- 5b9e3fd Unconditionally install package 'bsdextrautils' by WHR · 10 days ago 主要
- e5aa50e Automatically add SSH host public key of the peer for wireguard-periodic-rebind-port; support alternative SSH port number by WHR · 8 weeks ago
- cc750de Fix some configuration sections being missed when parsing the configuration file by WHR · 5 months ago
- 6d7b9ad Don't import routes with target prefix length less than or equal to 1 from OSPF by WHR · 6 months ago
- cda2f53 Extend 'ra-list' section into 'advertising-wan-routes-urls' and 'wan-routes-urls' to fetch static routes on WAN without advertising them over OSPF by WHR · 6 months ago
- 30acdec Change ospf_inactivity_time to be a per-peer configuration directive by WHR · 6 months ago
- a3665cc Allow OSPF for IPv6 be omitted for a node by WHR · 6 months ago
- d4aed83 Fix values of configuration directives 'wireguard.use_peer_resolver' and 'wireguard.periodic_rebind_port' didn't get parsed as boolean values by WHR · 6 months ago
- 48e3789 Make OSPF inactivity time configurable by WHR · 6 months ago
- f846a24 Unconditionally mask dhcpcd.service by WHR · 7 months ago
- ddbdc42 Configure 10.0.0.10 DNAT rule in the OUTPUT chain, from rncn-dns service by WHR · 8 months ago
- bc06f70 Don't import a route from the kernel routing table if its metric is higher than 32 by WHR · 10 months ago
- f61bae7 Add a default NAT rule to SNAT DNS packets sent from RNCN node to the private anycast address 10.10.10.10 by WHR · 10 months ago
- adec6ec Add some default iptables rules to ensure outgoing TCP connections to port 25 and 465 are always routed through local WAN interface by WHR · 11 months ago
- 615ef4d Move source code of sshwgcfg into a separated file by WHR · 11 months ago
- 0348b36 Finish dynamic wireguard port support by WHR · 11 months ago
- f1910b9 Add incomplete support for dynamic wireguard port by WHR · 11 months ago
- e64bb93 Install package irqbalance by WHR · 11 months ago
- 4109a0c add net.core.rps_sock_flow_entries to sysctl by JohnnySun · 11 months ago
- 0b26d84 merge external router to ecmp for ospf by JohnnySun · 1 year ago
- e422268 Use the fallback name server in ra-updater by WHR · 1 year ago
- ce375c2 Use OSPF version 3 for all IP versions by WHR · 1 year ago
- 5fa9646 Comment about function 'configure_sshd_pam' by WHR · 1 year ago
- 308e0f7 Unconfigure pam_limits(8) by WHR · 1 year, 2 months ago
- 55dcadc Don't add duplicated line into /etc/pam.d/sudo by WHR · 1 year, 2 months ago
- 6908fad Don't read non-regular files under /etc/profile.d/ from /etc/profile by WHR · 1 year, 2 months ago
- d7dc55d Support adding preconfigured interfaces into BIRD OSPF configuration by WHR · 1 year, 4 months ago
- 51b0325 Correct an inverted file descriptor duplication by WHR · 1 year, 4 months ago
- fa39093 Try to install some more basic packages by WHR · 1 year, 4 months ago
- 9bf3896 Handle status of function 'make_sure_nonempty_file_ends_with_new_line' by WHR · 1 year, 4 months ago
- 8374276 Always apply IPv4-specific configurations for WireGuard interfaces by WHR · 1 year, 4 months ago
- 12a75b3 Support configuring GRE and GRE/FOU tunnels as alternative protocols to WireGuard by WHR · 1 year, 4 months ago
- ab74273 Install a custom version of 'bird.service' workaround stack overflow issue in bird(8) by WHR · 1 year, 4 months ago
- 4a0b1ff add import_from_ospf_filter clip by JohnnySun · 1 year, 4 months ago
- b714483 bind(2) to the local in-tunnel address for pinging the peer over tunnel; make bsdping mandatory, by removing 'pingstat' functions that supporting other ping implementations by WHR · 1 year, 4 months ago
- 85557cc Add incomplete support for routing reply packets of incoming TCP connections to the same default route interface by WHR · 1 year, 4 months ago
- 46d77de Use per-node configured 'fallback_name_server' for sniproxy(8) resolver by WHR · 1 year, 4 months ago
- 7f35721 No need to write '|| return' in function 'configure_systemd_link' by WHR · 1 year, 4 months ago
- 5efd2d2 rm(1) the target path before ln(1), for safety by WHR · 1 year, 4 months ago
- 42b561f Disable naming interface by MAC address as well as the 'AlternativeNamesPolicy' in systemd.link(5) by WHR · 1 year, 4 months ago
- d44254b Don't try to fetch DNS server configuration if the configuration file already exists during 'install' by WHR · 1 year, 4 months ago
- 0e40994 Add a clip to allow flexible customization of OSPF configuration by WHR · 1 year, 4 months ago
- 5e80da2 Make DNS server port configurable per node; change configuration file format for the DNS server to allow local overrides for configuration updates by WHR · 1 year, 4 months ago
- 81986fc Don't configure IP addresses 10.10.10.10 and 10.0.0.10 on boot by WHR · 1 year, 4 months ago
- 67b7c50 Create directory '/var/log/sniproxy' for sniproxy(8) by WHR · 1 year, 4 months ago
- 8553e8d update default dns in sni-proxy by JohnnySun · 1 year, 5 months ago
- c47cd7a Don't replace '/etc/sniproxy.conf' again if it has already being replaced with the custom version by WHR · 1 year, 5 months ago
- 26add95 Don't reference nonexisting table 'https_hosts' in 'sniproxy.conf' by WHR · 1 year, 5 months ago
- 6feec0a Enable sniproxy service on 'enable-services' by WHR · 1 year, 5 months ago
- 16aca56 Fix missing configuration loading of 'run_sniproxy' by WHR · 1 year, 5 months ago
- 428a75f Add TCP MSS clamping rule in ip6tables by WHR · 1 year, 5 months ago
- 0b42732 add 10.100.253.0/23 to protocol direct in bird config by Johnny Sun · 1 year, 5 months ago
- 2a7d0f2 Ignore error for nonexisting /etc/ssh/ssh_known_hosts by WHR · 1 year, 5 months ago
- fc893d2 rm(1) /etc/systemd/system/ip6tables.service before trying to write it by WHR · 1 year, 5 months ago
- d1ebf97 Write configured SSH host keys of other nodes into /etc/ssh/ssh_known_hosts by WHR · 1 year, 5 months ago
- 92822d5 Install ip6tables service and rules as appropriate by WHR · 1 year, 5 months ago
- e4489b3 Don't try to enable service 'rncn-dns-updater' if 'dns_config_update_url' isn't set by WHR · 1 year, 5 months ago
- 6e78e05 Avoid installing package 'libc-devtools' that may be recommended by 'libc6-dev' by WHR · 1 year, 5 months ago
- 22498eb Merge duplicated code by WHR · 1 year, 5 months ago
- c0c94de Optionally install and configure sniproxy(8) by WHR · 1 year, 5 months ago
- 221c150 Don't try to install git, since the program didn't have a strong dependency to it, and in usual cases it would already have installed when this script runs by WHR · 1 year, 5 months ago
- fc8976b Install noinet6.so for disabling IPv6 support for dynamically linked programs by WHR · 1 year, 5 months ago
- 8b064e8 Check presence of BSD ping source code when initializing node state by WHR · 1 year, 5 months ago
- 2893f2f Add optinal wireguard-periodic-rebind-port service by WHR · 1 year, 5 months ago
- 535568a Explicitly disable ICMP redirect messages on WireGuard interfaces by WHR · 1 year, 5 months ago
- f8df105 Make monitor pinging timings configurable, and add minimal wait time to monitor pinging cycle by WHR · 1 year, 5 months ago
- 0c2e3fc No longer need to write multiple servers into /etc/resolv.conf, because using output DNAT worked much better by WHR · 1 year, 5 months ago
- 597fc5b Use DEFAULT_FALLBACK_NAME_SERVER as a fallback value for fallback_name_server by WHR · 1 year, 5 months ago
- 71ceed8 Install dpkg-dev to provide dpkg-architecture(1) by WHR · 1 year, 5 months ago
- 8f8db13 Load configuration for subcommand 'enable-services' by WHR · 1 year, 5 months ago
- f0acf2f Optionally install wireguard-peer-resolver by WHR · 1 year, 5 months ago
- 1ff248d Move configuration directive 'wg_private_key' into a separate section by WHR · 1 year, 5 months ago
- 9dd3ac9 Run 'systemctl daemon-reload' before enabling any service by WHR · 1 year, 5 months ago
- a4c9e0e Install no-vm-drop-caches.service by WHR · 1 year, 5 months ago
- af662a3 Don't print logo if the login shell was started by sudo(1) by WHR · 1 year, 5 months ago
- 8af024d Install BSD ping man page as ping.bsd(8), and create a symbolic link 'ping4.bsd' to 'ping.bsd' by WHR · 1 year, 5 months ago
- c9651e7 Install BSD ping and prefer it in rncn-link-status-monitor.sh by WHR · 1 year, 5 months ago
- 4a8e4ed Don't print UTF-8 encoded characters on a 'linux' terminal by WHR · 1 year, 5 months ago
- a8b9ffa Don't override 'PS1' variable from '/etc/profile' by WHR · 1 year, 5 months ago
- 3f5d0fb Workaround for zsh(1) didn't source '/etc/profile' on login by WHR · 1 year, 5 months ago
- b39f9c8 Run-time decide whether to print UTF-8 version or ANSI color version of the logo by WHR · 1 year, 5 months ago
- a68d5e3 Install bifsocket.so and bifcsocket.so for binding sockets to specified interface in dynamically linked programs by WHR · 1 year, 5 months ago
- 8a47efe Implement 'enable-services' subcommand by WHR · 1 year, 6 months ago
- 6eaacfb Optionally configure time zone by WHR · 1 year, 6 months ago
- 9b215a1 'dnsutils' is a transitional package, install 'bind9-dnsutils' instead; install 'bind9-host' since it is needed somewhere by WHR · 1 year, 6 months ago
- dbb32bd default install dnsutils by JohnnySun · 1 year, 6 months ago
- 7b75af8 Add an iptables(8) mangle rule to clamp TCP MSS on tunnel interfaces; write an iperf3.service that bind(2)s to RNCN address by WHR · 1 year, 6 months ago
- 9198489 Recognize 'iptables-legacy.service' and 'iptables-nft.service' as valid unit names for iptables service by WHR · 1 year, 6 months ago
- 5e668f8 explicitly set accept_ra for default interface by JohnnySun · 1 year, 6 months ago
- c65febe Always add NAT rule for fallback name server by WHR · 1 year, 6 months ago
- cbd6151 Fix typo by WHR · 1 year, 6 months ago
- 867df00 optmize sysctl network buffer config and link-status-monitor quick init by JohnnySun · 1 year, 6 months ago
- 09b6902 disable default route ra on rncn by JohnnySun · 1 year, 6 months ago
- ec3478f try to reduce LSA change by JohnnySun · 1 year, 6 months ago
- f3fcbf7 Don't upgrade installed packages and don't install recommended packages from installing most packages by WHR · 1 year, 6 months ago
- 19fc1b6 Explicitly enable IPv6 forwarding on WireGuard interfaces by WHR · 1 year, 6 months ago
- 5f2ddc0 bugfix for default export-to-ospf-filter by JohnnySun · 1 year, 6 months ago
- ce7c56c set all external router as ospf E1 by JohnnySun · 1 year, 6 months ago
- 2c32485 Fix missing semicolon in BIRD configuration by WHR · 1 year, 6 months ago
- eb35484 Export routes with adjusted metric for newly added fallback route advertisement entries to OSPF by WHR · 1 year, 6 months ago