Commit Graph
4407 Commits
Author SHA1 Message Date
Ansuel Smith 4519a1d2b3 nginx: Bump to latest release
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-11-11 15:49:47 +01:00
Dirk BrenkenandGitHub 42ff15344c Merge pull request #7373 from dibdot/banip
banip: new package to block incoming & outgoing ip addresses
2018-11-11 14:59:05 +01:00
Hannu Nyman e82a12a613 webui-aria2: dummy version bump
The source download storage contains a 0 byte version
of the webui-aria2 sources, which breaks buildbot.

Trigger a new download by bumping the version by a date.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2018-11-11 13:44:08 +02:00
Thomas HeilandGitHub d4c1e789be Merge pull request #6854 from neheb/apache
apache: Update to 2.4.34
2018-11-11 11:35:22 +01:00
Hannu NymanandGitHub 8256f63546 Merge pull request #6931 from chris5560/radicale_master
radicale: add extra command "export_storage" to init script
2018-11-11 10:52:08 +02:00
Rosen Penev 17cfc75b98 socat: Fix compile with deprecated APIs disabled
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-10 17:26:56 -08:00
Rosy SongandHannu Nyman 07c2d29859 nft-qos: use prerouting chain rather than input
Using the input chain can only limit the upload rate in local network.
Since to do the limit rate on both native and remote, we have to
replace the input hook with prerouting.

Signed-off-by: Rosy Song <rosysong@rosinson.com>

(Added Makefile version bump)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2018-11-10 20:47:23 +02:00
Dirk BrenkenandGitHub 43f1f78dfc Merge pull request #7377 from dibdot/adblock
adblock: fix adguard source
2018-11-10 17:46:25 +01:00
Dirk Brenken ff139131a7 adblock: fix adguard source
* fix regex for adguard blocklist source

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-11-10 17:39:08 +01:00
Kevin Darbyshire-Bryant 662d3f16d2 nlbwmon: receive dhcp interface triggers
Not all interfaces may have been allocated address at nlbwmon startup so
it may not collect statistics as expected/configured.

Add interface triggers to catch dhcp events and restart as required.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-11-10 16:34:35 +00:00
Marko RatkajandKevin Darbyshire-Bryant ade189963b net: dhcpcd: bump version to 7.0.8
Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2018-11-10 15:08:50 +00:00
Dan Lüdtke 0d337e9d71 jool: Remove inactive maintainer
Signed-off-by: Dan Lüdtke <mail@danrl.com>
2018-11-10 13:58:10 +01:00
Dirk Brenken b17588a856 banip: new package to block incoming & outgoing ip addresses
a new script based package called "banIP" to block
incoming & outgoing ip adresses/subnets via ipset.

Features:
* a shell script which uses ipset and iptables
  to ban a large number of IP addresses
  published in various IP blacklists (bogon, firehol etc.)
* support blocking by ASN numbers
* support blocking by iso country codes
* support local white & blacklist (IPv4, IPv6 & CIDR notation)
* auto-add unsuccessful ssh login attempts to local blacklist
* auto-add the uplink subnet to local whitelist
* per source configuration of SRC (incoming) and DST (outgoing)
* supports IPv4 & IPv6

Strong LuCI support:
* easy interface to track & change all aspects of your ipset
  configuration on the fly
* integrated IPSet-Lookup
* integrated RIPE-Lookup
* Log-Viewer & online configuration of white- & blacklist

LuCI-Screenshots will follow in the second post.
Forum discussion:
https://forum.openwrt.org/t/banip-new-project-needs-testers-feedback/16985

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-11-10 11:01:45 +01:00
Hannu NymanandGitHub d785b15857 Merge pull request #6974 from neheb/miniupnopc
miniupnpc: Update to 2.1
2018-11-10 11:24:15 +02:00
Yousong Zhou 0478614556 openvswitch: fix building intree datapath module unconditionally
Fixes f2bf8d3 ("openvswitch: provide in-tree kmod builds")

Closes openwrt/packages#7360

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-11-10 07:41:14 +00:00
Hannu NymanandGitHub a0ba485b22 Merge pull request #7321 from neheb/tgt
tgt: Update to 1.0.74
2018-11-09 18:29:07 +02:00
Hannu NymanandGitHub 115068545e Merge pull request #7355 from diizzyy/nginx-rtmp
nginx: Update rtmp module
2018-11-09 18:28:00 +02:00
Karl Palsson 84035d4d52 net/mosquitto: bump to 1.5.4
Security and bugfix release.  Full release notes available at:
https://mosquitto.org/blog/2018/11/version-154-released/

Security:
* client certificates not validated for websockets listeners.

Bugfixes:
* wills with disconnected clients better handled
* bridge restart_timeout properly observed

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-11-09 13:55:17 +00:00
Marko RatkajandGitHub af91fd7033 Merge pull request #7332 from sartura/squid_bump_version_to_4.4
net: squid: bump version to 4.4
2018-11-09 10:44:30 +01:00
Rosen PenevandKevin Darbyshire-Bryant 96e1853812 znc: Fix compilation without deprecated APIs in OpenSSL 1.0.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
[correct configure flag from enable-ssl to enable-openssl]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-11-08 19:36:03 +00:00
Daniel Engberg 80f5309fb3 nginx: Update rtmp module
Change to ut0mt8's fork that contains several enhancements
and bugfixes.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-08 20:06:31 +01:00
Hannu NymanandGitHub 2d20d82e3e Merge pull request #7295 from neheb/unbound
unbound: Remove deprecated OpenSSL API
2018-11-08 12:09:51 +02:00
Rosen Penev 0ff43a37a3 apache: Update to 2.4.37
Fixes at least:

CVE-2017-15710
CVE-2017-15715
CVE-2018-1283
CVE-2018-1312

Added CPE ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-06 09:36:54 -08:00
Marko Ratkaj 262eaa45c8 net: squid: bump version to 4.4
Simple bump from 4.3 to 4.4

Changelog since 4.3:
netdb not saving to disk (#311)
Fix memory leak when parsing SNMP packet (#313)
Fix several windows build issues (#309)
Certificate fields injection via %D in ERR_SECURE_CONNECT_FAIL (#306)
Allow compilation with minimal OpenSSL (#281)
Fixed %USER_CA_CERT_xx and %USER_CERT_xx crashes (#301)
Improve const correctness for hash_link (#300)
Bug #4893: Malformed %>ru URIs for CONNECT requests (#299)

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2018-11-06 18:23:57 +01:00
Hannu NymanandGitHub 7681c108af Merge pull request #7315 from diizzyy/patch-16
fping: Update to 4.1
2018-11-06 18:03:58 +02:00
Hannu NymanandGitHub f9117262f0 Merge pull request #7316 from diizzyy/patch-17
stunnel: Update to 5.49
2018-11-06 18:03:23 +02:00
Hannu NymanandGitHub a2ce8bf07f Merge pull request #6193 from rosysong/nqos
nft-qos: add new package
2018-11-06 17:58:19 +02:00
Jeffery To 3e84e30ba2 tor-fw-helper: new package
tor-fw-helper is a helper to automatically configuring port forwarding
for tor, using UPnP or NAT-PMP NAT traversal.

This is a tor-fw-helper rewrite in Go that functions as a drop in
replacement for the original C code.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-11-06 20:33:55 +08:00
Rosy Song 6649ac91e9 nft-qos: add new package
This is the nftables implementation for qos on OpenWrt,
Currently, it has below features:

* Static QoS : setting limit rate for devices or global network.

* Dynamic/Auto QoS : setting limit rate according to the network
  bandwidth and adjust itself automatically (hotplug event).

* Traffic Priority : this feature is like traffic shaping under tc,
  it uses ingress hook to handle to packets here.

Signed-off-by: Rosy Song <rosysong@rosinson.com>
2018-11-06 16:13:28 +08:00
Rosen Penev 1ce197c73f tgt: Update to 1.0.74
Remove KERNEL_AIO dependency to avoid recursive dependency with libaio in
a future commit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-05 20:31:49 -08:00
Rosen Penev 1200c508fb unbound: Remove deprecated OpenSSL API
This will become pointless once OpenSSL 1.1.1 enters the tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-05 16:32:11 -08:00
Daniel EngbergandGitHub 31e27e9d82 stunnel: Update to 5.49
Update stunnel to 5.49

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-05 20:41:01 +01:00
Daniel EngbergandGitHub 95bde85468 fping: Update to 4.1
Update fping to 4.1

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-05 20:37:14 +01:00
Hannu NymanandGitHub 81c9ff735d Merge pull request #5781 from jefferyto/obfs4proxy
obfs4proxy: new packages (including dependencies)
2018-11-04 20:34:36 +02:00
Peter Wagner 555e3ff88b tor:update to 0.3.4.9
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-11-04 18:07:31 +01:00
Dirk BrenkenandGitHub 4e70f1c949 Merge pull request #7258 from jonathanunderwood/stubby_documentation
stubby: add reload_config to documentation
2018-11-04 13:36:48 +01:00
Dirk BrenkenandGitHub 8e00bab166 Merge pull request #7257 from jonathanunderwood/stubby_fix_init
stubby: fix loading of config file
2018-11-04 13:36:29 +01:00
jonathanunderwoodandKevin Darbyshire-Bryant 35a377dbfc stubby: add Jonathan Underwood as co-maintainer (#7307)
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2018-11-04 10:49:52 +00:00
Hannu NymanandGitHub ea8f30cf65 Merge pull request #7278 from neheb/seafile
seafile-ccnet: Update to 6.3.4
2018-11-03 09:23:27 +02:00
Hannu NymanandGitHub effc00e24a Merge pull request #6811 from Robby-/master-freeradius3-eap-pwd
freeradius3: Enable the EAP-PWD module.
2018-11-03 09:11:34 +02:00
Christian Lachner ca39a1b787 haproxy: Update all patches for HAProxy v1.8.14
- Add new patches (see https://www.haproxy.org/bugs/bugs-1.8.14.html)
- Raise PKG_RELEASE to 4

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2018-11-02 10:35:38 +01:00
Hannu NymanandGitHub b0a54383c9 Merge pull request #7267 from neheb/hap
haproxy: Remove unnecessary OpenSSL depends
2018-11-02 08:08:19 +02:00
W. van den Akker 9a4cd1ecba Shorewall6: Bump to version 5.2.1.1
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-11-01 14:06:45 +01:00
W. van den Akker a4220dd385 Shorewall: Bump to version 5.2.1.1
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-11-01 14:06:29 +01:00
W. van den Akker ed15a9d06c Shorewall6-lite: Bump to version 5.2.1.1
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-11-01 14:06:07 +01:00
W. van den Akker b644b8230e Shorewall-lite: Bump to version 5.2.1.1
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-11-01 14:05:48 +01:00
W. van den Akker c82c3613cd Shorewall-core: Bump to version 5.2.1.1
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-11-01 14:05:29 +01:00
Albert LopezandKarl Palsson 46d6c1093a oor: Add OpenOverlayRouter (oor) package
lispmob: OOR is a rename of LISPmob and replace the package

Signed-off-by: Albert Lopez <alopez@ac.upc.edu>
2018-10-31 15:15:15 +00:00
Rosen Penev 5c950bd726 haproxy: Remove unnecessary OpenSSL depends
All of these are either not needed or not valid.

Added a patch to remove the OPENSSL_WITH_DEPRECATED dependency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-10-30 14:20:55 -07:00
Dirk Brenken 4e8da997db travelmate: update 1.3.0
* proactively scan and switch to a higher prioritized uplink,
  despite of an already existing connection,
  this is configurable via 'trm_proactive' option
  (default '1', enabled)
* fix some minor list trim issues
* optimize wlan scanning behavior
* refine debug messages

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-10-30 15:40:07 +01:00