Commit Graph

5977 Commits

Author SHA1 Message Date
Rosen Penev 29a4293fa1 seafile-seahub: Update to 6.3.4
Switch to codeload for simplicity and easier package bumping.

Added dependency on pytz on build time as django-admin requires it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-13 14:52:01 -08:00
Rosen Penev 543f4a5c47 seafile-server: Update to 6.3.4
Switched to codeload for simplicity and easier package bumping.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-13 14:30:10 -08:00
Hannu Nyman d8bb8c3ff6 Merge pull request #7402 from TDT-AG/pr/20182610-keepalived
keepalived: add ipvs uci support
2018-11-13 21:07:47 +02:00
Florian Eckert ce123d3e83 mwan3: add policies view to ubus interface
Add to ubus the missing output information "policies" which could already
be observed with the command "mwan3 status".

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-13 16:04:26 +01:00
Daniel Salzman 7d1d080f45 knot: update to 2.7.4
Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>
2018-11-13 13:59:57 +01:00
Rosen Penev 029a6819f0 apache: Disable Managed Domain handling
This is a new feature that requires new dependencies. Disable it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-12 11:30:55 -08:00
Hannu Nyman 33e7cd627c Merge pull request #7400 from sartura/sysrepo-release-0.7.6
sysrepo: update to 0.7.6
2018-11-12 17:18:46 +02:00
Hannu Nyman 6c8980fae7 Merge pull request #7398 from rosysong/nft-qos
nft-qos: replace input chain with prerouting for monitor and dynamic
2018-11-12 17:18:34 +02:00
Florian Eckert b443dfe00b keepalived: add ipvs uci support
Add uci ipvs support to keepalived.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-12 15:20:20 +01:00
Mislav Novakovic 52aeedf782 sysrepo: update to 0.7.6
Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
2018-11-12 12:46:21 +01:00
Dirk Feytons 45a832518a net/mosquitto: install headers for auth plugin development
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2018-11-12 10:04:45 +00:00
Yousong Zhou 115ca32d01 shadowsocks-libev: bump to version 3.2.1
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-11-12 03:01:30 +00:00
Rosy Song cf239752d2 nft-qos: replace input chain with prerouting for monitor and dynamic QoS as well
Signed-off-by: Rosy Song <rosysong@rosinson.com>
2018-11-12 09:42:55 +08:00
Ansuel Smith 4519a1d2b3 nginx: Bump to latest release
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-11-11 15:49:47 +01:00
Dirk Brenken 42ff15344c Merge pull request #7373 from dibdot/banip
banip: new package to block incoming & outgoing ip addresses
2018-11-11 14:59:05 +01:00
Hannu Nyman e82a12a613 webui-aria2: dummy version bump
The source download storage contains a 0 byte version
of the webui-aria2 sources, which breaks buildbot.

Trigger a new download by bumping the version by a date.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2018-11-11 13:44:08 +02:00
Thomas Heil d4c1e789be Merge pull request #6854 from neheb/apache
apache: Update to 2.4.34
2018-11-11 11:35:22 +01:00
Hannu Nyman 8256f63546 Merge pull request #6931 from chris5560/radicale_master
radicale: add extra command "export_storage" to init script
2018-11-11 10:52:08 +02:00
Rosen Penev 17cfc75b98 socat: Fix compile with deprecated APIs disabled
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-10 17:26:56 -08:00
Rosy Song 07c2d29859 nft-qos: use prerouting chain rather than input
Using the input chain can only limit the upload rate in local network.
Since to do the limit rate on both native and remote, we have to
replace the input hook with prerouting.

Signed-off-by: Rosy Song <rosysong@rosinson.com>

(Added Makefile version bump)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2018-11-10 20:47:23 +02:00
Dirk Brenken 43f1f78dfc Merge pull request #7377 from dibdot/adblock
adblock: fix adguard source
2018-11-10 17:46:25 +01:00
Dirk Brenken ff139131a7 adblock: fix adguard source
* fix regex for adguard blocklist source

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-11-10 17:39:08 +01:00
Kevin Darbyshire-Bryant 662d3f16d2 nlbwmon: receive dhcp interface triggers
Not all interfaces may have been allocated address at nlbwmon startup so
it may not collect statistics as expected/configured.

Add interface triggers to catch dhcp events and restart as required.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-11-10 16:34:35 +00:00
Marko Ratkaj ade189963b net: dhcpcd: bump version to 7.0.8
Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2018-11-10 15:08:50 +00:00
Dan Lüdtke 0d337e9d71 jool: Remove inactive maintainer
Signed-off-by: Dan Lüdtke <mail@danrl.com>
2018-11-10 13:58:10 +01:00
Dirk Brenken b17588a856 banip: new package to block incoming & outgoing ip addresses
a new script based package called "banIP" to block
incoming & outgoing ip adresses/subnets via ipset.

Features:
* a shell script which uses ipset and iptables
  to ban a large number of IP addresses
  published in various IP blacklists (bogon, firehol etc.)
* support blocking by ASN numbers
* support blocking by iso country codes
* support local white & blacklist (IPv4, IPv6 & CIDR notation)
* auto-add unsuccessful ssh login attempts to local blacklist
* auto-add the uplink subnet to local whitelist
* per source configuration of SRC (incoming) and DST (outgoing)
* supports IPv4 & IPv6

Strong LuCI support:
* easy interface to track & change all aspects of your ipset
  configuration on the fly
* integrated IPSet-Lookup
* integrated RIPE-Lookup
* Log-Viewer & online configuration of white- & blacklist

LuCI-Screenshots will follow in the second post.
Forum discussion:
https://forum.openwrt.org/t/banip-new-project-needs-testers-feedback/16985

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-11-10 11:01:45 +01:00
Hannu Nyman d785b15857 Merge pull request #6974 from neheb/miniupnopc
miniupnpc: Update to 2.1
2018-11-10 11:24:15 +02:00
Yousong Zhou 0478614556 openvswitch: fix building intree datapath module unconditionally
Fixes f2bf8d3 ("openvswitch: provide in-tree kmod builds")

Closes openwrt/packages#7360

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-11-10 07:41:14 +00:00
Rosen Penev 12378ef296 lighttpd: Fix Compilation with OpenSSL 1.1.x
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-09 18:53:32 -08:00
Hannu Nyman a0ba485b22 Merge pull request #7321 from neheb/tgt
tgt: Update to 1.0.74
2018-11-09 18:29:07 +02:00
Hannu Nyman 115068545e Merge pull request #7355 from diizzyy/nginx-rtmp
nginx: Update rtmp module
2018-11-09 18:28:00 +02:00
Karl Palsson 84035d4d52 net/mosquitto: bump to 1.5.4
Security and bugfix release.  Full release notes available at:
https://mosquitto.org/blog/2018/11/version-154-released/

Security:
* client certificates not validated for websockets listeners.

Bugfixes:
* wills with disconnected clients better handled
* bridge restart_timeout properly observed

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-11-09 13:55:17 +00:00
Marko Ratkaj af91fd7033 Merge pull request #7332 from sartura/squid_bump_version_to_4.4
net: squid: bump version to 4.4
2018-11-09 10:44:30 +01:00
Rosen Penev 96e1853812 znc: Fix compilation without deprecated APIs in OpenSSL 1.0.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
[correct configure flag from enable-ssl to enable-openssl]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-11-08 19:36:03 +00:00
Daniel Engberg 80f5309fb3 nginx: Update rtmp module
Change to ut0mt8's fork that contains several enhancements
and bugfixes.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-08 20:06:31 +01:00
Florian Eckert 5d0406915e mwan3: update version to 2.7.6
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-08 12:29:15 +01:00
Florian Eckert ac5895cd7f mwan3: remove deprecated local_source config option
This feature is not needed anymore. This feature is replaced by the
change 46ed09408e

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-08 12:29:15 +01:00
Florian Eckert 85a6d89b8e mwan3: revert add online_metric for local_source none
This is not necessary.

This reverts commit be91e71805.
2018-11-08 12:29:12 +01:00
Hannu Nyman 2d20d82e3e Merge pull request #7295 from neheb/unbound
unbound: Remove deprecated OpenSSL API
2018-11-08 12:09:51 +02:00
Rosen Penev 0ff43a37a3 apache: Update to 2.4.37
Fixes at least:

CVE-2017-15710
CVE-2017-15715
CVE-2018-1283
CVE-2018-1312

Added CPE ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-06 09:36:54 -08:00
Marko Ratkaj 262eaa45c8 net: squid: bump version to 4.4
Simple bump from 4.3 to 4.4

Changelog since 4.3:
netdb not saving to disk (#311)
Fix memory leak when parsing SNMP packet (#313)
Fix several windows build issues (#309)
Certificate fields injection via %D in ERR_SECURE_CONNECT_FAIL (#306)
Allow compilation with minimal OpenSSL (#281)
Fixed %USER_CA_CERT_xx and %USER_CERT_xx crashes (#301)
Improve const correctness for hash_link (#300)
Bug #4893: Malformed %>ru URIs for CONNECT requests (#299)

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2018-11-06 18:23:57 +01:00
Hannu Nyman 7681c108af Merge pull request #7315 from diizzyy/patch-16
fping: Update to 4.1
2018-11-06 18:03:58 +02:00
Hannu Nyman f9117262f0 Merge pull request #7316 from diizzyy/patch-17
stunnel: Update to 5.49
2018-11-06 18:03:23 +02:00
Hannu Nyman a2ce8bf07f Merge pull request #6193 from rosysong/nqos
nft-qos: add new package
2018-11-06 17:58:19 +02:00
Jeffery To 3e84e30ba2 tor-fw-helper: new package
tor-fw-helper is a helper to automatically configuring port forwarding
for tor, using UPnP or NAT-PMP NAT traversal.

This is a tor-fw-helper rewrite in Go that functions as a drop in
replacement for the original C code.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-11-06 20:33:55 +08:00
Rosy Song 6649ac91e9 nft-qos: add new package
This is the nftables implementation for qos on OpenWrt,
Currently, it has below features:

* Static QoS : setting limit rate for devices or global network.

* Dynamic/Auto QoS : setting limit rate according to the network
  bandwidth and adjust itself automatically (hotplug event).

* Traffic Priority : this feature is like traffic shaping under tc,
  it uses ingress hook to handle to packets here.

Signed-off-by: Rosy Song <rosysong@rosinson.com>
2018-11-06 16:13:28 +08:00
Rosen Penev 1ce197c73f tgt: Update to 1.0.74
Remove KERNEL_AIO dependency to avoid recursive dependency with libaio in
a future commit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-05 20:31:49 -08:00
Rosen Penev 1200c508fb unbound: Remove deprecated OpenSSL API
This will become pointless once OpenSSL 1.1.1 enters the tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-05 16:32:11 -08:00
Daniel Engberg 31e27e9d82 stunnel: Update to 5.49
Update stunnel to 5.49

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-05 20:41:01 +01:00
Daniel Engberg 95bde85468 fping: Update to 4.1
Update fping to 4.1

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-05 20:37:14 +01:00