Commit Graph

5977 Commits

Author SHA1 Message Date
Yousong Zhou a1fadbde07 shadowsocks-libev: new option no_delay
--no-delay is a new cmdline argument introduced in 3.1.0 to NOT turn off
TCP_NODELAY socket option, i.e. keeping it's default value without
setting it explicitly.  This can be potentially useful for interactive
traffics

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-01-02 10:34:50 +08:00
Daniel Golle a6991e7962 gnunet: update to post-34C3 git head
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-01-01 00:41:14 +01:00
Michael Heimpold 1dd54f5673 ser2net: extend dynamic config generation (refs #5302)
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-12-30 23:43:11 +01:00
Maxim Storchak c2d1405919 rsync: fix CVE-2017-17433 and CVE-2017-17434
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2017-12-30 16:52:00 +02:00
Michael Heimpold 71ea9e8eac Merge branch 'master' of https://github.com/TimelessNL/packages into ser2net
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
2017-12-28 22:14:20 +01:00
Hannu Nyman e14ac7b9ad Merge pull request #5332 from dibdot/adblock
adblock: release 3.4.0
2017-12-28 19:23:03 +02:00
Dirk Brenken d699afd7fe adblock: release 3.4.0
* preserve DNS cache after adblock processing,
  - 'unbound' and 'named' support this (please check readme)
  - 'dnsmasq' now uses the 'servers-file' directive
    to minimize the reload disruption,
    even though the dns cache will be cleared after SIGHUP
  - 'kresd' dns cache is persistent by upstream default, anyway
    Turris Omnia devices need a small upstream software change
    which is not accepted/implemented yet
* email notification in case of an error or domain count < n
  (default 0, check readme)
* removed securemecca from default config (service has been closed)
* new separate functions for hash compare and list/overall count
* add missing package dependencies
* various clean-ups
* update documentation

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-12-28 18:11:17 +01:00
Hannu Nyman 4cd7168fad Merge pull request #5325 from stangri/simple-adblock
simple-adblock: new boot logic & updated blacklists
2017-12-27 09:07:29 +02:00
Peter Wagner ec61733de4 nfs-kernel-server: update to 2.3.1
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-12-27 00:39:04 +01:00
Stan Grishin 1897a04774 simple-adblock: new boot logic
Signed-off-by: Stan Grishin <stangri@melmac.net>
2017-12-26 14:13:38 -08:00
Thomas Heil 4f08691446 Merge pull request #5282 from lucize/nginxup
nginx: update to 1.12.2
2017-12-25 11:35:19 +01:00
Yousong Zhou 9853f20b0f reaver: configure with --enable-savetocurrent
It will let reaver to save session file to cwd of the process instead of
/etc/reaver.  This has the same effect as the old patch

  0002-Use-the-current-directory-for-storing-and-loading-se.patch

which was removed in the transition to reaver-wps-t6x-fork

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-12-25 14:16:36 +08:00
Daniel Golle 499536b1ac ola: improve init script
Drop now unneeded dependency on sudo.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-12-23 00:00:33 +01:00
Nuno Goncalves b49773a4f9 usbip: fix typo (closes #4994 #5312)
Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2017-12-22 12:46:32 +01:00
Hannu Nyman 91d730171f Merge pull request #5309 from sartura/sysrepo_release_0.7.2
Sysrepo release 0.7.2
2017-12-22 09:50:38 +02:00
Nuno Goncalves c9d4d01a31 usbip: fix usb.ids download (closes #4994)
Used the same solution as in utils/usbutils/Makefile

Signed-off-by: Nuno Goncalves <nunojpg@gmail.com>
2017-12-21 17:03:55 +01:00
Mislav Novakovic 3902f29b69 netopeer2: bump to latest version
This patch add's a new cmakefile which builds other cmakefiles and
simplifies the Makefile, also it renames the yang files so
sysrepoctl does not create duplicates.

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
2017-12-21 12:43:40 +01:00
Mislav Novakovic 317d897d44 sysrepo: bump to latest version
This patche renames the yang files so sysrepoctl does not create
duplicates.

Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
2017-12-21 12:43:10 +01:00
Jasper Scholte e190a22c6a ser2net: added support for config file.
Signed-off-by: Jasper Scholte <NightNL@outlook.com>
2017-12-21 10:01:42 +01:00
Daniel Golle 9c1b1b396e gnunet: update to git snapshot 2017-12-19
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-12-21 06:06:57 +01:00
Yousong Zhou c4fa84cc21 xl2tpd: README.md: add docs on uci options
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-12-19 10:18:41 +08:00
Ted Hess ff41c17b8e Merge pull request #5286 from pprindeville/lighttd-update-1.4.48
lighttpd: update to 1.4.48
2017-12-18 12:17:34 -05:00
W. van den Akker 597a4fc5bb Shorewall6: Fix double/missing entry in path.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-18 15:39:31 +01:00
W. van den Akker 8723e3901e Shorewall: Fix double/missing entry in path.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-18 15:32:57 +01:00
Hannu Nyman 8a79f6f2b2 Merge pull request #5295 from wvdakker/reorder
Shorewall(6)-lite: Reorder install section
2017-12-18 16:03:43 +02:00
Hannu Nyman 8eec9cda08 Merge pull request #5296 from wvdakker/set-path
Shorewall(6): Set path
2017-12-18 16:02:23 +02:00
W. van den Akker bf16ee93ff Shorewall6-lite: Reorder package/install section.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-18 14:29:54 +01:00
W. van den Akker d2b0596a0f Shorewall-lite: Reorder package/install section.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-18 14:29:04 +01:00
Alin Nastac c59bea9f43 xl2tpd: remove demand support from netifd l2tp protocol
This pppd feature does not make sense in L2TP case because the
tunnel is already connected when xl2tpd launch pppd process. If
a dial-on-demand feature is to be implemented, trigger interface
would have to be provided by xl2tpd, not pppd.

Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
2017-12-18 21:28:11 +08:00
W. van den Akker 35cb4dd18a Shorewall6: Change path to prevent busybox/ip detection before ip-tiny/full.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-18 14:27:46 +01:00
W. van den Akker bfb207bd08 Shorewall: Change path to prevent busybox/ip detection before ip-tiny/full.
Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>
2017-12-18 14:25:58 +01:00
Brian J. Murrell 701a3ec258 shorewall6-lite: set the PATH variable
So that it matches LEDE's default PATH value.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-17 11:24:29 -05:00
Brian J. Murrell a8f382f90b shorewall-lite: set the PATH variable
So that it matches LEDE's default PATH value.

Signed-off-by: Brian J. Murrell <brian@interlinx.bc.ca>
2017-12-17 09:14:19 -05:00
Philip Prindeville 3d59ce6f50 lighttpd: update to 1.4.48
All of the bugs for which we had patches have been fixed upstream
in 1.4.46, so the patches can be dropped.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2017-12-16 12:49:22 -07:00
John Crispin 2e62b5a132 Merge pull request #5118 from jow-/cgi-io-sha256
cgi-io: support SHA256 checksums for file uploads
2017-12-16 10:02:31 +01:00
Hannu Nyman 1b42af5931 Merge pull request #5264 from TDT-AG/pr/20171211-net-stunnel-add-uci-enabled-param
net/stunnel: add enabled config option
2017-12-16 10:46:01 +02:00
Hannu Nyman be7a4b830d Merge pull request #5283 from dibdot/travelmate
travelmate: release 1.0.0
2017-12-16 10:42:15 +02:00
Dirk Brenken 1995e0e632 travelmate: release 1.0.0
* limit sta interface selection/handling
  to defined travelmate interface (trm_iface) only
* check eap capabilities and ignore enterprise uplinks
  as long as eap support is not available
* documentation update
* cosmetics
* LuCI: various cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-12-15 19:10:17 +01:00
Christian Beier 841701651c ola: update to 0.10.5, drop obsolete patches
This also add a patch fixing builds with newer protobuf versions,
https://github.com/OpenLightingProject/ola/pull/1336.

Signed-off-by: Christian Beier <dontmind@freeshell.org>
2017-12-15 18:23:18 +01:00
Lucian Cristian a63a76e31d nginx: update to 1.12.2
also fixes gcc7.2 compile

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2017-12-15 18:45:20 +02:00
Nikos Mavrogiannopoulos cfec94a01b Merge pull request #5244 from yousong/p11-err.h
openconnect: fix compilation against libp11 >= 0.4.7
2017-12-15 14:38:55 +01:00
Florian Eckert 3fc880c2e9 net/stunnel: add enabled config option
Add an enabled option for the service section, so you could keep your
configuration in place without apply this section on startup or service reload.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-12-15 08:03:41 +01:00
Yousong Zhou 0d2f9d9bd6 openconnect: fix compilation against libp11 0.4.7
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-12-15 09:50:26 +08:00
Florian Fainelli 343006bea9 Merge pull request #5179 from neheb/cifs
cifs-utils: Update to 6.7
2017-12-14 10:47:00 -08:00
Hans Dedecker 74dbf6bcbe strongswan: add interface uci list
The interface config option allows users to configure logical OpenWRT
interface names in the ipsec section; it allows StrongSwan to listen
and send traffic on specified interface(s). It translates to interfaces_use
StrongSwan option which is a comma sepearted list of network devices
that should be used by charon.
Since StrongSwan can only be started when one of the specified logical
OpenWRT interface is up procd interface triggers are installed to
trigger the reload script.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-13 18:46:37 +01:00
Hans Dedecker 1d31d840d4 strongswan: fix reload service
Based on the ipsec running state reload_service is either reloading ipsec
or starting ipsec. However in the latter case it calls ipsec start which
bypasses the procd start_service function which means the running ipsec
instance is not managed by procd.
Fix this by calling start in case ipsec is not running; at the same time
add service_running function which is used by procd provided running
function.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-13 10:49:55 +01:00
Jo-Philipp Wich 175cf9e985 iodine: workaround incomplete musl nameser.h header
The arpa/nameser.h header of musl libc indirectly depends on the endian.h
header but fails to explicitely include it to properly define
`__BYTE_ORDER` and `__BIG_ENDIAN` prior to declaring the DNS `HEADER`
structure.

When both the appropriate `__BYTE_ORDER` and `__BIG_ENDIAN` defines are
unset, the `#if __BYTE_ORDER == __BIG_ENDIAN` condition in `nameser.h`
evaluates to true, causing it to declare a bad (big endian) DNS packet
header structure on little endian systems.

Work around this musl bug by forcibly passing `-include endian.h` through
the `osflags` file.

An upstream fix for musl libc has been submitted with
http://www.openwall.com/lists/musl/2017/12/04/3

This should solve iodine packet corruption on little endian musl systems
reported at
http://lists.infradead.org/pipermail/lede-dev/2017-November/010085.html

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-12-12 23:41:44 +01:00
Jo-Philipp Wich 70858690c0 nlbwmon: update to current HEAD
Update to latest Git HEAD in order to solve a number of issues.

 - Improves MAC address lookup reliability
 - Properly counts DNAT-ed connections (e.g. for port forwards)
 - Fixes stack corruption when parsing netlink records
 - Fixes deletion of gzipped databases

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-12-12 22:01:56 +01:00
Hannu Nyman 205cff1987 Merge pull request #5263 from yangfl/master
i2pd: Update to 2.17.0
2017-12-11 23:38:52 +02:00
Karl Palsson 0bc06df68c net/mosquitto: reproducible build patches
Remove build timestamp.  Using currently proposed upstream patch.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-12-11 11:00:26 +00:00