Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

vpnbypass: No longer depends on hardcoded WAN interface name.

vpnbypass: No longer depends on hardcoded WAN interface name).
vpnbypass: Table ID, IPSET name and FW_MARK as well as FW_MASK can be defined in config file.
vpnbypass: Uses iptables, not ip rules for handling local IPs/ranges.
vpnbypass: More reliable creation/destruction of VPNBYPASS iptables chain.
vpnbypass: Updated Web UI enables/start and stops/disables service.
vpnbypass: Beautified output.

Signed-off-by: Stan Grishin <stangri@melmac.net>

travelmate: update 0.4.1 (release 2)

* revert start priority change
* mute standard logging even more

Signed-off-by: Dirk Brenken <dev@brenken.org>

travelmate: update 0.4.1

* mute useless logging in "active mode"
* optimize startup behaviour
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>

this adds zlib as dependency

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>

Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

travelmate: release 0.4.0

* add an "active mode", where travelmate will be restarted
  every n seconds (default 60) and checks existing uplink connection
  regardless of ifdown event trigger (disabled by default)
* enhance multiple radio support
    * fix the ap detection
    * respect different radios during scanning & connection handling
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

Add Open-ZWave and Domoticz

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

[utils/zoneinfo] Updated to the latest release

Signed-off-by: Vladimir Ulrich <admin@evl.su>

unbound: improve maintenance of trust anchor

Unbound UCI tries to protect embedded flash from excess
use. Unbound RFC5011 KSK tracking can rewrite root.key
every few minutes to an hour. It also writes and destroys
files in the same directory during the process.

Recommended UCI delays for copying busy work in /var/
back to /etc/ may be too conservative. These are all
changed from 28 to 9 days.

The RFC5011 KSK results were also destroyed by an
init.d restart, even if /var/ is mounted on persistent
storage like USB drive. /var/lib/unbound/root.key is
now preserved during this process, unless a newer key
is installed in /etc/ manually or package update.

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

libflac: update to 1.3.2, refresh patches

boost: Revert Commit 21091fa

This reverts commit 21091fa0ac.

Closes #4085.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

sqlite: update to 3.17.0

adblock: release 2.4.0 (release 2)

* add missing sort step if tld compression was disabled

Signed-off-by: Dirk Brenken <dev@brenken.org>

adblock: release 2.4.0

* add tld compression,
  this new "top level domain compression" removes up to 40 thousand
  needless host entries from the block lists and
  lowers the memory footprint for the dns backends by 8-10 MByte
* optimize restart behavior in case of an error
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

knot: update to 2.3.3

Signed-off-by: Daniel Salzman <daniel.salzman@nic.cz>

collectd: package chrony and match plugins

net/wireguard: add support for fwmark option

Adds support for the fwmark option.

FwMark is a 32-bit fwmark for outgoing packets.
If set to 0 or "off", this option is disabled.

Signed-off-by: Dan Luedtke <mail@danrl.com>

openssh: Fix ssl-engine support

Signed-off-by: Martin Schiller <ms@dev.tdt.de>
Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Martin Schiller <ms@dev.tdt.de>

boost: 1.63 Revision 3 -> Python 3.6 Support Fixed and Unsupported Target Fixes

utils/mksh: update to r54

bitlbee: Update to 3.5.1

addrwatch: fix imagebuilder and config file name

nano: Update to version 2.7.5

fping: Update to 3.16

unbound: DNSSEC trust anchor roll for 2017

Unbound 1.6.1 has a few bug fixes for resource leaks,
configuration robustness, compile environment interaction,
and maintaining the trust anchor. The 2017 trust anchor
(DS) is built into unbound and unbound-anchor.

File /etc/unbound/root.key holds 2010/2017 DS record until 2018
https://www.icann.org/resources/pages/ksk-rollover
https://www.iana.org/domains/root

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>

Description: fixes a crash with zero-length regex matches and further updates


Signed-off-by: Daniel Albers <Daniel.Albers@public-files.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>