Commit graph

4416 commits

Author SHA1 Message Date
Hannu Nyman
d8bb8c3ff6
Merge pull request #7402 from TDT-AG/pr/20182610-keepalived
keepalived: add ipvs uci support
2018-11-13 21:07:47 +02:00
Rosen Penev
029a6819f0
apache: Disable Managed Domain handling
This is a new feature that requires new dependencies. Disable it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-12 11:30:55 -08:00
Hannu Nyman
33e7cd627c
Merge pull request #7400 from sartura/sysrepo-release-0.7.6
sysrepo: update to 0.7.6
2018-11-12 17:18:46 +02:00
Hannu Nyman
6c8980fae7
Merge pull request #7398 from rosysong/nft-qos
nft-qos: replace input chain with prerouting for monitor and dynamic
2018-11-12 17:18:34 +02:00
Florian Eckert
b443dfe00b keepalived: add ipvs uci support
Add uci ipvs support to keepalived.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2018-11-12 15:20:20 +01:00
Mislav Novakovic
52aeedf782 sysrepo: update to 0.7.6
Signed-off-by: Mislav Novakovic <mislav.novakovic@sartura.hr>
2018-11-12 12:46:21 +01:00
Dirk Feytons
45a832518a net/mosquitto: install headers for auth plugin development
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>
2018-11-12 10:04:45 +00:00
Yousong Zhou
115ca32d01 shadowsocks-libev: bump to version 3.2.1
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-11-12 03:01:30 +00:00
Rosy Song
cf239752d2 nft-qos: replace input chain with prerouting for monitor and dynamic QoS as well
Signed-off-by: Rosy Song <rosysong@rosinson.com>
2018-11-12 09:42:55 +08:00
Ansuel Smith
4519a1d2b3
nginx: Bump to latest release
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
2018-11-11 15:49:47 +01:00
Dirk Brenken
42ff15344c
Merge pull request #7373 from dibdot/banip
banip: new package to block incoming & outgoing ip addresses
2018-11-11 14:59:05 +01:00
Hannu Nyman
e82a12a613 webui-aria2: dummy version bump
The source download storage contains a 0 byte version
of the webui-aria2 sources, which breaks buildbot.

Trigger a new download by bumping the version by a date.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2018-11-11 13:44:08 +02:00
Thomas Heil
d4c1e789be
Merge pull request #6854 from neheb/apache
apache: Update to 2.4.34
2018-11-11 11:35:22 +01:00
Hannu Nyman
8256f63546
Merge pull request #6931 from chris5560/radicale_master
radicale: add extra command "export_storage" to init script
2018-11-11 10:52:08 +02:00
Rosen Penev
17cfc75b98 socat: Fix compile with deprecated APIs disabled
Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-10 17:26:56 -08:00
Rosy Song
07c2d29859 nft-qos: use prerouting chain rather than input
Using the input chain can only limit the upload rate in local network.
Since to do the limit rate on both native and remote, we have to
replace the input hook with prerouting.

Signed-off-by: Rosy Song <rosysong@rosinson.com>

(Added Makefile version bump)
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2018-11-10 20:47:23 +02:00
Dirk Brenken
43f1f78dfc
Merge pull request #7377 from dibdot/adblock
adblock: fix adguard source
2018-11-10 17:46:25 +01:00
Dirk Brenken
ff139131a7 adblock: fix adguard source
* fix regex for adguard blocklist source

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-11-10 17:39:08 +01:00
Kevin Darbyshire-Bryant
662d3f16d2 nlbwmon: receive dhcp interface triggers
Not all interfaces may have been allocated address at nlbwmon startup so
it may not collect statistics as expected/configured.

Add interface triggers to catch dhcp events and restart as required.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-11-10 16:34:35 +00:00
Marko Ratkaj
ade189963b net: dhcpcd: bump version to 7.0.8
Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2018-11-10 15:08:50 +00:00
Dan Lüdtke
0d337e9d71 jool: Remove inactive maintainer
Signed-off-by: Dan Lüdtke <mail@danrl.com>
2018-11-10 13:58:10 +01:00
Dirk Brenken
b17588a856 banip: new package to block incoming & outgoing ip addresses
a new script based package called "banIP" to block
incoming & outgoing ip adresses/subnets via ipset.

Features:
* a shell script which uses ipset and iptables
  to ban a large number of IP addresses
  published in various IP blacklists (bogon, firehol etc.)
* support blocking by ASN numbers
* support blocking by iso country codes
* support local white & blacklist (IPv4, IPv6 & CIDR notation)
* auto-add unsuccessful ssh login attempts to local blacklist
* auto-add the uplink subnet to local whitelist
* per source configuration of SRC (incoming) and DST (outgoing)
* supports IPv4 & IPv6

Strong LuCI support:
* easy interface to track & change all aspects of your ipset
  configuration on the fly
* integrated IPSet-Lookup
* integrated RIPE-Lookup
* Log-Viewer & online configuration of white- & blacklist

LuCI-Screenshots will follow in the second post.
Forum discussion:
https://forum.openwrt.org/t/banip-new-project-needs-testers-feedback/16985

Signed-off-by: Dirk Brenken <dev@brenken.org>
2018-11-10 11:01:45 +01:00
Hannu Nyman
d785b15857
Merge pull request #6974 from neheb/miniupnopc
miniupnpc: Update to 2.1
2018-11-10 11:24:15 +02:00
Yousong Zhou
0478614556 openvswitch: fix building intree datapath module unconditionally
Fixes f2bf8d3 ("openvswitch: provide in-tree kmod builds")

Closes openwrt/packages#7360

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2018-11-10 07:41:14 +00:00
Hannu Nyman
a0ba485b22
Merge pull request #7321 from neheb/tgt
tgt: Update to 1.0.74
2018-11-09 18:29:07 +02:00
Hannu Nyman
115068545e
Merge pull request #7355 from diizzyy/nginx-rtmp
nginx: Update rtmp module
2018-11-09 18:28:00 +02:00
Karl Palsson
84035d4d52 net/mosquitto: bump to 1.5.4
Security and bugfix release.  Full release notes available at:
https://mosquitto.org/blog/2018/11/version-154-released/

Security:
* client certificates not validated for websockets listeners.

Bugfixes:
* wills with disconnected clients better handled
* bridge restart_timeout properly observed

Signed-off-by: Karl Palsson <karlp@etactica.com>
2018-11-09 13:55:17 +00:00
Marko Ratkaj
af91fd7033
Merge pull request #7332 from sartura/squid_bump_version_to_4.4
net: squid: bump version to 4.4
2018-11-09 10:44:30 +01:00
Rosen Penev
96e1853812 znc: Fix compilation without deprecated APIs in OpenSSL 1.0.2
Signed-off-by: Rosen Penev <rosenp@gmail.com>
[correct configure flag from enable-ssl to enable-openssl]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-11-08 19:36:03 +00:00
Daniel Engberg
80f5309fb3 nginx: Update rtmp module
Change to ut0mt8's fork that contains several enhancements
and bugfixes.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-08 20:06:31 +01:00
Hannu Nyman
2d20d82e3e
Merge pull request #7295 from neheb/unbound
unbound: Remove deprecated OpenSSL API
2018-11-08 12:09:51 +02:00
Rosen Penev
0ff43a37a3 apache: Update to 2.4.37
Fixes at least:

CVE-2017-15710
CVE-2017-15715
CVE-2018-1283
CVE-2018-1312

Added CPE ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-06 09:36:54 -08:00
Marko Ratkaj
262eaa45c8 net: squid: bump version to 4.4
Simple bump from 4.3 to 4.4

Changelog since 4.3:
netdb not saving to disk (#311)
Fix memory leak when parsing SNMP packet (#313)
Fix several windows build issues (#309)
Certificate fields injection via %D in ERR_SECURE_CONNECT_FAIL (#306)
Allow compilation with minimal OpenSSL (#281)
Fixed %USER_CA_CERT_xx and %USER_CERT_xx crashes (#301)
Improve const correctness for hash_link (#300)
Bug #4893: Malformed %>ru URIs for CONNECT requests (#299)

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>
2018-11-06 18:23:57 +01:00
Hannu Nyman
7681c108af
Merge pull request #7315 from diizzyy/patch-16
fping: Update to 4.1
2018-11-06 18:03:58 +02:00
Hannu Nyman
f9117262f0
Merge pull request #7316 from diizzyy/patch-17
stunnel: Update to 5.49
2018-11-06 18:03:23 +02:00
Hannu Nyman
a2ce8bf07f
Merge pull request #6193 from rosysong/nqos
nft-qos: add new package
2018-11-06 17:58:19 +02:00
Jeffery To
3e84e30ba2 tor-fw-helper: new package
tor-fw-helper is a helper to automatically configuring port forwarding
for tor, using UPnP or NAT-PMP NAT traversal.

This is a tor-fw-helper rewrite in Go that functions as a drop in
replacement for the original C code.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2018-11-06 20:33:55 +08:00
Rosy Song
6649ac91e9 nft-qos: add new package
This is the nftables implementation for qos on OpenWrt,
Currently, it has below features:

* Static QoS : setting limit rate for devices or global network.

* Dynamic/Auto QoS : setting limit rate according to the network
  bandwidth and adjust itself automatically (hotplug event).

* Traffic Priority : this feature is like traffic shaping under tc,
  it uses ingress hook to handle to packets here.

Signed-off-by: Rosy Song <rosysong@rosinson.com>
2018-11-06 16:13:28 +08:00
Rosen Penev
1ce197c73f tgt: Update to 1.0.74
Remove KERNEL_AIO dependency to avoid recursive dependency with libaio in
a future commit.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-05 20:31:49 -08:00
Rosen Penev
1200c508fb unbound: Remove deprecated OpenSSL API
This will become pointless once OpenSSL 1.1.1 enters the tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2018-11-05 16:32:11 -08:00
Daniel Engberg
31e27e9d82
stunnel: Update to 5.49
Update stunnel to 5.49

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-05 20:41:01 +01:00
Daniel Engberg
95bde85468
fping: Update to 4.1
Update fping to 4.1

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-11-05 20:37:14 +01:00
Hannu Nyman
81c9ff735d
Merge pull request #5781 from jefferyto/obfs4proxy
obfs4proxy: new packages (including dependencies)
2018-11-04 20:34:36 +02:00
Peter Wagner
555e3ff88b tor:update to 0.3.4.9
Signed-off-by: Peter Wagner <tripolar@gmx.at>
2018-11-04 18:07:31 +01:00
Dirk Brenken
4e70f1c949
Merge pull request #7258 from jonathanunderwood/stubby_documentation
stubby: add reload_config to documentation
2018-11-04 13:36:48 +01:00
Dirk Brenken
8e00bab166
Merge pull request #7257 from jonathanunderwood/stubby_fix_init
stubby: fix loading of config file
2018-11-04 13:36:29 +01:00
jonathanunderwood
35a377dbfc stubby: add Jonathan Underwood as co-maintainer (#7307)
Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>
2018-11-04 10:49:52 +00:00
Hannu Nyman
ea8f30cf65
Merge pull request #7278 from neheb/seafile
seafile-ccnet: Update to 6.3.4
2018-11-03 09:23:27 +02:00
Hannu Nyman
effc00e24a
Merge pull request #6811 from Robby-/master-freeradius3-eap-pwd
freeradius3: Enable the EAP-PWD module.
2018-11-03 09:11:34 +02:00
Christian Lachner
ca39a1b787 haproxy: Update all patches for HAProxy v1.8.14
- Add new patches (see https://www.haproxy.org/bugs/bugs-1.8.14.html)
- Raise PKG_RELEASE to 4

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2018-11-02 10:35:38 +01:00