KumiSystems/openwrtv3
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
25182 commits 1 branch 0 tags 154 MiB
Commit graph

429 commits

Author SHA1 Message Date
Steven Barth
bf582fbb7b odhcp6c: fix handling of multiple RAs in a row 
SVN-Revision: 36804
 2013-05-31 10:02:39 +00:00
Steven Barth
cdc3caf533 6relayd: Better compatibility with misbheaving DHCPv6 clients * Make the "best" address / prefix the first one being announced * Only add the "best" address to the hosts-file 
SVN-Revision: 36772
 2013-05-30 15:42:30 +00:00
Steven Barth
519f27cd33 netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes 
SVN-Revision: 36771
 2013-05-30 15:42:25 +00:00
Felix Fietkau
02fe12c00d uhttpd: update again to fix a ubus plugin crash bug 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36770
 2013-05-30 13:16:38 +00:00
Felix Fietkau
eeb7fdc13e uhttpd: update to latest version, fixes script timeout for ubus requests 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36767
 2013-05-30 10:44:20 +00:00
Steven Barth
dc6625f977 6relayd: more verbosity in leases and logging 
SVN-Revision: 36764
 2013-05-30 07:56:55 +00:00
Steven Barth
56a3396bf2 iptables: bump to 1.4.19.1 
SVN-Revision: 36760
 2013-05-29 14:58:04 +00:00
Steven Barth
439fdd4d65 netifd: fix IPv6-addresses disappearing due to lifetime-overflows 
SVN-Revision: 36748
 2013-05-28 18:32:01 +00:00
Steven Barth
23b3cebd56 odhcp6c: fix or debug disappearing IPv6 addresses 
SVN-Revision: 36745
 2013-05-28 16:28:14 +00:00
Felix Fietkau
e6250644be mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36743
 2013-05-28 11:10:41 +00:00
Steven Barth
61c0c6ab68 6relayd: RFC 6204 and naming improvements * Announce delegated prefixes using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default 
SVN-Revision: 36738
 2013-05-27 20:38:13 +00:00
Jo-Philipp Wich
63603ee478 firewall3: update to git head 
- allows building without IPv6 support
	- uses more robust rules to cope with missing libext.a
	- uses better linking strategy to avoid symbol clashes with older iptables
	- introduces source compatiblity layer for different libxtables versions

SVN-Revision: 36736
 2013-05-27 15:13:19 +00:00
Jo-Philipp Wich
e4f8c38ed1 firewall3: update to git head 
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
  - automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
  - properly support output rules with dest '*' to hook directly into delegate_output
  - fixes crash when processing rules with unresolved targets

SVN-Revision: 36721
 2013-05-26 15:48:04 +00:00
Steven Barth
f63064a257 6relayd: Fix DHCPv6-server picking up addresses from master interface 
SVN-Revision: 36718
 2013-05-26 10:06:02 +00:00
Jo-Philipp Wich
90887b5fb3 firewall3: update to git head 
- fixes linking issues with some toolchains

SVN-Revision: 36703
 2013-05-24 12:49:06 +00:00
Steven Barth
d8d7d7f4aa 6relayd: fix a lease-timing issue with stateful DHCPv6 
SVN-Revision: 36702
 2013-05-24 12:31:30 +00:00
Jo-Philipp Wich
c1ff8cd9bb firewall3: update to git head 
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
  - Do not leak memory when processing rules with unknown targets or matches

SVN-Revision: 36698
 2013-05-23 13:07:44 +00:00
Felix Fietkau
75bb3138aa uhttpd: update to latest version, fixes #13564, #13560, improves error handling as pointed out in #13537 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36696
 2013-05-23 10:50:42 +00:00
Steven Barth
32c6ffb5a1 firewall3: Remove abandonend include 
SVN-Revision: 36692
 2013-05-23 06:38:25 +00:00
Jo-Philipp Wich
b757ca2259 firewall3: update to git head 
- fix build on Linux < 3.7
  - limit zone names to 14 bytes

SVN-Revision: 36691
 2013-05-22 14:15:53 +00:00
Steven Barth
9c3ac668e0 6relayd: Let OpenWrt override default CFLAGS 
SVN-Revision: 36690
 2013-05-22 11:58:54 +00:00
Jo-Philipp Wich
c12189b379 firewall3: update to git head 
- fixes reload when firewall is not running already
  - fixes crash when ipsets are supported but undeclared
  - fixes handling of per zone user chains on reload

SVN-Revision: 36689
 2013-05-22 11:37:41 +00:00
Steven Barth
9d115df749 6relayd: Fix a segfault when multiple downstream interfaces are present 
SVN-Revision: 36687
 2013-05-21 18:05:37 +00:00
Jo-Philipp Wich
dd83e87ab0 firewall3: update to git head 
- fixes segfault in flush command if ipset support is not available
  - fixes internal rule generation if custom chains are enabled

SVN-Revision: 36686
 2013-05-21 14:49:37 +00:00
Jo-Philipp Wich
6eec8009ba ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base 
SVN-Revision: 36685
 2013-05-21 13:00:28 +00:00
Jo-Philipp Wich
9b6c31d4cc firewall3: move libext*.a copying to compile phase 
SVN-Revision: 36684
 2013-05-21 12:58:36 +00:00
Jo-Philipp Wich
8df6cd005c netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset 
SVN-Revision: 36683
 2013-05-21 12:58:15 +00:00
Jo-Philipp Wich
e8050c6c35 firewall3: update to git head 
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
 * make ipset integration more reliable

SVN-Revision: 36681
 2013-05-21 10:15:14 +00:00
Jo-Philipp Wich
a9a9644efd iptables: use -ffunction-sections, -fdata-sections and --gc-sections 
SVN-Revision: 36680
 2013-05-21 10:15:10 +00:00
Steven Barth
24c39ddcf7 odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests 
SVN-Revision: 36678
 2013-05-21 09:13:48 +00:00
Steven Barth
37baf2d6b2 6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better 
SVN-Revision: 36677
 2013-05-21 09:13:40 +00:00
Steven Barth
c6f70381c9 odhcp6c: Fix address / prefix expiry logic 
SVN-Revision: 36675
 2013-05-20 14:54:20 +00:00
Steven Barth
dd161ae62b dnsmasq: add directory for external hosts-files 
SVN-Revision: 36655
 2013-05-17 14:44:12 +00:00
Steven Barth
334c40da14 6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD 
SVN-Revision: 36654
 2013-05-17 14:44:07 +00:00
Steven Barth
0f1be4425f netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4 
Based on a patch by Kristian Evensen. Thank You.

SVN-Revision: 36653
 2013-05-17 14:44:02 +00:00
Felix Fietkau
7365e647f6 uhttpd: update to latest version, fixes index page processing order 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36644
 2013-05-16 11:38:19 +00:00
Luka Perkov
4fc8e64a40 iproute2: workaround compile issues with gcc 4.8.x 
SVN-Revision: 36642
 2013-05-16 00:04:48 +00:00
Steven Barth
a62ca72309 odhcp6c: Fix handling of RAs when no DHCPv6-server is present 
SVN-Revision: 36641
 2013-05-15 11:07:01 +00:00
Luka Perkov
580481cd6d iproute2: upgrade to 3.9.0 
SVN-Revision: 36638
 2013-05-14 23:49:34 +00:00
Luka Perkov
5be36cbe83 iproute2: print help in connmark 
SVN-Revision: 36637
 2013-05-14 23:49:31 +00:00
Felix Fietkau
d090eea125 uhttpd: update to latest version, fixes a SSL connection memory leak 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36636
 2013-05-14 17:43:00 +00:00
Felix Fietkau
d481486aad package: fold the IPv6 menu into Network 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36634
 2013-05-14 15:02:31 +00:00
Steven Barth
e8f3897389 6relayd: Always announce the current MAC-address 
* Fixes #13516 thanks to berni for the detailed bugreport.

SVN-Revision: 36629
 2013-05-13 17:54:36 +00:00
Steven Barth
a1af842016 ds-lite: add ds-lite network protocol handler 
SVN-Revision: 36628
 2013-05-13 17:12:39 +00:00
Steven Barth
5ce135ed87 netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements 
SVN-Revision: 36627
 2013-05-13 17:12:34 +00:00
Steven Barth
ea71678b09 netifd: added support for setting up 6rd from DHCP 
SVN-Revision: 36626
 2013-05-13 17:12:30 +00:00
Steven Barth
ad93a571c6 odhcp6c: added support for DS-Lite + various fixes 
SVN-Revision: 36625
 2013-05-13 17:12:25 +00:00
Steven Barth
973dad61b0 firewall3: Remove obsoleted ULA-border 
SVN-Revision: 36624
 2013-05-13 17:12:20 +00:00
Steven Barth
07d99b62b7 firewall3: add wan6 interface to wan-zone by default 
SVN-Revision: 36623
 2013-05-13 17:12:15 +00:00
Steven Barth
4cb9d9715c firewall: Remove obsoleted ULA-border rule 
SVN-Revision: 36622
 2013-05-13 17:12:10 +00:00
Steven Barth
8560648082 6rd: increase metric of default route 
This will prefer native IPv6 over 6rd if both are present.

SVN-Revision: 36605
 2013-05-12 08:07:15 +00:00
Jo-Philipp Wich
d59f8cfa8e iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode 
SVN-Revision: 36604
 2013-05-12 01:12:56 +00:00
Steven Barth
29d4c36622 add uci support for "proxy-dnssec" in dnsmasq 
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.

Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>

SVN-Revision: 36570
 2013-05-07 07:19:51 +00:00
Felix Fietkau
9d8e3e03df iw: update to 3.10, sync with nl80211.h changes in compat-wireless 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36569
 2013-05-06 22:35:50 +00:00
Steven Barth
9c1ed6447b odhcp6c: Make SLAAC-only work without reqprefix=no 
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.

SVN-Revision: 36555
 2013-05-06 10:20:43 +00:00
Jo-Philipp Wich
95e139d0b2 ipset-dns: support simultaneously populating IPv4 and IPv6 sets 
SVN-Revision: 36554
 2013-05-06 10:01:45 +00:00
Jo-Philipp Wich
3c17fd41a4 Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset 
SVN-Revision: 36552
 2013-05-06 08:44:54 +00:00
Felix Fietkau
b85c442e81 hostapd: enable 802.11r for the -full variant (#13250) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36533
 2013-05-03 10:39:57 +00:00
Jo-Philipp Wich
4bba31b64c firewall3: update to git head 
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422, #13386)
	- add support for fwmark matches and mark setting targets

SVN-Revision: 36521
 2013-05-02 13:42:20 +00:00
Jo-Philipp Wich
a0b655b8f2 Fix install of iptables pkg-config files. 
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146; which should make collectd
appear in snapshots again.

Signed-off-by: Danny Baumann <dannybaumann@web.de>

SVN-Revision: 36509
 2013-05-02 08:10:55 +00:00
Jo-Philipp Wich
f1e214411d iwinfo: fix iwinfo_hardware() return value if chip id is not found 
SVN-Revision: 36471
 2013-04-28 14:04:39 +00:00
Jo-Philipp Wich
f1497ccf4f netifd: update to git head - disables multicast snooping by default on bridges 
SVN-Revision: 36463
 2013-04-27 09:28:40 +00:00
Jo-Philipp Wich
05c1424e87 iwinfo: add hw database file 
SVN-Revision: 36450
 2013-04-26 13:21:01 +00:00
Jo-Philipp Wich
e02d373f90 iwinfo: move builtin hardware database to /usr/share/libiwinfo/hardware.txt 
SVN-Revision: 36449
 2013-04-26 13:20:15 +00:00
Felix Fietkau
5062838fa5 netifd: update to the latest version, fixes interface reload issues when removing the ifname option 
SVN-Revision: 36424
 2013-04-25 16:28:19 +00:00
Steven Barth
49f97af481 6relayd: Fix generation of RA-messages 
SVN-Revision: 36419
 2013-04-24 18:22:08 +00:00
Jo-Philipp Wich
a040ead1c5 iwinfo: add SR71-15 radio info, fix nl80211 channel/frequency reporting on some architectures 
SVN-Revision: 36417
 2013-04-24 14:44:20 +00:00
Steven Barth
2c78c1457b firewall3: Make IPv6 ULA-Border generation dynamic 
This fixes working behind another router which gives out ULAs.

SVN-Revision: 36416
 2013-04-24 14:17:24 +00:00
Steven Barth
2dbcd2ba7b 6relayd: update package description 
SVN-Revision: 36413
 2013-04-24 07:21:42 +00:00
Steven Barth
e17ac4c257 dnsmasq: update to 2.66 Thanks to Christoph König for patches. 
SVN-Revision: 36412
 2013-04-24 05:55:39 +00:00
Steven Barth
21e4e2a766 odhcp6c: Set default SOL_MAX_RT to 1h 
SVN-Revision: 36411
 2013-04-24 05:02:45 +00:00
Felix Fietkau
d7908e02b5 hostapd: return the frequency to some ubus calls to make integration easier 
SVN-Revision: 36410
 2013-04-23 18:35:50 +00:00
Jo-Philipp Wich
61a6f45cdc lldpd: upgrade to 0.7.1 
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

SVN-Revision: 36401
 2013-04-23 10:37:23 +00:00
Steven Barth
17b8c0c7b8 netifd: Improve IPv6-ULA assignment handling 
SVN-Revision: 36383
 2013-04-22 19:40:06 +00:00
Steven Barth
c96c05d549 odhcp6c: Several fixes and improvements * Add preliminary support for RFC 6603 prefix exclusion * Fix reconfigure-support and reconfigure authentication * Set maximum retransmission timeout for solicitations to 2h * Fix a segfault when parsing IA_PD in advertise messages 
SVN-Revision: 36382
 2013-04-22 19:40:01 +00:00
Steven Barth
1e78c3e297 6relayd: Add DHCPv6-PD server support, fix relaying in stateful mode 
SVN-Revision: 36381
 2013-04-22 19:39:55 +00:00
Felix Fietkau
62244d73ae hostapd: update to 2013-04-05 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36376
 2013-04-22 13:24:48 +00:00
Felix Fietkau
96bb7c123b build: consistently use 'depends on' instead of 'depends' 
make the syntax more compatible with kernel menuconfig

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36351
 2013-04-17 15:36:41 +00:00
Jo-Philipp Wich
e66a4af8c3 uhttpd: update to git head, fixes regression when parsing IPv6 listen arguments 
SVN-Revision: 36348
 2013-04-17 11:34:39 +00:00
Jo-Philipp Wich
25ffe0446c iwinfo: print info of all existing wireless ifaces when cli is called without arguments 
SVN-Revision: 36339
 2013-04-15 15:00:16 +00:00
Felix Fietkau
eb10581ce3 uhttpd: update to latest version, fixes compile error with latest libubox 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36338
 2013-04-15 14:49:52 +00:00
Felix Fietkau
099e3d8183 netifd: update to latest version, fixes some device handling crashes 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36336
 2013-04-15 14:21:45 +00:00
Felix Fietkau
88c418bc75 qos-scripts: add queue length and quantum limit, suggested by dtaht 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36294
 2013-04-09 14:59:10 +00:00
Jo-Philipp Wich
7ca7bc501e iwinfo: fix frequency/channel and channel/frequency conversions to properly implement 802.11j 
SVN-Revision: 36292
 2013-04-09 14:37:55 +00:00
John Crispin
04dcd12c91 add portmap support to userland 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36284
 2013-04-09 14:19:13 +00:00
John Crispin
f13ae9965c add "swconfig list" support 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36282
 2013-04-09 14:19:05 +00:00
Jo-Philipp Wich
f90f025f20 netifd: fix route / route6 regression (#13303) 
SVN-Revision: 36281
 2013-04-09 12:21:12 +00:00
Steven Barth
3abc915522 Remove deprecated ip6slaac option * use proto=dhcpv6 with reqprefix=no instead 
SVN-Revision: 36280
 2013-04-09 12:12:30 +00:00
Steven Barth
2c087dc785 Remove obsoleted ipv6-support meta-package 
SVN-Revision: 36279
 2013-04-09 09:45:51 +00:00
Steven Barth
35d716fbbb netifd: Bump to latest version * Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow) 
SVN-Revision: 36196
 2013-04-05 12:28:06 +00:00
Steven Barth
0393e52623 netifd: Rewrite IPv6 prefix assignment * Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion 
SVN-Revision: 36193
 2013-04-03 17:08:21 +00:00
Felix Fietkau
71e9171717 openvpn: enable password save support (#13245) 
SVN-Revision: 36144
 2013-04-01 10:02:43 +00:00
Steven Barth
eedf9e72f9 odhcp6c: Fix a race-condition in RA-handling 
Thanks to Markus Stenberg for investigating and providing a fix

SVN-Revision: 36132
 2013-03-26 13:39:17 +00:00
Steven Barth
5a9c2c77b4 iptables: don't use --enable-ipv6 if IPv6 is disabled 
SVN-Revision: 36125
 2013-03-25 11:22:12 +00:00
Steven Barth
6529cf6cea odhcp6c: minor bug fixes 
SVN-Revision: 36123
 2013-03-25 10:58:48 +00:00
Jo-Philipp Wich
6fa1b5346e firewall3: update to git head 
* fixes parsing of src/dest '*'
	* fixes parsing of proto 'all'

SVN-Revision: 36111
 2013-03-22 14:10:29 +00:00
Jo-Philipp Wich
76d1c0a067 firewall3: update to git head 
* fixes port remapping rules (#13217)

SVN-Revision: 36100
 2013-03-21 14:25:17 +00:00
Hauke Mehrtens
c9544f4af0 kernel: add some fixes for kernel 3.9 
This patch fixes some compile problems with kernel 3.9 and adds some missing linux 3.9 handling into kernel packages.

SVN-Revision: 36098
 2013-03-20 21:59:24 +00:00
Steven Barth
261be7b8f3 netifd: Fix adding IPv6 DNS-servers to resolv.conf 
In some cases IPv6 DNS-servers were not added correctly.

SVN-Revision: 36095
 2013-03-20 13:49:39 +00:00
Steven Barth
eeb88a1df3 odhcp6c: Fix metric for on-link prefix routes 
SVN-Revision: 36094
 2013-03-20 09:26:52 +00:00
Jo-Philipp Wich
6fbd824e9b firewall3: update to git head 
* fixes reload handling of zones and ipsets that are still running but already deleted from the config

SVN-Revision: 36092
 2013-03-19 16:18:05 +00:00
Jo-Philipp Wich
03cb7986fc firewall3: update to git head 
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197)
	- do not allow src_mac option for SNAT rules

SVN-Revision: 36090
 2013-03-19 13:54:34 +00:00
Felix Fietkau
31876c193a hostapd: fix build errors on supplicant-only builds 
SVN-Revision: 36085
 2013-03-18 16:11:32 +00:00
Steven Barth
3ebdd3b330 odhcp6c: fix preference handling, custom client-ID * thanks to mbidewell for investigating 
SVN-Revision: 36083
 2013-03-18 07:24:49 +00:00
Felix Fietkau
2167101c90 hostapd: initial prototype of an ubus binding 
Supports listing, removing and banning clients, and hooking into
probe/assoc/auth requests via object subscribe.

SVN-Revision: 36081
 2013-03-17 20:47:18 +00:00
Felix Fietkau
84069f8534 uhttpd: update to latest version, fixes an occasional crash on CGI scripts 
SVN-Revision: 36034
 2013-03-15 13:43:55 +00:00
Jo-Philipp Wich
54f9f47a28 firewall3: update to git head 
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
 * Allow "network" and "device" commands while firewall is running (to make them usable in includes)

SVN-Revision: 36009
 2013-03-14 15:29:43 +00:00
John Crispin
fce3deddff use new button scheme 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36004
 2013-03-13 18:11:25 +00:00
Jo-Philipp Wich
9faa312dbb firewall3: update to git head 
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
 * Make NAT reflection direction configurable
 * Map init script stop action to flush
 * Map init script reload action to reload
 * Respect init script disabled state in hotplug handler

SVN-Revision: 35998
 2013-03-13 15:46:30 +00:00
Felix Fietkau
9ddc45bc3f hostapd: fix client reassociation after too many ACK failures 
SVN-Revision: 35973
 2013-03-12 00:19:25 +00:00
Jo-Philipp Wich
8c7ed1cb7b firewall3: update to git head 
* Fixes compilation against eglibc
 * Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
 * Fixes tracking logic for user chains by differentiating between reloads and restarts
 * Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
 * Supports legacy "tcpudp" protocol notation again

SVN-Revision: 35969
 2013-03-11 20:52:20 +00:00
Jo-Philipp Wich
e259ecad7e Revert "firewall3: update to git head" 
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.

SVN-Revision: 35904
 2013-03-08 19:52:18 +00:00
Jo-Philipp Wich
50213fc354 firewall3: update to git head 
- introduce per-zone user chains
	- support legacy "tcpudp" protocol notation

SVN-Revision: 35903
 2013-03-08 15:27:33 +00:00
Steven Barth
39a001dc69 odhcp6c: various bugfixes * Don't prematurely send RENEW / REBIND when T1 or T2 is > 1 day * Add "norelease" option to not send a RELEASE when stopping 
SVN-Revision: 35902
 2013-03-08 07:04:38 +00:00
Steven Barth
62ea398cd8 iptables: Add missing IPv6 builtin modules 
SVN-Revision: 35898
 2013-03-07 08:48:41 +00:00
Steven Barth
9779b0b88c iptables: redo update to 1.4.18 with old linking-behaviour 
SVN-Revision: 35896
 2013-03-06 17:05:34 +00:00
Steven Barth
bacd71648b Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx 
SVN-Revision: 35894
 2013-03-06 12:55:48 +00:00
Felix Fietkau
c3faa6be75 hostapd: include the madwifi headers in the package directory to avoid compile breakage if the madwifi build fails 
SVN-Revision: 35893
 2013-03-05 22:06:30 +00:00
Steven Barth
d023a08753 iptables: update to 1.4.18 
SVN-Revision: 35892
 2013-03-05 20:51:57 +00:00
Jo-Philipp Wich
d75c632de6 firewall3: add default config and firewall.user 
SVN-Revision: 35889
 2013-03-05 13:45:09 +00:00
Felix Fietkau
fa1749e668 hostapd: update to git version 2013-03-02 
SVN-Revision: 35887
 2013-03-04 17:16:38 +00:00
Jo-Philipp Wich
89be702bff firewall3: update to git head, introduces support for "enabled" option 
SVN-Revision: 35845
 2013-03-02 17:09:33 +00:00
Steven Barth
c81945e979 6relayd: Fix illegal memory accesses Spurious errors when receiving netlink-messages lead to unhandled errors which caused SIGBUS. Thanks to tdavis for debugging 
SVN-Revision: 35836
 2013-02-28 16:37:20 +00:00
Steven Barth
50b7fa217a 6relayd: various fixes cap preferred and valid lifetimes at more reasonable limits decrease memory usage (remove unnecessary book-keeping) 
SVN-Revision: 35835
 2013-02-28 14:57:19 +00:00
Jo-Philipp Wich
886ce188bf xtables-addons: fix packaging of iptaccount 
SVN-Revision: 35831
 2013-02-28 10:58:12 +00:00
Jo-Philipp Wich
557c047f71 firewall3: clear contnrack table on flush, set policies to drop during rule reload 
SVN-Revision: 35820
 2013-02-27 14:09:37 +00:00
Steven Barth
a90b6f7d90 6relayd: Fix config behaviour for rewrite_dns_addr option 
SVN-Revision: 35804
 2013-02-26 12:50:52 +00:00
Steven Barth
32ac53821f 6relayd: compatibility with broken IPv6 devices * Announce ULA as deprecated if other addresses are available * Allow the announced DNS-server to be overwritten 
SVN-Revision: 35803
 2013-02-26 12:42:53 +00:00
Jo-Philipp Wich
92062542e2 firewall: fix logging rule regression (#12999) 
SVN-Revision: 35745
 2013-02-22 13:45:20 +00:00
Jo-Philipp Wich
4fb2cd18c1 firewall3: add support for shell script and iptables-restore style includes 
SVN-Revision: 35744
 2013-02-22 12:45:38 +00:00
Steven Barth
a7b262dc0a netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions. 
SVN-Revision: 35743
 2013-02-22 08:56:29 +00:00
Jo-Philipp Wich
7d7d88b580 firewall3: update to git head 
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
	- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
	- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
	- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')

SVN-Revision: 35738
 2013-02-21 22:33:44 +00:00
Florian Fainelli
280fa5a1a2 dante: fix broken configure script not using CFLAGS for conftest 
Spotted by doing an ARM hard float build.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 35685
 2013-02-19 17:22:55 +00:00
Steven Barth
3081c672fc 6relayd: Fix possible memory corruption issue 
SVN-Revision: 35673
 2013-02-19 12:04:41 +00:00
Steven Barth
f5b63ffd33 6relayd: Workaround potential signal handling issue 
SVN-Revision: 35665
 2013-02-18 12:50:36 +00:00
Jo-Philipp Wich
02b0c62f33 firewall3 - a C implementation of the current firewall scripts 
SVN-Revision: 35643
 2013-02-17 19:26:52 +00:00
Felix Fietkau
1d6574b9c3 hostapd: fix the scan wait patch for multiple interfaces 
SVN-Revision: 35630
 2013-02-16 19:00:34 +00:00
Felix Fietkau
99782943d2 hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update 
SVN-Revision: 35619
 2013-02-16 14:26:03 +00:00
Jonas Gorski
c98b12d911 samba36: fix segmentation fault when trying to add non-existent users 
Based on a patch from НКВД. Closes #12962.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 35610
 2013-02-16 11:39:42 +00:00
Steven Barth
99b69fd9c5 odhcp6c: allow setting a user-provided prefix as well 
SVN-Revision: 35570
 2013-02-12 08:23:54 +00:00
Jo-Philipp Wich
eeaf2c0b5a iptables: fix bad PKG_RELEASE in previous commit 
SVN-Revision: 35569
 2013-02-11 22:14:38 +00:00
Jo-Philipp Wich
916902b1d2 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines 
SVN-Revision: 35568
 2013-02-11 21:58:42 +00:00
Felix Fietkau
1810b80ec0 mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default 
SVN-Revision: 35565
 2013-02-11 18:59:10 +00:00
Steven Barth
b8c796fbd7 odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging 
SVN-Revision: 35553
 2013-02-11 12:30:16 +00:00
Felix Fietkau
a9058439cf openvpn-easy-rsa: fix typo in version (#12958) 
SVN-Revision: 35508
 2013-02-06 22:17:11 +00:00
Felix Fietkau
dc2ba40af3 openvpn: remove the stale PKG_REV variable 
SVN-Revision: 35499
 2013-02-05 10:40:19 +00:00
Felix Fietkau
b8c903e6f8 openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball 
SVN-Revision: 35498
 2013-02-05 10:40:13 +00:00
Jo-Philipp Wich
e106f25ee7 firewall: various enhancements 
- reduce mssfix related log spam (#10681)
	- separate src and dest terminal chains (#11453, #12945)
	- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

SVN-Revision: 35484
 2013-02-04 14:38:33 +00:00
Steven Barth
13544edce7 odhcp6c: Fix timing issues 
SVN-Revision: 35472
 2013-02-03 17:26:40 +00:00
Jo-Philipp Wich
e893d4d9a8 libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend() 
SVN-Revision: 35471
 2013-02-03 12:03:24 +00:00