Imitate dropbear init.d-script and make sure we
don't end up with corrupt keys.
This can happen if we use a caching filesystem,
like 'ubifs', and the DUT is powered off during
boot-up.
Signed-off-by: Markus Gothe <markus.gothe@genexis.eu>
If pppoe is used for wan access. script set 'eth1' as interface for curl
call. The correct interface is however 'pppoe-wan'.
These scripts use 'network_get_physdev' function to get real device for
bind_network but this is wrong. We need instead the l3_device of the the
logical interface.
In case if we don't use pppoe connection - 'l3_device' is equal to real device.
Follow P/R:
#14431
Signed-off-by: Coia Prant <coiaprant@gmail.com>
If PKG_FORTIFY_SOURCE is not 0 and lto is enabled for package git, it
will fail to compile with the following example error:
/openwrt/staging_dir/toolchain-aarch64_generic_gcc-14.1.0_musl/include/stdio.h: In function 'process_curl_messages': /openwrt/staging_dir/toolchain-aarch64_generic_gcc-14.1.0_musl/include/stdio.h:90:8: error: inlining failed in call to 'always_inline' 'fwrite': function body can be overwritten at link time
90 | size_t fwrite(const void *__restrict, size_t, size_t, FILE *__restrict);
| ^
http.c:355:33: note: called from here
355 | fprintf(stderr, "Received DONE message for unknown request!\n");
| ^
A related issue is #13016 .
This commit set PKG_FORTIFY_SOURCE to 0 if CONFIG_USE_LTO is y.
Close#24366
Link: https://lore.kernel.org/git/CAHfWF5mjquES-nocQaK+CAEsqWgdy-_OYdGtN82heYs0eJP3eQ@mail.gmail.com/T/#t
Link: https://github.com/openwrt/openwrt/issues/13016
Link: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=110834
Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
* I had wrongly used config_get_bool for the option, so fixed it
* this also fixes the issue of /etc/init.d/vsftpd stop not working
Signed-off-by: Mohd Husaam Mehdi <husaam.mehdi@iopsys.eu>
Summary of three PRs regarding new adblock sources with minor changes/additions:
- add new source reg_lithuania, PR provided by @Myginas
- add new source certpl, PR provided by @jkostorz
- add new source oisd_nsfw_small, PR provided by @Turjoy9
Signed-off-by: Dirk Brenken <dev@brenken.org>
AntiBlock program proxies DNS requests.
The IP addresses of the specified domains are added to
the routing table for routing through the specified interface.
Signed-off-by: Khachatryan Karen <karen0734@gmail.com>
* change the chain structure: only two regular chains contain the generated banIP sets.
“_inbound” covers the base chains WAN-Input and WAN-Forward, ‘_outbound’ covers the base chain LAN-Forward.
* pre-configure the default chains for every feed in the banip.feeds json file, no longer blocks
selected feeds in all chains by default
* it's now possible to split country and asn Sets by country or asn (disabled by default)
* support Set counters to report easily suspicious IPs per Set (disabled by default)
* make it possible, to opt out certain chains from the deduplication process
* the element search now returns all matches (and not only the first one)
* the report engine now includes statistics about the Inbound & Outbound chains and the Set counters (optional)
* save the temp. files of possible nft loading errors in "/tmp/banIP-errors" by default for easier debugging
* various code improvements
* remove ssbl feed (deprecated)
* add two new vpn feeds
* update the readme
Signed-off-by: Dirk Brenken <dev@brenken.org>
Feature changes:
- on non-windows clients (MacOS, Linux, Unix) send "release" string from uname() call as IV_PLAT_VER to server
- Windows: protect cached username, password and token in client memory
- Windows: use new API to get dco-win driver version from driver
- Linux: pass --timeout=0 argument to systemd-ask-password, to avoid default timeout of 90 seconds
Security fixes:
- improve server-side handling of clients sending usernames or passwords longer than USER_PASS_LEN
Notable bug fixes:
- FreeBSD DCO: fix memory leaks in nvlist handling
- purge proxy authentication credentials from memory after use
For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.13/Changes.rst
Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
Using the PUT method recreates the DNS record with and only with
the newly provided data. This seems unnecessary. In particular,
we don't need to hardcode a TTL of 120. Any existing comment
would be lost too.
The only detail we need to change is the IP address. Leave everything
else as it was.
Signed-off-by: Gedalya Nie <gedalya@gedalya.net>
Have no idea why such dependency was added.
No documentation from transmission that they need
such dependency on build time. On the other hand
saves vast of time during build
Signed-off-by: Serhii Ivanov <icegood1980@gmail.com>
* update UCI to use the traditional vsftpd.conf so
that people migrating from non-uci version do not face problems
* if secure_chroot_dir is not provided specifically, then create
an empty directory where vsftpd usually expects it
Signed-off-by: Mohd Husaam Mehdi <husaam.mehdi@iopsys.eu>
* update init script to validate and process UCI
* the option conf_file can be used to pass a conf file
instead of using UCI
Signed-off-by: Mohd Husaam Mehdi <husaam.mehdi@iopsys.eu>
Fsh helps you access local shell and TCP services behind a NAT or firewall.
More details: https://github.com/heiher/hev-fsh
Signed-off-by: Ray Wang <r@hev.cc>
* remove indentation in postinst/prerm/postrm scripts to fix issues with APK
* rework hijack logic to redirect port 53 to the port of active/selected dnsmasq instances
Signed-off-by: Stan Grishin <stangri@melmac.ca>
Use #elif defined instead of #elifdef as seen elsewhere throughout the patch
file. This avoids the following errors when compiling with GCC 11:
```
mibgroup/ucd-snmp/proc.c:45:2: error: invalid preprocessing directive #elifdef; did you mean #ifdef?
45 | #elifdef HAVE_PCRE_H
| ^~~~~~~
| ifdef
mibgroup/ucd-snmp/proc.c:243:2: error: invalid preprocessing directive #elifdef; did you mean #ifdef?
243 | #elifdef HAVE_PCRE_H
| ^~~~~~~
| ifdef
```
Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
WFB-ng is long-range packet radio link based on raw WiFi radio.
Adding it to openwrt base packages will help a lot of it users
to use cheap wifi routers (supporting minitoring mode) instead
of build custom hardware yourself.
Signed-off-by: Vasily Evseenko <svpcom@gmail.com>
The following error occurs when creating storage configuration in WEBUI:
```
Failed to save config after 10 tries: failed to create temp file for new config: open /etc/rclone/rclone.conf4258227003: permission denied
```
we should set the owner of the parent directory of the configuration
file to rclone.
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
[split chown command, wrap commit message]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
The challenge directory (for webroot challenges) is on a tmpfs, which
means it doesn't exist on boot. Some web servers (uhttpd in particular)
don't like being configured to serve files from a non-existent
directory. So add a boot() section to the ACME init script that just
creates the challenge directory, and make sure it runs relatively early.
That should take care of the non-existent directory issue, while still
keeping the actual certificate renewal controlled by cron.
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
Now for all devices with every size of RAM it is set to:
`smb2 max read = 64K`
`smb2 max write = 64K`
`smb2 max trans = 64K`
Instead of fixed value to 64K is better to check RAM size and adjust to:
32 ~ 64MB RAM, set the value to 64K
64 ~ 128MB, set it to 128KB
128 ~ 256MB, set it to 1MB
More than 256MB leave default size to 4MB
With 64MB and 128MB is better also to disable the read/write cache
`cache read buffers = no`
`cache write buffers = no`
Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
- manually refresh patch 030-glib.patch
Major changes are:
fix adduser / addshare prompting on musl libc
fix use of veto files as global share parameter
lookup primary group and don't recurse in ksmbd.conf @group handling
fix a leak and an intermittent auth failure in Kerberos 5
add global parameter kerberos support
detailed changelog here: https://github.com/cifsd-team/ksmbd-tools/releases/tag/3.5.3
Signed-off-by: Andrea Pesaresi <andreapesaresi82@gmail.com>
Maintainer: me
Compile tested: x86_64, Dell EMC Edge620, OpenWrt 24.10.0-rc2
Run tested: x86_64, Dell EMC Edge620, OpenWrt 24.10.0-rc2
Description:
* stop building netifd flavour until netifd isuees are resolved
* improve output()
* improve inline_set()
* improve is_config_enabled()
* bugfix is_domain()
* improve is_supported_protocol()
* improve is_supported_interface()
* bugfix is_tor_running()
* improve ipv4_leases_to_nftset()
* improve ipv6_leases_to_nftset()
* add check for ip-full binary on start
* bugfix: load environment on boot
* bugfix: hack around dnsmasq confdir instances
* bugfix: IPv6-related fixes for internet_routing() and status_service()
* improve netifd setup by bringing code into the init script from uci-defaults
* bugfix: do not attempt to use IPv6 prefixes in pbr.user.aws if IPv6 support is disabled in pbr config
Signed-off-by: Stan Grishin <stangri@melmac.ca>
Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (24.10-rc2, snapshot)
Run tested: ipq806x - C2600 (snapshot): install apk, start/stop sfpd service & review logs
Description:
Bump to version 4.0.7
Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
This section was renamed some time ago. Although this would be fixed by
the uci-default migration script, we should set this correctly in the
example config file right away.
Signed-off-by: Martin Schiller <ms@dev.tdt.de>
Bump net-mtools to release 3.1 as kernel selftests now require version
3.0+.
All patch merged upstream.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Update nginx init script to announce http related services over mdns.
Signed-off-by: Mohd Husaam Mehdi <husaam.mehdi@iopsys.eu>
[ bump PKG release, improve commit description ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Bumping ot-br-posix that openthread-br is based on to latest code.
Due to some major changes required some more compilation flags, and in order to avoid the ot-br agent had to add some dependencies as well
Dependecies:
1. kmod-tun: otherwise the otbr fails to load and crashed immidiedtly
Compilation flags:
1. OTBR_NAT64, OT_NAT64_BORDER_ROUTING set to OFF: a temporary workaround to a compilation problem with openwrt, could be reverted once the issue here is fixed: openthread/ot-br-posix#2606
2. OT_TARGET_OPENWRT: wasn't assumed from OTBR_OPENWRT in some targets
Signed-off-by: Itay Shoshani <itai.sho@gmail.com>
* optimized procd settings for better performance
* made the log monitor working again (even on master with apk migration issues)
* reworked the fetch autodetection function (still broken in master due to apk migration)
Signed-off-by: Dirk Brenken <dev@brenken.org>
* optimized procd settings for better performance
* reworked autodetection functions (still broken in master due to apk migration)
* made the tld function optional, set 'adb_tld' accordingly (enabled by default)
* reworked count function
* various code improvements
Signed-off-by: Dirk Brenken <dev@brenken.org>
Add SUBMENU variable for some packages in Network category.
Add title for `dnscrypt-proxy` package.
Shorten TITLE variable for `xray-core` package.
Filesystem:
- cifs-utils
File Transfer:
- onionshare-cli
IP Addresses and Names:
- dnscrypt-proxy2
- family-dns
- https-dns-proxy
- mdns-repeater
- nextdns
- smartdns
Version Control Systems:
- git-lfs
Wireless:
- dawn
Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
Support for EAP-MSCHAPv2 authentication scheme is added.
Different from the previously supported schemes, this one is
usually asymmetric in the way that server auth method (pubkey) is
different from the client auth method (eap-mschapv2).
The code handles this asymmetry automatically.
A new UCI config section mschapv2_secrets is added where the user
can specify the EAP identities and their passwords that are
accepted by the server. AFAIK, there is no way to select which
EAP IDs should be accepted by which remote, except setting
`eap_id` to something different than `%any`. But `eap_id`
does not support template matching, so either only a single
identity or all can be configured for one remote. This is why
the EAP identities are not subsections of remotes, but are
a standalone section.
Signed-off-by: Martin Pecka <peci1@seznam.cz>
Signed-off-by: Martin Pecka <peckama2@fel.cvut.cz>
Before this commit, if a user configures multiple remotes in UCI,
each remote generates one output section of pools.
This doesn't hurt because swanctl just merges all of them,
but it is apparently not needed to have N copies of the same.
This commit changes the behavior to only create one pools
section at the end of the generated swanctl config.
Signed-off-by: Martin Pecka <peci1@seznam.cz>
Signed-off-by: Martin Pecka <peckama2@fel.cvut.cz>
Changes since v0.12:
7fb6416 tests: fix segfault with no /etc/protocols (#286)
0dddc42 README: Update branch references in badge URLs
5eea3f4 github: Update branch names for actions
b102523 scripts: get debug info for bug reports
334bb9c Make listening socket creation optional. (#297)
a4e7b65 {etc,man}: improve check_route address notification flag documentation (#301)
ffa276f Support ELL 0.68 l_netlink_message API. (#303)
269f10a gh: daily validation of the ELL compatibility (#308)
824ff8c Support listener events (#304)
5d9f33a Some clean-ups (#305)
05a08bf lib: switch to v4.0.1: only added items (#306)
3702487 scripts: debug: also print system info (#307)
5d8db15 ell: only include 'ell/ell.h' header (#309)
772afe9 AUTHORS: Update e-mail addresses.
0c36dba mptcpd 0.13
Drop backported patches which are part of the release.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Make PKG_VERSION compatible with apk by dropping the C char,
simplifying Makefile also otherwise. Also remove unnecessary
variables.
Refresh patches (just cosmetics for CI).
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* minimal fix to support all download utilities in currently broken apk snapshots
(see https://github.com/openwrt/openwrt/issues/16907 for details)
Signed-off-by: Dirk Brenken <dev@brenken.org>
The following error occurs when CONFIG_USE_APK is set.
```
ln /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/usr/lib/git-core/git /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/usr/bin/git
ln /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/usr/lib/git-core/git-shell /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/usr/bin/git-shell
touch /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git.installed
mkdir -p /mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/stamp
SHELL= flock /mnt/gl-mt6000-main/openwrt/tmp/.root-copy.flock -c 'cp -fpR /mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/. /mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/'
cp: '/mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/./usr/bin/git' and '/mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/./usr/bin/git' are the same file
cp: '/mnt/gl-mt6000-main/openwrt/build_dir/target-aarch64_cortex-a53_musl/git-2.46.2/.pkgdir/git/./usr/bin/git-shell' and '/mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/./usr/bin/git-shell' are the same file
make[2]: *** [Makefile:167: /mnt/gl-mt6000-main/openwrt/staging_dir/target-aarch64_cortex-a53_musl/root-mediatek/stamp/.git_installed] Error 1
```
Use $(LN) instead of ln and use relative paths.
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
After the SIM has been successfully unlocked, it is initialized. This can
take longer on some modems, so we must wait until the modem is ready to
execute the next commands.
Otherwise the modem cannot be enabled and aborts with the following
error message:
error: couldn't enable the modem: 'GDBus.Error:org.freedesktop.ModemManager1.Error.Core.WrongState: modem in initializing state'
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
If a configured 'plmn' is deleted from the configuration between a connection
setup, it will continue to be used because the modem remembers it.
Therefore, the 'plmn' stored in the modem must be deleted when a new
connection is established if it is no longer in the configuration.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
In the current implementation of the modemmanager 'proto', if a 'plmn' and a
'technology' is configured, the 'plmn' is set first and then second the
'technology' on a 'proto' setup.
However, this is problematic if a 'technology' has already been set in an
earlier run. It is possible, that this previously set 'technology' is not
available at the current location, as the modem remembers the setting.
To fix this, first set the technology and then the plmn.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
If the ModemManager is started with debug, all outputs are written to the
system log. To simplify debugging, a logging file is now created under
'/var/log/mm.log' in this case. This simplifies error analysis.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
This commit comments out the `log-level` line in the template
config file to use default value from upstream, default should be 2.
Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
Modify EXTRA_DEPENDS in package section to meet APK packaging
requirements.
Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
[ fix dependency also for nginx-full ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
The full implementation of netstat can be useful,
for example, showing inodes of sockets or displaying
protocol families not supported by the busybox
version.
Signed-off-by: Mathew McBride <matt@traverse.com.au>
Maintainer: Tom Stöveken <tom@naaa.de>
Compile tested: SDK for OpenWrt 23.05.5
Run tested: x86/64 @ Intel(R) Celeron(R) CPU N3160 @ 1.60GHz, OpenWrt 23.05.5
Description:
Updated to version 0.13.0
Signed-off-by: Tom Stöveken <tom@naaa.de>
Having both double quotes and parentheses in package
description may lead into troublewith apk, if parentheses
are located so that they get passed "outside" the quoted
parameter, and get interpreted as a token for shell.
Example:
ash: -c: line 1: syntax error near unexpected token `('
bash: -c: line 1: `/OpenWrt/e8450/staging_dir/host/bin/fakeroot
/OpenWrt/e8450/staging_dir/host/bin/apk mkpkg --info "name:ddns
-scripts-pdns" --info "version:2.8.2-r51" --info "description:D
ynamic DNS Client scripts extension for "PowerDNS" via API. It
requires: "option param_opt(Optional Parameter)" to be a valid
Avoid that by using single quotes in the detailed descriptions.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Bump ariang version to 1.3.7.
Signed-off-by: Roc Lai <laipeng668@qq.com>
[ improve commit description and title ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Add pending patch fixing support for MbedTLS 3.x.
Small variation to the provided PR from [0] to remove the dropped
mbedtls/certs.h header.
[0] https://github.com/umurmur/umurmur/pull/190
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
The IPv6 address is separated by ':' instead of '.', so we need to add
':' in DNS_CHARSET.
See: 'https://github.com/openwrt/packages/issues/25051'
Fixes: #25051
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* bump PKG_RELEASE
* update commit message
Signed-off-by: Xiaolong Zhang <xliilQwQ@outlook.com>
In dropping the dummy-package, also the extra dependency for
nginx-ssl-util needed to be dropped.
Fixes: #25250
Fixes: b75050d59e ("nginx-util: drop nginx-util dummy packages")
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Nginx hardcode the libxml2 include path to /usr/include/libxml2. This
works in a local build as pretty much everyone have the libxml2 library
installed but doesn't on buildbot container as the library doesn't
exist.
This effectively makes the host library leak intro library detection but
doesn't actually link to it as linking is still done with the correct
library in staging dir.
To fix this add a patch to define custom libxml2 include directory
instead of hardcoding it to host library.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Enough transition period has passed for nginx-util dummy package. Finally
drop it for good and drop the extra dependency.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Drop extra dependency <2 for nginx-util. The reason is not clear and
cause problems with APK package creation.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Enough transition period has passed for nginx dummy package. Finally
drop it for good and add Provides for nginx default.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Mute warning on procd init.d script enable as nginx_util is tried to be
called from /usr/bin host system. Limit it to be called only if
nginx-util is present.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Maintainer: Antonio Pastor / @APCCV
Compile tested: ipq806x (23.05.3, snapshot)
Run tested: ipq806x - C2600: start server, connect from MacOS, read/write files to home share, create/update TimeMachine backups
Description:
No changes to package other than using latest available upstream code base. Starting Netatalk 4.x build uses meson instead of autotools.
Signed-off-by: Antonio Pastor <antonio.pastor@gmail.com>
I don't think anyone uses this package, which currently does not build.
In addition, the cryptocurrency hype died off a long time ago.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
* bump compat version to accommodate new strings
* improve the output() function (thanks @bigsmile74)
* implement support for user-configurable per-instance dnsmasq confdirs
for dnsmasq.conf|dnsmasq.ipset|dnsmasq.nftset options
Signed-off-by: Stan Grishin <stangri@melmac.ca>
Update Makefile to include dependencies: conntrack and libmosquitto.
Conntrack: Added to resolve a bug in Apfree-Wifidog that caused long-lived user connections to persist after logout.
Libmosquitto: Integrated as a preparatory measure for future support of the MQTT protocol; implementation is still in progress.
For detailed information, please refer to the release notes:
https://github.com/liudf0716/apfree-wifidog/releases/tag/7.10.2082.
Additionally, a new /etc/wifidogx directory has been created to store the local authentication portal page for users uploading their own portal pages.
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
- Refactored wifidogx.init to improve code structure and readability.
- Added local authentication support, allowing authentication without a server.
Signed-off-by: Dengfeng Liu <liudf0716@gmail.com>
* bump compat version to accommodate new strings
* update dnsmasq-related code to better support separate confdirs
for separate instances
* remove procd_lan_interface as it didn't reflect that it's a list of devices
* introduce procd_lan_device list
* improve the output() function (thanks @bigsmile74)
* remove duplicate uci_get_device
* improve ipv6 detection and interface setup
* improve dhcp force detection for interfaces name differently from lan
* fix array/element parameters for some json operations
* remove unneeded null redirects for `try` calls
* remove (iptables-only) capitalized chain names form validation
* working pbr-netifd flavor
Signed-off-by: Stan Grishin <stangri@melmac.ca>
If the "name" parameter is not provided, then updates to a subdomain
A/AAAA record result in the subdomain being removed from the record.
This change always provides the "name" parameter to correct that behavior.
Signed-off-by: Dillon Dixon <github@dillon.io>
Forgot to bump the 'PGK_RELEASE' in the last change in 'mwan3'.
Fixes: 619629ce85 ("mwan3: close flock fd when starting mwan3.user scripts")
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Changes from @stangri
* remove unneeded `\n` escapes
* cosmetic improvements to make code more consistent
* remove duplicate uci_get_device()
* add more output on start/stop
* remove wan up detection on boot/start
* address Tor policies errors
* prevent interface_routing() failures for downed interfaces
Changes from @bigsmile74:
* improve is_integer()
* improve is_domain()
* improve filter_options()
* imrove is_ipv4() so that is_ipv4_netmask() can be retired
* improve is_phys_dev so that is_phys_dev_quick() can be retired
* add the dhcp.lan.force=0 warning
Signed-off-by: Stan Grishin <stangri@melmac.ca>
clamav-milter 1.3.0 and onward log:
WARNING: Ignoring deprecated option AllowSupplementaryGroups at /tmp/clamav/clamav-milter.conf:5
Signed-off-by: Paul Donald <newtwen+github@gmail.com>
Hyphens in named sections are a no-no
uci: Parse error (invalid character in name field) at line 1, byte 37
Changed '-' to '_' to fix error to allow UCI parsing.
Signed-off-by: Paul Donald <newtwen+github@gmail.com>
* fixed gathering/printing of system information in travelmate status
* make use of a central command selector function
Signed-off-by: Dirk Brenken <dev@brenken.org>
* fixed gathering/printing of system information in adblock status
* added missing hagezi category (samsung tracker)
Signed-off-by: Dirk Brenken <dev@brenken.org>
* fixed gathering/printing of system information in banIP status
* removed broken iblocklist.com feeds
* updated readme
Signed-off-by: Dirk Brenken <dev@brenken.org>
Bump sstp-client to 1.0.20 release. This fix compilation error with new
PPPd version 2.5.0 as some API changed.
Patch automatically refreshed.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
New features:
* explicitly add allowed domains on download/allow to the dnsmasq.servers
config file
Cleanup:
* remove unneeded EXTRA_COMMANDS
* remove unneeded EXTRA_HELP
* remove unnecessary `\n` escapes
* remove unnecessary line breaks from output on download
Optimization:
* simplify is_integer()
* replace long if with case
* more verbose output on download
Signed-off-by: Stan Grishin <stangri@melmac.ca>
When "set_reload_if_sync" is set, the service is reloaded when the
configuration changes. For dnsmasq this means that the service, if
stopped, is started, and we don't want this in the backup node.
Signed-off-by: Francesco Benini <francy.benini@gmail.com>
When "set_reload_if_sync" is not set in the hotplug script, the service
is not expected to reload. That is not true because even if not set, the
value is set to the default 1 (reload active) or equals the parameter
set when "keepalived_hotplug" is called.
The default behavior should be:
- Reload if set_reload_if_sync is called
- NOT reload if set_reload_if_sync is NOT called
A similar fix is ported to "set_update_target".
Signed-off-by: Francesco Benini <francy.benini@gmail.com>
Some init.d scripts like firewall and sqm do not return the actual state
of the service if called with "running" parameter. This result in the
init script called with "start" parameter and the service may not load
the new configuration. Firewall init script is one of this
An option is added in order to skip the "running" check for the service.
Signed-off-by: Francesco Benini <francy.benini@gmail.com>
Add support for NJS module. Various patch are required to make this
module correctly compile with the required library mainly related on
detecting config flags.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Disable additional entry in feature test probably added in new version
of Nginx and never notice. Also declare "no" instead of empty value for
cc test.
While at it also refresh the patch.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
This fixes compatibility with ppp-2.5.0 and newer.
We also need to change the PKG_SOURCE_URL since the previous URL is no
longer working and automated downloads from the project homepage are
not desired due to bandwidth restrictions. Have a look at the project
homepage [1] for details.
Signed-off-by: Martin Schiller <ms@dev.tdt.de>
[1] https://dianne.skoll.ca/projects/rp-pppoe/
This new check in the proto modemanager prevents the SIM card from being
blocked and therefore PUK is not required. If the PIN is entered incorrectly
in the 'uci' configuration, it makes no sense to try this several times
until the PUK is required. Should it nevertheless happen that the PUK
is required, then this will logged.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Markus Gothe