a new script based package called "banIP" to block
incoming & outgoing ip adresses/subnets via ipset.

Features:
* a shell script which uses ipset and iptables
  to ban a large number of IP addresses
  published in various IP blacklists (bogon, firehol etc.)
* support blocking by ASN numbers
* support blocking by iso country codes
* support local white & blacklist (IPv4, IPv6 & CIDR notation)
* auto-add unsuccessful ssh login attempts to local blacklist
* auto-add the uplink subnet to local whitelist
* per source configuration of SRC (incoming) and DST (outgoing)
* supports IPv4 & IPv6

Strong LuCI support:
* easy interface to track & change all aspects of your ipset
  configuration on the fly
* integrated IPSet-Lookup
* integrated RIPE-Lookup
* Log-Viewer & online configuration of white- & blacklist

LuCI-Screenshots will follow in the second post.
Forum discussion:
https://forum.openwrt.org/t/banip-new-project-needs-testers-feedback/16985

Signed-off-by: Dirk Brenken <dev@brenken.org>

miniupnpc: Update to 2.1

keyutils: Update to 1.5.11

liboping: Update to 1.10.0

qrencode: Update to 4.0.2

python-ldap: Update to 3.1.0

libmraa: Update to 2.0.0

Fixes f2bf8d3 ("openvswitch: provide in-tree kmod builds")

Closes openwrt/packages#7360

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Backported several patches from version 0.8 to fix this.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

dmidecode: Update to 3.2

Fix typo in msmtp Makefile PACAKGE -> PACKAGE

Signed-off-by: Yannick Chabanois <ycarus@zugaina.org>

Hard float includes: libx264, mp3lame
Soft float includes: shine (mp3 encoder)

fdk-aac will not be available in libffmpeg-full due to incompatible license with libx264.
Custom builds can override licensing restrictions but results may not be re-distributable.

Signed-off-by: Ted Hess <thess@kitschensync.net>

tgt: Update to 1.0.74

nginx: Update rtmp module

cyrptodev-linux: bump to latest git 2018-11-02

alpine: Fix compilation without deprecated APIs on OpenSSL 1.0.2

Security and bugfix release.  Full release notes available at:
https://mosquitto.org/blog/2018/11/version-154-released/

Security:
* client certificates not validated for websockets listeners.

Bugfixes:
* wills with disconnected clients better handled
* bridge restart_timeout properly observed

Signed-off-by: Karl Palsson <karlp@etactica.com>

Also updated the URL as the SourceForge page is obsolete.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This adds support for digests in openssl 1.1.1.

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libs: file: bump version to 5.35

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

net: squid: bump version to 4.4

libs: libuv: bump version to 1.23.2

utils: sysstat: bump version to 12.0.2

utils: jq: bump version to 1.6

netdata: Update to 1.11.0

libndpi: Add PKG_BUILD_DEPENDS to fix compilation

Signed-off-by: Rosen Penev <rosenp@gmail.com>
[correct configure flag from enable-ssl to enable-openssl]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Change to ut0mt8's fork that contains several enhancements
and bugfixes.

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update netdata to 1.11.0

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

cyrus-sasl: Fix compilation without deprecated APIs on OpenSSL

It's not even used.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

openldap: Backport patch to fix compilation without deprecated APIs

rng-tools: version 6.6 is now available

unbound: Remove deprecated OpenSSL API

Work around automake demanding README with a symlink.
Add new dependency on libsysfs.
Avoid dependency on libxml, curl, openssl by disabling NIST beacon support.
  We also continue to remove gcrypt, and jitterentropy is not packaged.
Remove patch that no longer cleanly applies.
  If newlines in log messages are a problem, we should take it up with
  upstream.

Signed-off-by: Nathaniel Wesley Filardo <nwfilardo@gmail.com>

Fixes: github #7303

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

libevhtp: Fix compilation on OpenSSL 1.0.2 without deprecated APIs

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switched URL to a proper one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>

Also switched to the proper upstream.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

This switches monit to use the THREAD API of OpenSSL 1.0.2. This is gone
in 1.1.0 but will be more stable with 1.0.2.

Signed-off-by: Rosen Penev <rosenp@gmail.com>