Include default configuration files to have something to start from.
Also include snort2lua to help convert snort2 rules to snort3 to also
help with bootstrapping the configuration.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>

syslog-ng: update to version 3.33.2

Changelog:
https://github.com/syslog-ng/syslog-ng/releases/tag/syslog-ng-3.33.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

libvpx: update to 1.10.0

fuse3: update to 3.10.4

mpd: update to 0.22.9

uacme: update to 1.7.1

clamav: update to 0.103.3

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

yggdrasil: bump to 0.4.0

vpnbypass: update to 1.3.2-1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

bugfix: domain names bypass
rename config file
update Makefile
updated README link
updated shellcheck compatibility
support for 21.02.0-rc2 and later
updated code for interface triggers
add newline to test.sh

Signed-off-by: Stan Grishin <stangri@melmac.net>

libs: file: magic: remove "u" from pattern

Fixes deadlock with multiple init script calls

Signed-off-by: Felix Fietkau <nbd@nbd.name>

This backports an upstream fix for the following warning:

Warning: Unparsable number `xu                    \b, dcrypt version %d'

Signed-off-by: Martin Schiller <ms@dev.tdt.de>

delve: Update to 1.7.0

yq: Update to 4.11.0

Revert "net/miniupnpd: ext_ip_reserved_ignore support"

Signed-off-by: Jan Hak <jan.hak@nic.cz>

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

- Bump yggdrasil-go version to v0.4.0
- Update ygguci tool for compatibility with the new yggdrasil-go version
- Yggdrasil's config file is now generated in a separate command before running the daemon

Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>

See
https://github.com/go-delve/delve/blob/master/CHANGELOG.md#170-2021-07-19
for changes.

Signed-off-by: Niels Widger <niels@qacafe.com>

This matches an ipv4 change in 21f5cdd2fa and has the same rationale.
Google requires https for both ipv6 and ipv6.

Signed-off-by: Scott Lamb <slamb@slamb.org>

This patch is causing several issues [1], which then were reported to
upstream [2] and it was not accepted by upstream [3]. This results that
nobody maintain this custom patch and it is not useful as it is changing
addr_is_reserved behavior.

[1] https://github.com/openwrt/packages/issues/15258
[2] https://github.com/miniupnp/miniupnp/issues/542
[3] https://github.com/miniupnp/miniupnp/pull/511

This reverts commit b76aa99194.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

emailrelay: fix compilation with GCC11

dnsdist: fix compilation with GCC11

erlang: disable PIE

telldus-core: fix compilation with GCC11

luaossl: add luaossl(rel-20200709) to feeds

strongswan: update to version 5.9.3

dnsproxy: add new package

dnslookup: add new package

bonding: allow xmit_hash_policy in 802.3ad mode

golang: Update to 1.16.6

Includes fix for CVE-2021-34558 (crypto/tls: clients can panic when
provided a certificate of the wrong type for the negotiated parameters).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

nss: disable parallel compilation

sane-backends: fix usbid generation

Signed-off-by: Noel Kuntze <noel.kuntze@thermi.consulting>

- use $(INSTALL_DIR) instead of mkdir
- using $(INSTALL_CONF) and then running chmod is pointless, use
  $(INSTALL_DATA) directly
- /etc/xinetd.d/sane-port doesn't need read protection from non-root
  users, use $(INSTALL_DATA) as well

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

On some build systems (build bots, Debian Buster for example) the
current mechanism in the Build/Install define doesn't run. Replace it
with shell fu that works.

Issue was reported, see [1].

[1] https://github.com/openwrt/packages/issues/16085

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

* make sure new volumes are in state 'down' until explicitely
   requested to transition to 'up' state. Useful for additional
   verification steps after writing a read-only volume.
 * remove unused ubus events as blockd does that much better now

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Allow the transmit hash policy to be changed in 802.3ad mode.

Signed-off-by: DENG Qingfang <dqfext@gmail.com>

python-{simplejson,cffi,pillow}: update versions

ruby: update to 3.0.2

yq: Update to 4.9.8

boost: fix compilation error under SPARC