Commit Graph

3065 Commits

Author SHA1 Message Date
Hannu Nyman 9bd2f8477e Merge pull request #4866 from sotux/bugfix
net/ddns-scripts: Fix deSEC update URL
2017-09-25 22:21:42 +03:00
Qian Zheng f626cd6334 net/ddns-scripts: Fix deSEC update URL
deSEC update API doesn't support http://[USERNAME]:[PASSWORD]@update.dedyn.io/update authorization.

So we need to pass username & password as get parameters.

API ref: https://desec.io/#!/en/docs/update-api-details

Signed-off-by: Qian Zheng <sotux82@gmail.com>
2017-09-25 08:56:46 +08:00
Hauke Mehrtens dbb84d39d4 tor: update to version 0.2.9.12
This fixes the TROVE-2017-008 (CVE-2017-0380) security problem.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-09-24 17:51:27 +02:00
champtar 091cb4ef2f Merge pull request #4853 from StevenHessing/noddos
noddos: Noddos v0.5.0 with mDNS / DNS-SD support
2017-09-23 15:16:48 -07:00
champtar d55f755201 Merge pull request #4872 from champtar/sha256
Fix some PKG_MIRROR_HASH / PKG_HASH
2017-09-23 14:00:04 -07:00
Hannu Nyman 59735c02c8 Merge pull request #4871 from EricLuehrsen/unbound_control
unbound: upstream 1.6.6 and enhance control UCI option
2017-09-23 15:43:36 +03:00
Etienne Champetier b11c04d310 iotivity: add PKG_MIRROR_HASH
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2017-09-22 21:53:40 -07:00
Etienne Champetier f2730554e5 shorewall: use sha256 for PKG_HASH
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
2017-09-22 21:20:36 -07:00
Eric Luehrsen e7f5bbc65e unbound: update options for remote-control
Enhance the 'control' option to allow using SSL
to connect to the server. Add the 'extended_stats'
option to match 'extended-statistics: yes.'
Document the 'extended_luci' option; it does not
control Unbound, but changes the LuCI tabs.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-09-22 22:54:32 -04:00
Eric Luehrsen d61a16ca11 unbound: update to 1.6.6
Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
2017-09-21 22:54:35 -04:00
Hannu Nyman 3fcbbbf500 wget: Revert update to 1.19.1
revert the update as the new wget version links to libunistring
that is a rather large library. Better to revert the update now
in order to fix buildbot and then look into solutions.

signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2017-09-19 19:37:21 +03:00
Steven Hessing 62d9d512d7 noddos: Noddos v0.5.0 with mDNS / DNS-SD support
Signed-off-by: Steven Hessing <steven.hessing@gmail.com>
2017-09-18 20:52:09 -07:00
champtar 7fdf3e02cf Merge pull request #4838 from StevenHessing/noddos
noddos: Don't create /var/lib/noddos in Makefile (#4837)
2017-09-18 16:58:37 -07:00
champtar 837d32805d Merge pull request #4852 from diizzyy/patch-90
net/sngrep: Update to 1.4.4-rc2
2017-09-18 16:49:55 -07:00
champtar 5e12eb440d Merge pull request #4844 from diizzyy/patch-88
net/inadyn: Update to 2.2
2017-09-18 16:35:52 -07:00
Daniel Engberg c1653a5f78 net/sngrep: Update to 1.4.4-rc2
Update sngrep to 1.4.4-rc2

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-09-19 00:17:39 +02:00
Hannu Nyman 50148276a1 wget: try to fix libunistring dependency
wget 1.91.1 configure script tries to link libunistring
if that is found. That lib is rather large and is not that
essential for normal operations, so instead of depending
on that, try to avoid linking it.

Revert an upstream commit that removed the clearance of
libunistring data in case IRI is explicitly disabled
(like we have it).

Reference to upstream commits:
http://git.savannah.gnu.org/cgit/wget.git/commit/?id=00ae9b4ee2caa6640776e9777e7ef5a374d082c0
http://git.savannah.gnu.org/cgit/wget.git/commit/?id=990f3d67d340d226bbd4187f5d310a4d2bf2bfe4

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2017-09-18 20:40:16 +03:00
champtar a5b23eff1c Merge pull request #4849 from zx2c4/patch-9
wireguard: bump to release 0.0.20170918
2017-09-18 09:40:47 -07:00
champtar abcb97f3e9 Merge pull request #4744 from sartura/sysrepo_update
Sysrepo update
2017-09-18 09:34:55 -07:00
Jason A. Donenfeld a429215a7e wireguard: bump to release 0.0.20170918
Simple version bump.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2017-09-18 17:59:00 +02:00
Mislav Novakovic 8f2dd7dbb7 sysrepo: update the sysrepo/netopeer2 stack
Patch includes updates to packages:
netopeer2: update to version 0.4.0
sysrepo: update to 0.7.0
libnetconf2: update to 0.9.15
libyang: update to 0.13.46

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
2017-09-18 12:00:38 +02:00
Hannu Nyman 39fa464ffe Merge pull request #4847 from mlichvar/chrony-update-3.2
chrony: update to 3.2
2017-09-18 12:40:13 +03:00
Hannu Nyman 38fc74e257 Merge pull request #4841 from hnyman/wget191
wget: update to 1.19.1
2017-09-18 12:39:11 +03:00
Miroslav Lichvar 8a7fc71b52 chrony: update to 3.2
Signed-off-by: Miroslav Lichvar <mlichvar0@gmail.com>
2017-09-18 09:55:16 +02:00
Yousong Zhou bdb01ebc55 shadowsocks-libev: bump to version 3.1.0
Notable changes since 3.0.8

    ede744a: depends on libcares now instead of libudns
    1c64829: new cmdline option --no-delay for not turning off TCP_NODELAY
    9201619: ss-local: check if client supports socks5 protocol and no-auth-required method
    f8283fc: Fix potential buffer overflow when parsing json config
    380fddb: redir: fix conversion from DSCP to ToS

The two patches are now in the offical repo
2017-09-18 13:29:24 +08:00
Yousong Zhou 0931d35319 shadowsocks-libev: ss-rules: eliminiate not needed local var 2017-09-18 13:29:23 +08:00
Daniel Engberg 2c53e52bab net/inadyn: Update to 2.2
Update inadyn to 2.2
Switch to release tarball
Remove example file from package

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-09-18 01:05:09 +02:00
Hannu Nyman d4b8c0d7cc wget: update to 1.19.1
Update wget to 1.19.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2017-09-16 18:31:51 +03:00
Steven Hessing 6c89390a01 noddos: Don't create /var/lib/noddos in Noddos OpenWRT/Lede Makefile
Signed-off-by: Steven Hessing <steven.hessing@gmail.com>
2017-09-15 12:42:19 -07:00
champtar 5edc198f37 Merge pull request #4630 from marcin1j/pr/20170725-htpdate-init-scripts
htpdate: modify init scripts to use procd and uci configuration
2017-09-15 10:29:48 -07:00
Hannu Nyman 3c6b5c777f Merge pull request #4835 from dibdot/adblock
adblock: update 3.0.2
2017-09-15 16:19:48 +03:00
Dirk Brenken 8822046be5 adblock: update 3.0.2
* better system information
* several kresd related documentation fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-09-15 14:51:14 +02:00
Marcin Jurkowski 73dbc6cf92 htpdate: modify init scripts to use procd and uci configuration
Modify init script to use standard uci configuration and procd for
process management. We benefit from:
- use of standard LEDE configuration with its ability to revert and
  commit changes
- validation of configuration variables
- procd taking care of restarting daemon when config changes and user
  wants to reload it
- automatic respawning of daemon process in case it dies

The source is patched to make it possible to run as a daemon in
foreground.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
2017-09-15 10:51:31 +02:00
champtar 837b464cfd Merge pull request #4815 from tru7/master
linknx: bump to new upstream version
2017-09-14 17:46:16 -07:00
champtar 6818e862bc Merge pull request #4821 from TDT-GmbH/pr/20170912-mwan3-fix-intial-state
net/mwan3: fix mwan3track initial_state and track_ip order
2017-09-14 17:32:12 -07:00
champtar e0c9798afe Merge pull request #4609 from StevenHessing/noddos
noddos: introduction of noddos package
2017-09-14 14:26:42 -07:00
Yousong Zhou fd0f3aa930 shadowsocks-libev: minor tweak without functional change
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-09-14 11:25:34 +08:00
Florian Eckert 2cf984c69e net/mwan3: fix track_ips order
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-09-12 16:14:32 +02:00
Florian Eckert 803f69546e net/mwan3: fix mwan3track STATUS if initial_state is offline
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-09-12 15:55:27 +02:00
Hannu Nyman 7e012770f8 Merge pull request #4811 from marcin1j/pr/20170902-mwan3-fix-interface-bound-network-traffic
mwan3: fix interface-bound traffic when interface is offline
2017-09-12 16:28:42 +03:00
Hannu Nyman f4df6c03cc Merge pull request #4820 from dibdot/adblock
adblock: bugfix 3.0.1
2017-09-12 16:04:14 +03:00
Dirk Brenken 4deebc0b18 adblock: bugfix 3.0.1
* fix startup issues with backends like dnscrypt-proxy or kresd
  which does not come up without an existing block list
* fix a small 'chown' issue

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-09-12 11:44:37 +02:00
Marcin Jurkowski 66406f98db mwan3: fix interface-bound traffic when interface is offline
This commit fixed what 6d99b602 was supposed to fix without affecting
interface-bound traffic.

Before 6d99b602 interface-bound traffic was working normally as long
as at least one interface was online. However when the last interface
went offline, it was impossible to ping and such state was
unrecoverable.

Commit 6d99b602 fixed unrecoverable offline state problem (it was
possible to ping -I iface) but messed inteface-bound traffic. Traffic
with interface source address was not working if the interface was in
"offline" state, even if another interface was online.
The problem was caused by an inconsistent "offline" interface state:
iptables-related rules were kept while routing table and policy were
deleted.

The idea behind this commit is to:
 1. Keep all the rules for each interface (iptables, routing table,
    policy) regardless of its state. This ensures consistency,
 2. Make interface state hotplug events affect only iptables'
    mwan3_policy_* rules. Interface-related iptables, routing table
    and policy is removed only when mwan3 is manually stopped.

To make such changes possible, it's necessary to change the way
mwan3_policy_* rule generator keeps track of interface state hotplug
events.
Until now, it checked for the existence of custom interface-related
routing table (table id 1, 2, 3, ...). Clearly we can no longer rely
on that so each interface state is stored explicitly in file.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
2017-09-12 11:18:52 +02:00
Karl Palsson 66921d1226 net/nut: Fix typo is serial config option
Fixes: 5503dac806 "Add back serial support"
Reported-by: Znevna on irc
Signed-off-by: Karl Palsson <karlp@tweak.net.au>
2017-09-11 17:19:10 +00:00
Hannu Nyman 0b258534da Merge pull request #4816 from dibdot/adblock
adblock: release 3.0
2017-09-10 18:54:41 +03:00
Dirk Brenken 206c847bb5 adblock: release 3.0
* add kresd & turris omnia support
* add dnscrypt-proxy support
* change start priority to 30, to fix possible trigger issues on slow
booting hardware
* simplify suspend/resume handling (no longer use a hideout directory)
* enhanced LuCI frontend
* many small changes & improvements
* default config change (please update your config!), adblock is now
disabled by default
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-09-09 19:45:36 +02:00
Othmar Truniger 6edf00aded linknx: bump to new upstream version
Signed-off-by: Othmar Truniger <github@truniger.ch>
2017-09-09 17:48:52 +02:00
Kevin Darbyshire-Bryant e38aa90cb6 wireguard: bump to release 0.0.20170907
Compile & run tested: ar71xx: archer c7 v2

Add myself as another co-maintainer of the package.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2017-09-07 17:25:30 +01:00
Ryan Mounce 642b87660b tinc: version bump 1.0.32
Signed-off-by: Ryan Mounce <ryan@mounce.com.au>
2017-09-05 11:30:34 +09:30
Thomas Heil f9bbbd08dc memcached: bump to version 1.5.1
Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-09-03 15:07:59 +02:00