Commit graph

198 commits

Author SHA1 Message Date
Jo-Philipp Wich
7d7d88b580 firewall3: update to git head
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
	- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
	- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
	- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')

SVN-Revision: 35738
2013-02-21 22:33:44 +00:00
Florian Fainelli
280fa5a1a2 dante: fix broken configure script not using CFLAGS for conftest
Spotted by doing an ARM hard float build.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 35685
2013-02-19 17:22:55 +00:00
Steven Barth
3081c672fc 6relayd: Fix possible memory corruption issue
SVN-Revision: 35673
2013-02-19 12:04:41 +00:00
Steven Barth
f5b63ffd33 6relayd: Workaround potential signal handling issue
SVN-Revision: 35665
2013-02-18 12:50:36 +00:00
Jo-Philipp Wich
02b0c62f33 firewall3 - a C implementation of the current firewall scripts
SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
Felix Fietkau
1d6574b9c3 hostapd: fix the scan wait patch for multiple interfaces
SVN-Revision: 35630
2013-02-16 19:00:34 +00:00
Felix Fietkau
99782943d2 hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update
SVN-Revision: 35619
2013-02-16 14:26:03 +00:00
Jonas Gorski
c98b12d911 samba36: fix segmentation fault when trying to add non-existent users
Based on a patch from НКВД. Closes #12962.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 35610
2013-02-16 11:39:42 +00:00
Steven Barth
99b69fd9c5 odhcp6c: allow setting a user-provided prefix as well
SVN-Revision: 35570
2013-02-12 08:23:54 +00:00
Jo-Philipp Wich
eeaf2c0b5a iptables: fix bad PKG_RELEASE in previous commit
SVN-Revision: 35569
2013-02-11 22:14:38 +00:00
Jo-Philipp Wich
916902b1d2 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
SVN-Revision: 35568
2013-02-11 21:58:42 +00:00
Felix Fietkau
1810b80ec0 mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default
SVN-Revision: 35565
2013-02-11 18:59:10 +00:00
Steven Barth
b8c796fbd7 odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging
SVN-Revision: 35553
2013-02-11 12:30:16 +00:00
Felix Fietkau
a9058439cf openvpn-easy-rsa: fix typo in version (#12958)
SVN-Revision: 35508
2013-02-06 22:17:11 +00:00
Felix Fietkau
dc2ba40af3 openvpn: remove the stale PKG_REV variable
SVN-Revision: 35499
2013-02-05 10:40:19 +00:00
Felix Fietkau
b8c903e6f8 openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball
SVN-Revision: 35498
2013-02-05 10:40:13 +00:00
Jo-Philipp Wich
e106f25ee7 firewall: various enhancements
- reduce mssfix related log spam (#10681)
	- separate src and dest terminal chains (#11453, #12945)
	- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

SVN-Revision: 35484
2013-02-04 14:38:33 +00:00
Steven Barth
13544edce7 odhcp6c: Fix timing issues
SVN-Revision: 35472
2013-02-03 17:26:40 +00:00
Jo-Philipp Wich
e893d4d9a8 libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend()
SVN-Revision: 35471
2013-02-03 12:03:24 +00:00
Steven Barth
6be5a5a73d odhcp6c: Fix RENEW and REBIND requests
SVN-Revision: 35454
2013-02-02 10:44:13 +00:00
Steven Barth
e2193a69c8 odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested
SVN-Revision: 35421
2013-02-01 13:38:47 +00:00
Steven Barth
6a43437908 netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
SVN-Revision: 35420
2013-02-01 12:28:43 +00:00
Steven Barth
9a62439c28 odhcp6c: switch to userspace RA-handling and offload address assignment to netifd
SVN-Revision: 35419
2013-02-01 12:28:39 +00:00
Steven Barth
a3368da479 6relayd: Fix announced router flags and IPv6 procfs-configuration
SVN-Revision: 35418
2013-02-01 12:28:34 +00:00
Felix Fietkau
416ce374c0 openvpn: add from openvpn-devel from /packages, fix support for current polarssl
SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
Steven Barth
4bd3f54143 6in4: fix typo in last commit
SVN-Revision: 35409
2013-01-30 09:07:23 +00:00
Steven Barth
a0a91963af 6in4: work around hanging wget process
SVN-Revision: 35408
2013-01-30 09:05:53 +00:00
Felix Fietkau
65657fb585 netifd: update to latest version
fixes DNS servers on reload (#12910)
fixes ubus object race on reload or down/up (#12612)

SVN-Revision: 35383
2013-01-29 14:40:04 +00:00
Felix Fietkau
c16879a385 samba36: update to 3.6.11 and refresh patches (based on patch from #12914)
SVN-Revision: 35382
2013-01-29 13:18:56 +00:00
Steven Barth
777f7b30ae netifd: implement IPv6 prefix deprecation according to RFC 6204
SVN-Revision: 35377
2013-01-29 11:05:22 +00:00
Steven Barth
78a6439784 6relayd: remove IPv6 forwarding-sysctl workaround
SVN-Revision: 35371
2013-01-29 10:13:49 +00:00
Steven Barth
1a0b207d61 odhcp6c: remove IPv6 forwarding-sysctl workaround
SVN-Revision: 35370
2013-01-29 10:13:44 +00:00
Steven Barth
fac1ed35ac netifd: remove IPv6 forwarding-sysctl workaround
SVN-Revision: 35369
2013-01-29 10:13:39 +00:00
Felix Fietkau
6ea9abadeb netifd: update to latest version, fixes setting addresses/routes on alias interfaces
SVN-Revision: 35362
2013-01-28 20:35:55 +00:00
Jo-Philipp Wich
e804a663e3 hostapd: don't configure wpa_supplicant with empty password="" if no password is specified (#12912)
SVN-Revision: 35358
2013-01-28 18:05:33 +00:00
Jo-Philipp Wich
839f3ab0e7 firewall: flush conntrack table after changing interface rules
SVN-Revision: 35348
2013-01-28 15:53:44 +00:00
Steven Barth
ec41a6a08c netifd: IPv6 sysctl, restart IPv6 in static mode to send RS
SVN-Revision: 35347
2013-01-28 14:07:27 +00:00
Steven Barth
75b06607db netifd: add SLAAC ipv6 value for static-proto
SVN-Revision: 35346
2013-01-28 13:53:48 +00:00
Steven Barth
e964fa5d8f odhcp6c: work-around for proto-script to avoid loosing the default route
SVN-Revision: 35345
2013-01-28 13:53:43 +00:00
Steven Barth
a81c76617e ipv6-support: don't overwrite existing setting across reflashs
SVN-Revision: 35302
2013-01-23 08:15:09 +00:00
Felix Fietkau
55eab5ac44 netifd: update to latest version, adds another fix for interface aliases
SVN-Revision: 35297
2013-01-22 16:05:59 +00:00
Steven Barth
5859fc7a39 netifd: Fix a segfault when globals.ula_prefix is empty
SVN-Revision: 35296
2013-01-22 15:49:42 +00:00
Felix Fietkau
a4c7a953e5 uhttpd: always turn on TLS support, include ustream-ssl as a build dependency
SVN-Revision: 35295
2013-01-22 15:05:04 +00:00
Felix Fietkau
bab482b93f uhttpd: fix another small hang issue with the same symptoms
SVN-Revision: 35291
2013-01-22 09:38:00 +00:00
Felix Fietkau
166ea3832b uhttpd: fix connection hangs
SVN-Revision: 35290
2013-01-22 09:28:55 +00:00
Felix Fietkau
bc1d72c7bf tcpdump: add SLL parsing support to tcpdump-mini, use -ffunction-sections, -fdata-sections and --gc-sections to reduce size
SVN-Revision: 35288
2013-01-22 07:51:15 +00:00
Felix Fietkau
c725669079 uhttpd: fix unencrypted passwords in httpd.conf
SVN-Revision: 35265
2013-01-21 12:46:41 +00:00
Steven Barth
38080ae550 6relayd: fix shell library includes in init-script
Thanks to Daniel Golle

SVN-Revision: 35262
2013-01-21 11:27:03 +00:00
Steven Barth
8a97d823a4 6relayd: avoid a race-condition with looping RAs
SVN-Revision: 35260
2013-01-21 10:42:31 +00:00
Steven Barth
f129c6786e netifd: Fix segfaults in IPv6 prefix handling
SVN-Revision: 35259
2013-01-21 09:21:30 +00:00