Commit graph

8190 commits

Author SHA1 Message Date
Philip Prindeville
643df01275 strongswan: make the include's in the .conf files persistent
Having scripts diddle user written config files seems potentially
dangerous.  Plus there's really no downside to including some
empty files.  Best to just make the includes be permanent.

Additional feature suggested by Luiz: if a -opkg version of the
config file was created unnecessarily, remove it as part of the
upgrade process since changes won't be happening to that file
as an artifact of the service starting.  The include lines are
now permanent, which means that (1) additional configuration
synthesized by UCI won't be anywhere that opkg (or sysupgrade,
for that matter) cares about since it won't be persistent, and
(2) if changes are being made, then they're being done by a
person with an editor and they really should be distinguished.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-03-26 14:29:32 -06:00
Stijn Tintel
10a00b3f20
Merge pull request #15266 from pprindeville/strongswan-change-maintainers
strongswan: change maintainers
2021-03-26 15:15:44 +02:00
Philip Prindeville
0bd4410e30 strongswan: change maintainers
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-03-25 21:37:56 -06:00
Stan Grishin
84fc5dfad4 https-dns-proxy: bugfix: correct PROCD firewall object
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-25 16:46:01 -07:00
Rosen Penev
93857f5487 ratechecker: update to 2020-01-30
Reorganize Makefile for consistency between packages.

Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-25 10:48:25 -07:00
Rosen Penev
301bab659c cshark: update to 2020-07-22
Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-24 15:33:03 -07:00
Rosen Penev
150058b0d2
Merge pull request #15228 from fatbob313/umurmur-0.2.20
uMurmur: Update to 0.2.20. Fix build against OpenSSL without deprecat…
2021-03-23 12:09:01 -07:00
Martin Johansson
463666249a uMurmur: Update to 0.2.20. Fix build against OpenSSL without deprecated API enabled.
Signed-off-by: Martin Johansson <martin@fatbob.nu>
2021-03-23 19:36:15 +01:00
Dirk Brenken
92bb72925e
Merge pull request #15229 from dibdot/adblock
adblock: update 4.1.0-3
2021-03-23 11:34:17 +01:00
Dirk Brenken
df9ee1388e
adblock: update 4.1.0-3
* add a restrictive "jail mode only" variant, just point your
  jail directory to your primary dns directory
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-03-23 11:11:23 +01:00
Rosen Penev
cdd1a44315 sysrepo: update to 1.4.122
Switch to AUTORELEASE for simplicity.

Use Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-22 18:39:29 -07:00
Rosen Penev
dca4bbaf99
Merge pull request #15171 from ldir-EDB0/miniupnpd
miniupnpd: add patience to firewall include
2021-03-22 14:11:21 -07:00
Rosen Penev
7c6b2c375f
Merge pull request #15219 from stangri/master-https-dns-proxy
https-dns-proxy: support for additional Force DNS ports
2021-03-22 11:54:46 -07:00
Rosen Penev
483a29d0f9
Merge pull request #15226 from ja-pa/ooniprobe-3.8.0
ooniprobe: update to version 3.8.0
2021-03-22 11:54:09 -07:00
Alexander Egorenkov
5789faab67 openvpn: add OpenVPN option server-poll-timeout
See https://www.mankier.com/8/openvpn#--server-poll-timeout

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
2021-03-22 11:50:09 -07:00
Jan Pavlinec
b2921628ab
ooniprobe: update to version 3.8.0
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-22 16:21:04 +01:00
Stan Grishin
35461a3c5d https-dns-proxy: support for additional Force DNS ports
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-22 07:28:50 +00:00
Rosen Penev
eba4abb65d coova-chili: fix compilation with kernel 5.10
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-21 21:57:28 -07:00
Rosen Penev
dd64cb713b bind: update to 9.17.11
Backport upstream OpenSSL deprecated API patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-21 20:38:25 -07:00
Othmar Truniger
e236ffb2ce knxd: new upstream version 0.14.50
Signed-off-by: Othmar Truniger <github@truniger.ch>
2021-03-21 11:54:34 -07:00
Rosen Penev
e5d61027a9
Merge pull request #15191 from neheb/zn3
znc: fix compilation without deprecated OpenSSL APIs
2021-03-20 20:25:32 -07:00
Rosen Penev
8a5f23ee0b znc: fix compilation without deprecated OpenSSL APIs
Patch was wrongly removed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-20 17:39:28 -07:00
Rosen Penev
cd637742c2 miniupnpc: update to 2.2.2
Switch to AUTORELEASE for simplicity.

Switch to building with Ninja for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-20 17:30:36 -07:00
Konstantin Demin
2a4b38d8db nmap: bump to 7.91
changes: https://nmap.org/changelog#7.91

drop patches (applied upstream):
- 010-Avoid-using-namespace-std-causing-name-conflicts.patch
refresh patches:
- 020-Python3-port-of-ndiff.patch
- 030-libcxx.patch

Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
2021-03-20 22:47:01 +01:00
Philip Prindeville
559f5fd4fb
Merge pull request #15161 from pprindeville/isc-dhcp-dyndns-ipv4
isc-dhcp: add dynamic DNS as meta package
2021-03-20 11:40:46 -06:00
Kevin Darbyshire-Bryant
679a7b69ee miniupnpd: add patience to firewall include
Occasionally, mostly at startup, miniupnpd reports "Another app is
currently holding the xtables lock. Perhaps you want to use the -w
option?"

Take iptables' advice and wait up to 1 second before giving up.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2021-03-20 16:01:25 +00:00
Rosen Penev
a99390cfd4
Merge pull request #15163 from gladiac1337/haproxy-2.2.11
haproxy: Update HAProxy to v2.2.11
2021-03-19 15:51:40 -07:00
Dirk Brenken
80466dd045
banip: update 0.7.5-3
* fix iptables/chain creation in setups without IPv6 support

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-03-19 20:49:59 +01:00
Christian Lachner
7bfa4aaa66 haproxy: Update HAProxy to v2.2.11
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-03-19 18:13:39 +01:00
Tianling Shen
ccfe1bfa50 tmate: add new package
Tmate is a fork of tmux. It provides an instant pairing solution.
For more details, see https://tmate.io.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-18 22:18:14 -10:00
Stan Grishin
e695cc26b0 simple-adblock: jsonOps-related bugfixes
Signed-off-by: Stan Grishin <stangri@melmac.net>
2021-03-17 22:21:05 -10:00
Philip Prindeville
13f5b57f21 isc-dhcp: add dynamic DNS as meta package
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-03-18 00:21:01 -06:00
Stijn Tintel
4cdbe799b1 net-snmp: bump to 5.9
Neither the configure option nor configure variable to disable linking
against PCRE seem to work anymore, so simply drop both and add a
dependency on libpcre. As net-snmp is unlikely to fit on devices with
small flash anyway, the extra size requirement shouldn't be a problem.
If it is, feel free to submit a patch to fix the broken upstream
behaviour.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-03-17 21:53:10 +02:00
Dobroslaw Kijowski
d12c6658e4 adguardhome: bump to 0.105.2
* Full changelog available at:
  * https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.105.2

Signed-off-by: Dobroslaw Kijowski <dobo90@gmail.com>
2021-03-17 19:58:04 +02:00
Jan Pavlinec
a68a69a38d
tor: update to version 0.4.5.7
Fixes CVE-2021-28089 and CVE-2021-28090

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-16 18:14:30 +01:00
Florian Eckert
ef5921360d
Merge pull request #14996 from TDT-AG/pr/20210302-mwan3
mwan3: add connecting and disconnecting event to mwan3track
2021-03-16 14:07:05 +01:00
Florian Eckert
5348732b98 mwan3: add connecting and disconnecting event to mwan3track
If the interface goes into failure state (is disconnecting)
then with this change one hotplug.d event is generated.

The same is true for the recovery state (is connecting), when the interface
comes back from a failure state.

In both cases, a hotplug.d event for the iface is triggered. Once
with the $ACTION=disconnecting and once for the $ACTION=connecting.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-16 09:24:36 +01:00
Dirk Brenken
909a87c2f5
banip: update to 0.7.5-2
* refine the new dns resolving process
* add a caching mechanism for the resolved IPs, the detached name
  lookup takes place only during 'restart' or 'reload' action, 'start'
  and 'refresh' actions are using an auto-generated backup instead.
* update the readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-03-15 20:38:46 +01:00
Karl Palsson
7f0920110d net/mosquitto: Update to 2.0.9
This is a bugfix release, with minor security fixes for outgoing bridge
connections and the client library.

Full details here: https://mosquitto.org/blog/2021/03/version-2-0-9-released/

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-03-15 16:03:33 +00:00
Rosen Penev
6aa8c2bf6a udpxy: update to 1.0-25.1
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-14 17:08:04 -07:00
Tianling Shen
a28580a530
xray-core: Update to 1.4.0
- Re-assigned myself as the maintainer
- Updated geodata to latest version

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-15 00:10:01 +08:00
Nick Hainke
36dc9b3f79 wg-installer: delete old interfaces
Add "wg_check_interfaces" and specify a timeout in the config file.
This allows to delete not used wireguard-interfaces automatically.

For example a cronjob can be installed that calls:
  . /usr/share/wginstaller/wg_functions.sh && wg_check_interfaces

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-03-14 11:27:07 +01:00
Jan Pavlinec
17b18d825c ooniprobe: update to version 3.7.0
Changes:
-add Configure stage to prebuild resources

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-14 11:11:45 +02:00
Dirk Brenken
d4ab3c1d48
Merge pull request #15116 from dibdot/banIP
banip: bump to 0.7.5
2021-03-14 06:25:35 +01:00
Dirk Brenken
804249a571
banip: bump to 0.7.5
* black- and whitelist now supporting domain names as well - the
corresponding IPs (IPv4 & IPv6) will be resolved in a detached
background process and added to the IPsets

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-03-14 06:07:07 +01:00
Nick Hainke
f7cb8b20e1 wg-installer: fix get_usage function
The get_usage function always returns 0. The shell syntax was wrong.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-03-13 21:21:20 +01:00
Rosen Penev
43021911cf
Merge pull request #15031 from gladiac1337/haproxy-2.2.10
haproxy: Update HAProxy to v2.2.10
2021-03-13 01:11:09 -08:00
Christian Lachner
1e09bbba68 haproxy: Update HAProxy to v2.2.10
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-03-13 09:37:49 +01:00
Rosen Penev
7a1a8f3659 ksmbd-tools: update to 3.3.7
Major change are:

ksmbd.control -s terminate ksmbd.mountd as well as kernel server.
Update configuration.txt and README.
Turn off smb2 leases by default again.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-12 18:14:23 -08:00
Rosen Penev
d95edf16ef ksmbd-tools: update to 3.3.6
Major changes are:

Add missing g_rwlock_init() for rpc_samr and rpc_lsaprc.
Fix potential potential null pointer dereferencing error.
Fix memleak.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-12 12:44:39 -08:00