Commit Graph

6431 Commits (2022.7)
 

Author SHA1 Message Date
pedro 53a1277061 dnscrypt-proxy: added possibility to enable in GUI ephemeral-keys option
By default, queries are always sent with the same public key, allowing providers to link this public key to the different IP addresses you are using. This option requires extra CPU cycles, but mitigates this by computing an ephemeral key pair for every query. Use it if you are not using your own server, and the remote server is logging your activity, and your client IP address is frequently changing. Not enabled by default because it may be slow, especially on non-Intel CPUs
8 years ago
pedro ec90fd83ac router/rom/Makefile: try to use a local copy of dnscrypt-resolvers.csv file, when the internet connection during the compilation is down 8 years ago
pedro 7aa8784496 dnscrypt-proxy: Fixes from upstream
- Fix resource leaks on error paths (2b56f740bb)
- Explicitly initialize iterators  (ed51d62430)
- generate-domains-blacklist : allow url entries to fail (#750) (a99828b446)
- Simpleconf: Add missing free() on error path (62865d9fce)
- Simpleconf: another missing free() on error path (cd37724c8c)
8 years ago
pedro 19a0462b4e rom/etc/dnscrypt-resolvers.csv: updated to the current version 8 years ago
pedro b76edbaf95 tor: updated to 0.3.1.8 8 years ago
pedro df2b582055 rc/redial.c: re-connection problems have been resolved with Keep Alive mode on PPPoE/PPTP/L2TP
- The redial daemon did not want to start
8 years ago
pedro a16b7cec68 rc/wan.c: cosmetics + preparation for upcoming changes in switch3g 8 years ago
pedro 0e1ca22d92 rc: usb.c/init.c fixed old typos 8 years ago
pedro daa740771b www: cosmetics
- lengthened the time needed to reboot/shutdown the router
8 years ago
pedro 0afaba189b wan.c: fixed shutdown of the 4g/lte modem during router restart 8 years ago
AndreDVJ be0a48ae6d xl2tpd: Updated to 1.3.10.1 8 years ago
AndreDVJ 951cc1fddf samba3: only fallback to anonymous if authentication was not requested (CVE-2017-12150)
Backported from upstream.
50c8dd3d06
8 years ago
AndreDVJ 4089e77104 samba3: Prevent client short SMB1 write from writing server memory to file. (CVE-2017-12163)
Backport from upstream.
97e9269075
8 years ago
pedro c634f9def6 samba: chain code can return uninitialized memory when talloc buffer is grown. (fixes CVE-2017-15275)
Backported from upstream
8 years ago
kille72 4d2289b754 Merge branch 'shibby-arm' into shibby-arm7 8 years ago
pedro 28904ffa92 adblock: fixed logic of parsing downloaded blacklist files
- In some blacklists, their formatting caused the wrong parsing
8 years ago
pedro fa62b2deb4 nano: updated to 2.9.0
- removed 2 patches as they are not longer needed
8 years ago
pedro b2460969d4 exFAT: updated kernel module for SDK7 to latest source as of Jun 19, 2017 8 years ago
pedro 732c2c80fc exFAT: updated kernel module to latest source as of Jun 19, 2017 8 years ago
pedro 777db025ae libogg: updated to 1.3.3 8 years ago
pedro 8772d51146 switch4g: added B8 (900 MHz) LTE band to choose from 8 years ago
pedro cfe3dfa24b www/wireless.js: restored javascript function 'spin' MIA at commit e9294bd
- here: e9294bd2cb
8 years ago
pedro 3f33c3cb03 dnsmasq: updated to 2.79test1 (Tue, 7 Nov 2017 22:53:06 +0000) 8 years ago
pedro 8230336521 samba: chain code can return uninitialized memory when talloc buffer is grown. (fixes CVE-2017-15275)
Backported from upstream
8 years ago
pedro 676c474269 adblock: fixed logic of parsing downloaded blacklist files
- In some blacklists, their formatting caused the wrong parsing
8 years ago
pedro 331f47b49b nano: updated to 2.9.0
- removed 2 patches as they are not longer needed
8 years ago
pedro 4669b093a0 exFAT: updated kernel module to latest source as of Jun 19, 2017 8 years ago
pedro 39d08b12db libogg: updated to 1.3.3 8 years ago
pedro 468954950f switch4g: added B8 (900 MHz) LTE band to choose from 8 years ago
pedro ff97f1ffcf www/wireless.js: restored javascript function 'spin' MIA at commit e9294bd
- here: e9294bd2cb
8 years ago
pedro 54c424b936 dnsmasq: updated to 2.79test1 (Tue, 7 Nov 2017 22:53:06 +0000) 8 years ago
kille72 ac896437d9 Merge branch 'shibby-arm' into shibby-arm7 8 years ago
pedro 4387b302c5 openssl: added -startdate & -enddate arguments in req command as a patch
Based from PR that was never merged.
ef926ab67c

Thanks AndreDVJ for clarification!
8 years ago
pedro 28d11972e9 openssl: updated to 1.0.2m
- gencert.sh: need to change "startdate/enddate" to "days" otherwise openssl spits errors (unknown option?!)
8 years ago
pedro 7cf4abc9da adblock: fixed issue with too short field for blacklist url (90 -> 130 chars) 8 years ago
kille72 22775f300c Merge branch 'shibby-arm' into shibby-arm7 8 years ago
pedro 0f8ded2455 openssl: added -startdate & -enddate arguments in req command as a patch
Based from PR that was never merged.
ef926ab67c

Thanks AndreDVJ for clarification!
8 years ago
pedro 1bba6daf5f openssl: updated to 1.0.2m
- gencert.sh: need to change "startdate/enddate" to "days" otherwise openssl spits errors (unknown option?!)
8 years ago
pedro 9d340310bc adblock: fixed issue with too short field for blacklist url (90 -> 130 chars) 8 years ago
pedro d3c6a874e3 A collection of patches and fixes to make it to work pppoe, pptp_client, PPTP server, wan, mwan, etc
pedro commit:

- switch4g: dhcpc-release/dhcpc-renew is now redundant + some more time tweaks

-----------------------------------------------------------------------------

  tsynik commits:

- pptp_client.c: also add new option to defaults and httpd
  272f36f8ea

- pptp_client.c: add NAT rules to firewall, remove obsolete sh ip scripts, remove debug
  2aa4fcad47

- pptp_client.c: add pptp_client_usewan option to GUI
  e2251d2c3a

- pptp_client.c: fix redirect Internet option, finally it works!
  d6757b3dbe

- pptp_client.c: fix redirect Internet option, finally it works!
  679e49b2aa

- pptp_client.c: restore route to gw in case of DHCP/LTE/STATIC
  4db2f8963e

- pptp_client.c: add user configurable hidden verbose logging (switched by pptp_debug=9 nvram param)
  bdb03bb277

- pptp_client.c: write dns entries to config only if enabled
  d35482150f

- dhcp.c: check gw exists (don't call preset_wan if there is no gw defined)
  b930ad6072

- dhcp.c: don't clear dns here for pptp/l2tp wans
  8d0db68ed5

- rc: fix broken by previous commit dhcp bound?
  f331a45229

- rc: disable preset_wan in case pppoe + dhcp
  0adc4177a2

- rc: dhcp dns stuff (bring back missed gw and setup dns before for ptp server access)
  980c66a274

- rc: revert previous PPPoE + MAN logic
  3a3a382a94

- rc: move l2tp route fix to preset_wan
  61b7be70c9

- rc: set / unset netmask for ppp (if there is no mask defined only)
  804011c0a2

- rc: clear received dns on ppp disconnect
  98e6efdcf9

- rc: check server value is valid IP
  5c7954fdd0

- rc: simplify check of ptp server ip
  7281fd7051

- rc: ppp netmask setup in nvram
  767d5a7ca4

- rc: pptp_client: fix ip-up / down scripts, format
  85df55915b

- rc: cosmetics
  0efc25a82d

- rc: start_pptp() cosmetics (there is no modes for it)
  9f3afe7927

- rc: fix listen stuff
  6c9e3f8104

- listen.c: add pid file check to avoid duplicates for the same wan
  3973648e6d

- listen.c: add stale pid file check
  176cab3ed1

- mwan.c: add some failsafe checks (Don't execute route del in mwan_load_balance if interface is "none")
  7a3ea417b5

- mwan.c: fix pptp-client policy routing rules (add missing table name to rt_tables)
  d615528650

- mwan.c: fix netmask in wan_info for PPP connections
  88d219e11a

- mwan.c: fix race condition in ip-up/down and fix in start_wan_done
  8304b23b7b

- mwan.c: more simple fix for start_wan_done (assume current wan is primary if previous offline, not needed to check all)
  ab6ffead60

- wan.c: deal with netmask in ppp + dhcp modes
  cde4047e52

- wan.c: move received dns clear from ip-down to stop_wan_if for ppp connections
  1f2ed7868e

- wan.c: fix demand mode (start_tmp_ppp and force_to_dial) almost for all connections
  b22b7e36b6

- wan.c: other primary wan condition
  ab67f2990e

- wan.c: fix new value (apr must be nulled here for strcmp will work (or value coud be wan2X/3X etc))
  8180c0ea03

- wan.c: bump state file on connect for all wans
  e7d806bcf2

- wan.c: Some code improvements
  91ec483029

- wan.c: revert params clear for demand connections
  8c46d1693f

- wan.c: disable start_tmp_ppp at all
  8001aa54c1

- wan.c: fix force_to_dial for pptp (as it doesn't use tmp_ppp, we need to ping not gw but dgw in demand mode)
  9d7d33a21f

- wan.c: some recent code fixes
  de6bd55edf

- wan.c: fix wireless client as wan once again
  3636cdfe92

- wan.c: use persistent ppp interfaces across wans if possible
  a68cbf58fd

- wan.c: use "none" as interface name when ppp not connected (UNDEF was added just for debug)
  2a13c97339

- services.c: fix allow RFC1918 responses for L2TP/PPTP servers (This will fix unable to resolve server IPs on L2TP/PPTP WANs in case address is private.)
  43ce835c8b

- services.c: avoid dns entries duplicates
  295a1909f5

- resolv.dnsmasq - fix ch type, newlines for vpn clients
  7a6f01f001

- ppp demand code drive me mad (No thoughts what to do with this stuff...)
  ab4ac6341c

- shared/misc.c: add ethernet checks (can be useful for WANs with static IP in case cable unplugged)
  cdc8cc4d8d

- check_wanup / wan_led routine: add ethernet WAN port checker for static IP WANs
  85d423d7c5
8 years ago
kille72 b4dafa9bda Merge branch 'shibby-arm' into shibby-arm7 8 years ago
pedro 2182d3c80a AC68U: define power led as wan led
- So in stealth mode all leds must be off and power will monitor internet connection

- Ported from tsynik commit: d9dfe3fe44
8 years ago
pedro ae353446b5 R1D: increase boot_wait time and change wireless defaults
- increase boot_wait time: Hopefully it will allow reflash .trx in case bad fw, 10 seconds is not enough.
  User must change Boot Wait Time in Tomato UI (Advanced Settings - Miscellaneous) and decrease wait time after flash / reset defaults to desired value.

- Ported from combined tsynik commits:
  59717c27fa
  90c8a61940
8 years ago
pedro 72684c6e2d R1D, WS880: fix default macs
Ported from tsynik commit: f408ab2319
8 years ago
pedro 318c619939 rc/misc.c: wan_led_off - avoid extended checks
- Ported from tsynik commit: a2a1e3e338
8 years ago
pedro 909d636920 Transmission-GUI: add watchdir option; fix json config options; fix symlinks
- trailing comma in Custom Configuration and TCP buffers tune
- backward custom options format compatibility and empty fix
- in case Transmission installed, there is /usr/share/transmission/web so symlinking whole /usr/share doesn't work as expected.

Ported from combined tsynik commits:

65b59a8dce
8ef9c44abd
07fa6f7966
8 years ago
pedro 17d17f3ff9 www/basic-network.asp: fixed old typo 8 years ago
pedro 289800f01b sqlite: updated to 3.21.0 8 years ago
pedro 45cf4c53b3 php: updated to 5.6.32 8 years ago
pedro fe53904e31 www: Virtual Wireless Interfaces page - fixed lack of 80MHz bandwith for the 5GHz band in drop down list
https://www.linksysinfo.org/index.php?threads/fork-tomato-by-shibby-compiled-by-kille72.73397/page-10#post-291104
8 years ago