Commit graph

7995 commits

Author SHA1 Message Date
Josef Schlehofer
6f50e96f63
Merge pull request #14712 from ja-pa/ooniprobe-3.5.1
ooniprobe: update to version 3.5.1
2021-02-11 12:33:29 +01:00
Jan Pavlinec
f7c9114a93
ooniprobe: update to version 3.5.1
Changes:
Add test script

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-02-11 12:01:38 +01:00
Josef Schlehofer
d53d2df283
dnscrypt-proxy2: sync blocked-names to upstream one
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-02-10 11:37:27 +01:00
Josef Schlehofer
cabea1a93b
Merge pull request #14707 from jclong83/dnscrypt-proxy2
dnscrypt-proxy2: upgrade to 2.0.45
2021-02-10 11:30:03 +01:00
Philip Prindeville
af866db607
Merge pull request #14668 from pprindeville/strongswan-create-swanctl.d-dir
strongswan: create /etc/swanctl/conf.d directory
2021-02-09 22:24:20 -07:00
James Long
6467b6535b dnscrypt-proxy2: upgrade to 2.0.45
Signed-off-by: James Long <james@jclong.net>
2021-02-10 12:02:01 +08:00
Rosen Penev
ad2153eb28
Merge pull request #14698 from lipnitsk/vpnc
vpnc: update to maintained github fork
2021-02-09 13:29:53 -08:00
Rosen Penev
ebae81852a
Merge pull request #14548 from stangri/master-nebula
nebula: initial commit
2021-02-09 01:08:45 -08:00
Philip Prindeville
6753414f85 strongswan: include /etc/swanctl/conf.d/ directory
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-02-08 23:51:45 -07:00
Philip Prindeville
490ef7f821
Merge pull request #14666 from pprindeville/isc-dhcp-support-hex-string-options
isc-dhcp: support hex strings as option arguments
2021-02-08 23:49:04 -07:00
Rosen Penev
02fb0de9fa
Merge pull request #14691 from neheb/p2
pdns: update to 4.4.0
2021-02-08 22:20:15 -08:00
Rosen Penev
cc7582f560
Merge pull request #14690 from neheb/p
pdns-recursor: update to 4.4.2
2021-02-08 22:20:07 -08:00
Rosen Penev
86dc5863be
Merge pull request #14667 from pprindeville/strongswan-avoid-duplicate-logging
strongswan: avoid duplicate logging
2021-02-08 22:19:15 -08:00
Rosen Penev
d4ea3cba6f
Merge pull request #14665 from peter-stadler/uacme
uacme: adopt to new behavior of nginx
2021-02-08 22:18:45 -08:00
Ilya Lipnitskiy
9cbd369aa9
vpnc: update to maintained github fork
The SVN-based version has not changed in years. Many distros use this
fork as evident here: https://github.com/streambinder/vpnc/issues/14

Compile tested against GnuTLS and OpenSSL on ramips target.

Fixes #14119.

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-08 20:55:34 -08:00
Rosen Penev
9351b1a0c0
Merge pull request #14695 from lucize/frrup
frr: fix init and update
2021-02-08 20:21:27 -08:00
Peter Stadler
e553f0cf70 acme: adopt to new behavior of nginx
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2021-02-08 23:51:55 +01:00
Lucian Cristian
adda7b8782 frr: fix init and update
fix ospfd startup when instances are enabled

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-02-09 00:42:34 +02:00
Peter Stadler
36576c4c63 uacme: adopt to new behavior of nginx
Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>
2021-02-08 23:25:29 +01:00
Stan Grishin
9c16d63a42 nebula: initial commit
Signed-off-by: Stan Grishin <stangri@melmac.net>

initial commit
2021-02-08 16:50:43 +00:00
Karl Palsson
9e697c9ccd mosquitto: bump 2.0.5 to 2.0.7
Includes:
https://mosquitto.org/blog/2021/02/version-2-0-7-released/
and
https://mosquitto.org/blog/2021/01/version-2-0-6-released/

Various fixes in broker and clients

Signed-off-by: Karl Palsson <karlp@etactica.com>
2021-02-08 11:53:08 +00:00
Nick Hainke
3ebc568f18 wg-installer: add babeld hotplug.d script
Add a hotplug.d-extension that automatically configures babeld for
meshing via wireguard interfaces.

It checks for "add" and "remove" of a wireguard interface with name
"wg_*". Depending on the action, it removes it from the babeld config
or adds the interface and reloads babeld.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-02-08 11:38:36 +01:00
Rosen Penev
1a3582ac63 pdns: update to 4.4.0
Use new AUTORELEASE variable.

Enable reproducible builds.

Remove Upstreamed patches. Refresh other one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-02-07 16:56:20 -08:00
Rosen Penev
0591ea432e pdns-recursor: update to 4.4.2
Enable reproducible.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-02-07 16:55:14 -08:00
Christian Lachner
f4dd722c3f haproxy: Update HAProxy to v2.2.9
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2021-02-07 12:38:57 +02:00
Dirk Brenken
35ff05d18d
Merge pull request #14678 from dibdot/banip
banip: release 0.7.1
2021-02-07 09:13:18 +01:00
Rosen Penev
1aa3c18942
Merge pull request #14562 from ja-pa/clamav-0.103.0
clamav: update to version 0.103.0
2021-02-06 23:33:30 -08:00
Dirk Brenken
34d5fcb109
banip: release 0.7.1
* add 'ban_extrasources' to handle banIP-unrelated sets for reporting
  and queries
* add set timeouts for local sources (maclist, whitelist, blacklist)

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-02-07 08:30:54 +01:00
Rosen Penev
c729a86f15
Merge pull request #14663 from mwarning/zt
zerotier: update to 1.6.3
2021-02-06 14:34:03 -08:00
Nick Hainke
3a6949dfaf wg-installer: add wg-installer
This tool can be used to automatically create wireguard tunnels. Using
rpcd a new wireguard interface is created on the server where the client
can connect to.

Wiregurad server automatically installs a user and associated ACL to use
the wireguard-installer-server features. The user is called wginstaller
and so is the password.

Get Usage:
  wg-client-installer get_usage --ip 127.0.0.1 --user wginstaller
	--password wginstaller

Register Interface:
  wg-client-installer register --ip 127.0.0.1 --user wginstaller
         --password wginstaller --bandwidth 10 --mtu 1400

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-02-06 22:41:29 +01:00
Moritz Warning
aa0c7f9aaa zerotier: update to 1.6.3
Signed-off-by: Moritz Warning <moritzwarning@web.de>
2021-02-06 13:58:48 +01:00
Philip Prindeville
9ddc502872 strongswan: avoid duplicate logging
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-02-05 22:10:29 -07:00
Rosen Penev
d29ec52a58
Merge pull request #14202 from miska/vpn_user
openvpn: Support username and password options
2021-02-05 14:40:03 -08:00
Philip Prindeville
e05e8dc880 isc-dhcp: support hex strings as option arguments
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-02-05 14:20:05 -07:00
Philip Prindeville
6daaac6e30
Merge pull request #14657 from pprindeville/isc-dhcp-gen-A-RRs
isc-dhcp: treat 'config host' like superset of 'config domain'
2021-02-05 14:19:13 -07:00
Rosen Penev
7e6daedf4c
Merge pull request #14636 from neheb/n
netifyd: add reproducibility patch
2021-02-05 01:18:08 -08:00
Rosen Penev
6d1045e3a1
Merge pull request #14653 from lucize/libreup
libreswan: update to 4.2
2021-02-05 00:42:50 -08:00
Philip Prindeville
0c360d1c6b isc-dhcp: treat 'config host' like superset of 'config domain'
Not including an A record mapping will cause nsupdate to balk at
CNAME and MX records (and probably SRV as well) because the target
will be unknown at the time of parsing, until the lease gets
activated.

We need these RR's to be in place well before the servers even
come up.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-02-04 14:58:33 -07:00
Dirk Brenken
cadaedbfb2
banip: release 0.7.0
* major rewrite
* add support for multiple chains
* add mac whitelisting
* add support for multiple ssh daemons in parallel
* add an ipset report engine
* add mail notifications
* add suspend/resume functions
* add a cron wrapper to set an ipset related auto-timer for
  automatic blocklist updates
* add a list wrapper to add/remove blocklist sources
* add 19.x and Turris OS 5.x compatibility code
* sources stored in an external compressed json file
  (/etc/banip/banip.sources.gz)
* change Country/ASN download sources (faster/more reliable)
* fix DHCPv6/icmpv6 issues

Signed-off-by: Dirk Brenken <dev@brenken.org>
2021-02-04 21:18:02 +01:00
Lucian Cristian
73460d8648 libreswan: update to 4.2
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
2021-02-04 21:25:50 +02:00
Rosen Penev
a3a96300af
Merge pull request #14642 from 1715173329/xray
xray-core: fix service start / reload
2021-02-03 21:31:50 -08:00
Tianling Shen
ae044501b3
xray-core: fix service start / reload
Fix starting problem:
Starting function should be named 'start_service' instead of 'start_instance'.

Fix reloading problem:
Register reload tigger for uci config itself.
And, xray does not support reload currently, so use legacy restart as reload.

Fixes: 6c9b96352f ("xray-core: add init script")

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
2021-02-04 11:50:40 +08:00
Rosen Penev
c01ce53579
Merge pull request #14640 from neheb/ks
ksmbd(-tools): update to 3.3.4
2021-02-03 17:24:35 -08:00
Rosen Penev
45fd6a92c3
Merge pull request #14610 from mtelka/mini_snmpd
mini_snmpd: Fix minor nit in the init script
2021-02-03 14:53:03 -08:00
Rosen Penev
18ce7b437a
Merge pull request #14579 from neheb/wge
wget: update to 1.21.1
2021-02-03 14:52:22 -08:00
Rosen Penev
f4150da17a
Merge pull request #14639 from 1715173329/xray
xray-core: add example configs and init script
2021-02-03 14:48:17 -08:00
Rosen Penev
1cc951ca4f
ksmbd-tools: update to 3.3.4
Major changes are:

    add "vfs objects = acl_xattr" parameter in configuration.
    fix wrong group domain name in lsarpc response.
    set to SID_TYPE_UNKNOWN if there is no domain sid in server.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-02-03 14:46:12 -08:00
Tianling Shen
6c9b96352f
xray-core: add init script
Add init script so the users could run it with their configs quickly.

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
2021-02-04 06:29:58 +08:00
Tianling Shen
c8c2564012
xray-core: add example configs
Thry're from v2fly/v2ray-core wikis, used as examples.

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
2021-02-04 06:29:48 +08:00
Tianling Shen
87a5328dd4
xray-core: update project url
Use $(AUTORELEASE) to bump PKG_RELEASE automatically.

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
2021-02-04 06:28:36 +08:00