KumiSystems/openwrtv4
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
28138 commits 3 branches 0 tags 154 MiB
Commit graph

247 commits

Author SHA1 Message Date
Felix Fietkau
7b960069a2 netifd: switch to using git.openwrt.org 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40459
 2014-04-11 20:28:55 +00:00
Felix Fietkau
92ab194d63 netifd: update to latest version, adds a force_link parameter to bring up an interface without active device carrier 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40456
 2014-04-11 13:48:41 +00:00
Felix Fietkau
a28b8ecc47 netifd: update to the latest version, fixes some reload issues with proto=static 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40449
 2014-04-10 15:21:13 +00:00
Felix Fietkau
8a7a02bd2e netifd: fix a regression related to ppp + multiple updates (ipv4 + ipv6) 
Fixes #15504

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40443
 2014-04-10 11:31:21 +00:00
John Crispin
eebc673f1e lantiq: move the dsl-modem config to network.@dsl-modem[-1] 
make sure uci_defaults generates a proper uci config for the v/adsl modem

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 40439
 2014-04-10 08:14:33 +00:00
John Crispin
8bfe9acecf lantiq: vdsl init.d script should auto start 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 40438
 2014-04-09 16:36:28 +00:00
John Crispin
76e873a289 lantiq: cleanup vdsl driver bringup 
config interface 'wan'
	# a, b, j
	option annex b
	# a, b, av, bv
	option tone b
	# vdsl.bin
	option firmware
	# atm, ptm
	option xfer_mode atm

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 40437
 2014-04-09 16:31:24 +00:00
Felix Fietkau
255546bbfd netifd: update to the latest version, fixes a l3_dev handling regression leading to a crash 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40414
 2014-04-07 11:12:06 +00:00
Felix Fietkau
dca014db76 netifd: Add renew handler for proto dhcp 
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 40385
 2014-04-05 18:17:22 +00:00
Felix Fietkau
0dd2d18400 netifd: update to latest version, fixes issues when l3 interface changes on reload (e.g. ppp -> dhcp/static) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40384
 2014-04-05 18:17:18 +00:00
John Crispin
f464b7d176 lantiq: cleanup the dsl control scripts 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 40381
 2014-04-05 16:34:20 +00:00
John Crispin
c7168b64ef dhcp: Fix broadcast parameter validation support, remove unused netmask parameter 
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>

SVN-Revision: 40332
 2014-03-30 13:07:52 +00:00
John Crispin
1335853ae5 ltq-vdsl: add led status reporting 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 40322
 2014-03-30 09:16:27 +00:00
Steven Barth
0555ebf66d 6rd / ds-lite: make the firewall-zones of nested-protocols configurable 
SVN-Revision: 40020
 2014-03-26 10:12:49 +00:00
Steven Barth
2a893c2057 dhcp: send 6rd-ORO when expecting 6rd-information 
SVN-Revision: 40019
 2014-03-26 09:48:20 +00:00
Felix Fietkau
5c53e63836 netifd: update to the latest version, adds support for reloading proto handlers on toplogy changes 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40001
 2014-03-21 15:55:27 +00:00
Felix Fietkau
3eb2d6d5d4 netifd: update to the latest version, fixes ubus handling of proto data items 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39970
 2014-03-20 20:06:59 +00:00
Felix Fietkau
e926cfd9ac netifd: update to latest version, fixes an autostart handling with link detection 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39967
 2014-03-20 13:57:28 +00:00
Felix Fietkau
66393168d3 firewall: update to latest version, fixes a musl build error 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39965
 2014-03-20 13:51:43 +00:00
Felix Fietkau
ad72198abb netifd: update to latest version, adds support for specifying a config path 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39956
 2014-03-19 14:26:51 +00:00
Steven Barth
edd75e332c netifd: pass on delegate flag from dhcp to 6rd 
SVN-Revision: 39909
 2014-03-13 10:33:26 +00:00
Felix Fietkau
83f9fc12d6 netifd: update to latest version, includes interface handling fixes by Hans Dedecker 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39870
 2014-03-11 09:28:28 +00:00
Felix Fietkau
452d019d3e netifd: update to latest version, adds a bridge reload fix and fixes #15157 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39791
 2014-03-07 18:14:41 +00:00
Steven Barth
f294f23c02 netifd: don't incorrectly announce up-status via ubus 
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 39777
 2014-03-05 17:36:14 +00:00
Steven Barth
1b3a868309 netifd: Reintroduce link-layer sensing (thx Hans Decker, Karl Vogel) 
SVN-Revision: 39757
 2014-02-27 12:42:38 +00:00
Steven Barth
0bf9032145 netifd: don't always assume addrs & routes are applied 
netifd didn't check the netlink return values and kept assuming
routes are in place even if they weren't

SVN-Revision: 39755
 2014-02-26 13:27:32 +00:00
Felix Fietkau
a15524582c netifd: depend on libubox directly to rebuild on ABI changes 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39723
 2014-02-23 17:32:15 +00:00
Felix Fietkau
6c8300df3d netifd: update to latest version, fixes wireless device reload handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39706
 2014-02-23 08:13:28 +00:00
Jo-Philipp Wich
b22ad85bc6 firewall: fix validation constraints 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 39649
 2014-02-21 00:22:23 +00:00
Jo-Philipp Wich
354efde275 netifd: fix validation constraints 
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 39648
 2014-02-21 00:17:04 +00:00
Jo-Philipp Wich
21f4cf1a73 firewall: fix several ipset integration issues (#15016) 
- Do not consider bitmap storage for IPv6 family sets
	- Move ipset family parameter before any additional option
	- Only emit family parameter for hash sets
	- Do not allow IPv6 iprange for IPv4 sets and vice versa

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 39647
 2014-02-20 23:20:10 +00:00
John Crispin
8fb44e0d1e netifd: add validation support 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39621
 2014-02-18 13:34:04 +00:00
John Crispin
15ebcfc04e firewall3: update init.d script to make use of procd 
add validation data

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39617
 2014-02-18 13:33:47 +00:00
John Crispin
204e859542 netifd: update to latest git head 
this adds support for proto and wireless handler adding uci validation rules

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39614
 2014-02-18 13:33:36 +00:00
Steven Barth
41acaaf893 netifd: work around dangling prefix kernel-routes (fixes #14963) 
SVN-Revision: 39597
 2014-02-16 11:20:22 +00:00
Steven Barth
af8f06beca netifd: fix source-routing breaking 6in4 + others 
6in4 historically allowed an ip6addr without a mask however the newly
introduced source-routing segfaulted in this scenario (#14958 + #14858).

Fixes include: "Fix ubus route src mask printing" and
"Disable netlink auto ack" (thanks to Hans Dedecker)

SVN-Revision: 39586
 2014-02-14 21:21:44 +00:00
Steven Barth
229d186490 netifd: don't add unnecessary NOP policy rules 
SVN-Revision: 39351
 2014-01-20 18:23:02 +00:00
Steven Barth
fac5e62abd firewall: don't reload if there were no address or data changes 
This fixes packet loss due to reloading firewall every minute with IPv6
implementation of certain ISPs.

SVN-Revision: 39332
 2014-01-19 17:35:33 +00:00
Steven Barth
bc8412b90e netifd: Add IFUPDATE-flags and use main IPv6 routing table again 
SVN-Revision: 39306
 2014-01-17 13:59:40 +00:00
John Crispin
a844275f37 firewall: improve logging in hotplug script 
Signed-off-by: Nathan Hintz <nlhintz@hotmail.com>

SVN-Revision: 39300
 2014-01-15 18:29:59 +00:00
John Crispin
4810de8e4b swconfig: improve usability when switch device incorrect 
http://patchwork.openwrt.org/patch/4701/

Signed-off-by: Andreas Mohr <andim2@users.sf.net>

SVN-Revision: 39229
 2014-01-12 12:07:01 +00:00
Felix Fietkau
20151a3394 netifd: initialize the switch early at start time and on reload (fixes #13015) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39183
 2013-12-31 13:09:20 +00:00
Felix Fietkau
6865f1d6b2 netifd: update to the latest version, fixes wireless related segfaults on arm 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39180
 2013-12-29 02:26:34 +00:00
Felix Fietkau
5607a13aa1 netifd: update to the latest version, fixes wifi related segfaults 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39176
 2013-12-28 14:19:54 +00:00
John Crispin
d1156bca0a swconfig: remove useless variables, return -1 on errors 
spotted with cppcheck

Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 39170
 2013-12-27 21:15:20 +00:00
Jo-Philipp Wich
1789744958 netifd: add reload trigger for /etc/config/wireless as well 
SVN-Revision: 39131
 2013-12-18 12:38:29 +00:00
Jo-Philipp Wich
de5ebc19c0 firewall: fix handling of tcp_ecn parameter 
The firewall3 implementation as well as the shell implementation predating it
used to process the tcp_ecnoption as boolean while it actually is an integer.

Change the code to parse tcp_ecn as integer.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 39122
 2013-12-17 16:59:47 +00:00
Felix Fietkau
12c05542e8 netifd: update to latest version, fixes a null pointer crash 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39088
 2013-12-16 10:08:13 +00:00
Steven Barth
e49d67f192 Convert DHCP->6rd and DHCPv6->DS-Lite autoconfig to dynamic interface 
SVN-Revision: 39061
 2013-12-15 19:38:53 +00:00
Felix Fietkau
ce062a7b5c netifd: update to the latest version, adds a revert of the link state handling patches which caused regressions in combination with wifi devices 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39050
 2013-12-14 14:59:05 +00:00
Felix Fietkau
47730fe355 netifd: prevent an unnecessary restart of netifd-managed wifi interfaces at boot time 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39046
 2013-12-13 16:43:11 +00:00
Felix Fietkau
3f744a4ad3 netifd: fix crashes triggered by adding/removing wireless devices on reload 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39035
 2013-12-11 18:23:52 +00:00
John Crispin
31a2912cd9 netifd: enable coredumps again 
got broken due procd startup. Requires procd resource limit patch.

Signed-off-by: Ulrich Weber <uw@xyne.com>

SVN-Revision: 39020
 2013-12-09 17:29:34 +00:00
Felix Fietkau
6242255df2 netifd: update to the latest version, adds tunnel fixes by Hans Dedecker and adds back support for multiple networks per wifi-iface 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39004
 2013-12-08 18:00:05 +00:00
Felix Fietkau
4155016637 netifd: update to the latest version, improves wireless status output and fixes some bridge handling issues 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38992
 2013-12-03 14:17:44 +00:00
Felix Fietkau
3c50feca19 wifi: rename the "reload" (restarting non-netifd wifi) command to "reload_legacy" 
Add a new "reload" command that reloads the netifd config as well

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38989
 2013-12-02 16:53:24 +00:00
Felix Fietkau
498d84fc4e netifd: add wireless configuration support and port mac80211 to the new framework 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38988
 2013-12-02 16:41:03 +00:00
Felix Fietkau
107bcb5de3 netifd: remove redundant calls to /sbin/wifi down 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38982
 2013-12-02 13:08:00 +00:00
Jo-Philipp Wich
bc9043cc53 firewall: optimize DNAT rules and skip invalid rules and redirects (#14485) 
- instead of writing one (or more) ACCEPT rules in the filter table
	  for each redirect install a global ctstate DNAT accept rule per zone

	- discard rules and redirects which have invalid options set instead
	  of silently skipping the invalid values

SVN-Revision: 38849
 2013-11-18 11:59:27 +00:00
Felix Fietkau
e78e720a6f netifd: remove connect_time from /var/state, it is unused 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38704
 2013-11-10 10:01:33 +00:00
John Crispin
edf6236838 lantiq: fix vdsl-app dependency 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38666
 2013-11-07 12:45:39 +00:00
Felix Fietkau
e16f104a6f netifd: update to the latest version, fixes regression in proto-shell scripts (#14400, #14402) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38627
 2013-10-31 11:22:01 +00:00
Felix Fietkau
22890e6382 netifd: update to latest version, adds fixes and some preparation for supporting wifi devices 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38606
 2013-10-30 11:25:01 +00:00
Steven Barth
bb699867e0 firewall: Improve ubus support 
* Use network.interface dump call instead of individual status calls
  to reduce overall netifd lookups and invokes to 1 per fw3 process.

* Allow protocol handlers to assign a firewall zone for an interface
  in the data section to allow for dynamic firewall zone assignment.

SVN-Revision: 38504
 2013-10-23 10:25:26 +00:00
Steven Barth
91b173d231 netifd: Fix ifupdate events 
SVN-Revision: 38458
 2013-10-19 11:01:25 +00:00
Steven Barth
c3bcdd59de netifd: various improvements 
* Add ubus methods for global interface status
* Add ubus function to create nested interfaces
* Add protocol update notifications and hotplug legacy calls
* Fix: key to data elements point at wrong memory area
* Add support for source-restricted routes
* Add option "delegate" to toggle prefix delegation
* Reevaluate target routes also on interface update

SVN-Revision: 38453
 2013-10-18 13:39:43 +00:00
Steven Barth
56bc536713 netifd: rename customopts to sendopts for consistency 
SVN-Revision: 38437
 2013-10-17 13:12:06 +00:00
Steven Barth
c759b49a4f Added 'customopts' dhcp protocol option, which is an array passed along to udhcpc as series of -x options. 
Signed-off-by: Markus Stenberg <markus.stenberg@iki.fi>

SVN-Revision: 38436
 2013-10-17 12:55:40 +00:00
Hauke Mehrtens
e1523b5504 switch: remove old switch driver 
The switch driver is not used by brcm47xx any more and can be removed,
instead of this switch driver b53 is used now.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 38387
 2013-10-13 22:15:31 +00:00
Hauke Mehrtens
af32e63bae lantiq: add some missing PKG_SOURCE_URLs 
These URLs where missing and causes build failures.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 38376
 2013-10-12 22:33:55 +00:00
Jo-Philipp Wich
db3013852a firewall: small improvements in nat reflection 
- do not insert duplicate rules when setting up reflection to a zone containing multiple interfaces
	- set up reflection for any protocol, not just TCP and UDP

SVN-Revision: 38361
 2013-10-10 18:15:10 +00:00
Felix Fietkau
e96695df10 netifd: update to latest version, adds macvlan support 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38299
 2013-10-03 14:51:34 +00:00
Steven Barth
1d485c737e netifd: don't remove & readd addresses that only have a changed lifetime 
SVN-Revision: 38269
 2013-10-01 17:30:05 +00:00
John Crispin
f874094402 procd: convert various packages to procd style init.d scripts 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38023
 2013-09-17 21:45:30 +00:00
Felix Fietkau
7fc90889d5 netifd: update to the latest version, fixes a bridge handling corner case on config reload 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37856
 2013-08-29 22:20:36 +00:00
Jo-Philipp Wich
2864fb107f firewall: update to git head 
- uses "-j CT --notrack" instead of deprecated "-j NOTRACK"
	- fixes support for rule sections with target "NOTRACK"

SVN-Revision: 37777
 2013-08-14 15:40:38 +00:00
Jo-Philipp Wich
d6e8047f83 firewall: update to git head 
- handles redirects as port relocations if the dest_ip points to the router itself

SVN-Revision: 37374
 2013-07-16 14:04:59 +00:00
Steven Barth
54ae5ce507 netifd: Fix IPv6-prefix assignment with continuous hints 
SVN-Revision: 37371
 2013-07-16 12:07:11 +00:00
Luka Perkov
1a963355b0 netifd: update to latest version, add bridge_empty option 
with this option enabled it's possible to create empty bridges

Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37318
 2013-07-14 18:50:04 +00:00
John Crispin
7d7c2ff5f9 swconfig: fix dependency bug introduced by [37304] 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37316
 2013-07-14 18:16:42 +00:00
Hauke Mehrtens
f8d55e7541 brcm47xx: use b53 phy driver for the switch in kernel 3.10 
This makes it possible to use swconfig to controll the switch.

This was tested with devices using b43 and bgmac.
This was not tested on devices using tg3.
This does not support the adm switch used in some very old devices.

SVN-Revision: 37304
 2013-07-14 14:11:17 +00:00
Felix Fietkau
f98f69adc9 firewall: add missing dependencies 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37224
 2013-07-10 11:33:48 +00:00
John Crispin
fc40051569 lantiq: move dsl tools to package/network/config 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37198
 2013-07-08 09:01:38 +00:00
Jo-Philipp Wich
4aa82d07a6 firewall: allow routed lan<->lan traffic by default 
SVN-Revision: 37171
 2013-07-04 18:10:36 +00:00
Jo-Philipp Wich
2d506f46fb firewall: update to git head 
- uses custom formatting for mac addresses to ensure leading zeroes, required for older iptables mac match parser

SVN-Revision: 37082
 2013-06-29 13:28:27 +00:00
Steven Barth
d8051a8814 netifd: fix typo in dhcp script 
SVN-Revision: 37051
 2013-06-28 04:19:21 +00:00
Felix Fietkau
b4babf9f81 netifd: update to latest version, fixes a NULL pointer deref bug 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36965
 2013-06-18 16:24:48 +00:00
Jo-Philipp Wich
65f82e2311 firewall: update to git head 
- fixes misprocessing of unknown symbolic protocol names

SVN-Revision: 36963
 2013-06-18 14:30:51 +00:00
Jo-Philipp Wich
37ae268729 firewall: update to git head 
- fixes calculation of IPv4 netmasks derived from 0.0.0.0/0 CIDRs

SVN-Revision: 36960
 2013-06-18 14:14:35 +00:00
Steven Barth
9f1899242c netifd: IPv6: Fix sorting order in last commit. 
SVN-Revision: 36952
 2013-06-17 21:29:14 +00:00
Steven Barth
213269a8f7 netifd: Satisfy IPv6 assignments ordered by prefix length 
SVN-Revision: 36950
 2013-06-17 21:16:22 +00:00
Jo-Philipp Wich
36d3fafd77 firewall: update to git head 
- properly process intermediate "!" options in argument list (fixes negated ipsets)

SVN-Revision: 36935
 2013-06-13 18:54:49 +00:00
Jo-Philipp Wich
0db38adf1c firewall: update to git head 
- fixes handling of reject target for rule sections with specific destination zone

SVN-Revision: 36933
 2013-06-13 12:49:00 +00:00
Felix Fietkau
9fb5bf176e netifd: update to latest version, uses the new uci/blob code from libuci 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36909
 2013-06-10 12:42:30 +00:00
Steven Barth
491deaed2c netifd: improve reloading behaviour 
SVN-Revision: 36903
 2013-06-10 10:42:15 +00:00
Steven Barth
f995c90329 netifd: Improve IPv6 source-routing policies 
SVN-Revision: 36884
 2013-06-08 13:26:33 +00:00
Jonas Gorski
b9de8ca7f5 netifd: bring wifi down before shutting down 
works around wifiX references not being freed on network restart.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 36883
 2013-06-08 11:44:12 +00:00
Jo-Philipp Wich
e7b15446a8 firewall: udpate to git head (#13652, #13654, #13658) 
- optimizes chain usage for ingress rules
  - adds limit match support for redirect rules
  - fixes automatic redirect dest detection on little endian systems
  - leaves base chains in place on reload to allow user rules to target e.g. "reject"

SVN-Revision: 36871
 2013-06-06 14:12:02 +00:00
Jo-Philipp Wich
5cf06bd17b firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols 
SVN-Revision: 36868
 2013-06-06 14:02:29 +00:00
Jo-Philipp Wich
ecc95dcba8 firewall: update to git head (#13652) 
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
  - uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones

SVN-Revision: 36854
 2013-06-05 11:40:40 +00:00