Commit Graph

10818 Commits

Author SHA1 Message Date
Florian Eckert
a2653fe7ca Merge pull request #22303 from perrin4869/ddns-scripts/add-samples-to-package
ddns-scripts: add samples to package
2023-10-09 08:36:16 +02:00
Sergey Ponomarev
08e3c43607 pppossh: depend on dbclient
The package should not only depend on a package dropbear but on the dbclient.
Otherwise the dbclient may be disabled during compilation and the dependency will be not satisfied.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-09 13:54:25 +08:00
Tianling Shen
303f0ad5ed dnsproxy: Update to 0.56.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-09 11:38:58 +08:00
Tianling Shen
02b723bec3 v2ray-core: Update to 5.8.0
Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-09 11:38:50 +08:00
Kaveh Dadgar
b1fc3754b3 v2ray-geodata: add package v2ray-geosite-ir
"Iran Hosted Domains" is a comprehensive list of Iranian domains and services that are hosted within the country.

Signed-off-by: Kaveh Dadgar <Kavehdadgar666@protonmail.com>
2023-10-09 10:10:25 +08:00
Zephyr Lykos
5cd966ca4f tailscale: Update to 1.50.1
https://github.com/tailscale/tailscale/releases/tag/v1.50.1

Signed-off-by: Zephyr Lykos <git@mochaa.ws>
2023-10-09 10:09:41 +08:00
Oskari Rauta
ff93e4a19d cni-protocol: update protocol
Changes to protocol file and it's description.
Works better now and restarts firewall automaticly
when tunnel comes available. More informative/guiding
description.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-10-09 10:09:22 +08:00
Leo Douglas
bf7ce353b8 sing-box: update to v1.5.2
* Enable `with_ech` and `with_dhcp`, just like upstream
* See changelog: https://github.com/SagerNet/sing-box/releases/tag/v1.5.2

Signed-off-by: Leo Douglas <douglarek@gmail.com>

sing-box: ShadowsocksR is marked as deprecated since v1.5.0

Signed-off-by: Leo Douglas <douglarek@gmail.com>

sing-box: remove dhcp by default

Signed-off-by: Leo Douglas <douglarek@gmail.com>
2023-10-09 10:09:04 +08:00
Stijn Tintel
af48372e37 kea: bump to 2.4.0
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2023-10-08 14:19:18 -07:00
Stijn Tintel
58558c8834 kea: bump to 2.2.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2023-10-08 14:19:18 -07:00
Nuno Gonçalves
597df3585f esp2net: add Espressif ESP chip USB-Network proxy
Signed-off-by: Nuno Gonçalves <nunojpg@gmail.com>
2023-10-08 17:40:50 +01:00
Glenn Strauss
3e9b2d85f0 lighttpd: update to lighttpd 1.4.72 release hash
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
2023-10-08 20:41:16 +08:00
Olivier Poitrey
4e0d43a8d9 nextdns: Update to version 1.41.0
Signed-off-by: Olivier Poitrey <rs@nextdns.io>
2023-10-08 14:06:57 +03:00
Sergey Ponomarev
fdaf530950 sshtunnel: update version to 5.1
Make it depends on ether Dropbear dbclient or OpenSSH client

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
1a92dbcf32 sshtunnel: allow empty port and user
A user may have some host configured in the .ssh/config with user and port.
But we anyway have to specify them in the sshtunnel.
The change fixes this

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
9ea6f35194 sshtunnel: add enabled option
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
9dd8a62238 sshtunnel: allow empty remoteaddress
Just empty or * may have some semantic difference on a server

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
1d9f10a135 sshtunnel: StrictHostKeyChecking for Dropbear
The dbclient doesn't support the -o StrictHostKeyChecking but it has it's own -y option:
-y    Always accept remote host key if unknown
-y -y Don't perform any remote host key checking (caution)

So we can add these options to make the StrictHostKeyChecking working.
The dbclient will ignore -o StrictHostKeyChecking but use the -y or -yy instead.

The only problem is that the -y flag is also used by the openssh-client:

-y Send log information using the syslog(3) system module.  By default this information is sent to stderr.

This is not critical and once the dbclient start to support the StrictHostKeyChecking we can remove the -y flag.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
f14dae7bc9 sshtunnel: Use -i $IdentityFile instead of -o IdentityFile=$IdentityFile
This makes the sshtunnel compatible with Dropbear.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
714c97b012 sshtunnel: set StrictHostKeyChecking=accept-new by default
Without the option the ssh will propt a user to accept the host key.
So a user should perform a connection manualy and accept before useing the sshtunnel.
The accept-new is a reasonable trade off.

Also the LogLevel is INFO by default.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
2a5f9dbcc7 sshtunnel: uci_sshtunnel use example.com
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Sergey Ponomarev
41635f946c sshtunnel: uci_sshtunnel simplify
Simplify comment and make it shorter.
Remove triling tab after retrydelay.
Use a full path for IdentityFile because otherwise the uci validation fails with the relative path ~/.ssh

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2023-10-08 10:29:37 +01:00
Jeffery To
1dce408385 Merge pull request #22309 from BKPepe/tor-fw-helper
tor-fw-helper: remove it
2023-10-07 18:52:07 +08:00
Stan Grishin
7d0557fad4 Merge pull request #22311 from stangri/master-adblock-fast
adblock-fast: bugfix: properly identify hosts-files
2023-10-06 16:42:32 -06:00
Julian Grinblat
565fda4105 ddns-scripts: add ddns-scripts-utils package
The samples in the repo are useful for configuring cenrtain aspects of
ddns, and their inclusion is hinted at within their source code

Signed-off-by: Julian Grinblat <julian@dotcore.co.il>
2023-10-06 18:08:59 +09:00
Florian Eckert
71cb7ad0a4 Merge pull request #22298 from TDT-AG/pr/20231004-keepalived
keepalived: update to version 2.2.8
2023-10-06 08:34:24 +02:00
Tianling Shen
72d2a78487 Merge pull request #22273 from ne20002/crowdsec-firewall-bouncer
crowdsec-firewall-bouncer: new upstream release version 0.0.28
2023-10-06 13:44:33 +08:00
John Audia
6dc86d46da openssh: bump to 9.5p1
Changelog: https://www.openssh.com/txt/release-9.5

Build system: x86/64
Build-tested: x86/64/AMD Cezanne
Run-tested: x86/64/AMD Cezanne

Signed-off-by: John Audia <therealgraysky@proton.me>
2023-10-05 14:37:59 -07:00
Stan Grishin
13a88d0b79 adblock-fast: bugfix: properly identify hosts-files
* escape dots in grep command to properly identify hosts files

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-10-05 14:52:28 +00:00
Josef Schlehofer
c980086b1e tor-fw-helper: remove it
This package does not receive any update since 2015. [1]
It seems unmaintained and most likely not used at all.

[1] https://gitweb.torproject.org/tor-fw-helper.git/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2023-10-05 14:16:07 +02:00
Florian Eckert
09f20658d9 keepalived: add notify_up and notify_down for virtual server
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-10-04 17:01:04 +02:00
Florian Eckert
5462d06ba8 keepalived: add PING_CHECK to real_server
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-10-04 17:00:42 +02:00
Florian Eckert
5bfbc58983 keepalived: update to version 2.2.8
See release-notes:
https://www.keepalived.org/release-notes/Release-2.2.8.html

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2023-10-04 16:59:46 +02:00
Tianling Shen
54593c0ba9 wget: Update to 1.21.4
Removed upstreamed patches and unneeded autoreconf.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-10-04 13:03:51 +08:00
Dirk Brenken
00cad2980c banip: release 0.9.1-1
* drop packets silently on input and forwardwan chains or actively reject the traffic, set 'ban_blocktype' accordingly
* optimized banIP boot/reload handling
* removed pppoe quirk in device detection
* small fixes and optimizations

Signed-off-by: Dirk Brenken <dev@brenken.org>
2023-10-03 21:34:49 +02:00
Alexandru Ardelean
07e5c29d8e Merge pull request #22280 from dynasticorpheus/irssi-1.4.5
irssi: update to 1.4.5
2023-10-03 20:20:09 +03:00
Alexandru Ardelean
3c715537bc Merge pull request #22268 from stangri/master-adblock-fast
adblock-fast: update to 1.0.0-5
2023-10-03 20:18:31 +03:00
Josef Schlehofer
8ce092cb12 Merge pull request #22228 from Ansuel/atftp
atftp: bump to release 0.8.0 + PCRE2
2023-10-03 15:29:20 +02:00
Josef Schlehofer
fc23466e61 Merge pull request #22256 from Ansuel/aircrack-ng-pcre2
aircrack-ng: bump to release 1.7 + PCRE2
2023-10-03 15:18:59 +02:00
Fabian Lipken
06504d9dd2 irssi: update to 1.4.5
Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2023-10-03 11:46:08 +02:00
Stan Grishin
f3b8e569a5 adblock-fast: update to 1.0.0-5
* improve processing of dnsmasq config files
* do not run sed/show error if allow_filter is empty

Signed-off-by: Stan Grishin <stangri@melmac.ca>
2023-10-02 18:09:00 +00:00
S. Brusch
401d2428ac crowdsec-firewall-bouncer: new upstream release version 0.0.28
Signed-off-by: S. Brusch <ne20002@gmx.ch>

Maintainer: Kerma Gérald <gandalf@gk2.net>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.0-rc3

Description: Update crowdsec-firewall-bouncer to latest upstream release version 0.0.28
2023-10-02 18:02:32 +02:00
Oskari Rauta
b788f77db4 netavark: update to 1.8.0
changelog:
 - iptables: improve error when ip6?tables commands are missing
 - docs: Convert markdown with go-md2man instead of mandown
 - iptables: drop invalid packages
 - bump rust edition to 2021
 - Add ACCEPT rules in firewall for bridge network with internal dns
 - Add vrf support for bridges

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-10-02 19:12:11 +08:00
Oskari Rauta
4371aa8f93 aardvark-dns: update to 1.8.0
changes:
 - dependency updates

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-10-02 19:11:59 +08:00
Oskari Rauta
1efe76cee4 netbird: update to 0.23.6
A lot of changes since previous packaged openwrt version of netbird,
changes available at: https://github.com/netbirdio/netbird/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
2023-10-02 19:11:43 +08:00
Fabian Lipken
6c8d81e603 irssi: update to 1.4.4
update to 1.4.4
switch to meson
remove obsolete patch

Signed-off-by: Fabian Lipken <dynasticorpheus@gmail.com>
2023-10-01 22:51:53 -07:00
Christian Marangi
cb1f7c7ee4 aircrack-ng: backport patch and move package to pcre2
Backport patch merged upstream for PCRE2 support and move package to
pcre2.

Also add an additional patch pending to fix linking both pcre and pcre2
if autotools detect both library. (aircrack-ng prefer pcre2 in presence
of both)

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-10-01 00:45:06 +02:00
Christian Marangi
41922f33b5 aircrack-ng: bump to release 1.7
Bump aircrack-ng to release 1.7

Changelog from [1]

Airdecap-ng: Endianness fixes
Airdecap-ng: Output PCAP as little endian
Airodump-ng: Fixed blank encryption field when APs have TKIP (and/or CCMP) with WPA2
Airodump-ng: Updated encryption filter (-t/--encrypt) for WPA3 and OWE
Airodump-ng: Fixed out-of-order timestamp captures
Airodump-ng: Ignore NULL PMKID
Airodump-ng: Fixed dropping management frames with zeroed timestamp
Airodump-ng: Fixed sorting where sometimes it started with a different field
Airodump-ng: Allow setting colors only in AP selection mode
Airodump-ng: Fix crash on 4K Linux console
Airodump-ng: Fixed issue where existing clients not linked to an AP become hidden when hitting 'o'
Airodump-ng: Allow use of WiFi 6E 6GHz frequencies
Airodump-ng: Look for oui.txt in /usr/share/hwdata
Airgraph-ng: Fixed graphviz package conflict
Airgraph-ng: Fixed downloading OUI with python3
Airgraph-ng: Ensure support/ directory is created when installing
Aircrack-ng: Fixed static compilation
Aircrack-ng: Fix handshake replay counter logic
Aircrack-ng: Handle timeout when parsing EAPOL
Aircrack-ng: Fixed WEP display
Aircrack-ng: Fixed spurious EXIT messages
Aircrack-ng: Improved handshake selection by fixing EAPOL timing and clearing state
Aircrack-ng: Ignore NULL PMKID
Aircrack-ng: Added Apple M1 detection
Aireplay-ng: In test mode, detect tampering of sequence number by firmware/driver
Aireplay-ng: Fixed incorrectly rewritten loops affecting fragmentation attack, and in some cases, SKA fake auth
Aireplay-ng: Fixed a bunch of instances where packets had their duration updated instead of the sequence number
Airmon-ng: Fix avahi killing
Airmon-ng: rewrite service stopping entirely
Airmon-ng: Codestyle fixes and code cleanup
Airmon-ng: Added a few Raspberry Pi hardware revisions
Airmon-ng: Fixes for 8812au driver
Airmon-ng: Fix iwlwifi firmware formatting
Airmon-ng: Remove broken KVM detection
Airmon-ng: Show regdomain in verbose mode
Airmon-ng: Updated Raspberry Pi hardware revisions
Airmon-ng: Document frequency usage
Airmon-ng: Add a sleep to help predictable names due to udev sometimes renaming interface
Airmon-ng: Added warning for broken radiotap headers in kernel 5.15 to 5.15.4
Airmon-ng: shellcheck fixes
Airmon-ng: support systemctl as some systems don't support 'service' anymore
Airmon-ng: Fixes for pciutils 3.8, backward compatible
Airbase-ng: use enum for frame type/subtype
Airbase-ng: remove a few IE in association responses
Besside-ng: Support and detect all channels in 5GHz in Auto-Channel mode
OSdep: Search additional IE for channel information
OSdep: Android macro fixes
Patches: Add missing patches that were on https://patches.aircrack-ng.org but not in repo
Patches: Updated freeradius-wpe patch for v3.2.0
Patches: Updated hostapd-wpe patch for v2.10
Patches: Added docker containers to test WPE patches
Autotools: make dist now creates VERSION file
Autotools: Added maintainer mode
Autotools: Initial support for Link Time Optimization (LTO) builds
Integration tests: Added a new test, and improved some existing ones
Airgraph-ng: switch airodump-join to Python 3
Manpages: Fixes (typos, tools name, etc.) and improvements
README: Updated dependencies and their installation on various distros in README.md and INSTALLING
README: Fixed typos and spelling in README.md and INSTALLING
Packages: Packages on PackageCloud now support any distro using .deb and .rpm, however, it requires reinstalling repo (BREAKING CHANGE)
General: Fix compilation with LibreSSL 3.5
General: Fix issues reported by Infer
General: Updated buildbots
General: Add Linux uclibc support
General: Compilation fixes on macOS with the Apple M1 CPU
General: Removed TravisCI and AppVeyor
General: Use Github Actions for CI (Linux, Win, macOS, code style, and PVS-Studio)
General: Added vscode devcontainer and documentation
General: Fix warnings from PVS-Studio and build with pedantic (See PR2174)
General: Shell script fixes thanks to shellcheck
General: Fixes for GCC 10 and 11
General: Fixed cross-compilation
General: Code refactoring, deduplication, cleanup, and misc code improvements
General: Coverity Scan fixes, which includes memory leaks, race conditions, division by 0, and other issues
General: PVS Studio improvements,fixes and updates
General: Code formatting/style fixes
General: Various fixes and improvements (code, CI, integration tests, coverity)
General: Update bug reporting template and update the process

[1] https://aircrack-ng.blogspot.com/2022/05/aircrack-ng-17.html
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-10-01 00:43:21 +02:00
Christian Marangi
daf29ecbb2 net-snmp: move to PCRE2 library
Add upstream patch adding support for pcre2 and update dependency to
require libpcre2 instead of libpcre.

--with-pcre2-8 is now needed to exclude support for pcre and only
require pcre2 as net-snmp still use and try to use pcre by default.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-09-30 20:30:31 +02:00
Stan Grishin
002ff0dd11 Merge pull request #22241 from stangri/master-adblock-fast
adblock-fast: better error reporting when nothing to do
2023-09-29 12:00:13 -06:00