be shorter.

(backported from commit 11aa0b9)
Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
2020-10-15 20:51:08 +03:00
Alexey Dobrovolsky 93360e6256 freeradius3: add meta-package for default modules
This meta-package contains only dependencies for modules needed in
FreeRADIUS default configuration.

This commit adds missing description and install sections.

(backported from commit 7737abf)
Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
2020-10-14 21:35:07 +03:00
Olivier Poitrey 50a67ed74b nextdns: Update to version 1.8.6
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-10-11 21:19:41 +00:00
Josef Schlehofer 2ad15b0375 Merge pull request #13624 from mlichvar/chrony-update-3.5.1
[19.07] chrony: update to 3.5.1
2020-10-10 23:50:30 +02:00
Miroslav Lichvar b48575ef4d chrony: update to 3.5.1
Fixes CVE-2020-14367.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2020-10-10 16:45:15 +02:00
Josef Schlehofer 35e6986a09 nextdns: mark /etc/config/nextdns as configuration file
Conffile was set for OpenWrt master, but it is not present in OpenWrt
19.07. When /etc/config/nextdns is not set as conffile, it gets
overwritten by each update of nextdns and the user needs to set up it again.

This can be simply reproduced by these steps:
opkg update
opkg install nextdns
edit or add smth to /etc/config/nextdns, save it
then do: opkg install nextdns --force-reinstall
And /etc/config/nextdns gets overwritten by default values

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-10-10 10:12:53 +02:00
Stan Grishin 418e3b2948 simple-adblock: config update file fix
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-10-09 17:30:45 -10:00
Dirk Brenken f3b424139f adblock: refresh blocklist sources
* rename 'smarttv' to 'smarttv_tracking'
* added 'firetv_tracking' and 'android_tracking' (thanks @panache67)
* added 'gaming' (thanks @hasanlo in openwrt forum)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit c01beb0679)
2020-10-04 19:41:50 +02:00
Christian Lachner 2976a5a0ea haproxy: Update HAProxy to v2.0.18
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-10-02 09:20:06 +02:00
Rosen Penev 6ab6a7a897 Merge pull request #13468 from ja-pa/tor-update-0.4.4.5-19.07
[OpenWrt 19.07]tor: update to version 0.4.4.5
2020-10-01 14:43:22 -07:00
Jan Pavlinec eec7bd6468 tor: update to version 0.4.4.5
Disable ac_cv_func_mallinfo because of arc arch.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-01 13:17:18 +02:00
Olivier Poitrey 05ea7dfc63 nextdns: Update to version 1.8.5
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-09-29 18:19:36 +00:00
Olivier Poitrey 826fc8921a nextdns: Update to version 1.8.4
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2020-09-26 10:52:41 -10:00
Nikos Mavrogiannopoulos ac7f782850 openconnect: updated to 8.10 to address CVE-2020-12823
Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-09-23 18:09:07 +02:00
Florian Eckert 925dfc1d1a Merge pull request #13466 from aaronjg/openwrt-19.07
mwan3: fix typo in mwan3_set_sticky_iptables [19.07] [bugfix]
2020-09-23 08:30:52 +02:00
Aaron Goodman 49459505e7 mwan3: fix typo in mwan3_set_sticky_iptables
fixes #13443

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-09-22 19:18:19 -04:00
Nikos Mavrogiannopoulos cae961784e ocserv: include ocserv-worker
Resolves: #13465

Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
2020-09-22 21:24:56 +02:00
Stan Grishin 2af61c9a40 vpnbypass: README update, code cleanup
Signed-off-by: Stan Grishin <stangri@melmac.net>

update

Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-09-21 23:03:13 -10:00
Nikos Mavrogiannopoulos b00feac4b5 ocserv: updated to 1.1.1 2020-09-21 23:11:21 +02:00
Alexey Kuznetsov c614914da0 miniupnpd: add miniupnpd ipv6_disable option, #11971 close
Signed-off-by: Alexey Kuznetsov <axet@me.com>
(cherry picked from commit 9b6537b487)
2020-09-20 17:56:12 -07:00