Commit graph

2986 commits

Author SHA1 Message Date
Dirk Brenken
206c847bb5 adblock: release 3.0
* add kresd & turris omnia support
* add dnscrypt-proxy support
* change start priority to 30, to fix possible trigger issues on slow
booting hardware
* simplify suspend/resume handling (no longer use a hideout directory)
* enhanced LuCI frontend
* many small changes & improvements
* default config change (please update your config!), adblock is now
disabled by default
* documentation update

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-09-09 19:45:36 +02:00
Yousong Zhou
df395767d3 shadowsocks-libev: rewrite ss-rules
- New UCI options ifnames, dst_default
 - UCI options src_ips_xxx now accept cidr as their values
 - Export ipset names as part of the interface so that it can be
   depended on and used by other programs
 - Bypass only remote servers used ss-redir instances, so that it's
   possible to let other servers to go through existing re-redir
   instances

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-08-20 02:21:54 +08:00
Leong Hui Wong
b26ba6634d shadowsocks-libev: Update AEAD cipher names.
Signed-off-by: Leong Hui Wong <wong.leonghui@gmail.com>
2017-08-19 20:56:54 +08:00
Jo-Philipp Wich
f6f750ad17 cgi-io: fix stray semicolon
Remove an improperly placed semicolon in order to solve the following
compiler error:

.../main.c:144:3: error: this 'if' clause does not guard... [-Werror=misleading-indentation]
    if (execl("/bin/busybox", "/bin/busybox", "md5sum", file, NULL));
    ^~
    .../main.c:145:4: note: ...this statement, but the latter is misleadingly indented as if it were guarded by the 'if'
    return NULL;
    ^~~~~~
    cc1: all warnings being treated as errors

Fixes #4723.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-08-18 14:28:33 +02:00
Noah Meyerhans
65b15431f2 Merge pull request #4683 from pprindeville/bind-build-deprecated
bind: patch unneeded if openssl is build w/ deprecated
2017-08-17 22:48:52 -07:00
Hannu Nyman
fc7e4421ba Merge pull request #4713 from philjohn/patch-1
ddns-scripts: add support for dynu.com IPv6 update
2017-08-17 15:22:03 +03:00
Marcin Jurkowski
284284ef2e mwan3: fix bugs introduced in 815e83d4
Fixes the following bugs introduced in commit 815e83d4:
 - hotplug: invalid parameter order when initial interface state is "online",
   mwan3track expects initial state to be the third argument
 - hotplug: missing source ip address when initial interface state is "offline"
 - mwan3track: source ip address should be the fourth argument

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>
2017-08-17 13:20:10 +02:00
Thomas Heil
af1e127bf4 memcached: bump to version 1.5.0
Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-08-17 01:21:21 +02:00
Thomas Heil
3d824568bd apache: update to 2.4.47
- fixes security issues
  CVE-2017-7679, CVE-2017-7668, CVE-2017-7659, CVE-2017-3169
  CVE-2017-3167, CVE-2017-9788, CVE-2017-9789

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-08-17 01:09:28 +02:00
Thomas Heil
73140ba8b2 haproxy: update to 1.7.8 and pending patches
- fixes reload issue with hanging process

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-08-17 01:07:49 +02:00
Thomas Heil
b535ee20b6 nginx: update lua-nginx to cdd2ae921f67bf396c743406493127be496e57ce
- fixes lua compilation issue

Signed-off-by: Thomas Heil <heil@terminal-consulting.de>
2017-08-17 01:05:46 +02:00
Phil John
9d7f3d5f63 ddns-scripts: update PKG_RELEASE in Makefile
As requested, bumping the PKG_RELEASE

Signed-off-by: Phil John <philjohn@gmail.com>
2017-08-16 20:55:22 +01:00
Thomas Heil
123d0384fd Merge pull request #4706 from donvipre/nginx_1.12.1
nginx: update to 1.12.1
2017-08-16 21:45:27 +02:00
Hannu Nyman
fbc666c66a Merge pull request #4719 from TDT-GmbH/mwan3-add-mmx-config
net/mwan3: add mmx config option over uci
2017-08-16 18:42:17 +03:00
Karl Palsson
520a5bb50f mosquitto: properly use localhost instead of ipv4
On some environments, connecting to localhost was resolving to ::1,
which didn't match the bind to the explicit 127.0.0.1.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-08-16 15:01:30 +00:00
Karl Palsson
43acdcdd54 mosquitto: support more config options in UCI
Added many more UCI config options, particularly for bridge connections

The recently introduced username/password options for bridges are kept,
even though they have been deprecated upstream for a while.  In keeping
with this, while support is kept in UCI, the generated mosquitto.conf
file will always generate the "modern" remote_username/remote_password
options preferred by mosquitto instead.

Likewise for bridge clientid and remote_clientid options.

Signed-off-by: Karl Palsson <karlp@etactica.com>
2017-08-16 15:00:53 +00:00
Florian Eckert
8319100914 net/mwan3: update version
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-16 14:37:06 +02:00
Florian Eckert
3607bac3af net/mwan3: make mwan3 mask configurable over uci
Add new global config option mmx_mask.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-16 14:35:06 +02:00
tripolar
2f8327ec4b Merge pull request #4714 from neheb/master
ssh: Add umdns entry to the init script.
2017-08-16 11:24:09 +02:00
Jo-Philipp Wich
90a1af9fc7 Merge pull request #4709 from kdarbyshirebryant/nlbwmontweak
nlbwmon: preserve protocols mapping across sysupgrade
2017-08-16 08:55:56 +02:00
Rosen Penev
6cb6666c97 ssh: Add umdns entry to the init script.
This is usefull for hosts to discover the ssh server, especially
on macOS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2017-08-15 21:44:15 -07:00
Peter Wagner
f612cecf49 ntpd: move ntpq to ntp-utils
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-08-16 03:31:00 +02:00
Toke Høiland-Jørgensen
0424ac8049 acme: Make sure postrm script doesn't fail
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2017-08-16 01:14:18 +02:00
Daniel Golle
da2cc49d29 gnurl: update to version 7.55.0
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2017-08-15 02:24:53 +02:00
Phil John
b55730e7eb ddns-scripts: add support for dynu.com IPv6 update
Dynu.com already support IPV6 updates using the parameter myipv6, adding to services_ipv6 to enable support in OpenWRT/LEDE

Signed-off-by: Phil John <philjohn@gmail.com>
2017-08-14 21:29:18 +01:00
Kevin Darbyshire-Bryant
2305de5f2e nlbwmon: preserve protocols mapping across sysupgrade
Define package config files to preserve
/usr/share/nlbwmon/protocols across sysupgrade

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2017-08-14 11:51:10 +01:00
Uwe Arnold
d382df8c59 nginx: update to 1.12.1
Fixes: CVE-2017-7529

remove PKG_MD5SUM as it is deprecated

Signed-off-by: Uwe Arnold <donvipre@gmail.com>
2017-08-13 20:21:09 +02:00
Yousong Zhou
d4ed4c1f21 shadowsocks-libev: setting mode with default value tcp_only
This is the default value taken by ss-server and ss-redir.  After this
change ss_rules section can still use those ss-redir instances who do
not have mode explicitly specified.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-08-13 12:39:01 +08:00
champtar
639586390e Merge pull request #4695 from dibdot/patch-1
dnscrypt-proxy: change start priority
2017-08-12 12:01:15 -07:00
Dirk Brenken
25a3014ee2 dnscrypt-proxy: change start priority
* adapt start priority to the new trigger based setup

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-08-12 20:36:38 +02:00
Hannu Nyman
5f5a3dc5a0 Merge pull request #4696 from dibdot/travelmate
travelmate: update to 0.9.2
2017-08-12 09:23:06 +03:00
Dirk Brenken
91a378c3d3 travelmate: update to 0.9.2
* backend: fix typo in log message
* frontend: add/modify input datatypes in 'extra' section
* frontend: add support to edit/change wpa enterprise key phrases
* frontend: various small fixes

Signed-off-by: Dirk Brenken <dev@brenken.org>
2017-08-12 08:01:17 +02:00
Hannu Nyman
c7713af04f Merge pull request #4690 from val-kulkov/subversion-package
subversion: update to 1.9.7
2017-08-11 16:18:05 +03:00
Peter Wagner
5a4d9996bd git: update to 2.14.1
Fixes: CVE-2017-1000117

Signed-off-by: Peter Wagner <tripolar@gmx.at>
2017-08-11 12:59:58 +02:00
Val Kulkov
53e57cb6fb subversion: update to 1.9.7
This is a straightforward update to the latest version that
fixes a security issue per CVE-2017-9800:
http://subversion.apache.org/security/CVE-2017-9800-advisory.txt

Signed-off-by: Val Kulkov <val.kulkov@gmail.com>
2017-08-10 16:27:05 -04:00
Hannu Nyman
860e158103 Merge pull request #4688 from TDT-GmbH/mwan3-features
net/mwan3: add new feature and bug fixes
2017-08-10 21:22:44 +03:00
Florian Eckert
a0e8010e7a net/mwan3: update version
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 12:36:21 +02:00
Florian Eckert
c872189d66 net/mwan3: add hotplug script for hidden self interface generation
Add new globals config section with option local_source.

With this config option the self interface generation will be done now
automatically on hotplug event. You can specify which interface (ip)
sould be used for router traffic. To replace the self intereface in the
config set local_source to "lan".

The default option is none, so it will not change default behavior if a
"self" interface is configured in the network section.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 12:32:56 +02:00
Florian Eckert
44eb0a7c9d net/mwan3: add Makefile postinst and postrm for rpcd
Restart rpcd on package install/remove

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 11:30:47 +02:00
Florian Eckert
a4fbc7eba6 net/mwan3: fix ipset generation in hotplug script with an lock
Fix critical section during hotplug events.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 11:30:47 +02:00
Florian Eckert
a934a25f21 net/mwan3: fix ubus json datatyp
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 11:30:47 +02:00
Florian Eckert
929bec6402 net/mwan3: expand ubus to show when last mwan3track check was done
To know how old the ubus output is, add an age parameter which indicats
how old the check informations on the interface are.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 11:30:47 +02:00
Florian Eckert
815e83d461 net/mwan3: on startup mark interface online only if track_ip are reachable
Add new interface config option "inital_state".

If interface comeing up the first time(mwan3 start, boot),
there are now two option for interface behaviour:

- online (default as is now)
  Set up interface regardless wether tracking ip are reachable or not.

- offline
  Set up interface first to ping tracking ip and if they are reachable set up
  the interface completely.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 11:30:47 +02:00
Florian Eckert
6d99b602fd net/mwan3: fix ping issue if last interface recovers from failure
Even though error was fixed the interface checks still fails, if last_resort
was set to blackhole or unreachable.

To fix this issue do not remove failure interface from iptables change on
down event.

Reported-by: Colby Whitney <colby.whitney@luxul.com>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 10:48:40 +02:00
Florian Eckert
5e123852bc net/mwan3: move mwan3track clean up to mwan3 cmd
This is usefull to see the last state of the interface with ubus.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 10:48:27 +02:00
Florian Eckert
96760e66dd net/mwan3: remove unused global definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 10:48:22 +02:00
Florian Eckert
0b44ca505b net/mwan3: fix mwan3track kill execution
If two interface have the same prefix "wan" for example "wan" and "wan1"
pgrep returns the PID for wan1 also "pgrep -f mwan3track wan".

Before this fix "wan1" was also killed! This is not what we want.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 10:48:18 +02:00
Florian Eckert
487278dcd1 net/mwan3: fix ubus output for mwan3track running state
Fix ubus output for mwan3track running state

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 10:48:14 +02:00
Florian Eckert
9df6e9dd98 net/mwan3: change logging output on hotplug interface event
Change logging output on hotplug interface event

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 10:48:09 +02:00
Florian Eckert
a7a2464d9e net/mwan3: add option keep_failure_interval on failure
Add new boolean interface config param to keep ping failure interval during
interface failure state.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2017-08-10 10:45:28 +02:00