Commit Graph

5939 Commits

Author SHA1 Message Date
Olivier Poitrey 752070f843 nextdns: Update to version 1.4.23
Changelog:

* Fix OpenWRT with existing forwarder + fix dnsmasq restore issue
* Refactor service execution to better report errors
* Refactor merlin tz setup so it does not need to curl on boot
* Improve upgrade command for install.sh
* Do not mask curl error on install
* Fix timezone logging issue with Merlin
* Add support for Merlin John's fork
* Add raspbian support to installer
* Fix upgrade not reinstalling service
* Limit the aarch64 fix to merlin
* Reset DHCP DNS to self on Merlin router setup
* Fix memory issue with aarch64 based router
* Update Go version
* Allow override of detected env
* Setup timezone correctly on Merlin init script
* Don't ignore curl error on install
* Fix Asus Merlin John’s fork trust store issue
* Fix synology auto setup
* Fix report client info not enabled with setup-router option
* Add support for edgeos DHCP lease file locations
* Fix signal handling when running as a service
* Fix exit menu keyboard shortcut
* Do not fail on upgrade if uninstall failed
* Fix exit menu in installer
* Remove failing upx (for now)
* Make sure nextdns keeps running once ssh session is closed
* Add auto setup of Synology with DHCP server enabled
* Use router's DNS to discover more names
* Get A/AAAA from both answer and addition sections
* Ignore certain invalid names during discovery
* Fix activate with setup-router
* Fix serveral install issues
* Add exponential backoff to mdns probe retry
* Correctly end dhcp lease probing when discovery is cancelled
* Store DHCP/MDNS discovered addrs separately to avoid ping/pong
discovery
* Add DHCP lease support to client discovery
* Do not report mdns listen unreachable error as start will retry
* Reimplement mdns client discovery
* Fix installer GOARCH detection with arm6+
* Fix bin install on platforms needing sudo
* Correctly detect edgeos and ddwrt as routers
* Fix install.sh sudo
* Disable upx as it break many platforms
* Fix installer regression with merlin
* Fix mips64 detection
* Fix OpenWRT detection
* Fix UPX post build script
* Fix install with John's Asuswrt-Merlin fork
* Fix more DDWRT
* Fix DDWRT support
* Fix merlin service add/remove
* Use UPX to compress binaries typicially used on routers
* Revert "Remove direct dep on reflect"
* Use letters for installer menus
* Fix install script for upgrades not working if binary is running
* Do not return an error on mdns listen if at least one interface worked
* Fix installer for synology
* Fix pfSense support
* Remove the logs for each server on each connect
* Move install instructions to wiki
* Fix install.sh uid detection with merlin
* Fix install.sh for arm6+
* Add Synology init system support
* Fix install.sh
* Add a generic router setup that just changes the listen to public
* Update README
* Add auto setup support for EdgeOS
* Restore per OS install instruction in readme during installer beta
* Refactor install.sh
* Remove dep on golang.org/x/net/ipv[4|6]
* Remove direct dep on reflect
* Rewrite the zeroconf code to use dnsmessage instead miekg/dns
* Add auto setup support for DD-WRT
* Improve arch detection
* Add auto setup support for OpenWRT
* Add automatic router setup support
* Fix service
* Remove dep en seq on sysv style init scripts
* Add Entware init system support
* Report init system used on install and in UA
* Add EdgeOS support
* Reads /etc/hosts before forwarding queries to the upstream
* Fix localhost resolution with Linux arch empty /etc/hosts
* Use /etc/hosts file to resolve listen address and list on all IPs
listed
* Add support for multiple router firmware
* Fix hardened privacy disabling dual stack
* Add a config set sub command and refactor commands handling
* Add support for activate on freebsd
* Fix inverted MAC matching
* Add unit test for conf prefix match #35
* Activate uses listen address instead of static 127.0.0.1
* Improve FreeBSD integration
* Add FreeBSD support
* Fix a typo
* Use zip for windows archive

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Edited PKG_RELEASE to 1
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit a3b028b357)
2020-02-01 09:58:58 +02:00
Ansuel Smith 2c4e6a5390 uwsgi: backport master changes to 19.07
To support new luci version uwsgi has been changed.
Backport this changes to 19.07

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2020-01-31 23:13:34 +01:00
Ansuel Smith 8b5c2901c0 nginx: backport master changes to 19.07
Currently luci is broken in 19.07.
Changes done to fix this problem didn't merge in the
19.07 release.

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2020-01-31 23:13:34 +01:00
Nicholas Smith cac10393e2 modemmanager: add ModemManager to packages
Signed-off-by: Nicholas Smith <nicholas.smith@telcoantennas.com.au>
2020-01-28 11:52:04 +10:00
Rosen Penev cd81e4f06f Merge pull request #11143 from Andy2244/smbd-rename_ksmbd-update-3.1.1-(19.07)
[19.07] smbd: update to 3.1.1, rename to "ksmbd", "ksmbd-tools"
2020-01-27 15:48:22 -08:00
Andy Walsh fd5a51ac04 wsdd2: update for renamed smbd->ksmbd
* update for renamed smbd->ksmbd
* fix build warning for global network.sh include

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-27 22:16:27 +01:00
Andy Walsh 82b463b19f smbd: update to 3.1.1, rename to "ksmbd", "ksmbd-tools"
* rename smbd->ksmbd (upstream name change)
* ksmbd-tools: build with static glib2 (usmbd = ~90kb, smbuseradd = ~40kb)
* new etc folder location = /etc/ksmbd/smb.conf
* new database name = /etc/ksmbd/ksmbdpwd.db
* fixes "map to guest = Bad User" while userdb is also used
* fixes missing ipv6 support
* update/rename to "luci-app-ksmbd"
* remove UCI samba compatibility code for section names (ksmbd uses [share] + [globals] not [sambashare] + [global])

* ksmbd: release 3.1.1 version
* ksmbd: does not work if ipv6 module is not loaded or compiled in
* ksmbd: capsule ifdef CONFIG_SMB_INSECURE_SERVER with smb1 codes
* ksmbd: release 3.1.0 version
* ksmbd: fix over 80 character warnings
* ksmbd: rename smbd-tools to ksmbd-tools in travis.yml
* ksmbd: fix password db file location in travis.yml
* ksmbd: rename smbd prefix function to ksmbd
* ksmbd: rename smbd prefix source files to ksmbd
* Revert "smbd: set connection status with SMBD_SESS_EXITING instead of direct destory"
* ksmbd: rename smbd to ksmbd in .travis.yml
* smbd: rename module name to ksmbd.ko
* smbd: set connection status with SMBD_SESS_EXITING instead of direct destory
* smbd: previous session with same user and same password should be deleted
* smbd: only use global session table in smb2 session
* smbd: add support for ipv6
* smbd: fix empty macro issue from smbd_debug
* cifsd: fix printing of file names in find_next

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-27 22:03:28 +01:00
Hannu Nyman 1e43dc8f81 Merge pull request #11123 from stangri/19.07-https-dns-proxy
[19.07] https-dns-proxy: fix deleting server items, configurable dnsmasq settings change
2020-01-26 22:39:33 +02:00
Robby K b3c1a67ff1 freeradius3: Update to 3.0.20
Latest stable release, contains security fixes for EAP-PWD (side-channel leak), logrotate settings (CVE-2019-10143) and a DoS issue due to multithreaded BN_CTX access (CVE-2019-17185).

Also refreshed patches/002-disable-session-cache-CVE-2017-9148.patch due to the following changes/commits in freeradius:
https://github.com/FreeRADIUS/freeradius-server/commit/bf1a1eda2387745bbe538998f3d2e6514f981bfd
https://github.com/FreeRADIUS/freeradius-server/commit/a3c46544b38ab46218c385d0ee197538fad5b3da

Signed-off-by: Robby K <robbyke@gmail.com>
2020-01-26 14:43:06 +01:00
Stan Grishin a9fd019a3d https-dns-proxy: fix deleting server items, configurable dnsmasq settings change
Signed-off-by: Stan Grishin <stangri@melmac.net>
2020-01-25 21:14:56 -07:00
Dennis Dast ea93089afd radicale-py3: Add python3-urllib dependency
Depend on python3-urllib instead of python3-email (python3-urllib has
python3-email as a dependency).

Signed-off-by: Dennis Dast <mail@ddast.de>
2020-01-20 20:59:41 +01:00
Matt Merhar 72af40f2ba nut: fix other/otherflag custom variables in nut-server.init
This allows custom config parameters to be added to the generated config
files, enabling the original intended functionality per
https://openwrt.org/docs/guide-user/services/ups/software.nut.

Example usage from /etc/config/nut_server:

config driver 'apc'
	option driver 'snmp-ups'
	option snmp_version 'v3'
	option port '172.16.100.5'
	list other 'secLevel'
	list other 'secName'
	list other 'authPassword'
	list otherflag 'notransferoids'

config other 'other_secLevel'
	option value 'authNoPriv'

config other 'other_secName'
	option value 'some_username'

config other 'other_authPassword'
	option value 'some_password'

config other 'otherflag_notransferoids'
	option value '1'

Signed-off-by: Matt Merhar <mattmerhar@protonmail.com>
(cherry-picked from 0b04dd34a0)
2020-01-19 21:22:35 -08:00
Sebastian Kemper e1aa905ab9 nut: update OpenSSL 1.1.0 patch
Replaces OpenWrt patch with upstream patch. Also removes
0002-Fix-check-for-empty-string.patch as this is included in upstream
OpenSSL 1.1.0 patch.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from 7d4f1b8589)
2020-01-19 21:22:32 -08:00
Sebastian Kemper 154da8aa02 nut: fix CGI setup
This commit makes

 - the libgd dependency (as well as specifying libs and includes)
 - the configure argument "--with-cgi"

dependant on whether the package nut-web-cgi is selected.

nut-web-cgi is also added to PKG_CONFIG_DEPENDS.

Resolves: #10641

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
(cherry-picked from cdd660a41d)
2020-01-19 21:21:51 -08:00
Eric Luehrsen bc4f3c11cb unbound: improve dependencies for okpg
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
cherry pick 6505154a74
2020-01-19 15:35:09 -05:00
W. van den Akker 5022caf869 Shorewall6-lite: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:47 +01:00
W. van den Akker 0b890cf4b5 Shorewall6: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:28 +01:00
W. van den Akker 1201cdcd5f Shorewall: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:49:07 +01:00
W. van den Akker 4cb0ff8314 Shorewall-lite: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:48:35 +01:00
W. van den Akker c2a5aa1a54 Shorewall-core: Bump to 5.2.3.5
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2020-01-18 22:48:13 +01:00
Stijn Tintel 995226d95d strongswan: bump to 5.8.2
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:37 +02:00
Paul Fertser 243673b2d0 strongswan: allow to specify per-connection reqid with UCI
This is useful to assign all traffic to a fw3 zone, e.g.:

/etc/config/ipsec:

config remote 'test'
	list tunnel		'dev'
...

config 'tunnel' 'dev'
	option reqid		'33'
...

/etc/config/firewall:

config zone
	option name		wan
	option extra_src	"-m policy --pol none --dir in"
	option extra_dest	"-m policy --pol none --dir out"
...

config zone
	option name		vpn
	# subnet needed for firewall3 before 22 Nov 2019, 8174814a
	list subnet		'0.0.0.0/0'
	option extra_src	"-m policy --pol ipsec --dir in --reqid 33"
	option extra_dest	"-m policy --pol ipsec --dir out --reqid 33"
...

Signed-off-by: Paul Fertser <fercerpav@gmail.com>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:32 +02:00
Stijn Tintel 3880d65a07 strongswan: bump to 5.8.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2020-01-17 01:07:28 +02:00
Stan Grishin 3030d0fc1a vpn-policy-routing: bugfix: remove conflict with vpnbypass
Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 05603822d3)
2020-01-16 20:00:31 +02:00
Eric Luehrsen 8f3dcbcee6 unbound: fix TLS forwards with optional suffix
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit b101dd76fb)
2020-01-11 23:03:47 +02:00
Rosen Penev 670f336d79 transmission: Sync with master
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-01-10 18:07:42 -08:00
Yousong Zhou 1f293771cd openvswitch: bump PKG_RELEASE
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 13:03:25 +08:00
Yousong Zhou dc097661c5 openvswitch: backport patch to fix compilation
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 12:59:37 +08:00
Yousong Zhou 74e160df22 openvswitch: fix building failure caused by dst_ops api change
Ref: https://github.com/openwrt/packages/issues/10961
Reported-by: Sven Roederer <devel-sven@geroedel.de>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 12:56:32 +08:00
Yousong Zhou a4a54d0f3b openvswitch: bump to version 2.11.1
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-01-08 11:57:17 +08:00
Rosen Penev 26c23f3b9e Merge pull request #10881 from mstorchak/stubby-19.07
[19.07] stubby: switch to ca-bundle
2020-01-05 15:38:13 -08:00
DENG Qingfang e2bca1026b nginx: update to 1.16.1
Fixes:
when using HTTP/2 a client might cause excessive memory
consumption and CPU usage (CVE-2019-9511, CVE-2019-9513,
CVE-2019-9516).

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
(cherry picked from commit 5ffc744018)
2020-01-04 23:13:48 +01:00
Jan Pavlinec 74e9ca74fd tor: add respawn to init script
Note:
In some cases when tor daemon starts before
than the router is connected to the Internet.
Tor will exit and you have to run it manually.
This should fix this case.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit 5bce9c3e1d)
2020-01-04 20:53:01 +01:00
Jan Pavlinec b85cbaf7e5 tor: update to version 0.4.2.5
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
(cherry picked from commit a339e0ede3)
2020-01-04 20:52:49 +01:00
Rosen Penev 9ec8652533 Merge pull request #10940 from Andy2244/samba-4.11.4-(19.07)
[19.07] samba4: update to 4.11.4 (python3 version), add rpcsvc-proto, add libasn1 host build
2020-01-03 16:32:02 -08:00
Rosen Penev 7472cc7427 Merge pull request #10938 from Andy2244/smbd-rename-3.0.1-(19.07)
[19.07] smbd: rename from cifsd, update to 3.0.1
2020-01-03 16:15:54 -08:00
Andy Walsh 85066d81d0 samba4: update to 4.11.4 (python3 version), add rpcsvc-proto, add libasn1 host build
* update to 4.11.4 (python3 version)
* re-enable AD-DC option
* add 'samba_nice' UCI option via "config procd 'extra'"
* restructure buildsteps (don't rely on waf --targets logic)
* move quota option into VFS
* move ACL option into AC-DC
* add more admin-tools
* use rpath_install for libs
* fix rpath + rstrip

extra:
* add rpcsvc-proto package _(don't rely on nfs-utils/host for headers, rpcgen anymore)_
* add libasn1 host build _(samba4 is looking for the bins)_

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-04 01:08:11 +01:00
Andy Walsh 28e84aacf7 wsdd2: update to git (2019-12-15), bind to 'lan' only, update init for smbd
* update to git (2019-12-15)
* bind to 'lan' interface only
* update init for renamed cifsd->smbd
* make smbd/samba compatible _(avoid testparm dependency)_
* only start if needed
* add meta data _(vendor, model, sku)_
* update smb.conf procd location
* lower restart delay
* remove outdated patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-04 01:01:43 +01:00
Andy Walsh 8bc58d175e smbd: rename from cifsd, update to 3.0.1
* follow upstream rename to 'smbd' and 'smbd-tools'
* config is '/config/smbd' and '/etc/smbd/smb.conf'
* smbd: update to 3.0.1
* smbd: fixes delete access on readonly shares
* smbd: add patch to keep version metadata in kmod
* smbd: remove synchrous kill_server patches
* smbd-tools: update to 3.0.1
* smbd-tools: userspace service is now 'usmbd'
* smbd-tools: userspace tools are: 'smbuseradd', 'smbshareadd' with /etc/smbd/smbdpwd.db
* smbd-tools: split package into server/utils (reduce size)
* smbd-tools: fix init (luci save&apply)
* smbd-tools: remove kill_server related timeouts
* smbd-tools: add low memory options to template, to prevent oom

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>
2020-01-04 00:55:40 +01:00
Stan Grishin 86b48645fa vpn-policy-routing: initial release
Signed-off-by: Stan Grishin <stangri@melmac.net>
2019-12-30 07:40:38 -07:00
Hannu Nyman 8df00a88e7 Merge pull request #10892 from cshoredaniel/pr-19.07-radicale2-doc-passlib-bcrypt
[19.07] radicale2: Document suggested use of passlib and bcrypt
2019-12-28 23:52:37 +02:00
Daniel F. Dickinson 64d4fc6e6c radicale2: Document suggested use of passlib and bcrypt
PKG_RELEASE not bumped because this only affects package description.
We document that passlib and bcrypt are needed if one wishes to use
bcrypt encryption of passwords.  These have not been added as dependencies
as Radicale2 can have a frontend webserver authenticate users rather than
radicale itself.

Signed-off-by: Daniel F. Dickinson <cshored@thecshore.com>
2019-12-28 16:18:22 -05:00
Moritz Warning 479b45b8ab zerotier: update to 1.4.6
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
Moritz Warning f0c5a95a4f zerotier: make sure the /var/lib exists
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
Moritz Warning 38a3ed1c75 zerotier: change license to BSL 1.1
Business Source License.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
Moritz Warning e42648f3c8 zerotier: update to release 1.4.4
Also allow path to local.conf to be set and enable linker optimisations
to save a few bytes.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
Moritz Warning 70f4c1d197 zerotier: udpate to 1.4.2
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
DENG Qingfang 61291196d3 zerotier: fix linking to libnatpmp and build with uclibc
Makefile always checks the existence of host's NAT-PMP header,
which results in internal NAT-PMP code being used if it's missing.

Add a patch to make it check targets' header instead.

Use aligned_alloc() instead of valloc() in case of uclibc.

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
2019-12-28 14:48:33 +01:00
Moritz Warning 1961985f86 zerotier: update to zerotier 1.4.0
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00
Moritz Warning 7b5cc70faa zerotier: keep configuration file on update
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2019-12-28 14:48:33 +01:00