Commit Graph

3768 Commits

Author SHA1 Message Date
Stijn Tintel 8b76a11e67 strongswan: bump to 5.6.3
Fixes the following CVEs:
- CVE-2018-5388
- CVE-2018-10811

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit 7bb68c74e2)
2018-06-27 16:33:58 +03:00
Eric Luehrsen eb80360e57 unbound: limit outside script source to init funciton scope
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2018-06-25 20:45:35 -04:00
Eric Luehrsen 3f00ecb725 unbound: update to 1.7.3
Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2018-06-23 12:47:43 -04:00
Daniel Golle b94f4f8dce ola: enable and ship web stuff
Make OLA more useful for untrained users which depend on the built-in
webserver. We may split the ola package into smaller parts to allow
not having web-stuff in case this breaks the space-constraints for some
users.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-06-23 11:12:22 +02:00
Daniel Golle e4142dee1b ola: implement Host/Install for ola_protoc_plugin
Should fix build with SDK on buildbots.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-06-23 11:12:22 +02:00
Daniel Golle 5268d788f5 ola: update to 0.10.6, fix build with recent protobuf
Recent protobuf requires C++11 while OLA was forcing C++98 in order
to keep using auto_ptr without getting warnings... Use gnu++11 to make
everyone happy and live with the warnings about auto_ptr being
deprecated.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-06-23 11:12:22 +02:00
Saverio Proto cb7048e427 tinc: version bump 1.0.34
Signed-off-by: Saverio Proto <zioproto@gmail.com>
2018-06-15 17:03:47 +02:00
W. van den Akker 3d38c59976 Shorewall6: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:05:50 +02:00
W. van den Akker 0daf02f3a3 Shorewall: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:05:29 +02:00
W. van den Akker 979ea451a3 Shorewall6-lite: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:05:09 +02:00
W. van den Akker 61f78cd51b Shorewall-lite: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:04:50 +02:00
W. van den Akker decc2f979f Shorewall-core: Bump to version 5.2.0.4
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:04:30 +02:00
W. van den Akker 25f8ef2a46 Shorewall6: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:04:04 +02:00
W. van den Akker 4a024eaf3b Shorewall: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:03:41 +02:00
W. van den Akker 6f14c89fb0 Shorewall6-lite: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:03:08 +02:00
W. van den Akker e0166df3dd Shorewall-lite: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:02:49 +02:00
W. van den Akker 12e3fe7743 Shorewall-core: Bump to 5.2.0.3
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-06-12 12:02:28 +02:00
Rafał Miłecki 4cc0c88713 lighttpd: backport fix for plain auth from 1.4.49 release
Update commit 3d59ce6f50 ("lighttpd: update to 1.4.48") resulted in
plain auth regression: it simply stopped working with:
(mod_auth.c.525) password doesn't match for (...)
appearing on every authentication try.

This regression was fixed in 1.4.49 release. Backport the fix instead of
updating to the 1.4.49 to avoid risking more/other regressions.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2018-06-09 22:21:44 +02:00
Toke Høiland-Jørgensen b6e7720aff sqm-scripts: Bump to v1.2.3
Fixes an issue with sqm-scripts not being reloaded on ifup/down.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2018-06-05 23:39:02 +02:00
Florian Eckert cd5fd3883e net/mwan3: update version to 2.6.17
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit acf7278fb8)
2018-05-30 17:38:36 +03:00
Florian Eckert 4bb6f8fff3 net/mwan3: fix update on connected ip networks
If an interface is not tracked by mwan3 or enabled and this interface is
setup by netifd, then the connected ipset is not update by mwan3.
To fix this also call connected ipset update code even if the interface
is not tracked or enabled by mwan3.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 7ea690ea3c)
2018-05-30 17:38:28 +03:00
Eric Luehrsen 1c6b0f97cd unbound: provide transparent defaults with documentation
Some resource options bundled many Unbound.conf options and
made customizing on top of UCI difficult. Make it easier to
use Unbound built defaults (blank conf sections).

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2018-05-28 23:22:06 -04:00
Yousong Zhou 240e767bba xl2tpd: bump to version 1.3.12
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-05-25 09:39:59 +08:00
Florian Eckert cf04f87e8d net/mwan3: update version to 2.6.16
Signed-off-by: Florian Eckert <fe@dev.tdt.de>

(cherry picked from commit 18022993d9)
2018-05-16 16:56:52 +03:00
Florian Eckert c1374f1ace net/mwan3: execute only ifup event if l3_device is found
Only execute an ifup event with the command "mwan3 ifup <iface>" if the
l3_device is found in the ubus "network.interface.<iface>".

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit ab4e62b885)
2018-05-16 16:56:13 +03:00
Florian Eckert 32931c324b net/mwan3: remove logging mwan3track pid is not found
Remove unnecessary logging if mwan3track pid is not found

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 215708a415)
2018-05-16 16:56:02 +03:00
Florian Eckert 7d1344d95e net/mwan3: add/remove src_ip from routing table
Add or remove local_source ip also if mwan3 is stopped or started

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 2d9dfa3b1b)
2018-05-16 16:55:52 +03:00
Hannu Nyman 13c7705415 Merge pull request #5915 from neheb/cifs
cifs-utils: Update to 6.8
2018-05-15 09:08:42 +03:00
Dirk Brenken 258039dbbe adblock: update 3.5.2
backend:
* add generic blocklist archive support
* add support for blacklist archive from Toulouse 1 University Capitole
* add support for urlhaus RPZ domains by abuse.ch
* small bugfixes & enhancements

luci:
* archive sub-categories (shalla & ut_capitole) are now configurable
  via LuCI CBI template
* small bugfixes & enhancements

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-05-14 22:23:18 +02:00
Jo-Philipp Wich 72d2829781 Merge pull request #6050 from ldir-EDB0/bumpminiupnpd
miniupnpd: bump to v2.1 20180508
2018-05-14 09:50:35 +02:00
Jo-Philipp Wich 20c6cec0c8 Merge pull request #6039 from vortigont/ddns-now
ddns-scripts: "now-dns.com" service fix
2018-05-14 07:40:18 +02:00
Peter Wagner 5de59d6ef4 wget: update to 1.19.5
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-05-13 21:17:21 +02:00
Kevin Darbyshire-Bryant 762e8b0f17 miniupnpd: bump to v2.1 20180508
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-05-13 19:01:44 +01:00
Hannu Nyman 12a833d09f Merge pull request #6017 from tohojo/master
acme: Change boot init script logic to invoke start
2018-05-13 18:36:18 +03:00
Hannu Nyman 61137a5340 Merge pull request #6028 from ldir-EDB0/miniupnpdtweaks
Miniupnpdtweaks
2018-05-13 18:34:45 +03:00
Hannu Nyman 030963762b Merge pull request #6048 from iamperson347/stubby0.2.3
stubby: Bump to 0.2.3
2018-05-13 18:29:52 +03:00
Hannu Nyman e18166c9d3 Merge pull request #6032 from wvdakker/master
Shorewall: Bump to version 5.2.0.2
2018-05-13 18:28:37 +03:00
David Mora 8a8e68580f stubby: Bump to 0.2.3
Update to new upstream version. Also changed to Cloudflare's DNS as default.

Signed-off-by: David Mora <iamperson347+public@gmail.com>
2018-05-13 07:27:30 -04:00
Nikos Mavrogiannopoulos 48d5f1a591 ocserv: updated to 0.12.1
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
2018-05-12 08:24:07 +02:00
Dirk Brenken 7da5d595a0 Merge pull request #6036 from TDT-AG/pr/20180511-net-mwan3-update
net/mwan3: add packet loss and latency check
2018-05-11 21:58:54 +02:00
Emil Muratov 19415a4c47 ddns-scripts: "now-dns.com" service fix
- Add valid responses "good|nochg" so that ddns-script could recognize "badauth"
   error that comes with http 200 code
 - Switch url to https scheme. "now-dns.com" always returns 302 redirect
   to https:// for all plain-text http requests. Since working via default
   plain-text http is not possible anyway, forcing url to https prevents
   curl sending unencrypted plain-text credentials via basic auth

Signed-off-by: Emil Muratov <gpm@hotplug.ru>
2018-05-11 18:35:49 +03:00
Florian Eckert 0d5dd6da4f net/mwan3: add missing local variables
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-05-11 09:00:57 +02:00
Florian Eckert bdff2e990b net/mwan3: remove check_quality option from default config
The normal situation should be to use ping without quality_check.
If quality_check option is not set in the default option then ping
quality_check is not performed during tracking. This is and should
be the default situation.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-05-11 08:46:57 +02:00
Florian Eckert 21c42901e1 net/mwan3: update logging output
Unify logging output for tracking methode ping.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-05-11 08:46:40 +02:00
Florian Eckert 3b33e01791 net/mwan3: fix indentation
Fix indentation.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-05-11 08:43:34 +02:00
Florian Eckert 7962bfd3df net/mwan3: replace legancy backticks
Replace legancy backticks syntax shell execution with braces.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-05-11 08:42:53 +02:00
Florian Eckert 5f068b7fb3 net/mwan3: remove needless log output on mwan3track
Remove needless log output this will pollute the logging.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-05-11 08:42:17 +02:00
Nishant Sharma 1a33492ff8 mwan3: Packet Loss & Latency Check
1. Test link quality based on packet loss & latency w.r.t. pre-defined high and low watermark values.
2. Extended ubus support to provide packet loss & latency information per wan per track_ip

Signed-off-by: Nishant Sharma <codemarauder@gmail.com>
2018-05-11 08:21:28 +02:00
W. van den Akker 99724fa475 Shorewall6: Bump to version 5.2.0.2.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-05-10 19:12:15 +02:00
W. van den Akker 49d593367e Shorewall: Bump to version 5.2.0.2.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2018-05-10 19:12:15 +02:00