Version 2.0 of xtables-addons dropped support for all kernels older than
3.7. So we still need to build v1.x for older kernels. Keep a separate
patches directory for it, with almost all the same patches for now.
We can easily drop the 1.x build once we have more than two platforms
running 3.7.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34921 3c298f89-4303-0410-b956-a3cf2f4a3e73
Update ZNC to newest version 1.0
* Update config format to reflect new config format and allow
multiple networks per user.
* Update init script to create a 1.0 compatible config.
* Add new modules introduced in 1.0, remove dropped ones.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34659 3c298f89-4303-0410-b956-a3cf2f4a3e73
Don't connect to freenode if there is only the default configuration.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34658 3c298f89-4303-0410-b956-a3cf2f4a3e73
libipq is removed so the old version cannot be built anymore.
Signed-off-by: Florian Fainelli <florian@openwrt.org>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34638 3c298f89-4303-0410-b956-a3cf2f4a3e73
Since the switch to netifd, proto handlers may always set the defaultroute
and provide dns server addresses, netifd will decide in the generic code
path whether the announced values are masked or not.
Additionally protocol handlers should not modify the routing tables themselves
and prevent any launched services from doing so.
Remove the additional defaultroute and peerdns option handling from the ppp.sh
protocol handler and rely on netifd to mask or not mask the values.
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34537 3c298f89-4303-0410-b956-a3cf2f4a3e73
Since my previous post a similar issue was discovered for DTLS and 1.6.2
was released. CVE numbers were also assigned for these two
vulnerabilities:
CVE-2012-4523 refers to the TLS issue, fixed in radsecproxy 1.6.1
CVE-2012-4566 refers to the DTLS issue, fixed in radsecproxy 1.6.2
So it would be good to bump to 1.6.2, applying this patch on top of
r34484.
Signed-off-by: Zenon Mousmoulas <zmousm@noc.grnet.gr>
Signed-off-by: Florian Fainelli <florian@openwrt.org>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34535 3c298f89-4303-0410-b956-a3cf2f4a3e73
The init script expects uci-style 1/0 and not Yes/No or On/Off in the config.
Amend the commented-out configuration directives accordingly.
Signed-off-by: Paul Fertser <fercerpav@gmail.com>
Signed-off-by: Florian Fainelli <florian@openwrt.org>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34494 3c298f89-4303-0410-b956-a3cf2f4a3e73
Busybox's ash doesn't pass unexported environment variables to processes
started from within a function, so a service started with
MMM=xyz service_start blablabla
will never see the MMM variable.
Fix this by exporting the important variables.
Signed-off-by: Paul Fertser <fercerpav@gmail.com>
Signed-off-by: Florian Fainelli <florian@openwrt.org>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34493 3c298f89-4303-0410-b956-a3cf2f4a3e73
file
I cleaned up the patch so line do not overflow and removed some white
space in hope to get it accepted or revised.
As isc-dhcp-relay does not come with an init script, I made one based
on sysntpd init.d file for both ipv4 and ipv6.
If you need more arguments from isc-dhcp-relay to be included in the
config file, I'll be able to add them.
This patch has been applied to trunk and compiles/install on my side.
The script for ipv4 and ipv6 have been tested with the
isc-dhcp-relay-ipv6 binary and work well (start/stop with the right
settings).
Signed-off-by: Jérôme Poulin <jeromepoulin@gmail.com>
Signed-off-by: Florian Fainelli <florian@openwrt.org>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34485 3c298f89-4303-0410-b956-a3cf2f4a3e73
An issue has been found where radsecproxy accepts TLS clients when it
should not, due to the way it performs client verification after a TLS
handshake.
See for more details:
https://project.nordu.net/browse/RADSECPROXY-43https://project.nordu.net/browse/RADSECPROXY-44
A (short term) fix for this issue has been released as version 1.6.1.
Other changes in previously released version 1.6 mostly apply to F-Ticks
logging, an optional feature that is not enabled in the OpenWRT package,
due to a build dependency on nettle, a library that has not been ported/
packaged (yet).
Signed-off-by: Zenon Mousmoulas <zmousm@noc.grnet.gr>
Signed-off-by: Florian Fainelli <florian@openwrt.org>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34484 3c298f89-4303-0410-b956-a3cf2f4a3e73
Similar to r33906, use the functions directly to allow compilation for
linux 3.6.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34319 3c298f89-4303-0410-b956-a3cf2f4a3e73
be able to reduce it's footprint and allow nginx to be built with
support for lua.
Signed-off-by: Karl Vogel <karl.vogel@gmail.com>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34223 3c298f89-4303-0410-b956-a3cf2f4a3e73
the patch 100-olsrd-fix-stack-corruption-in-net_output.patch was merged upstream in the olsrd repository with commit f4d250ad4fad5fcfe5b5feaac3f3e121adef3fba
git-svn-id: svn://svn.openwrt.org/openwrt/packages@34181 3c298f89-4303-0410-b956-a3cf2f4a3e73
Repairs path to iptables in snortsam sources from /sbin/iptables to /usr/sbin/iptables.
Without this patch Snortsam does not know the path to iptables binary.
Signed-off-by: Jiri Slachta <slachta@cesnet.cz>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@33823 3c298f89-4303-0410-b956-a3cf2f4a3e73
Redsocks is a daemon running on the local system, that will transparently
tunnel any TCP connection via a remote SOCKS4, SOCKS5 or HTTP proxy server. It
uses the system firewall's redirection facility to intercept TCP connections,
thus the redirection is system-wide, with fine-grained control, and does
not depend on LD_PRELOAD libraries.
Signed-off-by: Sebastian Muszynski <basti@linkt.de>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@33799 3c298f89-4303-0410-b956-a3cf2f4a3e73
This patch repairs init script for Snort. Current version can start snort, but
cannot stop it.
Signed-off-by: Jiri Slachta <slachta@cesnet.cz>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@33798 3c298f89-4303-0410-b956-a3cf2f4a3e73
New package shorewall-core, current stable release 4.5.7
The Shoreline Firewall, is high-level tool for configuring Netfilter.
This package provides the core Shorewall libraries installed in
/usr/share/shorewall/,
which are required for the rest of the Shorewall packages to work.
Signed-off-by: Edy Corak <info@loenshotel.de>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@33797 3c298f89-4303-0410-b956-a3cf2f4a3e73
This patch updates shorewall-lite to current stable release 4.5.7
Please note:
The new package shorewall-core 4.5.7 is required by this shorewall-lite version and perlbase-digest.
Signed-off-by: Edy Corak <info@loenshotel.de>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@33796 3c298f89-4303-0410-b956-a3cf2f4a3e73
