Commit Graph

7575 Commits

Author SHA1 Message Date
Rosen Penev
18da9e3672 Merge pull request #13882 from null-cipher/netstinky_pkg
NetStinky IDS for detecting IoCs on your network
2020-11-09 18:48:11 -08:00
Andrew Mackintosh
00441c6724 netstinky: IDS for detecting IoCs on your network
Signed-off-by: Andrew Mackintosh <amackint@waikato.ac.nz>

Maintainer: me / @null-cipher
Compile tested: Raspberry Pi 3 / brcm2708-bcm2710, OpenWrt 19.07.4
                Hyper-V VM / x86_64, OpenWrt 19.07.4
Run tested: Raspberry Pi 3 / brcm2708-bcm2710, OpenWrt 19.07.4
            Hyper-V VM / x86_64, OpenWrt 19.07.4

Description:
The NetStinky IDS is a component of the NetStinky suite of tools. It
monitors the traffic on the LAN interfaces of your router for
Indications of Compromise (IoCs), drawn from an auto-updating list of
definitions. IoCs are subsequently reported to the NetStinky smartphone
applications.
2020-11-10 02:17:15 +00:00
Maxim Storchak
a0af732541 tgt: update to 1.0.80
- add runtime test
- drop the patch that has gone upstream

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
2020-11-09 12:49:59 +02:00
Rosen Penev
296ba0fe09 Merge pull request #13877 from BKPepe/transmission-web-control
transmission-web-control: remove Transmission SSL variants
2020-11-08 20:47:48 -08:00
Florian Eckert
9e424325b5 Merge pull request #13853 from TDT-AG/pr/20201104-mwan3
mwan3: code cleanup and fixes
2020-11-08 13:24:40 +01:00
Josef Schlehofer
be3c927894 transmission-web-control: remove Transmission SSL variants
In recent commits, there were removed Transmission SSL variants and
there is just used one variant of transmission-daemon. Let's adjust it here as well.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-11-08 11:38:15 +01:00
Christian Lachner
92ffa4bf32 haproxy: Update HAProxy to v2.2.5
- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>
2020-11-07 15:37:49 +01:00
Florian Eckert
a756fdcfdf mwan3: update version to 2.10.2
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:48:21 +01:00
Florian Eckert
1f1d21ed28 mwan3: make it clearer who initiated the start
It was somewhat opaque how the variable a is questioned. To show this
better the variable is now a string and not a boolean. So you can see
directly what should happen. With a boolean you always have to think
about what it means when 0 or 1 is used.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:41:28 +01:00
Aaron Goodman
59d12598b5 mwan3: use procd for locking everywhere
Replace locks on /var/run/mwan3.lock with locks via procd.

This fixes a deadlock issue where mwan3 stop would have a procd
lock, but a hotplug script would have the /var/run/mwan3.lock

Locking can be removed from mwan3rtmon since:
1) procd will have sent the KILL signal to the process during
shutdown, so it will not add routes to already removed interfaces on
mwan3 shutdown and
2) mwan3rtmon checks if an interface is active based on the
mwan3_iface_in_<IFACE> entry in iptables, and the hotplug script
always adds this before creating the route table and removes it
before deleting the route table

Fixes github issue #13704
(https://github.com/openwrt/packages/issues/13704)
2020-11-06 10:40:57 +01:00
Aaron Goodman
bec7a1086f mwan3: reload unreachable/blackhole rules on hotplug
when the network procd service restarts, it flushes the ip rules. We
need to add these rules back. Since hotplug events are triggered when
the networks come back online, adding this call to the hotplug script
is the most convenient place to refresh the rules.

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
2020-11-06 10:40:54 +01:00
Florian Eckert
26fb7129ad mwan3: fix boundary
he line is too long. For the future it is better to split it into
several lines and make it more clearly arranged. In case of a future
change, not the whole line will be marked as a change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:37:44 +01:00
Florian Eckert
6834f8e3a6 mwan3: use common makefile install wrappers
With this change you can see at a glance which files will be installed on
the system.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:35:55 +01:00
Florian Eckert
94a25dbd92 mwan3: fix wait conditions in mwan3track
Will only run when no events are pending.

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
[ Update description and split into own commit ]
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:35:49 +01:00
Florian Eckert
81e6a8fd3b mwan3: move mwan3_init call in mwwan3track into main
Initialize TRACK_OUTPUT has been set after INTERFACE variable initialization.
Move definition into main fixes this issue.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:35:45 +01:00
Florian Eckert
ca7625ef11 mwan3: remove not needes jshn.sh include
Remove not needed jshn.sh include.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:34:53 +01:00
Josef Schlehofer
af93af4a4f rp-pppoe: increase PKG_RELEASE
In a recent commit, there was a fixed typo in config file of rp-ppoe
package. As there was no increased version in PKG_VERSION/PKG_RELEASE,
it means that fixed typo will be applied for users, who install
rp-pppoe now. Existing users will not be aware that there is an updated
package with fixed typo. They will need to do force overwrite/reinstall via opkg.

It makes a little bit complicated as we are fixing typo in conffile, but
this change will be applied to users who do not touch it. In any case,
there should be a bumped version.

Fixes: fe709078ff ("rp-pppoe: fix typo")
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-11-05 21:06:13 +01:00
Helge Mader
0bf2130f62 xinetd: do not restart service after config change if it is not running
Signed-off-by: Helge Mader <ma@dev.tdt.de>
2020-11-05 14:29:38 +01:00
Eric Luehrsen
658c27ea97 unbound: clean up interface interpretation in UCI
DNS flag day 2020, software should reflect the minimum EDNS 1232 bytes.
Added iface_wan and iface_lan to control internal DNS assignemnts and
to control what is local service ACL. Interface wild cards are not
explicitly set so that they can be customized in extended conf.

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-11-04 19:25:08 -05:00
Eric Luehrsen
2680dc239a unbound: update to 1.1.12
Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
2020-11-04 19:25:08 -05:00
Jianhui Zhao
fe709078ff rp-pppoe: fix typo
Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
2020-11-04 20:03:01 +08:00
Florian Eckert
d561ea555f wifidog: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
9e6d28b3cb vpnbypass: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
fe4d4f0bcc vpn-policy-routing: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
3364d6665a tinc: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
1b0ddae963 tgt: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
04e52a13c4 simple-adblock: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
6f00afc97b seafile-server: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
154d2482e1 radicale: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
7184a471ef openvswitch: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
1db50a6131 nginx: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
f2820aa328 haproxy: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
0869415ce7 gnunet: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert
faf579b0ab apfree-wifidog: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Dirk Brenken
dd356ed900 Merge pull request #13849 from dibdot/adblock
adblock: adapt openwrt rc.common changes
2020-11-03 20:05:15 +01:00
Dirk Brenken
10da8b0b8e Merge pull request #13848 from dibdot/banip
banip: adapt openwrt rc.common changes
2020-11-03 20:03:15 +01:00
Dirk Brenken
9922c8e3e0 adblock: adapt openwrt rc.common changes
* since openwrt master has merged the depending P/R, the old
extra_help/extra_commands syntax is no longer working, see #13798 for
reference

* removed test.sh script from package

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-03 19:51:46 +01:00
Dirk Brenken
14a6971589 banip: adapt openwrt rc.common changes
* since openwrt master has merged the depending P/R, the old
extra_help/extra_commands syntax is no longer working, see #13798 for
reference

* removed logd dependency, see #13820 for reference

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-03 19:44:22 +01:00
Dirk Brenken
65bee292d9 travelmate: adapt openwrt rc.common changes
* since openwrt master has merged the depending P/R, the old
extra_help/extra_commands syntax is no longer working, see #13798 for
reference

Signed-off-by: Dirk Brenken <dev@brenken.org>
2020-11-03 19:37:32 +01:00
Rosen Penev
4a94d960c9 usbip: remove no longer necessary udev hack
It's not only unnecessary, it interferes with libudev-zero.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-11-03 12:38:12 +00:00
Rosen Penev
881aa28fa1 treewide: turn specific libudev-* DEPENDS to generic ones
libudev-zero as well as libudev-fbsd have PROVIDES:=libudev . These
packages have nothing specific that requires one or the other.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-11-03 12:38:12 +00:00
Florian Eckert
33df7bbda8 Merge pull request #13748 from aaronjg/mwan3-owner-procd
mwan3: fix mwan3 'use'
2020-11-03 12:28:42 +01:00
Rosen Penev
2d8029ad62 Merge pull request #13813 from aleksander0m/aleksander/longer-wait-for-init-events
modemmanager: increase initial timeout for event reporting
2020-11-02 00:44:05 -08:00
Rosen Penev
e2b813e3f7 Merge pull request #13755 from r-salvaterra/tor
Tor: a couple of updates
2020-11-01 13:53:12 -08:00
Rosen Penev
5fb093c101 Merge pull request #13678 from oldium/update-fwknopd-defaults
fwknop: Use sensible defaults.
2020-11-01 13:50:37 -08:00
Rosen Penev
1a8daeac5e Merge pull request #13653 from FinnixB/znc-multiple-listeners
znc: Add support for many configurable listeners for znc
2020-11-01 13:49:53 -08:00
Rosen Penev
a9307eafc8 Merge pull request #13816 from mlichvar/chrony-improvements
chrony: improve configuration and hotplug script
2020-11-01 13:44:28 -08:00
Rosen Penev
222cad4ccc kea: fix compilation with libcxx
Boost headers try to include experimental/string_view when std is less
than c++17. This does not work ith libcxx where this header is not
present.

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2020-10-31 18:23:28 -07:00
Josef Schlehofer
d442033941 bind: update to version 9.16.8
- DNS Flag Day 2020
(default EDNS buffer size changed from 4096 to 1232 bytes)

-- Added patch, which should be part of the next release
It fixes an issue while cross-compilation (I linked it in the commit
message with issue link)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2020-10-31 06:39:05 -07:00
Aleksander Morgado
9a16087fd6 modemmanager: increase initial timeout for event reporting
When the ModemManager daemon is started by the init script, we're
explicitly calling mm_report_events_from_cache() so that all the
hotplug events that happened before that moment are properly notified
to the newly launched daemon.

This initial reporting of events does a wait for the ModemManager
process to be available in DBus, and if the daemon isn't registered in
the bus in a given time, the process is considered failed:

  Sun Sep  6 16:20:02 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:02 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:03 2020 [2180]: <info>  ModemManager (version 1.14.6) starting in system bus...
  Sun Sep  6 16:20:03 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:04 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:05 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:05 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:06 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:06 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:07 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:07 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:08 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:08 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:09 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:09 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:10 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:10 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:11 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:11 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:12 2020 ModemManager: hotplug: checking if ModemManager is available...
  Sun Sep  6 16:20:12 2020 ModemManager: hotplug: ModemManager not yet available
  Sun Sep  6 16:20:12 2020 ModemManager: hotplug: error: couldn't report initial kernel events: ModemManager not running

Update the default wait time for this initial event notification from
10s to 60s, because there are cases where the daemon is slower to
boot, e.g. during the first boot after a sysupgrade.

Signed-off-by: Aleksander Morgado <aleksander@aleksander.es>
2020-10-30 23:29:55 +01:00