Commit graph

1566 commits

Author SHA1 Message Date
Felix Fietkau
f53b96813e hostapd: update to latest version (20130707)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37738
2013-08-08 16:04:19 +00:00
Felix Fietkau
9a22315ca4 hostapd: Settings for DAE/CoA server
hostapd supports "Dynamic Authorization Extensions", making it possible
to forcibly disconnect a user by sending it a RADIUS "Disconnect-Request"
packet.

I've added three new variables to enable setting of the
"radius_das_client" and "radius_das_port" variables in the hostapd
configuration, which enable these extensions.

* dae_client - IP of the client that can send disconnect requests
* dae_secret - shared secret for DAE packets

These are combined into the "radius_das_client" option in hostapd.conf
To enable the server, both dae_client and dae_secret must be set.

* dae_port - optional, default value is 3799 as specified in RFC 5176

Signed-off-by: Martijn van de Streek <martijn@vandestreek.net>

SVN-Revision: 37734
2013-08-06 18:55:30 +00:00
Felix Fietkau
91f0b411f4 hostapd: Fix WDS/WEP usage
WEP in WDS is currently broken in hostapd. Add a patch
to fix the issue.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37733
2013-08-06 17:59:12 +00:00
Felix Fietkau
76ca564e79 hostapd: Refresh patches
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37731
2013-08-06 17:59:05 +00:00
Felix Fietkau
22e012bad8 hostapd: Add an option to disable beaconing
Add a patch for hostapd that introduces a config option
"start_disabled" which can be used to bring up an AP
interface with beaconing disabled. This is useful in
a Repeater-AP setup where the Repeater AP has to start
beaconing only after the WDS link has been established.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37730
2013-08-06 17:59:02 +00:00
Felix Fietkau
719adb6471 uhttpd: update to the latest version, fixes a crash on early cgi/lua process termination
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37628
2013-07-31 22:07:09 +00:00
Luka Perkov
1646bd096c iproute2: update to 3.10.0
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37590
2013-07-28 23:27:35 +00:00
Felix Fietkau
aff8c18ad0 openvpn: update to 2.3.2
this patches updates openvpn to v2.3.2
and adds a PKG_MD5SUM to the Makefile

This release fixes a memory access violation when cipher none is used
on ar71xx - at least with my config

Signed-off-by: Peter Wagner <tripolar@gmx.at>

SVN-Revision: 37560
2013-07-26 12:35:22 +00:00
Steven Barth
4d37ae33b6 6relayd: Overridden DNS should affect DHCPv6
SVN-Revision: 37558
2013-07-26 11:59:25 +00:00
Felix Fietkau
8faa8a6420 uhttpd: update to latest version, fixes issues with POST and keep-alive (#13940)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37556
2013-07-26 10:03:07 +00:00
Felix Fietkau
3d2ace5d71 authsae: add myself as a maintainer
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37555
2013-07-26 10:03:03 +00:00
Felix Fietkau
4478c69b86 authsae: adapt uci scripts to use authsae
This patch modifies the uci scripts to be able to
start meshd-nl80211 for encrypted mesh networks,
therefor a new script (authsae.sh) is inserted.

Signed-off-by: Emanuel Taube <emanuel.taube@gmail.com>
[etienne.champetier@free.fr: just update mac80211.sh path]
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37554
2013-07-26 10:02:59 +00:00
Felix Fietkau
6dbea6416b authsae 80211s authentication daemon
This patch adds authsae open80211s authentication daemon (http://open80211s.org)
It's a rework of Peter Naulls patch (http://patchwork.openwrt.org/patch/1350/)
I've excluded the sample conf file as it's useless when used with mac80211.sh (Emanuel Taube patch)
It now link against libnl-tiny instead of libnl (patch merged in authsae git)
Authsae is 58 Ko (OPENSSL_WITH_EC option adds 35Ko to libopenssl)

Signed-off-by: Peter Naulls <peter@chocky.org>
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37553
2013-07-26 10:02:55 +00:00
Felix Fietkau
85e585ddce ead: fix compile errors with recent kernels
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37482
2013-07-20 12:56:07 +00:00
Hauke Mehrtens
96f1953fb1 kernel: fix xtables-addons dependencies with kernel 3.3
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 37461
2013-07-19 22:36:47 +00:00
Jo-Philipp Wich
7bbe1656cb xtables-addons: use a select of kmod-ipt-core instead of depending on it
SVN-Revision: 37425
2013-07-19 09:58:17 +00:00
Jo-Philipp Wich
d474a77edf xtables-addons: add missing kmod dependencies
SVN-Revision: 37424
2013-07-19 09:58:11 +00:00
Jo-Philipp Wich
d6e8047f83 firewall: update to git head
- handles redirects as port relocations if the dest_ip points to the router itself

SVN-Revision: 37374
2013-07-16 14:04:59 +00:00
Steven Barth
54ae5ce507 netifd: Fix IPv6-prefix assignment with continuous hints
SVN-Revision: 37371
2013-07-16 12:07:11 +00:00
Steven Barth
6a034ce5b1 6relayd: Fix DHCPv6-PD with continuous hints
SVN-Revision: 37370
2013-07-16 12:07:06 +00:00
Steven Barth
0444e32acd Bump iptables version
SVN-Revision: 37329
2013-07-15 06:12:07 +00:00
Steven Barth
ea6a5d0c22 iptables: restore reap functionality to recent module
The reap functionality appears to have been accidentally disabled by
commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see:

  git://git.netfilter.org/iptables.git

and subsequently in iptables 1.4.15 and later.  This adds a patch to
restore reap functionality for recent_opts_v1.

Signed-off-by: Russell Senior <russell@personaltelco.net>

SVN-Revision: 37328
2013-07-15 06:12:03 +00:00
Luka Perkov
1a963355b0 netifd: update to latest version, add bridge_empty option
with this option enabled it's possible to create empty bridges

Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37318
2013-07-14 18:50:04 +00:00
John Crispin
7d7c2ff5f9 swconfig: fix dependency bug introduced by [37304]
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37316
2013-07-14 18:16:42 +00:00
Hauke Mehrtens
f8d55e7541 brcm47xx: use b53 phy driver for the switch in kernel 3.10
This makes it possible to use swconfig to controll the switch.

This was tested with devices using b43 and bgmac.
This was not tested on devices using tg3.
This does not support the adm switch used in some very old devices.

SVN-Revision: 37304
2013-07-14 14:11:17 +00:00
John Crispin
8d546699c5 dropbear: register a config.change trigger
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37245
2013-07-11 17:00:40 +00:00
Felix Fietkau
4e042e4a84 ipset: force the shell to bash to fix build issues on mac os x
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37227
2013-07-10 14:59:00 +00:00
Felix Fietkau
4a0c312dc3 xtables-addons: update to version 2.3, adds linux 3.10 compatibility
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37226
2013-07-10 14:51:13 +00:00
Felix Fietkau
f98f69adc9 firewall: add missing dependencies
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37224
2013-07-10 11:33:48 +00:00
John Crispin
fc40051569 lantiq: move dsl tools to package/network/config
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37198
2013-07-08 09:01:38 +00:00
Luka Perkov
4a7439401b linux-atm: fix dependencies
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37189
2013-07-08 00:37:49 +00:00
Jo-Philipp Wich
4aa82d07a6 firewall: allow routed lan<->lan traffic by default
SVN-Revision: 37171
2013-07-04 18:10:36 +00:00
Jo-Philipp Wich
2561bce232 lldpd: upgrade to 0.7.5
lldpd 0.7.1 has several alignment issues that trip a system configured
to fault on misaligned accesses.  Version 0.7.5 fixes that along with a
few other minor issues.

Signed-off-by: John Szakmeister <john@szakmeister.net>

SVN-Revision: 37168
2013-07-04 16:57:03 +00:00
Steven Barth
e3a369e597 odhcp6c: avoid integer overflows in resend logic
SVN-Revision: 37150
2013-07-03 16:14:24 +00:00
Steven Barth
b9aa47d5b6 odhcp6c: add missing config parameter
SVN-Revision: 37148
2013-07-03 13:50:06 +00:00
Jo-Philipp Wich
7c197d9f0e hostapd: truncate default mac file before adding entries to it (#13797)
SVN-Revision: 37114
2013-07-01 10:52:35 +00:00
Felix Fietkau
ee68734929 hostapd: fix multi-ssid and AP+STA, clean up code
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37111
2013-06-30 21:01:13 +00:00
Felix Fietkau
60b040bbaf hostapd: update to latest git version
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37110
2013-06-30 20:27:38 +00:00
Felix Fietkau
12c033dfd9 mac80211: update to wireless-testing 2013-06-27, fix ATH_USER_REGD handling
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37097
2013-06-30 10:44:19 +00:00
Jo-Philipp Wich
2d506f46fb firewall: update to git head
- uses custom formatting for mac addresses to ensure leading zeroes, required for older iptables mac match parser

SVN-Revision: 37082
2013-06-29 13:28:27 +00:00
Steven Barth
d8051a8814 netifd: fix typo in dhcp script
SVN-Revision: 37051
2013-06-28 04:19:21 +00:00
Florian Fainelli
fe7c236a06 6relayd: prevent build on AVR32
AVR32 misses a bunch of updated syscalls, including timerfd_create()
which is used by 6relayd. Since that requires Linux/libc changes, just
prevent building it for now.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 37040
2013-06-27 15:33:05 +00:00
Steven Barth
cb66ed972b odhcp6c: Add missing config option "ifaceid"
SVN-Revision: 37033
2013-06-25 05:18:20 +00:00
John Crispin
e7dbdad43b hostapd: fix superflous coma
this cause the wps trigegr to be copied to the wrong place

https://dev.openwrt.org/ticket/13753

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37031
2013-06-24 16:44:18 +00:00
Steven Barth
eecce5abad arptables: Bump to 0.0.4
SVN-Revision: 37020
2013-06-24 05:48:12 +00:00
Steven Barth
69cd09ebbf 6relayd: don't accidentally remove regular prefix routes
SVN-Revision: 37018
2013-06-23 16:26:09 +00:00
Steven Barth
f47c4c80d4 6relayd: fix lease-update behaviour for clients without reconfigure
SVN-Revision: 37011
2013-06-22 08:31:28 +00:00
Steven Barth
d0d5f109d8 6relayd: Keep PD-downstream across RENEW/REBIND
SVN-Revision: 37009
2013-06-22 08:19:25 +00:00
John Crispin
4ebf19b48f packages: clean up the package folder
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37007
2013-06-21 16:54:37 +00:00
John Crispin
4999ae4236 hostapd: remove old button hotplug script
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36991
2013-06-21 16:53:07 +00:00
Steven Barth
5108318edb 6relayd: Fix DHCPv6-PD assignment logic
SVN-Revision: 36980
2013-06-21 06:15:09 +00:00
Steven Barth
de2a7547b7 6relayd: correctly set downstream routes for DHCPv6-PD
SVN-Revision: 36969
2013-06-19 13:08:33 +00:00
Felix Fietkau
b4babf9f81 netifd: update to latest version, fixes a NULL pointer deref bug
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36965
2013-06-18 16:24:48 +00:00
Jo-Philipp Wich
65f82e2311 firewall: update to git head
- fixes misprocessing of unknown symbolic protocol names

SVN-Revision: 36963
2013-06-18 14:30:51 +00:00
Jo-Philipp Wich
37ae268729 firewall: update to git head
- fixes calculation of IPv4 netmasks derived from 0.0.0.0/0 CIDRs

SVN-Revision: 36960
2013-06-18 14:14:35 +00:00
Steven Barth
5219d38da2 odhcp6c: Add option to override interface identifier in RA-client
SVN-Revision: 36959
2013-06-18 12:51:14 +00:00
Steven Barth
9f1899242c netifd: IPv6: Fix sorting order in last commit.
SVN-Revision: 36952
2013-06-17 21:29:14 +00:00
Steven Barth
213269a8f7 netifd: Satisfy IPv6 assignments ordered by prefix length
SVN-Revision: 36950
2013-06-17 21:16:22 +00:00
Jo-Philipp Wich
541fbfbb9e hostapd: correctly handle macfile uci option
Make hostapd.sh correctly handle the macfile uci option.

Such option specifies the macfile name to pass into the
hostapd configuration file. Moreover, if a maclist option
has been specified, copy the macfile before appending new
entries.

Signed-off-by: Antonio Quartulli <antonio@open-mesh.com>

SVN-Revision: 36944
2013-06-17 11:59:29 +00:00
Jo-Philipp Wich
dfea3bae11 dnsmasq: use host-record instead of address
Using "--address" for individual host A records is broken, use "--host-record" instead.
The following patch changes dnsmasq.init to build individual host records using "--host-record" instead of "--address".

Signed-off-by: Adam Gensler <openwrt at gnslr.us>

[jow: shorter description, simplified shell script code]

SVN-Revision: 36943
2013-06-17 11:55:30 +00:00
Jo-Philipp Wich
36d3fafd77 firewall: update to git head
- properly process intermediate "!" options in argument list (fixes negated ipsets)

SVN-Revision: 36935
2013-06-13 18:54:49 +00:00
Jo-Philipp Wich
0db38adf1c firewall: update to git head
- fixes handling of reject target for rule sections with specific destination zone

SVN-Revision: 36933
2013-06-13 12:49:00 +00:00
Jo-Philipp Wich
1150e299bb uhttpd: expose missing options to uci
SVN-Revision: 36932
2013-06-13 11:55:12 +00:00
Steven Barth
302cf427cb odhcp6c: add sanity checks for NDP and MTU parameters from RAs
SVN-Revision: 36930
2013-06-13 06:38:48 +00:00
Steven Barth
4f0a0defa6 6relayd: make route preference and prefix on-link flag configurable
SVN-Revision: 36922
2013-06-11 20:52:27 +00:00
Steven Barth
f6dd266c97 iproute2: add drop-failed rule action (patch by Jonas Gorski)
SVN-Revision: 36910
2013-06-11 09:27:46 +00:00
Felix Fietkau
9fb5bf176e netifd: update to latest version, uses the new uci/blob code from libuci
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36909
2013-06-10 12:42:30 +00:00
Steven Barth
5caa45d0b3 ppp: correctly handle address when reloading
SVN-Revision: 36904
2013-06-10 10:42:34 +00:00
Steven Barth
491deaed2c netifd: improve reloading behaviour
SVN-Revision: 36903
2013-06-10 10:42:15 +00:00
Jo-Philipp Wich
bc73ca5619 iwinfo: add phyname attribute, this is useful to group networks by radio phy
SVN-Revision: 36889
2013-06-09 14:39:14 +00:00
Jo-Philipp Wich
cb24c37858 libiwinfo: ignore log messages from wpa_supplicant while scanning
wpa_supplicant may send log and event messages intermixed with the
expected scan results.  This makes "iwinfo wlan0 scan" and LuCI
"site survey" display nothing when many AP's are around.

Eliminate the CTRL-EVENT-BSS-ADDED events, interspersed log messages,
lines with unexpected format.  Increase timeout to handle the max
number of channels (2.4, 3.6, 4.9, 5 GHz).  Insure receive buffer is
null-terminated.

Signed-off-by: Jean-Pierre Tosoni <jp.tosoni@acksys.fr>

SVN-Revision: 36888
2013-06-09 14:39:09 +00:00
Steven Barth
f995c90329 netifd: Improve IPv6 source-routing policies
SVN-Revision: 36884
2013-06-08 13:26:33 +00:00
Jonas Gorski
b9de8ca7f5 netifd: bring wifi down before shutting down
works around wifiX references not being freed on network restart.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 36883
2013-06-08 11:44:12 +00:00
Jo-Philipp Wich
e7b15446a8 firewall: udpate to git head (#13652, #13654, #13658)
- optimizes chain usage for ingress rules
  - adds limit match support for redirect rules
  - fixes automatic redirect dest detection on little endian systems
  - leaves base chains in place on reload to allow user rules to target e.g. "reject"

SVN-Revision: 36871
2013-06-06 14:12:02 +00:00
Jo-Philipp Wich
5cf06bd17b firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols
SVN-Revision: 36868
2013-06-06 14:02:29 +00:00
Jo-Philipp Wich
e94cf1c72b iptables: install libext*.a into staging dir
SVN-Revision: 36867
2013-06-06 14:02:24 +00:00
Jo-Philipp Wich
ecc95dcba8 firewall: update to git head (#13652)
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
  - uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones

SVN-Revision: 36854
2013-06-05 11:40:40 +00:00
Jo-Philipp Wich
0a74d9d5c3 firewall3: fix accidentally changed install directive
SVN-Revision: 36840
2013-06-04 12:30:50 +00:00
Jo-Philipp Wich
07a3110e88 firewall: fix git source url
SVN-Revision: 36839
2013-06-04 12:23:47 +00:00
Jo-Philipp Wich
b721c92221 firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA
SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
Jo-Philipp Wich
0dd6753c09 Drop legacy firewall package
SVN-Revision: 36837
2013-06-04 12:21:44 +00:00
Jo-Philipp Wich
6f60308257 firewall3: update to git head (#13641)
* Fixes wrong chain used for zone forward policy

SVN-Revision: 36830
2013-06-04 10:26:49 +00:00
Jo-Philipp Wich
6eeca5176e firewall3: update to git head
- Fixes problems with reusing matches or targets from loadable extensions

SVN-Revision: 36826
2013-06-03 16:38:29 +00:00
Felix Fietkau
8c69057980 uhttpd: update to latest version, fixes CGI related crashes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36817
2013-06-01 21:43:06 +00:00
Steven Barth
089d6612ce 6relayd: Work around Windows DHCPv6 quirks Announcing deprecated addresses breaks Windows clients
SVN-Revision: 36815
2013-06-01 17:51:02 +00:00
Steven Barth
7ae506c7d4 odhcp6c: work around spurious false-positive address DECLINEs
SVN-Revision: 36809
2013-05-31 13:49:17 +00:00
Jo-Philipp Wich
3bb397c997 firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly
SVN-Revision: 36806
2013-05-31 13:23:23 +00:00
Steven Barth
bf582fbb7b odhcp6c: fix handling of multiple RAs in a row
SVN-Revision: 36804
2013-05-31 10:02:39 +00:00
Steven Barth
cdc3caf533 6relayd: Better compatibility with misbheaving DHCPv6 clients * Make the "best" address / prefix the first one being announced * Only add the "best" address to the hosts-file
SVN-Revision: 36772
2013-05-30 15:42:30 +00:00
Steven Barth
519f27cd33 netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes
SVN-Revision: 36771
2013-05-30 15:42:25 +00:00
Felix Fietkau
02fe12c00d uhttpd: update again to fix a ubus plugin crash bug
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36770
2013-05-30 13:16:38 +00:00
Felix Fietkau
eeb7fdc13e uhttpd: update to latest version, fixes script timeout for ubus requests
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36767
2013-05-30 10:44:20 +00:00
Steven Barth
dc6625f977 6relayd: more verbosity in leases and logging
SVN-Revision: 36764
2013-05-30 07:56:55 +00:00
Steven Barth
56a3396bf2 iptables: bump to 1.4.19.1
SVN-Revision: 36760
2013-05-29 14:58:04 +00:00
Steven Barth
439fdd4d65 netifd: fix IPv6-addresses disappearing due to lifetime-overflows
SVN-Revision: 36748
2013-05-28 18:32:01 +00:00
Steven Barth
23b3cebd56 odhcp6c: fix or debug disappearing IPv6 addresses
SVN-Revision: 36745
2013-05-28 16:28:14 +00:00
Felix Fietkau
e6250644be mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36743
2013-05-28 11:10:41 +00:00
Steven Barth
61c0c6ab68 6relayd: RFC 6204 and naming improvements * Announce delegated prefixes using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default
SVN-Revision: 36738
2013-05-27 20:38:13 +00:00
Jo-Philipp Wich
63603ee478 firewall3: update to git head
- allows building without IPv6 support
	- uses more robust rules to cope with missing libext.a
	- uses better linking strategy to avoid symbol clashes with older iptables
	- introduces source compatiblity layer for different libxtables versions

SVN-Revision: 36736
2013-05-27 15:13:19 +00:00
Jo-Philipp Wich
e4f8c38ed1 firewall3: update to git head
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
  - automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
  - properly support output rules with dest '*' to hook directly into delegate_output
  - fixes crash when processing rules with unresolved targets

SVN-Revision: 36721
2013-05-26 15:48:04 +00:00
Steven Barth
f63064a257 6relayd: Fix DHCPv6-server picking up addresses from master interface
SVN-Revision: 36718
2013-05-26 10:06:02 +00:00
Jo-Philipp Wich
90887b5fb3 firewall3: update to git head
- fixes linking issues with some toolchains

SVN-Revision: 36703
2013-05-24 12:49:06 +00:00
Steven Barth
d8d7d7f4aa 6relayd: fix a lease-timing issue with stateful DHCPv6
SVN-Revision: 36702
2013-05-24 12:31:30 +00:00
Jo-Philipp Wich
c1ff8cd9bb firewall3: update to git head
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
  - Do not leak memory when processing rules with unknown targets or matches

SVN-Revision: 36698
2013-05-23 13:07:44 +00:00
Felix Fietkau
75bb3138aa uhttpd: update to latest version, fixes #13564, #13560, improves error handling as pointed out in #13537
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36696
2013-05-23 10:50:42 +00:00
Steven Barth
32c6ffb5a1 firewall3: Remove abandonend include
SVN-Revision: 36692
2013-05-23 06:38:25 +00:00
Jo-Philipp Wich
b757ca2259 firewall3: update to git head
- fix build on Linux < 3.7
  - limit zone names to 14 bytes

SVN-Revision: 36691
2013-05-22 14:15:53 +00:00
Steven Barth
9c3ac668e0 6relayd: Let OpenWrt override default CFLAGS
SVN-Revision: 36690
2013-05-22 11:58:54 +00:00
Jo-Philipp Wich
c12189b379 firewall3: update to git head
- fixes reload when firewall is not running already
  - fixes crash when ipsets are supported but undeclared
  - fixes handling of per zone user chains on reload

SVN-Revision: 36689
2013-05-22 11:37:41 +00:00
Steven Barth
9d115df749 6relayd: Fix a segfault when multiple downstream interfaces are present
SVN-Revision: 36687
2013-05-21 18:05:37 +00:00
Jo-Philipp Wich
dd83e87ab0 firewall3: update to git head
- fixes segfault in flush command if ipset support is not available
  - fixes internal rule generation if custom chains are enabled

SVN-Revision: 36686
2013-05-21 14:49:37 +00:00
Jo-Philipp Wich
6eec8009ba ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base
SVN-Revision: 36685
2013-05-21 13:00:28 +00:00
Jo-Philipp Wich
9b6c31d4cc firewall3: move libext*.a copying to compile phase
SVN-Revision: 36684
2013-05-21 12:58:36 +00:00
Jo-Philipp Wich
8df6cd005c netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
SVN-Revision: 36683
2013-05-21 12:58:15 +00:00
Jo-Philipp Wich
e8050c6c35 firewall3: update to git head
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
 * make ipset integration more reliable

SVN-Revision: 36681
2013-05-21 10:15:14 +00:00
Jo-Philipp Wich
a9a9644efd iptables: use -ffunction-sections, -fdata-sections and --gc-sections
SVN-Revision: 36680
2013-05-21 10:15:10 +00:00
Steven Barth
24c39ddcf7 odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests
SVN-Revision: 36678
2013-05-21 09:13:48 +00:00
Steven Barth
37baf2d6b2 6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better
SVN-Revision: 36677
2013-05-21 09:13:40 +00:00
Steven Barth
c6f70381c9 odhcp6c: Fix address / prefix expiry logic
SVN-Revision: 36675
2013-05-20 14:54:20 +00:00
Steven Barth
dd161ae62b dnsmasq: add directory for external hosts-files
SVN-Revision: 36655
2013-05-17 14:44:12 +00:00
Steven Barth
334c40da14 6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD
SVN-Revision: 36654
2013-05-17 14:44:07 +00:00
Steven Barth
0f1be4425f netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4
Based on a patch by Kristian Evensen. Thank You.

SVN-Revision: 36653
2013-05-17 14:44:02 +00:00
Felix Fietkau
7365e647f6 uhttpd: update to latest version, fixes index page processing order
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36644
2013-05-16 11:38:19 +00:00
Luka Perkov
4fc8e64a40 iproute2: workaround compile issues with gcc 4.8.x
SVN-Revision: 36642
2013-05-16 00:04:48 +00:00
Steven Barth
a62ca72309 odhcp6c: Fix handling of RAs when no DHCPv6-server is present
SVN-Revision: 36641
2013-05-15 11:07:01 +00:00
Luka Perkov
580481cd6d iproute2: upgrade to 3.9.0
SVN-Revision: 36638
2013-05-14 23:49:34 +00:00
Luka Perkov
5be36cbe83 iproute2: print help in connmark
SVN-Revision: 36637
2013-05-14 23:49:31 +00:00
Felix Fietkau
d090eea125 uhttpd: update to latest version, fixes a SSL connection memory leak
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36636
2013-05-14 17:43:00 +00:00
Felix Fietkau
d481486aad package: fold the IPv6 menu into Network
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36634
2013-05-14 15:02:31 +00:00
Steven Barth
e8f3897389 6relayd: Always announce the current MAC-address
* Fixes #13516 thanks to berni for the detailed bugreport.

SVN-Revision: 36629
2013-05-13 17:54:36 +00:00
Steven Barth
a1af842016 ds-lite: add ds-lite network protocol handler
SVN-Revision: 36628
2013-05-13 17:12:39 +00:00
Steven Barth
5ce135ed87 netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements
SVN-Revision: 36627
2013-05-13 17:12:34 +00:00
Steven Barth
ea71678b09 netifd: added support for setting up 6rd from DHCP
SVN-Revision: 36626
2013-05-13 17:12:30 +00:00
Steven Barth
ad93a571c6 odhcp6c: added support for DS-Lite + various fixes
SVN-Revision: 36625
2013-05-13 17:12:25 +00:00
Steven Barth
973dad61b0 firewall3: Remove obsoleted ULA-border
SVN-Revision: 36624
2013-05-13 17:12:20 +00:00
Steven Barth
07d99b62b7 firewall3: add wan6 interface to wan-zone by default
SVN-Revision: 36623
2013-05-13 17:12:15 +00:00
Steven Barth
4cb9d9715c firewall: Remove obsoleted ULA-border rule
SVN-Revision: 36622
2013-05-13 17:12:10 +00:00
Steven Barth
8560648082 6rd: increase metric of default route
This will prefer native IPv6 over 6rd if both are present.

SVN-Revision: 36605
2013-05-12 08:07:15 +00:00
Jo-Philipp Wich
d59f8cfa8e iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode
SVN-Revision: 36604
2013-05-12 01:12:56 +00:00
Steven Barth
29d4c36622 add uci support for "proxy-dnssec" in dnsmasq
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.

Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>

SVN-Revision: 36570
2013-05-07 07:19:51 +00:00
Felix Fietkau
9d8e3e03df iw: update to 3.10, sync with nl80211.h changes in compat-wireless
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36569
2013-05-06 22:35:50 +00:00
Steven Barth
9c1ed6447b odhcp6c: Make SLAAC-only work without reqprefix=no
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.

SVN-Revision: 36555
2013-05-06 10:20:43 +00:00
Jo-Philipp Wich
95e139d0b2 ipset-dns: support simultaneously populating IPv4 and IPv6 sets
SVN-Revision: 36554
2013-05-06 10:01:45 +00:00
Jo-Philipp Wich
3c17fd41a4 Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset
SVN-Revision: 36552
2013-05-06 08:44:54 +00:00
Felix Fietkau
b85c442e81 hostapd: enable 802.11r for the -full variant (#13250)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36533
2013-05-03 10:39:57 +00:00
Jo-Philipp Wich
4bba31b64c firewall3: update to git head
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422, #13386)
	- add support for fwmark matches and mark setting targets

SVN-Revision: 36521
2013-05-02 13:42:20 +00:00
Jo-Philipp Wich
a0b655b8f2 Fix install of iptables pkg-config files.
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146; which should make collectd
appear in snapshots again.

Signed-off-by: Danny Baumann <dannybaumann@web.de>

SVN-Revision: 36509
2013-05-02 08:10:55 +00:00
Jo-Philipp Wich
f1e214411d iwinfo: fix iwinfo_hardware() return value if chip id is not found
SVN-Revision: 36471
2013-04-28 14:04:39 +00:00
Jo-Philipp Wich
f1497ccf4f netifd: update to git head - disables multicast snooping by default on bridges
SVN-Revision: 36463
2013-04-27 09:28:40 +00:00
Jo-Philipp Wich
05c1424e87 iwinfo: add hw database file
SVN-Revision: 36450
2013-04-26 13:21:01 +00:00
Jo-Philipp Wich
e02d373f90 iwinfo: move builtin hardware database to /usr/share/libiwinfo/hardware.txt
SVN-Revision: 36449
2013-04-26 13:20:15 +00:00
Felix Fietkau
5062838fa5 netifd: update to the latest version, fixes interface reload issues when removing the ifname option
SVN-Revision: 36424
2013-04-25 16:28:19 +00:00
Steven Barth
49f97af481 6relayd: Fix generation of RA-messages
SVN-Revision: 36419
2013-04-24 18:22:08 +00:00
Jo-Philipp Wich
a040ead1c5 iwinfo: add SR71-15 radio info, fix nl80211 channel/frequency reporting on some architectures
SVN-Revision: 36417
2013-04-24 14:44:20 +00:00
Steven Barth
2c78c1457b firewall3: Make IPv6 ULA-Border generation dynamic
This fixes working behind another router which gives out ULAs.

SVN-Revision: 36416
2013-04-24 14:17:24 +00:00
Steven Barth
2dbcd2ba7b 6relayd: update package description
SVN-Revision: 36413
2013-04-24 07:21:42 +00:00
Steven Barth
e17ac4c257 dnsmasq: update to 2.66 Thanks to Christoph König for patches.
SVN-Revision: 36412
2013-04-24 05:55:39 +00:00
Steven Barth
21e4e2a766 odhcp6c: Set default SOL_MAX_RT to 1h
SVN-Revision: 36411
2013-04-24 05:02:45 +00:00
Felix Fietkau
d7908e02b5 hostapd: return the frequency to some ubus calls to make integration easier
SVN-Revision: 36410
2013-04-23 18:35:50 +00:00
Jo-Philipp Wich
61a6f45cdc lldpd: upgrade to 0.7.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

SVN-Revision: 36401
2013-04-23 10:37:23 +00:00
Steven Barth
17b8c0c7b8 netifd: Improve IPv6-ULA assignment handling
SVN-Revision: 36383
2013-04-22 19:40:06 +00:00
Steven Barth
c96c05d549 odhcp6c: Several fixes and improvements * Add preliminary support for RFC 6603 prefix exclusion * Fix reconfigure-support and reconfigure authentication * Set maximum retransmission timeout for solicitations to 2h * Fix a segfault when parsing IA_PD in advertise messages
SVN-Revision: 36382
2013-04-22 19:40:01 +00:00
Steven Barth
1e78c3e297 6relayd: Add DHCPv6-PD server support, fix relaying in stateful mode
SVN-Revision: 36381
2013-04-22 19:39:55 +00:00
Felix Fietkau
62244d73ae hostapd: update to 2013-04-05
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36376
2013-04-22 13:24:48 +00:00
Felix Fietkau
96bb7c123b build: consistently use 'depends on' instead of 'depends'
make the syntax more compatible with kernel menuconfig

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36351
2013-04-17 15:36:41 +00:00
Jo-Philipp Wich
e66a4af8c3 uhttpd: update to git head, fixes regression when parsing IPv6 listen arguments
SVN-Revision: 36348
2013-04-17 11:34:39 +00:00
Jo-Philipp Wich
25ffe0446c iwinfo: print info of all existing wireless ifaces when cli is called without arguments
SVN-Revision: 36339
2013-04-15 15:00:16 +00:00
Felix Fietkau
eb10581ce3 uhttpd: update to latest version, fixes compile error with latest libubox
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36338
2013-04-15 14:49:52 +00:00
Felix Fietkau
099e3d8183 netifd: update to latest version, fixes some device handling crashes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36336
2013-04-15 14:21:45 +00:00
Felix Fietkau
88c418bc75 qos-scripts: add queue length and quantum limit, suggested by dtaht
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36294
2013-04-09 14:59:10 +00:00
Jo-Philipp Wich
7ca7bc501e iwinfo: fix frequency/channel and channel/frequency conversions to properly implement 802.11j
SVN-Revision: 36292
2013-04-09 14:37:55 +00:00
John Crispin
04dcd12c91 add portmap support to userland
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36284
2013-04-09 14:19:13 +00:00
John Crispin
f13ae9965c add "swconfig list" support
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36282
2013-04-09 14:19:05 +00:00
Jo-Philipp Wich
f90f025f20 netifd: fix route / route6 regression (#13303)
SVN-Revision: 36281
2013-04-09 12:21:12 +00:00
Steven Barth
3abc915522 Remove deprecated ip6slaac option * use proto=dhcpv6 with reqprefix=no instead
SVN-Revision: 36280
2013-04-09 12:12:30 +00:00
Steven Barth
2c087dc785 Remove obsoleted ipv6-support meta-package
SVN-Revision: 36279
2013-04-09 09:45:51 +00:00
Steven Barth
35d716fbbb netifd: Bump to latest version * Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow)
SVN-Revision: 36196
2013-04-05 12:28:06 +00:00
Steven Barth
0393e52623 netifd: Rewrite IPv6 prefix assignment * Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion
SVN-Revision: 36193
2013-04-03 17:08:21 +00:00
Felix Fietkau
71e9171717 openvpn: enable password save support (#13245)
SVN-Revision: 36144
2013-04-01 10:02:43 +00:00
Steven Barth
eedf9e72f9 odhcp6c: Fix a race-condition in RA-handling
Thanks to Markus Stenberg for investigating and providing a fix

SVN-Revision: 36132
2013-03-26 13:39:17 +00:00
Steven Barth
5a9c2c77b4 iptables: don't use --enable-ipv6 if IPv6 is disabled
SVN-Revision: 36125
2013-03-25 11:22:12 +00:00
Steven Barth
6529cf6cea odhcp6c: minor bug fixes
SVN-Revision: 36123
2013-03-25 10:58:48 +00:00
Jo-Philipp Wich
6fa1b5346e firewall3: update to git head
* fixes parsing of src/dest '*'
	* fixes parsing of proto 'all'

SVN-Revision: 36111
2013-03-22 14:10:29 +00:00
Jo-Philipp Wich
76d1c0a067 firewall3: update to git head
* fixes port remapping rules (#13217)

SVN-Revision: 36100
2013-03-21 14:25:17 +00:00
Hauke Mehrtens
c9544f4af0 kernel: add some fixes for kernel 3.9
This patch fixes some compile problems with kernel 3.9 and adds some missing linux 3.9 handling into kernel packages.

SVN-Revision: 36098
2013-03-20 21:59:24 +00:00
Steven Barth
261be7b8f3 netifd: Fix adding IPv6 DNS-servers to resolv.conf
In some cases IPv6 DNS-servers were not added correctly.

SVN-Revision: 36095
2013-03-20 13:49:39 +00:00
Steven Barth
eeb88a1df3 odhcp6c: Fix metric for on-link prefix routes
SVN-Revision: 36094
2013-03-20 09:26:52 +00:00
Jo-Philipp Wich
6fbd824e9b firewall3: update to git head
* fixes reload handling of zones and ipsets that are still running but already deleted from the config

SVN-Revision: 36092
2013-03-19 16:18:05 +00:00
Jo-Philipp Wich
03cb7986fc firewall3: update to git head
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197)
	- do not allow src_mac option for SNAT rules

SVN-Revision: 36090
2013-03-19 13:54:34 +00:00
Felix Fietkau
31876c193a hostapd: fix build errors on supplicant-only builds
SVN-Revision: 36085
2013-03-18 16:11:32 +00:00
Steven Barth
3ebdd3b330 odhcp6c: fix preference handling, custom client-ID * thanks to mbidewell for investigating
SVN-Revision: 36083
2013-03-18 07:24:49 +00:00
Felix Fietkau
2167101c90 hostapd: initial prototype of an ubus binding
Supports listing, removing and banning clients, and hooking into
probe/assoc/auth requests via object subscribe.

SVN-Revision: 36081
2013-03-17 20:47:18 +00:00
Felix Fietkau
84069f8534 uhttpd: update to latest version, fixes an occasional crash on CGI scripts
SVN-Revision: 36034
2013-03-15 13:43:55 +00:00
Jo-Philipp Wich
54f9f47a28 firewall3: update to git head
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
 * Allow "network" and "device" commands while firewall is running (to make them usable in includes)

SVN-Revision: 36009
2013-03-14 15:29:43 +00:00
John Crispin
fce3deddff use new button scheme
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36004
2013-03-13 18:11:25 +00:00
Jo-Philipp Wich
9faa312dbb firewall3: update to git head
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
 * Make NAT reflection direction configurable
 * Map init script stop action to flush
 * Map init script reload action to reload
 * Respect init script disabled state in hotplug handler

SVN-Revision: 35998
2013-03-13 15:46:30 +00:00
Felix Fietkau
9ddc45bc3f hostapd: fix client reassociation after too many ACK failures
SVN-Revision: 35973
2013-03-12 00:19:25 +00:00
Jo-Philipp Wich
8c7ed1cb7b firewall3: update to git head
* Fixes compilation against eglibc
 * Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
 * Fixes tracking logic for user chains by differentiating between reloads and restarts
 * Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
 * Supports legacy "tcpudp" protocol notation again

SVN-Revision: 35969
2013-03-11 20:52:20 +00:00
Jo-Philipp Wich
e259ecad7e Revert "firewall3: update to git head"
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.

SVN-Revision: 35904
2013-03-08 19:52:18 +00:00
Jo-Philipp Wich
50213fc354 firewall3: update to git head
- introduce per-zone user chains
	- support legacy "tcpudp" protocol notation

SVN-Revision: 35903
2013-03-08 15:27:33 +00:00
Steven Barth
39a001dc69 odhcp6c: various bugfixes * Don't prematurely send RENEW / REBIND when T1 or T2 is > 1 day * Add "norelease" option to not send a RELEASE when stopping
SVN-Revision: 35902
2013-03-08 07:04:38 +00:00
Steven Barth
62ea398cd8 iptables: Add missing IPv6 builtin modules
SVN-Revision: 35898
2013-03-07 08:48:41 +00:00
Steven Barth
9779b0b88c iptables: redo update to 1.4.18 with old linking-behaviour
SVN-Revision: 35896
2013-03-06 17:05:34 +00:00
Steven Barth
bacd71648b Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx
SVN-Revision: 35894
2013-03-06 12:55:48 +00:00
Felix Fietkau
c3faa6be75 hostapd: include the madwifi headers in the package directory to avoid compile breakage if the madwifi build fails
SVN-Revision: 35893
2013-03-05 22:06:30 +00:00
Steven Barth
d023a08753 iptables: update to 1.4.18
SVN-Revision: 35892
2013-03-05 20:51:57 +00:00
Jo-Philipp Wich
d75c632de6 firewall3: add default config and firewall.user
SVN-Revision: 35889
2013-03-05 13:45:09 +00:00
Felix Fietkau
fa1749e668 hostapd: update to git version 2013-03-02
SVN-Revision: 35887
2013-03-04 17:16:38 +00:00
Jo-Philipp Wich
89be702bff firewall3: update to git head, introduces support for "enabled" option
SVN-Revision: 35845
2013-03-02 17:09:33 +00:00
Steven Barth
c81945e979 6relayd: Fix illegal memory accesses Spurious errors when receiving netlink-messages lead to unhandled errors which caused SIGBUS. Thanks to tdavis for debugging
SVN-Revision: 35836
2013-02-28 16:37:20 +00:00
Steven Barth
50b7fa217a 6relayd: various fixes cap preferred and valid lifetimes at more reasonable limits decrease memory usage (remove unnecessary book-keeping)
SVN-Revision: 35835
2013-02-28 14:57:19 +00:00
Jo-Philipp Wich
886ce188bf xtables-addons: fix packaging of iptaccount
SVN-Revision: 35831
2013-02-28 10:58:12 +00:00
Jo-Philipp Wich
557c047f71 firewall3: clear contnrack table on flush, set policies to drop during rule reload
SVN-Revision: 35820
2013-02-27 14:09:37 +00:00
Steven Barth
a90b6f7d90 6relayd: Fix config behaviour for rewrite_dns_addr option
SVN-Revision: 35804
2013-02-26 12:50:52 +00:00
Steven Barth
32ac53821f 6relayd: compatibility with broken IPv6 devices * Announce ULA as deprecated if other addresses are available * Allow the announced DNS-server to be overwritten
SVN-Revision: 35803
2013-02-26 12:42:53 +00:00
Jo-Philipp Wich
92062542e2 firewall: fix logging rule regression (#12999)
SVN-Revision: 35745
2013-02-22 13:45:20 +00:00
Jo-Philipp Wich
4fb2cd18c1 firewall3: add support for shell script and iptables-restore style includes
SVN-Revision: 35744
2013-02-22 12:45:38 +00:00
Steven Barth
a7b262dc0a netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions.
SVN-Revision: 35743
2013-02-22 08:56:29 +00:00
Jo-Philipp Wich
7d7d88b580 firewall3: update to git head
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
	- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
	- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
	- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')

SVN-Revision: 35738
2013-02-21 22:33:44 +00:00
Florian Fainelli
280fa5a1a2 dante: fix broken configure script not using CFLAGS for conftest
Spotted by doing an ARM hard float build.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 35685
2013-02-19 17:22:55 +00:00
Steven Barth
3081c672fc 6relayd: Fix possible memory corruption issue
SVN-Revision: 35673
2013-02-19 12:04:41 +00:00
Steven Barth
f5b63ffd33 6relayd: Workaround potential signal handling issue
SVN-Revision: 35665
2013-02-18 12:50:36 +00:00
Jo-Philipp Wich
02b0c62f33 firewall3 - a C implementation of the current firewall scripts
SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
Felix Fietkau
1d6574b9c3 hostapd: fix the scan wait patch for multiple interfaces
SVN-Revision: 35630
2013-02-16 19:00:34 +00:00
Felix Fietkau
99782943d2 hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update
SVN-Revision: 35619
2013-02-16 14:26:03 +00:00
Jonas Gorski
c98b12d911 samba36: fix segmentation fault when trying to add non-existent users
Based on a patch from НКВД. Closes #12962.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 35610
2013-02-16 11:39:42 +00:00
Steven Barth
99b69fd9c5 odhcp6c: allow setting a user-provided prefix as well
SVN-Revision: 35570
2013-02-12 08:23:54 +00:00
Jo-Philipp Wich
eeaf2c0b5a iptables: fix bad PKG_RELEASE in previous commit
SVN-Revision: 35569
2013-02-11 22:14:38 +00:00
Jo-Philipp Wich
916902b1d2 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
SVN-Revision: 35568
2013-02-11 21:58:42 +00:00
Felix Fietkau
1810b80ec0 mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default
SVN-Revision: 35565
2013-02-11 18:59:10 +00:00
Steven Barth
b8c796fbd7 odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging
SVN-Revision: 35553
2013-02-11 12:30:16 +00:00
Felix Fietkau
a9058439cf openvpn-easy-rsa: fix typo in version (#12958)
SVN-Revision: 35508
2013-02-06 22:17:11 +00:00
Felix Fietkau
dc2ba40af3 openvpn: remove the stale PKG_REV variable
SVN-Revision: 35499
2013-02-05 10:40:19 +00:00
Felix Fietkau
b8c903e6f8 openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball
SVN-Revision: 35498
2013-02-05 10:40:13 +00:00
Jo-Philipp Wich
e106f25ee7 firewall: various enhancements
- reduce mssfix related log spam (#10681)
	- separate src and dest terminal chains (#11453, #12945)
	- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

SVN-Revision: 35484
2013-02-04 14:38:33 +00:00
Steven Barth
13544edce7 odhcp6c: Fix timing issues
SVN-Revision: 35472
2013-02-03 17:26:40 +00:00
Jo-Philipp Wich
e893d4d9a8 libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend()
SVN-Revision: 35471
2013-02-03 12:03:24 +00:00
Steven Barth
6be5a5a73d odhcp6c: Fix RENEW and REBIND requests
SVN-Revision: 35454
2013-02-02 10:44:13 +00:00
Steven Barth
e2193a69c8 odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested
SVN-Revision: 35421
2013-02-01 13:38:47 +00:00
Steven Barth
6a43437908 netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
SVN-Revision: 35420
2013-02-01 12:28:43 +00:00
Steven Barth
9a62439c28 odhcp6c: switch to userspace RA-handling and offload address assignment to netifd
SVN-Revision: 35419
2013-02-01 12:28:39 +00:00
Steven Barth
a3368da479 6relayd: Fix announced router flags and IPv6 procfs-configuration
SVN-Revision: 35418
2013-02-01 12:28:34 +00:00
Felix Fietkau
416ce374c0 openvpn: add from openvpn-devel from /packages, fix support for current polarssl
SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
Steven Barth
4bd3f54143 6in4: fix typo in last commit
SVN-Revision: 35409
2013-01-30 09:07:23 +00:00
Steven Barth
a0a91963af 6in4: work around hanging wget process
SVN-Revision: 35408
2013-01-30 09:05:53 +00:00
Felix Fietkau
65657fb585 netifd: update to latest version
fixes DNS servers on reload (#12910)
fixes ubus object race on reload or down/up (#12612)

SVN-Revision: 35383
2013-01-29 14:40:04 +00:00
Felix Fietkau
c16879a385 samba36: update to 3.6.11 and refresh patches (based on patch from #12914)
SVN-Revision: 35382
2013-01-29 13:18:56 +00:00
Steven Barth
777f7b30ae netifd: implement IPv6 prefix deprecation according to RFC 6204
SVN-Revision: 35377
2013-01-29 11:05:22 +00:00
Steven Barth
78a6439784 6relayd: remove IPv6 forwarding-sysctl workaround
SVN-Revision: 35371
2013-01-29 10:13:49 +00:00
Steven Barth
1a0b207d61 odhcp6c: remove IPv6 forwarding-sysctl workaround
SVN-Revision: 35370
2013-01-29 10:13:44 +00:00
Steven Barth
fac1ed35ac netifd: remove IPv6 forwarding-sysctl workaround
SVN-Revision: 35369
2013-01-29 10:13:39 +00:00
Felix Fietkau
6ea9abadeb netifd: update to latest version, fixes setting addresses/routes on alias interfaces
SVN-Revision: 35362
2013-01-28 20:35:55 +00:00
Jo-Philipp Wich
e804a663e3 hostapd: don't configure wpa_supplicant with empty password="" if no password is specified (#12912)
SVN-Revision: 35358
2013-01-28 18:05:33 +00:00
Jo-Philipp Wich
839f3ab0e7 firewall: flush conntrack table after changing interface rules
SVN-Revision: 35348
2013-01-28 15:53:44 +00:00
Steven Barth
ec41a6a08c netifd: IPv6 sysctl, restart IPv6 in static mode to send RS
SVN-Revision: 35347
2013-01-28 14:07:27 +00:00
Steven Barth
75b06607db netifd: add SLAAC ipv6 value for static-proto
SVN-Revision: 35346
2013-01-28 13:53:48 +00:00
Steven Barth
e964fa5d8f odhcp6c: work-around for proto-script to avoid loosing the default route
SVN-Revision: 35345
2013-01-28 13:53:43 +00:00
Steven Barth
a81c76617e ipv6-support: don't overwrite existing setting across reflashs
SVN-Revision: 35302
2013-01-23 08:15:09 +00:00
Felix Fietkau
55eab5ac44 netifd: update to latest version, adds another fix for interface aliases
SVN-Revision: 35297
2013-01-22 16:05:59 +00:00
Steven Barth
5859fc7a39 netifd: Fix a segfault when globals.ula_prefix is empty
SVN-Revision: 35296
2013-01-22 15:49:42 +00:00
Felix Fietkau
a4c7a953e5 uhttpd: always turn on TLS support, include ustream-ssl as a build dependency
SVN-Revision: 35295
2013-01-22 15:05:04 +00:00
Felix Fietkau
bab482b93f uhttpd: fix another small hang issue with the same symptoms
SVN-Revision: 35291
2013-01-22 09:38:00 +00:00
Felix Fietkau
166ea3832b uhttpd: fix connection hangs
SVN-Revision: 35290
2013-01-22 09:28:55 +00:00
Felix Fietkau
bc1d72c7bf tcpdump: add SLL parsing support to tcpdump-mini, use -ffunction-sections, -fdata-sections and --gc-sections to reduce size
SVN-Revision: 35288
2013-01-22 07:51:15 +00:00
Felix Fietkau
c725669079 uhttpd: fix unencrypted passwords in httpd.conf
SVN-Revision: 35265
2013-01-21 12:46:41 +00:00
Steven Barth
38080ae550 6relayd: fix shell library includes in init-script
Thanks to Daniel Golle

SVN-Revision: 35262
2013-01-21 11:27:03 +00:00
Steven Barth
8a97d823a4 6relayd: avoid a race-condition with looping RAs
SVN-Revision: 35260
2013-01-21 10:42:31 +00:00
Steven Barth
f129c6786e netifd: Fix segfaults in IPv6 prefix handling
SVN-Revision: 35259
2013-01-21 09:21:30 +00:00
Steven Barth
f1fd0f8278 odhcp6c: Fix address assignment with infinite validity
SVN-Revision: 35258
2013-01-21 07:58:58 +00:00
Felix Fietkau
4a86973285 uhttpd: fix selecting the right ustream implementation when openssl is to be used (#12857)
SVN-Revision: 35257
2013-01-20 21:15:43 +00:00
Felix Fietkau
5bc6555e08 netifd: update to latest version, fixes alias support
SVN-Revision: 35251
2013-01-20 15:47:09 +00:00
Felix Fietkau
18a7d0e945 network/iproute2: Bump version to 3.7.0
Updated to latest stable version and added an upstream patch to handle
a link failure

Signed-off-by: Oliver Smith <olipro@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>
[dgolle@allnet.de: refreshed patches]
Signed-off-by: Daniel Golle <dgolle@allnet.de>

SVN-Revision: 35250
2013-01-20 11:25:18 +00:00
Felix Fietkau
e55ee0817f uhttpd: update to a newer version, fixes chunked transfer on some POST requests
SVN-Revision: 35249
2013-01-19 22:55:46 +00:00
Felix Fietkau
6f0ecf0541 uhttpd: switch to uhttpd2, it is now feature complete
SVN-Revision: 35247
2013-01-19 18:47:09 +00:00
Jo-Philipp Wich
f2766239ea netifd: add a band-aid fix for the wifi setup vs. netifd init race by increasing the wait time to five seconds
SVN-Revision: 35240
2013-01-19 10:13:14 +00:00
Steven Barth
62e9957cc4 ipv6-support: adapt UCI defaults to new ordering
SVN-Revision: 35219
2013-01-18 12:52:51 +00:00
Steven Barth
5a122f7e5f odhcp6c: Fix parsing more than one DNS server
SVN-Revision: 35215
2013-01-18 08:21:35 +00:00
Steven Barth
f517d0481a ipv6-support: Rename enable-ipv6 UCI defaults
SVN-Revision: 35205
2013-01-17 16:16:06 +00:00
Jo-Philipp Wich
7250e27869 xtables-addons: rework uid/gid compat patch to use KUIDT_INIT() and KGIDT_INIT() macros
SVN-Revision: 35203
2013-01-17 16:05:30 +00:00
Jo-Philipp Wich
3b798d819d xtables-addons: move to package/, add myself as maintainer
SVN-Revision: 35193
2013-01-17 12:29:26 +00:00
Steven Barth
66fa83d211 odhcp6c: Detect a different MAC if interface has none * Fixes DHCPv6 behaviour over PPP and similar
SVN-Revision: 35189
2013-01-17 08:29:01 +00:00
Steven Barth
73875c1215 ppp: don't automatically set IPv6 default route * Fixes "ndisc_router_discovery() failed to add default route"
SVN-Revision: 35188
2013-01-17 08:28:57 +00:00
Steven Barth
1ecc744583 netifd: @aliases use layer 3 devices instead of main devices Fixes dhcpv6 protocol alias
SVN-Revision: 35187
2013-01-17 08:28:51 +00:00
Steven Barth
3235d860a6 ipv6-support: Switch to native IPv6 support
SVN-Revision: 35174
2013-01-15 13:08:19 +00:00
Steven Barth
955a1e8e28 6rd: add support for native IPv6 prefix handling
SVN-Revision: 35173
2013-01-15 13:08:14 +00:00
Steven Barth
811cd2acf4 6to4: add support for native IPv6 prefix handling
SVN-Revision: 35172
2013-01-15 13:08:10 +00:00
Steven Barth
2a94f67029 6in4: add support for native IPv6 prefix handling
SVN-Revision: 35171
2013-01-15 13:08:05 +00:00
Steven Barth
a1e92f6dd1 6relayd: add suitable default configuration
SVN-Revision: 35170
2013-01-15 13:08:00 +00:00
Steven Barth
859fd7f614 6distributed: Remove obsolete service (replaced by netifd)
SVN-Revision: 35169
2013-01-15 13:07:56 +00:00
Steven Barth
06890959d1 netifd: Introduce native IPv6 prefix-handling
SVN-Revision: 35167
2013-01-15 13:07:41 +00:00
Jo-Philipp Wich
03a50b9087 netfilter.mk: add addrtype match to iptables-mod-extra (kmod-ipt-extra)
SVN-Revision: 35155
2013-01-14 16:12:56 +00:00
Jo-Philipp Wich
e5548b03e5 netifd: update to git head, adds 64bit counters
SVN-Revision: 35140
2013-01-13 19:48:52 +00:00
Steven Barth
0cd21ca785 odhcp6c: Send RS on start
SVN-Revision: 35137
2013-01-13 18:06:24 +00:00
Steven Barth
f0df2006af odhcp6c: Add preliminary proto-handler
SVN-Revision: 35135
2013-01-13 17:35:09 +00:00
Steven Barth
b58a13cb2c ipv6-support: don't use disable_ipv6
SVN-Revision: 35134
2013-01-13 17:25:43 +00:00
Steven Barth
fde5b934fd 6relayd: Rewrite init-script logic
SVN-Revision: 35133
2013-01-13 17:25:38 +00:00
Steven Barth
b077480a59 firewall: Add ULA site border for IPv6 traffic This prevents private traffic from leaking out to the internet
SVN-Revision: 35012
2013-01-04 15:59:28 +00:00
Jo-Philipp Wich
3b7882e775 iwinfo: don't use the txpower value from debugfs for now, it does not match the values reported via wext
SVN-Revision: 35007
2013-01-04 14:08:08 +00:00
John Crispin
ff0c7a9ec9 don't depend on lua
Delete +lua from libiwinfo-lua.

Signed-off-by: Stefan Hellermann <stefan@the2masters.de>

SVN-Revision: 35005
2013-01-04 09:32:06 +00:00
Steven Barth
965afef317 ipv6-support: Update iteration * Add support for blocking forwarding while address assignments * Fix relay restarting function
SVN-Revision: 34985
2013-01-02 23:05:44 +00:00
Steven Barth
c7d9d7c952 odhcp6c: Add support for SNTP and SIP options
SVN-Revision: 34984
2013-01-02 23:05:39 +00:00
Steven Barth
4a2e55f30f 6relayd: Announce RDNSS and DNSSL via RA
SVN-Revision: 34983
2013-01-02 23:05:35 +00:00
Jo-Philipp Wich
1683a146f4 iwinfo: replace more wext calls with nl80211 equivalents, attempt to infer nl80211 tx power from debugfs before querying wext
SVN-Revision: 34982
2013-01-02 19:10:29 +00:00
Jo-Philipp Wich
54c0b40427 dnsmasq: allow dhcp host entries without mac addresses (#11928)
SVN-Revision: 34971
2013-01-02 15:14:19 +00:00
Jo-Philipp Wich
c8a8f8fd55 lldpd: various enhancements
- introduce "list interface" options to specify the ifaces to listen on, takes uci- or network device name
	- set the default system description to distrib @ hostname, e.g. "OpenWrt Barrier Breaker r34744 @ vbox"
	- introduce "option lldp_description" to override the automatically generated description

SVN-Revision: 34970
2013-01-02 14:35:43 +00:00
John Crispin
a730e96569 Remove remaining etrax references
SVN-Revision: 34968
2013-01-02 11:28:11 +00:00
Steven Barth
7a25be66c3 6relayd: Detect changes of default routes for RAs
SVN-Revision: 34958
2013-01-01 21:41:37 +00:00
Steven Barth
def80bbecf ipv6-support: Remove unnecessary code
SVN-Revision: 34957
2013-01-01 21:41:32 +00:00
Steven Barth
4c09d5dde3 ipv6-support: Fix typo in dhcpv6-script * thanks to KarlHegbloom for reporting
SVN-Revision: 34940
2012-12-31 09:38:59 +00:00
Steven Barth
b7c1f24f9b ipv6-support: Use more consistent default values
SVN-Revision: 34913
2012-12-29 10:12:31 +00:00
Steven Barth
e7719bb4aa ipv6-support: Updated functionality * Add site-border feature again * Add option to always announce a default router
SVN-Revision: 34908
2012-12-28 12:02:22 +00:00
Steven Barth
ce41e59030 6distributed: Add null-route for delegated prefix * Fixes forwarding loops for unused subprefixes
SVN-Revision: 34907
2012-12-28 12:02:17 +00:00
Steven Barth
d6c955e39a 6relayd: Announce DNS search domain via DHCPv6
SVN-Revision: 34906
2012-12-28 12:02:12 +00:00
Steven Barth
253d7345e1 ipv6-support: Remove site-border feature * was causing routing problems * will be reimplemented using firewall
SVN-Revision: 34898
2012-12-27 15:47:53 +00:00
Steven Barth
941f4ccd68 Remove site-border routing filter due to problems
SVN-Revision: 34897
2012-12-27 15:47:47 +00:00
Steven Barth
01059c8914 ipv6-support: * Automatically detect and propagate MTU from upstream interfaces * Add site-border feature (RFC 6204, ULA-4) * Fix a typo
SVN-Revision: 34896
2012-12-27 14:10:17 +00:00
Steven Barth
50a9fed238 6distributed: feature update * Add feature to decrease IPv6-specific MTU on-demand * Add commands to enable / disable a site-border
SVN-Revision: 34895
2012-12-27 14:10:12 +00:00
Steven Barth
4bab347e98 6relayd: Advertise IPv6-specific MTU instead of generic * Fixes announced MTU when using tunnels
SVN-Revision: 34894
2012-12-27 14:10:07 +00:00
Steven Barth
970adc9eb9 ipv6-support: Fix default RA settings for dnsmasq
SVN-Revision: 34873
2012-12-23 18:22:48 +00:00
Felix Fietkau
7ed89e8542 dropbear: convert init script to procd
SVN-Revision: 34867
2012-12-22 18:56:13 +00:00
Felix Fietkau
82bd58c793 dropbear: use network_get_device instead of scan_interfaces to get the device name
SVN-Revision: 34863
2012-12-22 18:55:57 +00:00
Steven Barth
a4e656ef24 ipv6-support: Preliminary support for dnsmasq >=2.66
SVN-Revision: 34858
2012-12-22 13:00:53 +00:00
Steven Barth
2dbfffef68 6relayd: Fix detection of prefix changes
SVN-Revision: 34857
2012-12-22 13:00:49 +00:00
Steven Barth
f36c3067c6 odhcp6c: Fix build on arch where char is unsigned
SVN-Revision: 34856
2012-12-22 13:00:45 +00:00
Steven Barth
970c5d97fe 6distributed: Improve prefix deprecation algorithm
SVN-Revision: 34855
2012-12-22 13:00:40 +00:00
Gabor Juhos
149b1c46c7 ipset: update to 6.16.1 to fix build with kernel 3.7
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

SVN-Revision: 34752
2012-12-18 14:50:44 +00:00
Felix Fietkau
bf34eeaea4 netifd: update to latest version, fixes interface error reporting for shell proto handlers
SVN-Revision: 34741
2012-12-17 22:24:31 +00:00
Felix Fietkau
14281559e1 netifd: update to latest version, no longer needs the removed jshn_append() shell function
SVN-Revision: 34734
2012-12-17 14:57:15 +00:00
Felix Fietkau
056d75049d wpa_supplicant.sh: always use parameters from the current section
Using variables from the outer scope unnecessarily complicates the code and
leads to issues.

This patch fixes the bug when having an "adhoc" wifi-iface section before a
"sta" section prevents wpa_supplicant from using the key specified in the
corresponding section as it tries to use the "adhoc" key instead (1 by
default).

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

SVN-Revision: 34716
2012-12-16 13:23:37 +00:00
John Crispin
e9c0b95829 fixes uapi helper define
SVN-Revision: 34715
2012-12-16 11:04:27 +00:00
Felix Fietkau
860c2e8116 netifd: call /etc/udhcp.user from the netifd dhcp.script
This was done previously when dhcp was handled by the network scripts.
So netifd should behave the same.

Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 34704
2012-12-15 17:19:24 +00:00
John Crispin
06c9170a7c move ltq-adsl-tool
SVN-Revision: 34694
2012-12-15 02:00:39 +00:00
John Crispin
4583469413 make use of uapi directory wrapper
SVN-Revision: 34684
2012-12-15 01:59:19 +00:00
Gabor Juhos
86cd825c1f package/swconfig: don't use kernel headers
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

SVN-Revision: 34679
2012-12-14 12:11:50 +00:00
Felix Fietkau
b85c8a6361 netifd: update to latest version, fixes purging old resolv.conf entries after ifdown
SVN-Revision: 34664
2012-12-13 16:14:41 +00:00
Steven Barth
8d9564af1b ipv6-support: Make ULA addresses secondary * Deprecates ULA prefixes when there are other public prefixes * Fixes issues with clients using incorrect source addresses
SVN-Revision: 34630
2012-12-11 16:56:37 +00:00
Steven Barth
8546f8a401 6distributed: Add support for secondary addresses
SVN-Revision: 34629
2012-12-11 16:56:32 +00:00
Steven Barth
14273e1120 6relayd: Fix announcement of deprecated prefixes
SVN-Revision: 34628
2012-12-11 16:56:27 +00:00
Steven Barth
faba477274 ipv6-support: Add support for NPT status tracking
SVN-Revision: 34609
2012-12-10 16:46:59 +00:00
Steven Barth
cd76023e97 6distributed: add status-call for luci-integration
SVN-Revision: 34608
2012-12-10 16:46:54 +00:00
Felix Fietkau
01513b7c8b iw: sync with nl80211.h to fix setting antenna gain
SVN-Revision: 34593
2012-12-10 13:51:06 +00:00
Steven Barth
a07ddb955f ipv6-support: Next iteration * Make ula_prefix a global option * Add preliminary support for NAT (Linux >= 3.7, ip6tables >= 1.4.17) * Minor fixes for prefix fallback
SVN-Revision: 34586
2012-12-09 13:54:22 +00:00
Steven Barth
57d853ffc4 6distributed: Correctly handle duplicate prefixes
SVN-Revision: 34585
2012-12-09 13:32:30 +00:00
Steven Barth
eeeb59e451 6relayd: Always send NA with hop-limit 255 * thanks risa2000 for investigating
SVN-Revision: 34584
2012-12-09 12:33:28 +00:00
Jo-Philipp Wich
16d0957a4e firewall: fix typo in reflection hotplug script
SVN-Revision: 34569
2012-12-07 13:08:28 +00:00
Steven Barth
63135142d8 6to4: Remove static radvd-integration * Please use the new ipv6-support package
SVN-Revision: 34567
2012-12-07 08:53:53 +00:00
Steven Barth
82576f0ca3 ipv6-support: next iteration * Introduce mode 6rd * Introduce mode 6to4 * Fix announcement of DNS-Servers received from DHCPv6 * Fix some corner-cases in relaying behaviour
SVN-Revision: 34542
2012-12-06 20:52:40 +00:00
Steven Barth
61e8c6b83b 6relayd: More RFC-compatibility and size reduction
SVN-Revision: 34541
2012-12-06 20:52:35 +00:00
Steven Barth
f14e1f1b1d 6distributed: Add compatibility with 6rd and 6to4
SVN-Revision: 34540
2012-12-06 20:52:30 +00:00
Jo-Philipp Wich
d221222907 ppp: unconditionally start pppd with nodefaultroute and usepeerdns (#12580)
Since the switch to netifd, proto handlers may always set the defaultroute
and provide dns server addresses, netifd will decide in the generic code
path whether the announced values are masked or not.

Additionally protocol handlers should not modify the routing tables themselves
and prevent any launched services from doing so.

Remove the additional defaultroute and peerdns option handling from the ppp.sh
protocol handler and rely on netifd to mask or not mask the values.

SVN-Revision: 34536
2012-12-06 18:17:21 +00:00
Felix Fietkau
838d6e3b8d netifd: update to latest version, fixes resolv.conf writes on interface setting changes
SVN-Revision: 34500
2012-12-05 13:28:56 +00:00
Florian Fainelli
9e355444a6 dropbear: update to 2012.55 and refresh patches
Upstream has a few code cleanups, more eagerly burns sensitive memory and
includes the fix for CVE-2012-0920. Full changelog:
https://matt.ucc.asn.au/dropbear/CHANGES

Local changes:
- Removed PKG_MULTI which is no longer in options.h (even before 2011.54)
- Merged DO_HOST_LOOKUP into 120-openwrt_options.patch
- Removed LD from make opts (now included in TARGET_CONFIGURE_OPTS)
- Removed 400-CVE-2012-0920.patch which is included in 2012.55

Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>
Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34496
2012-12-04 16:40:17 +00:00
Jo-Philipp Wich
6504b268b3 firewall: extend nat reflection support
- use comment match to keep track of per-network rules
	- setup reflection for any interface which is part of a masqueraded zone, not just "wan"
	- delete per-network reflection rules if network is brought down

SVN-Revision: 34472
2012-12-04 15:24:21 +00:00
Felix Fietkau
8516ddb133 mac80211, hostapd: Fix macfilter for multi bssid setups
Previously only the first macfilter configuration would have been used
on all interfaces. However, the configuration was always done per vif
already. Hence, move the macfilter setup into hostapd.sh where and
create one mac list file per vif.

Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 34470
2012-12-04 12:06:40 +00:00
Mirko Vogt
4c30952394 Make ltq-dsl-app compile with an eglibc-based toolchain
Signed-Off-By: Frank Meerkötter <frank@meerkoetter.org>

SVN-Revision: 34468
2012-12-03 12:46:57 +00:00
Steven Barth
4bda16cf27 ipv6-support: Second Iteration * mode 'downstream' renamed to 'router' * mode 'upstream' renamed to 'dhcpv6' * mode 'relay' added * cleanups and minor bugfixes in state handling
SVN-Revision: 34466
2012-12-03 09:18:53 +00:00
Steven Barth
71ed7ae842 netifd: empty hotplug handler removed
SVN-Revision: 34465
2012-12-03 07:20:44 +00:00
Steven Barth
c6b0c63cad 6distributed: Poll for ubus to come up (fix race)
SVN-Revision: 34462
2012-12-02 19:06:48 +00:00
Gabor Juhos
5d8a7a0ce5 Make teql hotplug script run sooner
In particular, it wants to run before the ntpclient script. Which may
block for a long time attempting to do DNS lookups for NTP servers. In
my case, that would have *worked* if the new device had been added to
teql first, rather than timing out.

This was effectively causing a huge delay between an interface coming
up, and routing actually starting to work.

Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

SVN-Revision: 34442
2012-12-02 13:04:03 +00:00
Steven Barth
a0f0c23109 ipv6-support: Add conffiles section
SVN-Revision: 34423
2012-11-29 20:33:17 +00:00
Steven Barth
a4edea5ef3 ipv6-support: Add new IPv6-support meta-package
SVN-Revision: 34422
2012-11-29 20:14:28 +00:00
Steven Barth
e6e6e0d152 odhcp6c: Add new embedded DHCPv6 client
SVN-Revision: 34421
2012-11-29 20:14:23 +00:00
Steven Barth
25d943e872 6distributed: add local IPv6 prefix distributor
SVN-Revision: 34420
2012-11-29 20:14:18 +00:00
Steven Barth
7d3495b431 6relayd: Fix some RFC 6204 compatibility issues
SVN-Revision: 34419
2012-11-29 20:14:14 +00:00
Steven Barth
dffa972af1 Remove old IPv6 sysctl-config (deprecated)
SVN-Revision: 34418
2012-11-29 20:14:09 +00:00
Florian Fainelli
062d3c1e67 iptables: fix typo in iptables musl patch after r34313
Thanks to Frank Meerkötter and Szabolcs Nagy for spotting the issue.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34326
2012-11-25 11:40:59 +00:00
Florian Fainelli
14ed3f0f22 iptables: add some musl portability fixes
Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34313
2012-11-23 20:02:23 +00:00
Florian Fainelli
94bdc366d4 netfid: fix build on musl
AF_INET* is provided by sys/socket.h

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34310
2012-11-23 20:02:10 +00:00
Florian Fainelli
f1498531c7 hostapd: include sys/stat.h for a struct stat definition
Some libcs need this header to be explicitely included (e.g: musl)

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34295
2012-11-21 20:27:06 +00:00
Steven Barth
417af03ba5 6relayd: add conffiles section, thanks swalker
SVN-Revision: 34222
2012-11-17 09:44:41 +00:00
Steven Barth
45137b0896 6relayd: various updates & fixes - Add RD- and DHCPv6-server functionality - Rework configuration and add example UCI file - Fix various bugs and be more RFC compliant
SVN-Revision: 34204
2012-11-16 09:27:56 +00:00
Jo-Philipp Wich
db207e2a87 ppp: - fix multilink ppp with custom ifnames, patch by George Kashperko <george@znau.edu.ua> - refresh patches
SVN-Revision: 34171
2012-11-12 19:13:45 +00:00
Jo-Philipp Wich
3a81f75d72 resolveip: fix endless getopt() loop when compiled for arm (#12290)
SVN-Revision: 34116
2012-11-08 10:48:08 +00:00
Jo-Philipp Wich
611b2e8bb3 netifd: don't send a default client identifier in DHCP requests if no clientid uci option is given (#12426)
SVN-Revision: 34089
2012-11-05 19:28:24 +00:00
Felix Fietkau
c1aae78816 ppp: add more pppol2tpv3 related structs from the kernel headers to fix compile issues with linux 3.6
SVN-Revision: 34070
2012-11-04 17:01:27 +00:00
Felix Fietkau
16c72b09cc iptables: remove support for libipq, it has been obsolete for years and is unsupported in newer kernels
SVN-Revision: 34069
2012-11-04 17:01:23 +00:00
Steven Barth
9aba83eced 6relayd: auto-configure local interfaces as well
SVN-Revision: 34027
2012-10-31 12:48:54 +00:00
Jo-Philipp Wich
73c75e0dd8 uhttpd: update to latest git head, improves handling of invalid requests
SVN-Revision: 34010
2012-10-30 13:13:21 +00:00
Steven Barth
c3d04d4630 6relayd: update to work around a raw-socket bug
SVN-Revision: 34009
2012-10-30 07:43:07 +00:00
Steven Barth
1fe7efbddb ipv6: add 6relayd (RD-, DHCPv6- & NDP-Proxy)
6relayd is an IPv6-tool that relays IPv6-management protocols like router
discovery, neighbor discovery and DHCPv6 so that clients on routed
(non-bridged) interfaces can use the public address prefix, DHCPv6 and
DNS-service of a master interface. This is useful to avoid NAT in chained
IPv6-routers.

SVN-Revision: 34008
2012-10-30 07:14:07 +00:00
Felix Fietkau
fc3939a996 netifd: update to latest version, fixes adding an alias during config reload for an interface that is already up
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 34006
2012-10-30 00:24:31 +00:00
Jo-Philipp Wich
0e3de8eff7 iwinfo: properly initialize memory of global nl80211_state, fixes random libnl-tiny assertions when using nl80211_probe() on not supported devices
SVN-Revision: 34003
2012-10-29 22:11:57 +00:00
Felix Fietkau
f911fb32fe hostapd: merge some pending fixes (fixes assoc errors when moving between vaps of the same wifi device)
SVN-Revision: 33919
2012-10-25 14:31:17 +00:00
Jo-Philipp Wich
1895d55e9d ltq-dsl-app: fix offline postinstall for dsl_control
SVN-Revision: 33901
2012-10-23 19:57:47 +00:00
Hamish Guthrie
81a3d9ba31 licensing: Add licensing metadata to many packages Two new variables are introduces to many packages, namely PKG_LICENSE and PKG_LICENSE_FILES - there may be more than one license applied to packages, and these are listed in the PKG_LICENSE variable and separated by spaces. All relevant license files are also added to the PKG_LICENSE_FILES variable, also space separated.
The licensing metadata is put into the bin/<platform>/packages/Packages file
for later parsing. A script for that is on it's way!

SVN-Revision: 33861
2012-10-19 15:34:28 +00:00
Jo-Philipp Wich
5fb6cf9a11 uhttpd: fix compilation with eglibc
SVN-Revision: 33860
2012-10-19 13:54:29 +00:00
Felix Fietkau
825592b54b netifd: update to latest version, fixes device cleanup and config reload issues when assigning a device to a different bridge
SVN-Revision: 33858
2012-10-19 13:51:48 +00:00
Felix Fietkau
88f3c59fb9 netifd: enable parallel build
SVN-Revision: 33832
2012-10-18 00:09:45 +00:00
John Crispin
a34499e095 move lots of kernel related packages to the new system/ folder
SVN-Revision: 33830
2012-10-17 22:45:58 +00:00
Felix Fietkau
965710d3e1 samba36: enable parallel build
SVN-Revision: 33829
2012-10-17 22:18:30 +00:00
John Crispin
c2b8d1a619 Fix broadcast DHCP client startup option in dhcp.sh
Signed-off-by: Hans Dedecker (hans.dedecker at technicolor.com)

Fixes the DHCP request broadcasts replies option parsing

SVN-Revision: 33826
2012-10-17 21:53:46 +00:00
Felix Fietkau
26944502e3 hostapd: merge a security fix for a TLS message buffer overflow (CVE-2012-4445)
SVN-Revision: 33815
2012-10-17 18:16:56 +00:00
Florian Fainelli
8fc2b30281 iftop: update iftop to 1.0pre2
Most significantly, includes IPv6 support.  This version forces
libncurses, by patching the configure script, instead of allowing
libncursesw, saving (~65k) image space.

Signed-off-by: Russell Senior <russell@personaltelco.net>

SVN-Revision: 33782
2012-10-16 15:49:49 +00:00
Jo-Philipp Wich
160c2ef011 uhttpd: update to latest git head - introduces support for multiple index files - fixes build with only the TLS module selected
SVN-Revision: 33778
2012-10-15 18:19:57 +00:00
Jo-Philipp Wich
14e14faa0b uhttpd: switch to external git repo + cmake build system
SVN-Revision: 33775
2012-10-15 12:31:33 +00:00
Florian Fainelli
19f91b26f5 rssileds: improve performance
LEDs brightness is now only updated if the value actually changed, thus reducing
the number of fwrite syscalls significantly.

Signed-off-by: Daniel Golle <dgolle@allnet.de>

SVN-Revision: 33766
2012-10-14 16:22:04 +00:00
Jo-Philipp Wich
a00110a063 6in4: make local ip6addr optional
SVN-Revision: 33761
2012-10-14 09:17:14 +00:00
Jo-Philipp Wich
1eded4f376 ipset: update to v6.14, drop obsolete patches
SVN-Revision: 33735
2012-10-12 12:19:46 +00:00
Jo-Philipp Wich
9e9efd8e49 lldpd: fix minor whitespace quirk in init script
SVN-Revision: 33730
2012-10-12 12:02:56 +00:00
Jo-Philipp Wich
0019b39001 lldpd: bump to v0.6.1, enable privilege separation and chrooting
SVN-Revision: 33729
2012-10-12 11:58:19 +00:00
Jo-Philipp Wich
f248332d52 thc-ipv6: update to v2.0, package all available utilities
SVN-Revision: 33728
2012-10-11 21:57:56 +00:00
Jo-Philipp Wich
f5d12a126d thc-ipv6: move to trunk and add myself as maintainer
SVN-Revision: 33727
2012-10-11 21:17:08 +00:00
Jo-Philipp Wich
936c1b9424 iputils: move to trunk and add myself as maintainer
SVN-Revision: 33704
2012-10-10 13:22:18 +00:00
Jo-Philipp Wich
c748c36d2c iftop: move to trunk and add myself as maintainer
SVN-Revision: 33702
2012-10-10 13:21:30 +00:00
Jo-Philipp Wich
711fdc3b09 conntrack-tools: move to trunk and add myself as maintainer
SVN-Revision: 33701
2012-10-10 13:19:43 +00:00
Jo-Philipp Wich
47ea3c7fee lldpd: move to trunk and add myself as maintainer
SVN-Revision: 33700
2012-10-10 13:17:14 +00:00
Jo-Philipp Wich
11549e1b73 dante: move to trunk and add myself as maintainer
SVN-Revision: 33699
2012-10-10 13:14:39 +00:00
Jo-Philipp Wich
b5ab35e816 ipset: move to trunk and add myself as maintainer
SVN-Revision: 33698
2012-10-10 13:13:17 +00:00
Felix Fietkau
05c2442957 package/network/utils/rssileds: claim maintainership
SVN-Revision: 33697
2012-10-10 13:07:29 +00:00
Jo-Philipp Wich
d1d1ae994b claim maintainership for resolveip and lua
SVN-Revision: 33694
2012-10-10 12:57:20 +00:00
Felix Fietkau
e51eb6046d add myself as a maintainer for a few more packages
SVN-Revision: 33693
2012-10-10 12:49:37 +00:00
Felix Fietkau
2fb3792fa9 hostapd: remove redundant MAINTAINER lines
SVN-Revision: 33692
2012-10-10 12:36:44 +00:00
Felix Fietkau
ed33bd8c7c iperf: move to trunk and add myself as maintainer
SVN-Revision: 33691
2012-10-10 12:35:43 +00:00
Felix Fietkau
5806525653 tcpdump: move to trunk and add myself as maintainer
SVN-Revision: 33690
2012-10-10 12:35:26 +00:00
Felix Fietkau
445936955e samba36: move to trunk and add myself as a maintainer
SVN-Revision: 33689
2012-10-10 12:34:29 +00:00
Felix Fietkau
405e21d167 packages: sort network related packages into package/network/
SVN-Revision: 33688
2012-10-10 12:32:29 +00:00