Commit Graph

5939 Commits

Author SHA1 Message Date
Stijn Tintel 5b1e9eefd0 net-snmp: reload snmpd on interface events
When applying wireless configuration changes, the ifindex of the
wireless interface(s) change. While snmpd picks up the new interfaces
with the correct index, it does not remove the old ones:

IF-MIB::ifName.23 = STRING: wlan0
IF-MIB::ifName.24 = STRING: wlan1
IF-MIB::ifName.25 = STRING: wlan0
IF-MIB::ifName.26 = STRING: wlan1

This causes problems for monitoring tools that use ifName (or ifDesc) as
interface reference. Add a trigger that reloads snmpd on interface
up/down events so that it will no longer have the old interfaces.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2016-02-20 16:46:17 +01:00
Nikos Mavrogiannopoulos 03c0a3ea31 ocserv: updated to 0.10.12
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2016-02-19 17:02:09 +01:00
Hannu Nyman b7ee11001b Merge pull request #2374 from tru7/linknx
linknx: bump to new version on new repo
2016-02-19 15:46:58 +02:00
Hannu Nyman 9264117f45 Merge pull request #2372 from salzmdan/master
knot: update to 2.1.1
2016-02-19 15:46:25 +02:00
Hannu Nyman e51808dc8d Merge pull request #2396 from dibdot/adblock
adblock: 0.70.2
2016-02-19 15:13:11 +02:00
Dirk Brenken c353ed253c adblock: 0.70.2
* fix wan update detection failure

Signed-off-by: Dirk Brenken <openwrt@brenken.org>
2016-02-19 14:04:32 +01:00
Stefan Hellermann e7f0d02076 prosody: update to 0.9.10, switch to procd init script
Update to 0.9.10 due to https://prosody.im/issues/issue/585
The init script seems to block, as "prosodyctl start" started to block
at least on my configuration. I switched to a procd init script, which
deals with blocking processes.

Signed-off-by: Stefan Hellermann <stefan@the2masters.de>
2016-02-18 21:37:12 +01:00
Hans Dedecker ea0bdc3360 pptpd: Make mppe and logwtmp configurable as uci parameters
Add uci option mppe which makes the mppe parameter configurable;
the default value is required,no40,no56,stateless as before.

Add uci option logwtmp; when enabled updates wtmp when users
connect and disconnect

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-02-18 10:44:00 +01:00
Luka Perkov b878c6efaa Merge pull request #2388 from ryzhovau/snort_nosql
snort: remove useless mysql/pgsql options
2016-02-17 11:44:10 +01:00
Miroslav Lichvar 5d74d04ac1 chrony: update to 2.3
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2016-02-16 21:53:29 +01:00
Hannu Nyman 17be9d1d23 Merge pull request #2389 from dibdot/adblock
adblock: 0.70.1
2016-02-16 21:50:15 +02:00
Dirk Brenken d27b8c82a9 adblock: 0.70.1
* fix root cause for https timeout issues
* fix startup issues via luci
* detach init start process to fix luci timeout issues
* fix html header in adblock pages
* fix adblock.conf options to single quotes

Signed-off-by: Dirk Brenken <openwrt@brenken.org>
2016-02-16 19:50:38 +01:00
Alexander Ryzhov cd554e1386 snort: increase PKG_RELEASE
Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>
2016-02-16 09:22:50 -05:00
Alexander Ryzhov 45803c7628 snort: remove useless mysql/pgsql options
Signed-off-by: Alexander Ryzhov <openwrt@ryzhov-al.ru>
2016-02-16 09:03:58 -05:00
Toke Høiland-Jørgensen d93b4ab307 sqm-scripts: Bump to v1.0.7.
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2016-02-16 12:32:21 +01:00
Daniel Salzman 4a54847916 knot: update to 2.1.1
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
2016-02-15 12:51:53 +01:00
Hannu Nyman 70e86e18a1 Merge pull request #2386 from dibdot/adblock
adblock: update to 0.70.0
2016-02-15 13:44:02 +02:00
Dirk Brenken 7609da872d adblock: update to 0.70.0
* openwrt init system support, see /etc/init.d/adblock
* support for two new adblock sources: openphish and ruadlist/easylist
* partial block list restore, i.e. if a single list download failed
* fix performance regression on sites with links to https ad servers
* removed no longer used samples dir
* updated documentation

Signed-off-by: Dirk Brenken <openwrt@brenken.org>
2016-02-15 12:25:21 +01:00
Christian Schoenebeck 42ff9a7d5f ddns-scripts: update to version 2.6.2-1
- renamed (lower case) filenames and servicenames for no-ip.com, cloudflare.com and bind_nsupdate including modifing existing configurations #2375
- updated tld_names.dat

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2016-02-13 17:00:33 +01:00
Othmar Truniger 3448cd9385 linknx: bump to new version on new repo
Signed-off-by: Othmar Truniger <github@truniger.ch>
2016-02-11 19:00:37 +01:00
Dirk Neukirchen 4c21039884 squid: disable krb5
- fix build error reported by buildbot by disabling krb5
- libcom_err from krb5 is used - configure output:
configure: WARNING: library 'com_err' is required for Heimdal Kerberos
- krb5 has its own libcom_err (see krb5 package) with its own symbols

- linking with wrong libcom_err from libext2fs produces errors during
libgssapi_krb5.so: undefined reference to `error_message@com_err_3_MIT'
libgssapi_krb5.so: undefined reference to `remove_error_table@com_err_3_MIT'
libgssapi_krb5.so: undefined reference to `add_error_table@com_err_3_MIT'
-> remove libext2fs dependency (wasnt working anyway - no PKG_BUILD_DEP)

Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
2016-02-11 09:16:56 +01:00
Peter Wagner ff305cb8fe git: update to 2.7.1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-02-10 19:58:08 +01:00
Daniel Golle 351f42ca54 usbip: use eudev instead of udev
udev was dropped from core and replaced by eudev.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2016-02-10 19:00:53 +02:00
Christian Schoenebeck ba929dd1f7 privoxy: bump to version 3.0.24
* upstream to Privoxy 3.0.24
* add facility to set compile options
* add file list to be saved on sysupgrade
* fixed PKG_MAINTAINER string
* add port 8118 used by privoxy to /etc/services
* new "boot_delay" option (default 10 seconds) to wait for interfaces to come up before hotplug restarts are enabled

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2016-02-07 21:52:02 +01:00
Damiano Renfer d3c22bf985 net/dnscrypt-proxy: update 1.6.1, security update see https://github.com/jedisct1/dnscrypt-proxy/releases/tag/1.6.1
Signed-off-by: Damiano Renfer damiano.renfer@gmail.com
2016-02-07 18:22:26 +01:00
Hannu Nyman cdf08481cf Merge pull request #2352 from chris5560/radicale
Radicale: bump to version 1.1.1
2016-02-07 12:51:54 +02:00
Christian Schoenebeck f237c2e089 Radicale: bump to version 1.1.1
* upstream to Radicale 1.1.1
* add file list to be saved on sysupgrade

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2016-02-06 17:09:26 +01:00
Christian Schoenebeck 5bd03b4e9a ddns-scripts: update to 2.6.1-1 with several fixes
- new function expand_ipv6()
- expand IPv6 before compare https://dev.openwrt.org/ticket/21725
- Fix split_FQDN() to return host.subdomain correctly  #2334
- modified check for musl library used by nslookup #2341 #2346 thanks to Arjen de Korte

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2016-02-06 15:48:39 +01:00
Hannu Nyman 72aa1e370d Merge pull request #2344 from dibdot/adblock
adblock: 0.60.1
2016-02-03 20:40:08 +02:00
Dirk Brenken 1b8358b1ab adblock: 0.60.1
- fix possible race condition during startup
- fix duplicate logging during startup
- fix wget parms to prevent partitial downloads
- fix iptables rules to meet openwrt user chains
- added a rule in output chain to reject local ad related requests as
well
- changed default IPv4/IPv6 blackhole ip address to fix routing issues
with windows clients

Signed-off-by: Dirk Brenken <openwrt@brenken.org>
2016-02-03 19:19:29 +01:00
diizzyy c7d0a55a08 nfs-kernel-server: use libevent2, update copyright and bump PKG_RELEASE
Use libevent2 instead of libevent
Update copyright to 2016
Bump PKG_RELEASE due to package changes

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2016-02-02 05:32:42 +01:00
Dov Murik f091258d85 net/rsyslog: update to 8.16.0
Signed-off-by: Dov Murik <dmurik@us.ibm.com>
2016-01-31 20:50:26 -05:00
Florian Fainelli f564dbefb7 Merge pull request #2326 from ffainelli/iptraf
net: Add iptraf-ng
2016-01-30 19:27:16 -08:00
Luka Perkov 032f102035 Merge pull request #2264 from dangowrt/squid-libcom_err-builddep
squid: build-depend on libext2fs
2016-01-29 18:04:34 +01:00
Yousong Zhou f0a06c9ed2 aircrack-ng: split out airmon-ng as a separate package.
As said in a related github discussion thread [1], OpenWrt is so small a
system that

 - "airmon-ng check kill" does not have much to check
 - airmon-ng takes up too much space for not that much benefit (bringing
   up monitor interface with just iw should be enough for at least b43
   and ath9k drivers)

Airmon-ng depends on a lot of utility binaries to run and these
dependencies increase the installation size.  With this commit we can
provide a working airmon-ng and a smaller aircrack-ng package.

Dependency spec of airmon-ng is also reworked to

 - select usbutils only if USB feature is available
 - select pciutils only if PCI feature is available

While doing the split, this commit also contains a few other minor
changes

 - Use SPDX identifier for license name.
 - Add PKG_LICENSE_FILES definition.
 - Set PKG_MAINTAINER (MAINTAINER variable will take value from it).

 [1] https://github.com/openwrt/packages/pull/1693

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2016-01-29 16:20:43 +08:00
Florian Fainelli 70812e5533 net: Add iptraf-ng
Add iptraf-ng 1.1.4 which is the successor of iptraf. Tested on
the realview target.

Signed-off-by: Florian Fainelli <florian@openwrt.org>
2016-01-28 14:18:14 -08:00
Thomas Heil 0f56a58785 Merge pull request #2275 from xypron/apache
net/apache: use @APACHE download facility
2016-01-26 14:02:59 +01:00
Hannu Nyman 5bdd69c1f6 Merge pull request #2304 from dibdot/adblock
adblock: update to 0.60.0
2016-01-26 12:17:02 +02:00
Hannu Nyman 6d0e86d3bc Merge pull request #2310 from chris5560/master
ddns-scripts: Ver.2.6.0 - support hostip and uclient-fetch
2016-01-26 10:39:03 +02:00
Hannu Nyman efe0b245c1 Merge pull request #2306 from mlichvar/chrony-update-2.2.1
chrony: update to 2.2.1
2016-01-26 10:30:59 +02:00
Peter Wagner 26beaa56e1 ntpd: update to 4.2.8p6
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2016-01-25 20:25:47 +01:00
Dirk Brenken 75b0ded581 adblock: update to 0.60.0
* "zero-conf" installation & setup, usually no manual config changes
required (i.e. ip address, network devices etc.)
* full IPv4 and IPv6 support
* new adblock list source (malwaredomainlist.com)
* adblock related statistics will be done by iptables
* removed curl dependency
* for IPv6 support you need 'kmod-ipt-nat6'
* fix Chaos Calmer compability 
* various small changes & fixes
* updated documentation
* updated maintainer email address

Signed-off-by: Dirk Brenken <dirk@brenken.org>
2016-01-25 18:13:19 +01:00
heil a69ba3efe3 haproxy: add pending patches from upstream
- [PATCH 11/13] BUG/MEDIUM: peers: table entries learned from a remote
 - [PATCH 12/13] BUG/MEDIUM: peers: old stick table updates could be
 - [PATCH 13/13] CLEANUP: haproxy: using _GNU_SOURCE instead of

Signed-off-by: heil <heil@terminal-consulting.de>
2016-01-25 17:00:31 +01:00
heil 203740d180 nginx: add naxsi module
- this brings back naxsi support aka WAF for nginx

Signed-off-by: heil <heil@terminal-consulting.de>
2016-01-25 16:57:07 +01:00
Dirk Feytons b6ce25c971 nginx: upstep to 1.9.9
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2016-01-25 16:07:51 +01:00
heil 39bc4992a1 prosody: upgrade to 0.9.9
fixes:
    * path traversal vulnerability in mod_http_files (CVE-2016-1231)
    * use of weak PRNG in generation of dialback secrets (CVE-2016-1232)

Signed-off-by: heil <heil@terminal-consulting.de>
2016-01-25 13:29:55 +01:00
Michael Heimpold 583c062b13 u2pnpd: update to 0.3
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2016-01-24 21:50:03 +01:00
Christian Schoenebeck 3008cee722 ddns-scripts: Ver.2.6.0 - support hostip and uclient-fetch
- add support for "hostip" to get_registered_ip() as alternative to "Bind host" package https://dev.openwrt.org/ticket/20893#comment:5
- allow to send updates using compiled-in certificate file/path of curl/wget #2242 #2243 #2245
- add support for uclient-fetch / libustream-ssl.so
- remove /128 prefix-filter in get_local_ip() via interface #2268
- add dyndns.org to services_ipv6 https://forum.openwrt.org/viewtopic.php?id=62103
- readd duckdns.org to services #2251 (lost somewhere in data heaven)
- add zzzz.io service #2302
- updated tld_names.dat

Signed-off-by: Christian Schoenebeck <christian.schoenebeck@gmail.com>
2016-01-24 20:04:26 +01:00
Miroslav Lichvar af9b3b9add chrony: update to 2.2.1
Fixes CVE-2016-1567.

Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2016-01-24 18:16:09 +01:00
Felix Fietkau cd98970dc8 tgt: depend on @KERNEL_AIO and @KERNEL_DIRECT_IO instead of modifying the global kernel config
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
2016-01-24 10:17:28 +01:00