specified for montioring

eg allows ipv4 and ipv6 forwarded traffic to be monitored from
both main network and dmz in single graph

Developer's Certificate of Origin 1.1

By making a contribution to this project, I certify that:

(a) The contribution was created in whole or in part by me and I
    have the right to submit it under the open source license
    indicated in the file; or

(b) The contribution is based upon previous work that, to the best
    of my knowledge, is covered under an appropriate open source
    license and I have the right under that license to submit that
    work with modifications, whether created in whole or in part
    by me, under the same open source license (unless I am
    permitted to submit under a different license), as indicated
    in the file; or

(c) The contribution was provided directly to me by some other
    person who certified (a), (b) or (c) and I have not modified
    it.

(d) I understand and agree that this project and the contribution
    are public and that a record of the contribution (including all
    personal information I submit with it, including my sign-off) is
    maintained indefinitely and may be redistributed consistent with
    this project or the open source license(s) involved

Signed-off-by: Simon Day <email@simonday.info>

docker-ce: Added firewall.extra_iptables_args

openvpn: import from base

graphicsmagick: fix compilation with GCC 10

snort: update to 2.9.17

lighttpd: meson.build linker fix for TLS modules

Signed-off-by: W. Michael Petullo <mike@flyn.org>

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

miniupnpd: Pass ipv6 addr to ipv6_listening_ip

Unlike ipv4, this option is supposed to be an IP address, otherwise, an
error occurs on startup:

    can't parse "br-lan" as valid IPv6 listening address

Signed-off-by: Jitao Lu <dianlujitao@gmail.com>

syslog-ng: update to version 3.30.1

open-vm-tools: update to 11.2.0

protobuf: update to 3.14.0

pdns-recursor: update to 4.4.1

unixodbc: update to 2.3.9

tcsh: update to 6.22.03

wavemon: update to 1.9.2

- Update haproxy download URL and hash

Signed-off-by: Christian Lachner <gladiac@gmail.com>

sumo: update to 1.7.0

unrar: update to 6.0.2

udpxy: update to 1.0-25.0

lighttpd: build and bugfix patches

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Refreshed patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Add PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove upstreamed patch

Refresh others.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove CMAKE_INSTALL as there is no need for InstallDev.

Remove unneeded patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Remove pointless CMAKE_INSTALL. There's an InstallDev section.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Bump version also in config file

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

OpenVPN recommends disabling compression, as it may weaken the security
of the connection. For users who need compression, we build with LZ4
support by default. LZO in OpenVPN pulls in liblzo at approx. 32 kB.

OpenWrt users will no longer be able to connect to OpenVPN peers that
require LZO compression, unless they build the OpenVPN package themselves.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>

New features:
* Per client tls-crypt keys
* ChaCha20-Poly1305 can be used to encrypt the data channel
* Routes are added/removed via Netlink instead of ifconfig/route
  (unless iproute2 support is enabled).
* VLAN support when using a TAP device

Significant changes:
* Server support can no longer be disabled.
* Crypto support can no longer be disabled, remove nossl variant.
* Blowfish (BF-CBC) is no longer implicitly the default cipher.
  OpenVPN peers prior to 2.4, or peers with data cipher negotiation
  disabled, will not be able to connect to a 2.5 peer unless
  option data_fallback_ciphers is set on the 2.5 peer and it contains a
  cipher supported by the client.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

crelay: backport patch for use gpio >255

libfmt: bump to release 7.1.3

zerotier: update to 1.6.2

Signed-off-by: Othmar Truniger <github@truniger.ch>

Signed-off-by: Pawel Dembicki <paweldembicki@gmail.com>

Signed-off-by: Moritz Warning <moritzwarning@web.de>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Same fix as in imagemagick.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

gpsd: fix compilation under some setups

Some commit in base broke compilation. Adding sysroot fixes it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

zerotier: update to 1.6.1