Difuse/packages
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
27639 commits 8 branches 0 tags 65 MiB
Commit graph

9581 commits

Author SHA1 Message Date
Peter van Dijk
c0bc5926a8 pdns-recursor: update to 4.7.0 
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
 2022-05-30 17:21:00 -07:00
Tianling Shen
2f5980d589 xray-core: Update to 1.5.6 
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-05-30 17:20:47 -07:00
Tianling Shen
1ce63c3fd8 cloudflared: Update to 2022.5.3 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-05-30 17:20:31 -07:00
R4SAS I2P
bdd8ab6faf i2pd: Update package 
* Update to 2.42.1
* Replace spaces with tabulation in init file

Signed-off-by: R4SAS I2P <r4sas@i2pmail.org>
 2022-05-28 21:32:50 -07:00
Dirk Brenken
a2f0257272
banip: mark as broken 
banIP 0.7.x is not compatible with new nft firewall (default in master and 22.03).
Mark the package as BROKEN for now.

Signed-off-by: Dirk Brenken <dev@brenken.org>
 2022-05-27 21:23:56 +02:00
Aleksandr V. Piskunov
3c04a6d235 stubby: restart on trigger interfaces 
Force restart stubby if any of the trigger interfaces goes up or down.
Avoids DoT DNS lookup timeouts when default route changes, in case of multiple
upstream interfaces.

Signed-off-by: Aleksandr V. Piskunov <aleksandr.v.piskunov@gmail.com>
 2022-05-25 17:35:38 -07:00
Andreas Erhard
bf6f2dae15 vpnc: Update to 0.5.3+git20220517 
The new version of vpnc supports additional DH groups for improved key exchange security.

Signed-off-by: Andreas Erhard <andreas.erhard@i-med.ac.at>
 2022-05-25 17:06:13 -07:00
Christian Lachner
e69fe1f211 haproxy: Update HAProxy to v2.4.17 
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
 2022-05-25 17:05:02 -07:00
Tianling Shen
202f0007d6 dnslookup: Update to 1.7.0 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-05-25 17:00:34 -07:00
Tianling Shen
20a51c2efd dnsproxy: Update to 0.43.0 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-05-25 17:00:21 -07:00
Rui Salvaterra
ae11bdf5d8 openconnect: make sure OpenSSL is built with DTLS support 
Otherwise, OpenConnect will fail to connect with DTLS.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
 2022-05-24 12:03:06 +01:00
Rui Salvaterra
9bbecd2438 openconnect: don't bother loading the tun module 
If it exists (if it isn't built-in), it will be loaded automatically at boot.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
 2022-05-23 23:58:42 +01:00
Rui Salvaterra
131ec7b3bd openconnect: drop the dependency on resolveip 
We have nslookup and awk, let's use them.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
 2022-05-23 23:58:42 +01:00
Tianling Shen
35961ec90d dnsproxy: Update to 0.42.4 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-05-23 15:21:42 -07:00
Sergey V. Lobanov
510d44d988 samba4: fix build on macos 
This commit fixes two issues on macos:
1. Added a patch to fix 'echo -n' issue with MacOS shell
(backported from upstream)
2. Redefined sys.platform='linux' for target build if build host is
MacOS (otherwise, build script tries to use MacOS logic for
OpenWrt(Linux) target build)

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
 2022-05-22 13:40:48 -07:00
Toke Høiland-Jørgensen
d926da5182 acme: switch from iptables to nft 
Use nft instead of iptables to open port 80 in the firewall when getting a
cert. Since nft doesn't allow deleting a rule by its contents, capture and
save the handle when creating the rule, and use that to delete.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
 2022-05-20 13:16:59 -07:00
Rui Salvaterra
1ee8d9c8ff openconnect: fix OpenSSL build without deprecated API 
Backport a patch in order to allow building OpenConnect against OpenSSL 1.1.x
without the need for deprecated API (further fixes will be required for OpenSSL
3.x, though).

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
 2022-05-20 12:16:18 -07:00
Adam Williams
a03282f0db wifi-presence: Add config for process user/group 
On systems using seccomp, the hostapd socket files will be owned by the
'network' user/group ([source][0]). In this case, if wifi-presence is
run as root/root, then it does not have permissions to open the
hostapd socket files. This was discussed in awilliams/wifi-presence#3.

This change allows the process user/group to be specified in
/etc/config/wifi-presence. If no explicit user/group is set, then the
init script will use the owner of the socket files in /var/run/hostapd/
to determine the appropriate process user/group.

[0]: ec6293febc/package/network/services/hostapd/files/wpad.init (L35-L36)

Signed-off-by: Adam Williams <pwnfactory@gmail.com>
 2022-05-20 12:12:15 -07:00
Stijn Tintel
f9424b1745 frr: drop elfutils/host dependency 
The elfutils package moved to tools and elfutils/host no longer exists.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2022-05-19 16:55:16 -07:00
Florian Eckert
d932134b1d stunnel: update to version 5.64 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-05-19 16:11:25 +02:00
Stan Grishin
d03d91b343
Merge pull request #18361 from stangri/master-https-dns-proxy 
https-dns-proxy: 2021-11-22-3: add support for Canary Domains
 2022-05-19 12:00:31 +03:00
David Bauer
c46095085a usteer: update to latest HEAD 
7afab96 usteer: Fix better candidate not being set in policy

Signed-off-by: David Bauer <mail@david-bauer.net>
 2022-05-17 16:35:11 +02:00
Florian Eckert
febc364214
Merge pull request #18472 from sotux/master 
kcptun: add tcp option
 2022-05-17 08:06:46 +02:00
Jesus Fernandez Manzano
faf414d0ea softflowd: add traffic capture filter 
softflowd can filter the traffic with an optional bpf program,
specified on the command-line as a BPF expression

Signed-off-by: Jesus Fernandez Manzano <jesus.manzano@galgus.net>
 2022-05-16 19:32:09 -07:00
W. Michael Petullo
eed95600bb snort3: update to 3.1.29.0 
Signed-off-by: W. Michael Petullo <mike@flyn.org>
 2022-05-14 21:40:21 -07:00
Aleksander Morgado
bc754f31cf modemmanager: report network initiated disconnections to netifd 
The new connection dispatcher scripts support integrated in
ModemManager 1.18.8 allows us to provide a openwrt-specific dispatcher
script used to report netifd that the underlying network connection is
down.

See also https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/merge_requests/775

Fixes https://github.com/openwrt/openwrt/issues/8368
Fixes https://github.com/openwrt/packages/issues/14096

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
 2022-05-14 21:39:50 -07:00
Aleksander Morgado
e430420aa1 modemmanager: install available FCC unlock scripts 
The FCC unlock scripts are installed but not enabled by default.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
 2022-05-14 21:39:50 -07:00
Aleksander Morgado
43d4e8fff8 modemmanager: bump to 1.18.8 
Also removed two patches that are already included in the upstream
release.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
 2022-05-14 21:39:50 -07:00
Jeffery To
f4826a0f74
Merge pull request #18293 from hexian000/privoxy_bugfix 
privoxy: prevent killing the init script itself when stopping service
 2022-05-15 01:20:41 +08:00
Tianling Shen
dcb0495ca1 dnsproxy: Update to 0.42.3 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-05-14 06:40:45 -07:00
Tianling Shen
95a0d04046 cloudflared: Update to 2022.5.1 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-05-14 06:40:34 -07:00
He Xian
5d917b9578 privoxy: update to 3.0.33 and fix the init script 
1. Fixed init script would kill itself when trying to stop a service.
2. Upgrade privoxy release to 3.0.33
3. Set PKG_RELEASE to AUTORELEASE

Signed-off-by: He Xian <hexian000@outlook.com>
 2022-05-14 16:02:07 +08:00
Christian Lachner
f906a32cc2 haproxy: Update HAProxy to v2.4.16 
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
 2022-05-13 13:15:02 +03:00
Jeffery To
25d3eb0770
Merge pull request #18516 from robje/cable-type 
nut: add cable type nut driver config
 2022-05-13 16:37:00 +08:00
Rob J. Epping
67e49b7e0e nut: add cable type nut driver config 
at least driver apcsmart-old (maybe more) allow for specifying the
type of cable used. My old UPS does will not function when cable type
is not specified.

This will add support for configuration option 'cable'

Signed-off-by: Rob J. Epping <epping@renf.us>
 2022-05-13 06:53:27 +02:00
Jeffery To
ea5fa619fa
Merge pull request #18467 from AdorableJiang/mydnsjp 
ddns-scripts: mydns.ip to mydns.jp
 2022-05-13 05:45:06 +08:00
Magnus Kessler
b557e9f0d1 tailscale: update to version 1.24.2 
Signed-off-by: Magnus Kessler <Magnus.Kessler@gmx.net>
 2022-05-12 21:14:31 +02:00
Shengjiang Quan
1a53aaa6cd ddns-scripts: mydns.ip to mydns.jp 
The provider is `mydns.jp` not `mydns.ip` which is wrong and misleading.

Signed-off-by: Shengjiang Quan <qsj287068067@126.com>
 2022-05-12 20:48:42 +09:00
Rui Salvaterra
a85a057b14 openconnect: bump to version 9.01 
Now with basic support for the Array Networks SSL VPN protocol.

Also fix the OpenSSL build. OpenConnect requires support for deprecated APIs,
for the time being, so select them if compiling against OpenSSL.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
 2022-05-12 11:17:59 +01:00
W. Michael Petullo
ab802a1166 dmapd: update to 0.0.91 
Signed-off-by: W. Michael Petullo <mike@flyn.org>
 2022-05-11 17:50:26 -04:00
W. Michael Petullo
d3b96a4b26 nfdump: update to 1.6.24 
Signed-off-by: W. Michael Petullo <mike@flyn.org>
 2022-05-11 17:47:26 -04:00
W. Michael Petullo
094350508e krb5: update to 1.19.3 
Signed-off-by: W. Michael Petullo <mike@flyn.org>
 2022-05-11 17:46:25 -04:00
Jeffery To
a6bd96b124
Merge pull request #18471 from liudf0716/xfrpc 
xfrpc: Update to 1.05.548
 2022-05-12 03:59:10 +08:00
Jeffery To
7de587566e
Merge pull request #18390 from lowjoel/strongswan-rekey-bytes-packets 
strongswan: support child rekey by bytes and packets
 2022-05-11 04:15:06 +08:00
Dirk Brenken
7c66d054bf
adblock: list maintenance 
* add new oisd nsfw source (XL)
* change korean source name (again)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
 2022-05-10 16:53:52 +02:00
Nick Hainke
8b41e959d0 dawn: update to 2022-05-09 
7a72674 datastorage/ubus: rework kicking algorithm

Signed-off-by: Nick Hainke <vincent@systemli.org>
 2022-05-09 21:57:21 +02:00
Joel Low
5c8af06c94 strongswan: support child rekey by bytes and packets 
This adds support for the child SA to be rekeyed through the byte/packet
threshold. The default is blank (which disables the byte/packet thresholds).

Signed-off-by: Joel Low <joel@joelsplace.sg>
 2022-05-09 19:27:17 +08:00
Zheng Qian
81564a628d kcptun: add tcp option 
Signed-off-by: Zheng Qian <sotux82@gmail.com>
 2022-05-08 16:03:29 +08:00
Dengfeng Liu
2cb01429b1 xfrpc: Update to 1.05.548 
deprecated xfrps, compatible with frps

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
 2022-05-08 12:02:04 +08:00
Philip Prindeville
3485ad75bc
Merge pull request #18312 from lowjoel/strongswan-wolfssl 
strongswan: add wolfssl plugin
 2022-05-06 14:31:10 -06:00
Philip Prindeville
a6b6834a0c
Merge pull request #18439 from pprindeville/strongswan-update-5.9.6 
strongswan: Update to 5.9.6
 2022-05-06 14:22:52 -06:00
David Bauer
dcd33d5da6 usteer: update to latest HEAD 
46539ae policy: abort kick process for missing candidate
408bbca policy: don't kick clients immediatly
444b233 policy: only send preferred candidate with transition request

Signed-off-by: David Bauer <mail@david-bauer.net>
 2022-05-06 00:48:29 +02:00
Tianling Shen
74d7af61fe cloudflared: Update to 2022.5.0 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-05-05 22:16:31 +02:00
Tianling Shen
fc090f1eeb cloudreve: Update to 3.5.3 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit fdfca59e0df62bbe49964f555f81ae47803341d3)
 2022-05-05 22:13:45 +02:00
Philip Prindeville
9e585b0688 strongswan: Update to 5.9.6 
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2022-05-02 13:11:12 -06:00
Florian Eckert
1c3cf333f6
Merge pull request #18335 from fjamarquez/keepalived_uci_support 
keepalived: add uci support
 2022-05-02 12:38:57 +02:00
Mister Benjamin
5e894cae13 etherwake-nfqueue: swap iptables for nftables dependency 
Signed-off-by: Mister Benjamin <144dbspl@gmail.com>
 2022-05-01 00:10:14 -07:00
Rui Salvaterra
0b50456514 tor: bump to 0.4.7.7 stable 
The first stable release in the 0.4.7.x series.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
 2022-04-30 23:58:20 -07:00
Moritz Warning
48487a3423 zerotier: update to 1.8.9 
Replace patch with Makefile options
to disable Rust components that
cannot be build with OpenWrt.

Signed-off-by: Moritz Warning <moritzwarning@web.de>
 2022-04-30 11:55:46 -07:00
Nick Peng
170ed0a5d9 smartdns: Update to 1.2022.36 
Signed-off-by: Nick Peng <pymumu@gmail.com>
 2022-04-30 11:22:25 -07:00
Tianling Shen
cf81132418 rclone: Update to 1.58.1 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-04-30 13:57:39 +02:00
Van Waholtz
b4aed62fe3 frp: update to 0.42.0 
Changelogs: https://github.com/fatedier/frp/releases

Signed-off-by: Van Waholtz <vanwaholtz@gmail.com>
 2022-04-30 09:53:30 +02:00
Tianling Shen
f6b1169c20 dnsproxy: Update to 0.42.2 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-04-29 15:22:37 -07:00
Jan Hák
db12181940 knot: update to 3.1.8 
- Release notes:
https://www.knot-dns.cz/2022-04-28-version-318.html

- Refreshed patch to avoid offset

Signed-off-by: Jan Hák <jan.hak@nic.cz>
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[added commit message, refresh patch]
 2022-04-29 15:21:59 -07:00
Guilherme Janczak
4568433d68 usbip: remove unused libbsd and pthreads deps 
Signed-off-by: Guilherme Janczak <guilherme.janczak@yandex.com>
 2022-04-28 23:03:51 -07:00
Tianling Shen
8f6bf937ca cloudreve: Update to 3.5.2 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-04-28 22:56:04 -07:00
Francisco Jose Alvarez
f514bff2de keepalived: add uci support for track_bfd configuration 
Allow the configuration of track_bfd for vrrp instance throught uci

Signed-off-by: Francisco Jose Alvarez <francisco.alvarez@galgus.net>
 2022-04-28 18:11:30 +02:00
Yousong Zhou
512eda2c3b shadowsocks-libev: Revert "dbg" 
This reverts commit 0d18bd49f1.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
 2022-04-28 03:12:42 +00:00
Yousong Zhou
93162b35c8 shadowsocks-libev: fix compat issue with newer version of ucode 
Link: https://github.com/openwrt/packages/issues/18393
Reported-by: Huangbin Zhan <zhanhb88@gmail.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
 2022-04-28 03:11:06 +00:00
Yousong Zhou
0d18bd49f1 dbg 2022-04-28 02:20:10 +00:00
Florian Eckert
da61ea2ee5
Merge pull request #18262 from TDT-AG/pr/20220406-strongswan 
strongswan: do not force to use iptable-legacy
 2022-04-27 14:12:10 +02:00
Li Zhang
5fc06d939f wsdd2: Remove extra comma, which breaks the key-value pair of the '-b' parameter 
Signed-off-by: Li Zhang <starsunyzl@gmail.com>
 2022-04-25 18:36:31 -07:00
Tianling Shen
f5401ff6dc cloudreve: Update to 3.5.1 
Removed statik which was deprecated by the project.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-04-25 12:14:32 -07:00
Maxim Storchak
613d4249c5 tgt: update to 1.0.82 
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
 2022-04-25 12:12:47 -07:00
Peter van Dijk
e2f8ac23f6 dnsdist: update to 1.7.1 
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
 2022-04-25 12:12:15 -07:00
Jeffery To
21c8252dc7
Merge pull request #18366 from turris-cz/git-update 
git: update to version 2.34.3
 2022-04-25 17:17:33 +08:00
Tianling Shen
67c0a17fee xray-core: Update to 1.5.5 
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-04-24 23:07:16 -07:00
Stan Grishin
5347139ee7 https-dns-proxy: 2021-11-22-3: add support for Canary Domains 
Fixes https://github.com/stangri/source.openwrt.melmac.net/issues/155.
Background: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet

Signed-off-by: Stan Grishin <stangri@melmac.ca>
 2022-04-25 01:13:48 +00:00
Josef Schlehofer
c77f4f9e1d
git: update to version 2.34.3 
Fixes:
- CVE-2022-24765

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2022-04-24 15:28:19 +02:00
Chukun Pan
5c3d27677f mdio-tools: add kmod-mdio-netlink as dependencies 
Otherwise it will fail as follows:
  failed to find a module named mdio-netlink
  ERROR: mdio-netlink module not detected, and could not be loaded.

Run-tested on: ramips/mt7621

Signed-off-by: Chukun Pan <amadeus@jmu.edu.cn>
 2022-04-24 11:02:43 +02:00
Tianling Shen
ff8f25cb98
v2rayA: Update to 1.5.7 
- Removed an upstreamed patch
- Move logs to /var/log in accordance with FHS 3.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-04-23 06:07:24 +08:00
Josef Schlehofer
0bc25077b3
Revert "miniupnpd: bump to latest git source" 
This was reverted because the commit does more things than just "bump to
latest git source". Also, it was not properly reviewed/tested.

See: https://github.com/openwrt/packages/pull/18133#issuecomment-1106346788

This reverts commit b3b911e992.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
 2022-04-22 17:20:39 +02:00
David Bauer
0248058f6b usteer: update to latest HEAD 
f88ac23 local-node: periodically send link-measurement requests
4473c6e measurement: add missing timeout-reset
6d3314c local-node: handle received link-measurement reports
7df969f measurement: generalize measurement handling
bb61f2a local-node: enable link-measurement capability
4458b6f usteer: expose STA link measurement capability

Signed-off-by: David Bauer <mail@david-bauer.net>
 2022-04-22 02:06:35 +02:00
Moritz Warning
b45d39c142 zerotier: fix segfault on ARM platforms 
Signed-off-by: Moritz Warning <moritzwarning@web.de>
 2022-04-21 09:34:32 +02:00
Moritz Warning
a5f19e2e83 zerotier: update to 1.8.8 
Signed-off-by: Moritz Warning <moritzwarning@web.de>
 2022-04-21 09:34:32 +02:00
John Audia
4876401174 rsync: bump to 3.2.4 
Bump to latest upstream release.

Signed-off-by: John Audia <graysky@archlinux.us>
 2022-04-20 18:14:27 +02:00
Derek Yerger
51203cae24 strongswan: add wolfssl plugin 
Signed-off-by: Derek Yerger <derek@altdevs.net>
Signed-off-by: Joel Low <joel@joelsplace.sg>
 2022-04-16 18:49:58 +08:00
Rosen Penev
e35467459b ola: fix compilation with musl 1.2.3 
Upstream sent patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2022-04-15 22:05:24 -07:00
James White
ff6946e73e adguardhome: Update v0.107.6 
Remove Go 1.18 patch as upstream source has updated go dependencies

Signed-off-by: James White <james@jmwhite.co.uk>
 2022-04-15 08:57:15 +02:00
ZiMing Mo
b3b911e992 miniupnpd: bump to latest git source 
Signed-off-by: ZiMing Mo <msylgj@immortalwrt.org>
 2022-04-14 19:01:03 -07:00
Peter van Dijk
da524a4d08 pdns: update to 4.6.2 
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
 2022-04-13 15:46:51 -07:00
Peter van Dijk
cbcc4c08df pdns-recursor: update to 4.6.2 
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
 2022-04-13 15:46:51 -07:00
Sibren Vasse
08b45115d7 openssh: update to 9.0p1 
Remove upstreamed patches.

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
 2022-04-13 15:46:37 -07:00
Tianling Shen
74bf9cc71c cloudflared: Update to 2022.4.1 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-04-13 23:54:14 +02:00
Alexander Egorenkov
cbc1b0790d transmission: add 'incomplete' and 'watch' dirs to ujail mounts 
To fix the errors:

Sun Apr 10 14:19:41 2022 daemon.err transmission-daemon[29831]: [2022-04-10 14:19:41.098] watchdir Failed to open directory "/mnt/sda1/openwrt/transmission/watch" (2): No such file or directory (watchdir.c:358)

and

Sun Apr 10 14:20:18 2022 daemon.err transmission-daemon[30175]: [2022-04-10 14:20:18.641] Couldn't create "/mnt/sda1/openwrt/transmission/incomplete": Permission denied (file-posix.c:243)

References:
- https://github.com/openwrt/packages/issues/17674

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
 2022-04-13 15:03:15 +01:00
Jeffery To
35e419ae14
Merge pull request #18268 from jamesmacwhite/ooniprobe-v3.14.1 
ooniprobe: Update to v3.14.2
 2022-04-13 16:10:25 +08:00
James White
ddb4ccfeaf ooniprobe: Update 3.14.2 
Signed-off-by: James White <james@jmwhite.co.uk>
 2022-04-13 08:35:35 +01:00
Dirk Brenken
51a5ec6069
adblock: 4.1.3-8 
* add new 'hblock' compilation source (XL, see https://hblock.molinero.dev for reference)
* print runtime/date information in ISO-8601 standard format
* minor cleanups

Signed-off-by: Dirk Brenken <dev@brenken.org>
 2022-04-11 21:33:57 +02:00
Eneas U de Queiroz
1642b68d45 uacme: add libev dependency to uacme-ualpn 
The dependency has a PACKAGE_uacme-ualpn condition so that libev won't
be unnecessarily built if uacme-ualpn is not selected.

Remove PKG_USE_MIPS16:=0, as it is not necessary when not using the
libev that is bundled with uacme.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
 2022-04-09 14:45:57 -03:00
Florian Eckert
fa95654b28
Merge pull request #18263 from TDT-AG/pr/20220406-keepalived 
keepalived: fix makfile
 2022-04-08 08:32:03 +02:00
Dengfeng Liu
9af01c87bf xfrpc: fast reverve proxy client in c language 
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
 2022-04-07 16:40:36 -07:00
Josef Schlehofer
129855e2d5
Merge pull request #18266 from 1715173329/cf 
cloudflared: Update to 2022.4.0
 2022-04-07 22:38:47 +02:00
Jeffery To
9cc2107ece
Merge pull request #18228 from jamesmacwhite/adguardhome-v0.107.5-go-1.18-fix 
[master] adguardhome: Patch quic-go to fix compilation on Go 1.18
 2022-04-08 01:12:02 +08:00
Tianling Shen
51208c9514
cloudflared: Update to 2022.4.0 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-04-07 23:36:57 +08:00
Florian Eckert
eed4277d5c keepalived: fix libip6tc dependency 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-04-06 17:31:58 +02:00
Florian Eckert
209bcc649a keepalived: add missing CONFIG_ prefix to PKG_CONFIG_DEPENDS elements 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-04-06 17:31:49 +02:00
Florian Eckert
fdeaa02ccf strongswan: do not force to use iptable-legacy 
The default firewall is the fw4, which uses nft. In order to not
install the legacy implementation when installing strongswan, the build
system should decide which firewall backend to use.

While we are at it, I have also added the dependency packages for IPV6.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-04-06 17:19:02 +02:00
Tianling Shen
b6a86a2b63
dnslookup: Update to 1.6.0 
Fixed typo error: `AUTORELESE` > `AUTORELEASE`.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-04-06 22:26:00 +08:00
Alexandru Ardelean
ac670e8095
Merge pull request #18244 from liudf0716/apfree-wifidog 
apfree-wifidog: fix compile error
 2022-04-06 09:11:16 +03:00
Alexandru Ardelean
7df142a006
Merge pull request #18200 from neheb/8 
ptunnel-ng: fix compilation with kernel 5.15
 2022-04-06 09:10:10 +03:00
Alexandru Ardelean
4c0dfeed81
Merge pull request #18217 from rsalvaterra/tor-bump 
tor: bump to 0.4.6.10 stable
 2022-04-06 09:09:29 +03:00
Alexandru Ardelean
4ee0a2f745
Merge pull request #18224 from rs/nextdns-1.37.11-master 
nextdns: Update to version 1.37.11
 2022-04-06 09:07:44 +03:00
Alexandru Ardelean
20dd80dfb0
Merge pull request #18245 from 1715173329/dp 
dnsproxy: Update to 0.42.1
 2022-04-06 09:05:20 +03:00
Rosen Penev
1cd93b673b xtables-addons: fix various warning in lua patch 
These will become errors in the next LTS kernel.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2022-04-05 07:34:36 -07:00
Rosen Penev
e5af506795 xtables-addons: update to 3.19 
Fixes compilation with kernel 5.15.

Fixed changed binary name.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2022-04-05 07:34:36 -07:00
Adam Williams
aabd0da680 wifi-presence: add new package 
See https://github.com/awilliams/wifi-presence for details.

Signed-off-by: Adam Williams <pwnfactory@gmail.com>
 2022-04-05 13:37:55 +01:00
Tianling Shen
a1f86641d2
dnsproxy: Update to 0.42.1 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-04-05 20:35:41 +08:00
Dengfeng Liu
7408185c1d apfree-wifidog: fix compile error 
which requires libiptext library from iptables

Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
 2022-04-05 10:20:36 +00:00
James White
4165f7c7dd adguardhome: Patch quic-go to fix compilation on Go 1.18 
Signed-off-by: James White <james@jmwhite.co.uk>
 2022-04-03 08:37:16 +01:00
Rosen Penev
3bd4564d71 pingcheck: update to 2022-03-01 
Fixes compilation with kernel 5.15.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2022-04-02 14:33:28 -07:00
Stijn Tintel
e58438abd6 kea: bump to 2.0.2 
Drop patches that no longer apply:
- net/kea/patches/001-fix-cross-compile.patch
- net/kea/patches/002-fix-host-compile.patch

Drop upstreamed patches:
- net/kea/patches/020-shared_ptr.patch
- net/kea/patches/030-gcc11.patch
- net/kea/patches/040-map.patch

Fixup patch net/kea/patches/003-no-test-compile.patch.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2022-04-02 14:29:06 -07:00
Stijn Tintel
58866f3452 kea: drop host build 
The host build is used to build kea-msg-compiler, which is only needed
when there are changes to .mes files. Since we're not making any changes
to such files, we do not need this.

As host build fails for Kea 2.0.2, and the git history for kea doesn't
contain any reasoning for enabling it, let's just drop it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2022-04-02 14:29:06 -07:00
Olivier Poitrey
b665a6d683 nextdns: Update to version 1.37.11 
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
 2022-04-02 20:59:21 +00:00
Jan Hák
f30da8c572 knot: update to 3.1.7 
Signed-off-by: Jan Hák <jan.hak@nic.cz>
 2022-04-01 12:12:16 -07:00
Rui Salvaterra
17e78a9790 tor: bump to 0.4.6.10 stable 
Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
 2022-04-01 08:13:08 +01:00
Marko Ratkaj
1981ca782e clamav: update maintainer email 
Signed-off-by: Marko Ratkaj <markoratkaj@gmail.com>
 2022-03-31 12:50:08 +02:00
Nita Vesa
e30585cd34 gensio: Update to 2.3.6 
Changes since last version:
  Just bug fixes and minor changes.

Signed-off-by: Nita Vesa <werecatf@outlook.com>
 2022-03-31 02:16:15 -07:00
Maxim Anisimov
6ae8b15d68 modemmanager: switch to meson build tools 
Using https://gitlab.freedesktop.org/mobile-broadband/ModemManager.git to download the source code.
Added compile option to compile qrtr support.
Enabled lto and additional gcc flags for perfomance and less size.
Modified to use meson as upstream has abandoned autotools.
Removed BUILD_PARALLEL options. These are default with ninja/meson.

Signed-off-by: Maxim Anisimov <maxim.anisimov.ua@gmail.com>
 2022-03-30 21:48:56 -07:00
Rosen Penev
468863128f ptunnel-ng: fix compilation with kernel 5.15 
Some header change requires to include musl's headers first.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2022-03-30 20:29:26 -07:00
Nita Vesa
ea3ad6b090 gensio: Fix circular dependency error 
Adding libsctp adds IPV6 dependency to gensio, so this patch is
an attempt at working around that with the goal of getting rid of
the circular dependency error.

Signed-off-by: Nita Vesa <werecatf@outlook.com>
 2022-03-30 19:44:57 -07:00
Nita Vesa
7da45225f4 ser2net: Update to version 4.3.5 
The updated version requires libgensio, libyaml and libpthread,
so those have been added accordingly to dependencies.

Also added arguments for the configure-script to always attempt
to build ser2net with the same settings, instead of leaving it
to guess, for consistency.

Signed-off-by: Nita Vesa <werecatf@outlook.com>
 2022-03-30 19:41:18 -07:00
Stijn Tintel
6e132e74fd strongswan: fix forecast plugin dependency 
The forecast plugin does not require the iptables binary, it uses
libiptc instead.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2022-03-30 19:41:04 -07:00
Stijn Tintel
6cb15df69a strongswan: fix connmark plugin dependency 
The connmark plugin does not require the iptables binary, it uses
libiptc instead.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2022-03-30 19:41:04 -07:00
Stijn Tintel
93fbbcbfee strongswan: move iptables deps to updown plugin 
Let's move the iptables IPsec dependencies out of the strongswan package
and into the plugin package that actually depends on it,
strongswan-mod-updown. As the default updown script calls the iptables
binary, also add a dependency on the iptables-legacy package.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2022-03-30 19:41:04 -07:00
Marko Ratkaj
180c5e48ce dhcpcd: bump to 9.4.1 
Signed-off-by: Marko Ratkaj <markoratkaj@gmail.com>
 2022-03-30 19:38:51 -07:00
Marko Ratkaj
15132b85b7 squid: bump to 4.17 
Signed-off-by: Marko Ratkaj <markoratkaj@gmail.com>
 2022-03-30 19:37:52 -07:00
Tiago Gaspar
1dd0c8bfbb jool: update to 4.1.8 
Update jool to the latest version.

 Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
 2022-03-29 06:00:24 -07:00
Martin Moreno
9b90bb37ee sslh: update to v1.22c 
Change notes:
	Updated Makefile package version and hash.
	Added libpcre2 dependency
	Removed USELIBPCRE make flag (no longer optional within sslh)
	Updated patch 001 to work with new sslh Makefile

Signed-off-by: Martin Moreno <fett3270@yahoo.com>
 2022-03-29 09:01:45 +01:00
Peter van Dijk
5f6dcc013d pdns-recursor: update to 4.6.1 
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
 2022-03-28 19:55:18 -07:00
Peter van Dijk
0aaea23c07 pdns: update to 4.6.1 
Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
 2022-03-28 19:55:18 -07:00
Lucian Cristian
c289a274fe uacme: always include ualpn 
with mbetls update we can have ualpn on any variant

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
 2022-03-28 19:43:22 -07:00
Tianling Shen
7aa127e208 v2raya: fix panic in go 1.18 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-03-28 14:27:40 -07:00
Florian Eckert
87c611abf8 mwan3: fix sticky chain length 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-28 14:02:18 +02:00
Tianling Shen
f3a1d2ed1f dnsproxy: Update to 0.42.0 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-03-27 21:48:01 +03:00
Hannu Nyman
76004e480c
Merge pull request #18093 from AuthorReflex/ovpn-2.5.6 
openvpn: update to 2.5.6
 2022-03-27 21:46:33 +03:00
Tianling Shen
99dfcbd2fb cloudflared: Update to 2022.3.4 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-03-27 21:43:27 +03:00
Daniel Golle
65f5f850f3
gnunet: work-around sysupgrade restore missing file ownerships 
Make sure /etc/gnunet and all its files and sub-directories are owned
by gnunet:gnunet. This is somehow necessary as file ownership otherwise
doesn't survive sysupgrade.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 2022-03-26 21:21:33 +00:00
Dirk Brenken
bed70d5f4b
adblock: 4.1.3-7 
* removed discontinued source 'gaming'
* changed url of source 'reg_kr'

Signed-off-by: Dirk Brenken <dev@brenken.org>
 2022-03-24 21:01:12 +01:00
Yousong Zhou
be95ccbc8c xl2tpd: bump to version 1.3.17 
The typo fix patch was merged upstream

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
 2022-03-24 12:53:31 +08:00
Yousong Zhou
cd51e3de5f ovn: bump to version 22.03.0 
libovn now depends on libopenvswitch since ovn 21.09.0

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
 2022-03-24 12:53:31 +08:00
Yousong Zhou
b1b37995e1 openvswitch: bump to version 2.17.0 
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
 2022-03-24 12:53:31 +08:00
Philip Prindeville
ede6c7f020
Merge pull request #18055 from pprindeville/bind-subpackage-ddns-confgen 
bind: add subpackaging for ddns-confgen
 2022-03-23 18:14:33 -06:00
Stijn Tintel
f8c8348f32 openvswitch: bump to 2.15.3 
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2022-03-23 11:21:46 +08:00
Stijn Tintel
cf1e146858 openvswitch: enable AUTORELEASE 
Enable AUTORELEASE in a separate commit so that the next commit can be
reverted without having to manually re-introduce it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2022-03-23 11:21:46 +08:00
Lucian Cristian
47748e29dc frr: update to 8.2.2 branch 
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
 2022-03-22 11:28:20 -07:00
Rosen Penev
2bf3d9a777 horst: fix compilation with ncurses 6.3 
Signed-off-by: Rosen Penev <rosenp@gmail.com>
 2022-03-21 15:14:50 -07:00
Tianling Shen
ed260f3b98 cloudflared: Update to 2022.3.3 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-03-20 20:16:40 -07:00
Tianling Shen
f8fa16f40d xray-core: Update to 1.5.4 
Updated geodata to latest version while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-03-20 20:16:28 -07:00
Daniel Golle
d59731ba61
gnunet-fuse: update to 0.16.0 
Only notable change since 0.14.0 is that pthread_mutexattr_setkind_np()
is now no longer used.
pthread_mutexattr_setkind_np() is deprecated and non-standard.
The standard version is called pthread_mutexattr_settype()

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 2022-03-21 01:58:01 +00:00
Daniel Golle
033744ac59
gnunet: update to 0.16.2 
This is a bugfix release for gnunet 0.16.1.

Noteworthy changes in 0.16.2 (since 0.16.1)

    DHT: Fix path signature handling.
    GNS: Fix BOX handling in zone apex.
    NAMESTORE: Prevent storing under invalid labels.
    Buildsystem: Fix build on *BSD and Guix.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 2022-03-21 01:57:50 +00:00
Tianling Shen
546af5266b rclone: Update to 1.58.0 
Added missing call for rclone-config.

Refreshed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-03-19 11:54:07 -07:00
David Bauer
0ad73569fe usteer: update to latest version 
f4e120c band-steering: add band-steering component
439acc5 policy: add steer-reject-timeout
648c6f3 policy: make roam-steers client-rejectable
1fa3210 policy: update roam-state after hard-kicks
c19c885 policy: move load-kick out of kick meta-function
96ef3a6 ubus: skip neighbors which exceed their assoc limit
86e7297 policy: export below_max_assoc
33a5acd policy: make policy helpers more generic
32fed79 add local_mode config option

Signed-off-by: David Bauer <mail@david-bauer.net>
 2022-03-18 23:58:37 +01:00
Michael Heimpold
6b797e9ad8
Merge pull request #17903 from WereCatf/feature_gensio 
gensio: Add new package
 2022-03-18 21:16:03 +01:00
Stan Grishin
c4573e41a3
Merge pull request #18091 from c---/fixcurlwolfssl 
curl: Fix compiling curl wolfSSL when IPv6 is disabled
 2022-03-18 09:38:32 -07:00
Chris Osgood
4eb08bacf3 curl: Fix compiling curl wolfSSL IPv6 disabled 
Fixes #18082

Signed-off-by: Chris Osgood <chris_github@functionalfuture.com>
 2022-03-18 10:48:07 -04:00
Noah Meyerhans
4c6ea5379c bind: bump to 9.18.1 
Fixes multiple security issues:

 * CVE-2022-0667 -- An assertion could occur in resume_dslookup() if the
                    fetch had been shut down earlier
 * CVE-2022-0635 -- Lookups involving a DNAME could trigger an INSIST when
                    "synth-from-dnssec" was enabled
 * CVE-2022-0396 -- A synchronous call to closehandle_cb() caused
                    isc__nm_process_sock_buffer() to be called recursively,
                    which in turn left TCP connections hanging in the CLOSE_WAIT
                    state blocking indefinitely when out-of-order processing was
                    disabled.
 * CVE-2021-25220 -- The rules for acceptance of records into the cache
                     have been tightened to prevent the possibility of
                     poisoning if forwarders send records outside the
                     configured bailiwick

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
 2022-03-18 00:34:43 -07:00
Ivan Pavlov
172795b858 openvpn: update to 2.5.6 
Maintainer: me / @mkrkn

Compile tested: ramips/mt7620 TP-Link Archer C50 v1, ramips/mt7621 Xiaomi Mi router 3 Pro, ath79/generic TP-Link WDR-3500
Run tested: ramips/mt7620 TP-Link Archer C50 v1, ramips/mt7621 Xiaomi Mi router 3 Pro, ath79/generic TP-Link WDR-3500

bugfix release including one security fix ("Disallow multiple deferred authentication plug-ins.", CVE: 2022-0547)

several build fixes, refer to https://github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
 2022-03-18 10:29:57 +03:00
Nita Vesa
fbd47efd7e gensio: Add new package 
A library to abstract stream I/O like serial port, TCP, telnet,
UDP, SSL, IPMI SOL, etc.

Signed-off-by: Nita Vesa <werecatf@outlook.com>
 2022-03-18 02:02:46 +02:00
Tianling Shen
cf9f4409e5 cloudflared: Update to 2022.3.2 
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-03-17 11:39:08 -07:00
Philip Prindeville
55055f70e4 bind: fix warnings about unknown options 
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2022-03-17 08:38:05 -07:00
Florian Eckert
9aba2936e2
Merge pull request #17940 from TDT-AG/pr/20220225-mwan3 
mwan3: update to version 2.11.0
 2022-03-17 14:01:43 +01:00
Michal Vasilek
ee7aae202a openssh: update to 8.9p1 
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
 2022-03-16 19:53:38 -07:00
Tianling Shen
35c109c7ff cloudflared: add new package 
Contains the command-line client for Cloudflare Tunnel, a tunneling
daemon that proxies traffic from the Cloudflare network to your origins.

Docs: https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
 2022-03-16 19:46:07 -07:00
Christian Lachner
ff90e4d479 haproxy: Update HAProxy to v2.4.15 
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
 2022-03-16 19:45:52 -07:00
Marc Egerton
b9b9929591 mtr: bump version to 0.95, split package for JSON and non-JSON variants 
As per the discussion in PR #18047, split the MTR package into
two, one with jansson enabled for JSON output, and one without.

This commit also bumps the version to 0.95. Since the MTR project
website does not seem to be updated with builds any longer, switch
to GitHub Codeload instead.

Also enable PKG_FIXUP:=autoreconf so that MTRs bootstrap.sh process
is executed properly.

Signed-off-by: Marc Egerton <marc@malloc.me>
 2022-03-16 19:45:29 -07:00
Moritz Warning
2f488873eb zerotier: update to 1.8.6 
* remove upstreamed gcc10 and cerrno patches
* disable SSO and OIDC as it needs Rust/Cargo support

Signed-off-by: Moritz Warning <moritzwarning@web.de>
 2022-03-16 19:45:14 -07:00
Stijn Tintel
3c503436d1 chrony: enable LTO 
Size difference of the ipk on qoriq:
* chrony:	718571	676886
* chrony-nts:	786960	757064

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2022-03-16 19:35:01 -07:00
Stijn Tintel
51550d1415 chrony: enable AUTORELEASE 
Enable AUTORELEASE in a separate commit so that the next commit can be
reverted without having to manually re-introduce it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
 2022-03-16 19:35:01 -07:00
Philip Prindeville
649244dae2 isc-dhcp: Update to 4.4.3 
Note that on 32-bit ARM with MUSL we don't have Unwind_GetIP() so
we need to disable backtraces.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2022-03-15 17:18:24 -06:00
Philip Prindeville
9e4485b156 named: don't leak mktemp files on reload 
Unless we're using "mktemp -u ..." (not recommended), it will
create the temp file as part of its safety checking.  Thus you
should only create the name (file) if you're going to use it,
and always remove it if you have created it.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2022-03-15 15:20:15 -07:00
Philip Prindeville
2aff212510 isc-dhcp: detect whether ddns transfers are IPv4 only 
If named is configured to not listen on any IPv6 interfaces,
then we should run 'nsupdate' with the '-4' argument.

Also:

* cleanup RFC-1918 address detection;
* don't generate PTR records for domain entries that aren't
  RFC-1918 addresses or these will generate NOTAUTH failures;

We're assuming that we're doing DNS split-horizon and that
internal addresses aren't routable.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2022-03-15 13:25:55 -06:00
Philip Prindeville
aa490f0279 isc-dhcp: don't leak mktemp files 
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
 2022-03-15 12:55:21 -06:00
Daniel Golle
f951f61005
gnunet: improve init script 
Ensure correct ownership of /etc/gnunet.
Quote variables and more or less make shellcheck happy.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 2022-03-15 18:33:37 +00:00
Daniel Golle
079479918d
gnunet: depend on 'uci-firewall' instead of 'firewall' 
To allow using gnunet on systems with firewall4, add replace direct
dependency on 'firewall' with 'uci-firewall' which is satisfied by
either 'firewall' or 'firewall4'.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 2022-03-15 02:41:31 +00:00
Etienne Champetier
34f556cb57 shorewall6-lite: add @IPV6 to DEPENDS 
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
 2022-03-14 09:28:47 -04:00
Etienne Champetier
57855319f1 shorewall6: add @IPV6 to DEPENDS 
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
 2022-03-14 09:28:47 -04:00
Florian Eckert
bacc3a889f keepalived: enable nftables filtering 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 12:00:31 +01:00
Florian Eckert
c688ffb025 mwan3: update version to 2.11.0 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 11:34:10 +01:00
Josef Schlehofer
94fb0da32c
Merge pull request #18002 from BKPepe/haproxy-conflicts 
haproxy: Makefile polishing and add conflict to SSL/non-SSL variant
 2022-03-14 10:03:31 +01:00
Florian Eckert
0b5f09162b mwan3: dump iptables and ipset command for debugging 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 09:34:49 +01:00
Florian Eckert
5a80a5dbfe mwan3: unify error messages 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 09:34:49 +01:00
Florian Eckert
ed2e0b33ed mwan3: add sleep to release ipset reference 
It turns out that under high system load, ipsets cannot be deleted. This
is because there is still a reference in iptables. A short sleep should
give the system time to clean this up.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 09:34:49 +01:00
Florian Eckert
13c2604eb1 mwan3: remove not needed ipset del cmd 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 09:34:49 +01:00
Florian Eckert
408458a72f mwan3: Split ipsets into separate ipv4 and ipv6 sets 
Nft does not directly support ipsets, nft sets must be used instead.
The mwan3 uses ipsets for certain tasks. They can be combinded. So called
an ipset of ipsets. This list type is not available in nft. So that
mwan3 could be ported to nft in the feature, the ipset handling should be
split. So we have for each ipset an iptables rule.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 09:34:49 +01:00
Florian Eckert
502779755a mwan3: use mwan3_push_update function for mwan3_delete_iface_iptables 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 09:34:49 +01:00
Florian Eckert
b5c675392d mwan3: remove ipset generation from mwan3_set_general_iptables 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 09:34:49 +01:00
Florian Eckert
9c2abb19e2 mwan3: use sticky ipset generation mwan3_push_update pattern 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 09:34:49 +01:00
Florian Eckert
e985f0dcd1 mwan3: do not create dynamic ipset for IPv6 if not supported 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 09:34:49 +01:00
Florian Eckert
fedfbd5004 mwan3: do not add mwan3_custom_v6 set if ipv6 is not available 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 09:34:49 +01:00
Florian Eckert
54fad2326e mwan3: use also ipset restore for connected ipv4 sets 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2022-03-14 09:34:49 +01:00