KumiSystems/openwrtv4
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
26178 commits 3 branches 0 tags 154 MiB
Commit graph

540 commits

Author SHA1 Message Date
Steven Barth
0ad1d06c13 6relayd: remove compat ULA setting by default (too many bad sideeffects) 
SVN-Revision: 38283
 2013-10-02 06:14:39 +00:00
Steven Barth
1d485c737e netifd: don't remove & readd addresses that only have a changed lifetime 
SVN-Revision: 38269
 2013-10-01 17:30:05 +00:00
Felix Fietkau
f8ee248701 uhttpd: add a config option for using ustream-polarssl, and use it by default 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38250
 2013-09-29 11:26:09 +00:00
Felix Fietkau
59c05778f0 uhttpd: fix appending https ports to cmdline 
Otherwise it is started only on non-secure ports.

Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@neratec.com>

SVN-Revision: 38171
 2013-09-25 07:44:48 +00:00
Gabor Juhos
99d13b09b9 iwinfo: add Ubiquiti WispStation M5 to hardware.txt 
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

SVN-Revision: 38145
 2013-09-24 05:58:29 +00:00
Luka Perkov
ef5f836207 fix various init scripts 
Changes include:

* removing unused variables
* replacing spaces with tabs where appropriate
* more consistency with variable declarations

Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 38142
 2013-09-23 21:58:36 +00:00
Felix Fietkau
5137cdb1e1 xtables-addons: fix missing conversion from r38021 (resolves a broken dependency) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38124
 2013-09-22 19:49:23 +00:00
Steven Barth
4894800bdd odhcp6c: handle NoAddrsAvail IA-status 
SVN-Revision: 38092
 2013-09-21 10:54:13 +00:00
Steven Barth
808a1c7808 odhcp6c: Restart when server returns IAID error 
SVN-Revision: 38032
 2013-09-18 10:27:15 +00:00
John Crispin
f874094402 procd: convert various packages to procd style init.d scripts 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38023
 2013-09-17 21:45:30 +00:00
John Crispin
f12f4074af kernel: make most modules use AutoProbe 
now that we have modprobe we can set more than half of the modules to AutoProbe

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38021
 2013-09-17 21:45:17 +00:00
Felix Fietkau
b2447d1fca hostapd: adjust the md5sum for the uploaded source tarball (fixes #14155) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37990
 2013-09-14 20:07:35 +00:00
Felix Fietkau
28eceb0343 iwinfo: when using nl80211, parse interface combinations instead of creating/deleting interfaces 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37983
 2013-09-14 14:46:51 +00:00
Jo-Philipp Wich
c3cc912ed9 uhttpd: udpat to git head 
- fixes buffer corruption with JSON-RPC list calls
	- change JSON-RPC protocol to include the session ID into the call
	  attributes instead of passing it via the URL
	- forcibly pass effective session ID as "ubus_rpc_session" attribute
	  to called procedures
	- change ubus acl checking to conform with new ubus session namespace

SVN-Revision: 37962
 2013-09-13 13:24:45 +00:00
Steven Barth
eba3ab9ade odhcp6c: Timing workaround for buggy servers 
SVN-Revision: 37951
 2013-09-12 12:57:42 +00:00
Steven Barth
b2a71fedd9 odhcp6c: more compatibility fixes 
SVN-Revision: 37907
 2013-09-05 21:13:51 +00:00
Steven Barth
0a85c59040 netfilter: Add IPv6-NAT support for kernel and ipt Thanks to Berni, Adam Novak and Sedat Dilek for patches and inspiration 
SVN-Revision: 37866
 2013-09-01 17:59:48 +00:00
Steven Barth
3e647ac9b6 iptables: Update to 1.4.20 
SVN-Revision: 37865
 2013-09-01 13:46:10 +00:00
Felix Fietkau
7fc90889d5 netifd: update to the latest version, fixes a bridge handling corner case on config reload 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37856
 2013-08-29 22:20:36 +00:00
Vasilis Tsiligiannis
03b1d4289b lldpd: Add libbsd dependency when using eglibc 
Signed-off-by: Vasilis Tsiligiannis <acinonyx@openwrt.gr>

SVN-Revision: 37837
 2013-08-25 18:47:08 +00:00
Jo-Philipp Wich
2864fb107f firewall: update to git head 
- uses "-j CT --notrack" instead of deprecated "-j NOTRACK"
	- fixes support for rule sections with target "NOTRACK"

SVN-Revision: 37777
 2013-08-14 15:40:38 +00:00
Felix Fietkau
4cda88a879 hostapd: fix typo in version number 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37742
 2013-08-08 20:45:15 +00:00
Felix Fietkau
9df75e7f34 hostapd: fix ubus reconnect handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37741
 2013-08-08 20:45:12 +00:00
Felix Fietkau
750197b3af hostapd: add a build variant for wpa_supplicant with p2p (aka Wi-Fi Direct) support 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37739
 2013-08-08 16:24:50 +00:00
Felix Fietkau
f53b96813e hostapd: update to latest version (20130707) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37738
 2013-08-08 16:04:19 +00:00
Felix Fietkau
9a22315ca4 hostapd: Settings for DAE/CoA server 
hostapd supports "Dynamic Authorization Extensions", making it possible
to forcibly disconnect a user by sending it a RADIUS "Disconnect-Request"
packet.

I've added three new variables to enable setting of the
"radius_das_client" and "radius_das_port" variables in the hostapd
configuration, which enable these extensions.

* dae_client - IP of the client that can send disconnect requests
* dae_secret - shared secret for DAE packets

These are combined into the "radius_das_client" option in hostapd.conf
To enable the server, both dae_client and dae_secret must be set.

* dae_port - optional, default value is 3799 as specified in RFC 5176

Signed-off-by: Martijn van de Streek <martijn@vandestreek.net>

SVN-Revision: 37734
 2013-08-06 18:55:30 +00:00
Felix Fietkau
91f0b411f4 hostapd: Fix WDS/WEP usage 
WEP in WDS is currently broken in hostapd. Add a patch
to fix the issue.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37733
 2013-08-06 17:59:12 +00:00
Felix Fietkau
76ca564e79 hostapd: Refresh patches 
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37731
 2013-08-06 17:59:05 +00:00
Felix Fietkau
22e012bad8 hostapd: Add an option to disable beaconing 
Add a patch for hostapd that introduces a config option
"start_disabled" which can be used to bring up an AP
interface with beaconing disabled. This is useful in
a Repeater-AP setup where the Repeater AP has to start
beaconing only after the WDS link has been established.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37730
 2013-08-06 17:59:02 +00:00
Felix Fietkau
719adb6471 uhttpd: update to the latest version, fixes a crash on early cgi/lua process termination 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37628
 2013-07-31 22:07:09 +00:00
Luka Perkov
1646bd096c iproute2: update to 3.10.0 
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37590
 2013-07-28 23:27:35 +00:00
Felix Fietkau
aff8c18ad0 openvpn: update to 2.3.2 
this patches updates openvpn to v2.3.2
and adds a PKG_MD5SUM to the Makefile

This release fixes a memory access violation when cipher none is used
on ar71xx - at least with my config

Signed-off-by: Peter Wagner <tripolar@gmx.at>

SVN-Revision: 37560
 2013-07-26 12:35:22 +00:00
Steven Barth
4d37ae33b6 6relayd: Overridden DNS should affect DHCPv6 
SVN-Revision: 37558
 2013-07-26 11:59:25 +00:00
Felix Fietkau
8faa8a6420 uhttpd: update to latest version, fixes issues with POST and keep-alive (#13940) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37556
 2013-07-26 10:03:07 +00:00
Felix Fietkau
3d2ace5d71 authsae: add myself as a maintainer 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37555
 2013-07-26 10:03:03 +00:00
Felix Fietkau
4478c69b86 authsae: adapt uci scripts to use authsae 
This patch modifies the uci scripts to be able to
start meshd-nl80211 for encrypted mesh networks,
therefor a new script (authsae.sh) is inserted.

Signed-off-by: Emanuel Taube <emanuel.taube@gmail.com>
[etienne.champetier@free.fr: just update mac80211.sh path]
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37554
 2013-07-26 10:02:59 +00:00
Felix Fietkau
6dbea6416b authsae 80211s authentication daemon 
This patch adds authsae open80211s authentication daemon (http://open80211s.org)
It's a rework of Peter Naulls patch (http://patchwork.openwrt.org/patch/1350/)
I've excluded the sample conf file as it's useless when used with mac80211.sh (Emanuel Taube patch)
It now link against libnl-tiny instead of libnl (patch merged in authsae git)
Authsae is 58 Ko (OPENSSL_WITH_EC option adds 35Ko to libopenssl)

Signed-off-by: Peter Naulls <peter@chocky.org>
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37553
 2013-07-26 10:02:55 +00:00
Felix Fietkau
85e585ddce ead: fix compile errors with recent kernels 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37482
 2013-07-20 12:56:07 +00:00
Hauke Mehrtens
96f1953fb1 kernel: fix xtables-addons dependencies with kernel 3.3 
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 37461
 2013-07-19 22:36:47 +00:00
Jo-Philipp Wich
7bbe1656cb xtables-addons: use a select of kmod-ipt-core instead of depending on it 
SVN-Revision: 37425
 2013-07-19 09:58:17 +00:00
Jo-Philipp Wich
d474a77edf xtables-addons: add missing kmod dependencies 
SVN-Revision: 37424
 2013-07-19 09:58:11 +00:00
Jo-Philipp Wich
d6e8047f83 firewall: update to git head 
- handles redirects as port relocations if the dest_ip points to the router itself

SVN-Revision: 37374
 2013-07-16 14:04:59 +00:00
Steven Barth
54ae5ce507 netifd: Fix IPv6-prefix assignment with continuous hints 
SVN-Revision: 37371
 2013-07-16 12:07:11 +00:00
Steven Barth
6a034ce5b1 6relayd: Fix DHCPv6-PD with continuous hints 
SVN-Revision: 37370
 2013-07-16 12:07:06 +00:00
Steven Barth
0444e32acd Bump iptables version 
SVN-Revision: 37329
 2013-07-15 06:12:07 +00:00
Steven Barth
ea6a5d0c22 iptables: restore reap functionality to recent module 
The reap functionality appears to have been accidentally disabled by
commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see:

  git://git.netfilter.org/iptables.git

and subsequently in iptables 1.4.15 and later.  This adds a patch to
restore reap functionality for recent_opts_v1.

Signed-off-by: Russell Senior <russell@personaltelco.net>

SVN-Revision: 37328
 2013-07-15 06:12:03 +00:00
Luka Perkov
1a963355b0 netifd: update to latest version, add bridge_empty option 
with this option enabled it's possible to create empty bridges

Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37318
 2013-07-14 18:50:04 +00:00
John Crispin
7d7c2ff5f9 swconfig: fix dependency bug introduced by [37304] 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37316
 2013-07-14 18:16:42 +00:00
Hauke Mehrtens
f8d55e7541 brcm47xx: use b53 phy driver for the switch in kernel 3.10 
This makes it possible to use swconfig to controll the switch.

This was tested with devices using b43 and bgmac.
This was not tested on devices using tg3.
This does not support the adm switch used in some very old devices.

SVN-Revision: 37304
 2013-07-14 14:11:17 +00:00
John Crispin
8d546699c5 dropbear: register a config.change trigger 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37245
 2013-07-11 17:00:40 +00:00
Felix Fietkau
4e042e4a84 ipset: force the shell to bash to fix build issues on mac os x 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37227
 2013-07-10 14:59:00 +00:00
Felix Fietkau
4a0c312dc3 xtables-addons: update to version 2.3, adds linux 3.10 compatibility 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37226
 2013-07-10 14:51:13 +00:00
Felix Fietkau
f98f69adc9 firewall: add missing dependencies 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37224
 2013-07-10 11:33:48 +00:00
John Crispin
fc40051569 lantiq: move dsl tools to package/network/config 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37198
 2013-07-08 09:01:38 +00:00
Luka Perkov
4a7439401b linux-atm: fix dependencies 
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37189
 2013-07-08 00:37:49 +00:00
Jo-Philipp Wich
4aa82d07a6 firewall: allow routed lan<->lan traffic by default 
SVN-Revision: 37171
 2013-07-04 18:10:36 +00:00
Jo-Philipp Wich
2561bce232 lldpd: upgrade to 0.7.5 
lldpd 0.7.1 has several alignment issues that trip a system configured
to fault on misaligned accesses.  Version 0.7.5 fixes that along with a
few other minor issues.

Signed-off-by: John Szakmeister <john@szakmeister.net>

SVN-Revision: 37168
 2013-07-04 16:57:03 +00:00
Steven Barth
e3a369e597 odhcp6c: avoid integer overflows in resend logic 
SVN-Revision: 37150
 2013-07-03 16:14:24 +00:00
Steven Barth
b9aa47d5b6 odhcp6c: add missing config parameter 
SVN-Revision: 37148
 2013-07-03 13:50:06 +00:00
Jo-Philipp Wich
7c197d9f0e hostapd: truncate default mac file before adding entries to it (#13797) 
SVN-Revision: 37114
 2013-07-01 10:52:35 +00:00
Felix Fietkau
ee68734929 hostapd: fix multi-ssid and AP+STA, clean up code 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37111
 2013-06-30 21:01:13 +00:00
Felix Fietkau
60b040bbaf hostapd: update to latest git version 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37110
 2013-06-30 20:27:38 +00:00
Felix Fietkau
12c033dfd9 mac80211: update to wireless-testing 2013-06-27, fix ATH_USER_REGD handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37097
 2013-06-30 10:44:19 +00:00
Jo-Philipp Wich
2d506f46fb firewall: update to git head 
- uses custom formatting for mac addresses to ensure leading zeroes, required for older iptables mac match parser

SVN-Revision: 37082
 2013-06-29 13:28:27 +00:00
Steven Barth
d8051a8814 netifd: fix typo in dhcp script 
SVN-Revision: 37051
 2013-06-28 04:19:21 +00:00
Florian Fainelli
fe7c236a06 6relayd: prevent build on AVR32 
AVR32 misses a bunch of updated syscalls, including timerfd_create()
which is used by 6relayd. Since that requires Linux/libc changes, just
prevent building it for now.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 37040
 2013-06-27 15:33:05 +00:00
Steven Barth
cb66ed972b odhcp6c: Add missing config option "ifaceid" 
SVN-Revision: 37033
 2013-06-25 05:18:20 +00:00
John Crispin
e7dbdad43b hostapd: fix superflous coma 
this cause the wps trigegr to be copied to the wrong place

https://dev.openwrt.org/ticket/13753

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37031
 2013-06-24 16:44:18 +00:00
Steven Barth
eecce5abad arptables: Bump to 0.0.4 
SVN-Revision: 37020
 2013-06-24 05:48:12 +00:00
Steven Barth
69cd09ebbf 6relayd: don't accidentally remove regular prefix routes 
SVN-Revision: 37018
 2013-06-23 16:26:09 +00:00
Steven Barth
f47c4c80d4 6relayd: fix lease-update behaviour for clients without reconfigure 
SVN-Revision: 37011
 2013-06-22 08:31:28 +00:00
Steven Barth
d0d5f109d8 6relayd: Keep PD-downstream across RENEW/REBIND 
SVN-Revision: 37009
 2013-06-22 08:19:25 +00:00
John Crispin
4ebf19b48f packages: clean up the package folder 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37007
 2013-06-21 16:54:37 +00:00
John Crispin
4999ae4236 hostapd: remove old button hotplug script 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36991
 2013-06-21 16:53:07 +00:00
Steven Barth
5108318edb 6relayd: Fix DHCPv6-PD assignment logic 
SVN-Revision: 36980
 2013-06-21 06:15:09 +00:00
Steven Barth
de2a7547b7 6relayd: correctly set downstream routes for DHCPv6-PD 
SVN-Revision: 36969
 2013-06-19 13:08:33 +00:00
Felix Fietkau
b4babf9f81 netifd: update to latest version, fixes a NULL pointer deref bug 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36965
 2013-06-18 16:24:48 +00:00
Jo-Philipp Wich
65f82e2311 firewall: update to git head 
- fixes misprocessing of unknown symbolic protocol names

SVN-Revision: 36963
 2013-06-18 14:30:51 +00:00
Jo-Philipp Wich
37ae268729 firewall: update to git head 
- fixes calculation of IPv4 netmasks derived from 0.0.0.0/0 CIDRs

SVN-Revision: 36960
 2013-06-18 14:14:35 +00:00
Steven Barth
5219d38da2 odhcp6c: Add option to override interface identifier in RA-client 
SVN-Revision: 36959
 2013-06-18 12:51:14 +00:00
Steven Barth
9f1899242c netifd: IPv6: Fix sorting order in last commit. 
SVN-Revision: 36952
 2013-06-17 21:29:14 +00:00
Steven Barth
213269a8f7 netifd: Satisfy IPv6 assignments ordered by prefix length 
SVN-Revision: 36950
 2013-06-17 21:16:22 +00:00
Jo-Philipp Wich
541fbfbb9e hostapd: correctly handle macfile uci option 
Make hostapd.sh correctly handle the macfile uci option.

Such option specifies the macfile name to pass into the
hostapd configuration file. Moreover, if a maclist option
has been specified, copy the macfile before appending new
entries.

Signed-off-by: Antonio Quartulli <antonio@open-mesh.com>

SVN-Revision: 36944
 2013-06-17 11:59:29 +00:00
Jo-Philipp Wich
dfea3bae11 dnsmasq: use host-record instead of address 
Using "--address" for individual host A records is broken, use "--host-record" instead.
The following patch changes dnsmasq.init to build individual host records using "--host-record" instead of "--address".

Signed-off-by: Adam Gensler <openwrt at gnslr.us>

[jow: shorter description, simplified shell script code]

SVN-Revision: 36943
 2013-06-17 11:55:30 +00:00
Jo-Philipp Wich
36d3fafd77 firewall: update to git head 
- properly process intermediate "!" options in argument list (fixes negated ipsets)

SVN-Revision: 36935
 2013-06-13 18:54:49 +00:00
Jo-Philipp Wich
0db38adf1c firewall: update to git head 
- fixes handling of reject target for rule sections with specific destination zone

SVN-Revision: 36933
 2013-06-13 12:49:00 +00:00
Jo-Philipp Wich
1150e299bb uhttpd: expose missing options to uci 
SVN-Revision: 36932
 2013-06-13 11:55:12 +00:00
Steven Barth
302cf427cb odhcp6c: add sanity checks for NDP and MTU parameters from RAs 
SVN-Revision: 36930
 2013-06-13 06:38:48 +00:00
Steven Barth
4f0a0defa6 6relayd: make route preference and prefix on-link flag configurable 
SVN-Revision: 36922
 2013-06-11 20:52:27 +00:00
Steven Barth
f6dd266c97 iproute2: add drop-failed rule action (patch by Jonas Gorski) 
SVN-Revision: 36910
 2013-06-11 09:27:46 +00:00
Felix Fietkau
9fb5bf176e netifd: update to latest version, uses the new uci/blob code from libuci 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36909
 2013-06-10 12:42:30 +00:00
Steven Barth
5caa45d0b3 ppp: correctly handle address when reloading 
SVN-Revision: 36904
 2013-06-10 10:42:34 +00:00
Steven Barth
491deaed2c netifd: improve reloading behaviour 
SVN-Revision: 36903
 2013-06-10 10:42:15 +00:00
Jo-Philipp Wich
bc73ca5619 iwinfo: add phyname attribute, this is useful to group networks by radio phy 
SVN-Revision: 36889
 2013-06-09 14:39:14 +00:00
Jo-Philipp Wich
cb24c37858 libiwinfo: ignore log messages from wpa_supplicant while scanning 
wpa_supplicant may send log and event messages intermixed with the
expected scan results.  This makes "iwinfo wlan0 scan" and LuCI
"site survey" display nothing when many AP's are around.

Eliminate the CTRL-EVENT-BSS-ADDED events, interspersed log messages,
lines with unexpected format.  Increase timeout to handle the max
number of channels (2.4, 3.6, 4.9, 5 GHz).  Insure receive buffer is
null-terminated.

Signed-off-by: Jean-Pierre Tosoni <jp.tosoni@acksys.fr>

SVN-Revision: 36888
 2013-06-09 14:39:09 +00:00
Steven Barth
f995c90329 netifd: Improve IPv6 source-routing policies 
SVN-Revision: 36884
 2013-06-08 13:26:33 +00:00
Jonas Gorski
b9de8ca7f5 netifd: bring wifi down before shutting down 
works around wifiX references not being freed on network restart.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 36883
 2013-06-08 11:44:12 +00:00
Jo-Philipp Wich
e7b15446a8 firewall: udpate to git head (#13652, #13654, #13658) 
- optimizes chain usage for ingress rules
  - adds limit match support for redirect rules
  - fixes automatic redirect dest detection on little endian systems
  - leaves base chains in place on reload to allow user rules to target e.g. "reject"

SVN-Revision: 36871
 2013-06-06 14:12:02 +00:00
Jo-Philipp Wich
5cf06bd17b firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols 
SVN-Revision: 36868
 2013-06-06 14:02:29 +00:00
Jo-Philipp Wich
e94cf1c72b iptables: install libext*.a into staging dir 
SVN-Revision: 36867
 2013-06-06 14:02:24 +00:00
Jo-Philipp Wich
ecc95dcba8 firewall: update to git head (#13652) 
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
  - uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones

SVN-Revision: 36854
 2013-06-05 11:40:40 +00:00
Jo-Philipp Wich
0a74d9d5c3 firewall3: fix accidentally changed install directive 
SVN-Revision: 36840
 2013-06-04 12:30:50 +00:00
Jo-Philipp Wich
07a3110e88 firewall: fix git source url 
SVN-Revision: 36839
 2013-06-04 12:23:47 +00:00
Jo-Philipp Wich
b721c92221 firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA 
SVN-Revision: 36838
 2013-06-04 12:21:52 +00:00
Jo-Philipp Wich
0dd6753c09 Drop legacy firewall package 
SVN-Revision: 36837
 2013-06-04 12:21:44 +00:00
Jo-Philipp Wich
6f60308257 firewall3: update to git head (#13641) 
* Fixes wrong chain used for zone forward policy

SVN-Revision: 36830
 2013-06-04 10:26:49 +00:00
Jo-Philipp Wich
6eeca5176e firewall3: update to git head 
- Fixes problems with reusing matches or targets from loadable extensions

SVN-Revision: 36826
 2013-06-03 16:38:29 +00:00
Felix Fietkau
8c69057980 uhttpd: update to latest version, fixes CGI related crashes 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36817
 2013-06-01 21:43:06 +00:00
Steven Barth
089d6612ce 6relayd: Work around Windows DHCPv6 quirks Announcing deprecated addresses breaks Windows clients 
SVN-Revision: 36815
 2013-06-01 17:51:02 +00:00
Steven Barth
7ae506c7d4 odhcp6c: work around spurious false-positive address DECLINEs 
SVN-Revision: 36809
 2013-05-31 13:49:17 +00:00
Jo-Philipp Wich
3bb397c997 firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly 
SVN-Revision: 36806
 2013-05-31 13:23:23 +00:00
Steven Barth
bf582fbb7b odhcp6c: fix handling of multiple RAs in a row 
SVN-Revision: 36804
 2013-05-31 10:02:39 +00:00
Steven Barth
cdc3caf533 6relayd: Better compatibility with misbheaving DHCPv6 clients * Make the "best" address / prefix the first one being announced * Only add the "best" address to the hosts-file 
SVN-Revision: 36772
 2013-05-30 15:42:30 +00:00
Steven Barth
519f27cd33 netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes 
SVN-Revision: 36771
 2013-05-30 15:42:25 +00:00
Felix Fietkau
02fe12c00d uhttpd: update again to fix a ubus plugin crash bug 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36770
 2013-05-30 13:16:38 +00:00
Felix Fietkau
eeb7fdc13e uhttpd: update to latest version, fixes script timeout for ubus requests 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36767
 2013-05-30 10:44:20 +00:00
Steven Barth
dc6625f977 6relayd: more verbosity in leases and logging 
SVN-Revision: 36764
 2013-05-30 07:56:55 +00:00
Steven Barth
56a3396bf2 iptables: bump to 1.4.19.1 
SVN-Revision: 36760
 2013-05-29 14:58:04 +00:00
Steven Barth
439fdd4d65 netifd: fix IPv6-addresses disappearing due to lifetime-overflows 
SVN-Revision: 36748
 2013-05-28 18:32:01 +00:00
Steven Barth
23b3cebd56 odhcp6c: fix or debug disappearing IPv6 addresses 
SVN-Revision: 36745
 2013-05-28 16:28:14 +00:00
Felix Fietkau
e6250644be mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36743
 2013-05-28 11:10:41 +00:00
Steven Barth
61c0c6ab68 6relayd: RFC 6204 and naming improvements * Announce delegated prefixes using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default 
SVN-Revision: 36738
 2013-05-27 20:38:13 +00:00
Jo-Philipp Wich
63603ee478 firewall3: update to git head 
- allows building without IPv6 support
	- uses more robust rules to cope with missing libext.a
	- uses better linking strategy to avoid symbol clashes with older iptables
	- introduces source compatiblity layer for different libxtables versions

SVN-Revision: 36736
 2013-05-27 15:13:19 +00:00
Jo-Philipp Wich
e4f8c38ed1 firewall3: update to git head 
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
  - automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
  - properly support output rules with dest '*' to hook directly into delegate_output
  - fixes crash when processing rules with unresolved targets

SVN-Revision: 36721
 2013-05-26 15:48:04 +00:00
Steven Barth
f63064a257 6relayd: Fix DHCPv6-server picking up addresses from master interface 
SVN-Revision: 36718
 2013-05-26 10:06:02 +00:00
Jo-Philipp Wich
90887b5fb3 firewall3: update to git head 
- fixes linking issues with some toolchains

SVN-Revision: 36703
 2013-05-24 12:49:06 +00:00
Steven Barth
d8d7d7f4aa 6relayd: fix a lease-timing issue with stateful DHCPv6 
SVN-Revision: 36702
 2013-05-24 12:31:30 +00:00
Jo-Philipp Wich
c1ff8cd9bb firewall3: update to git head 
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
  - Do not leak memory when processing rules with unknown targets or matches

SVN-Revision: 36698
 2013-05-23 13:07:44 +00:00
Felix Fietkau
75bb3138aa uhttpd: update to latest version, fixes #13564, #13560, improves error handling as pointed out in #13537 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36696
 2013-05-23 10:50:42 +00:00
Steven Barth
32c6ffb5a1 firewall3: Remove abandonend include 
SVN-Revision: 36692
 2013-05-23 06:38:25 +00:00
Jo-Philipp Wich
b757ca2259 firewall3: update to git head 
- fix build on Linux < 3.7
  - limit zone names to 14 bytes

SVN-Revision: 36691
 2013-05-22 14:15:53 +00:00
Steven Barth
9c3ac668e0 6relayd: Let OpenWrt override default CFLAGS 
SVN-Revision: 36690
 2013-05-22 11:58:54 +00:00
Jo-Philipp Wich
c12189b379 firewall3: update to git head 
- fixes reload when firewall is not running already
  - fixes crash when ipsets are supported but undeclared
  - fixes handling of per zone user chains on reload

SVN-Revision: 36689
 2013-05-22 11:37:41 +00:00
Steven Barth
9d115df749 6relayd: Fix a segfault when multiple downstream interfaces are present 
SVN-Revision: 36687
 2013-05-21 18:05:37 +00:00
Jo-Philipp Wich
dd83e87ab0 firewall3: update to git head 
- fixes segfault in flush command if ipset support is not available
  - fixes internal rule generation if custom chains are enabled

SVN-Revision: 36686
 2013-05-21 14:49:37 +00:00
Jo-Philipp Wich
6eec8009ba ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base 
SVN-Revision: 36685
 2013-05-21 13:00:28 +00:00
Jo-Philipp Wich
9b6c31d4cc firewall3: move libext*.a copying to compile phase 
SVN-Revision: 36684
 2013-05-21 12:58:36 +00:00
Jo-Philipp Wich
8df6cd005c netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset 
SVN-Revision: 36683
 2013-05-21 12:58:15 +00:00
Jo-Philipp Wich
e8050c6c35 firewall3: update to git head 
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
 * make ipset integration more reliable

SVN-Revision: 36681
 2013-05-21 10:15:14 +00:00
Jo-Philipp Wich
a9a9644efd iptables: use -ffunction-sections, -fdata-sections and --gc-sections 
SVN-Revision: 36680
 2013-05-21 10:15:10 +00:00
Steven Barth
24c39ddcf7 odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests 
SVN-Revision: 36678
 2013-05-21 09:13:48 +00:00
Steven Barth
37baf2d6b2 6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better 
SVN-Revision: 36677
 2013-05-21 09:13:40 +00:00
Steven Barth
c6f70381c9 odhcp6c: Fix address / prefix expiry logic 
SVN-Revision: 36675
 2013-05-20 14:54:20 +00:00
Steven Barth
dd161ae62b dnsmasq: add directory for external hosts-files 
SVN-Revision: 36655
 2013-05-17 14:44:12 +00:00
Steven Barth
334c40da14 6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD 
SVN-Revision: 36654
 2013-05-17 14:44:07 +00:00
Steven Barth
0f1be4425f netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4 
Based on a patch by Kristian Evensen. Thank You.

SVN-Revision: 36653
 2013-05-17 14:44:02 +00:00
Felix Fietkau
7365e647f6 uhttpd: update to latest version, fixes index page processing order 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36644
 2013-05-16 11:38:19 +00:00
Luka Perkov
4fc8e64a40 iproute2: workaround compile issues with gcc 4.8.x 
SVN-Revision: 36642
 2013-05-16 00:04:48 +00:00
Steven Barth
a62ca72309 odhcp6c: Fix handling of RAs when no DHCPv6-server is present 
SVN-Revision: 36641
 2013-05-15 11:07:01 +00:00
Luka Perkov
580481cd6d iproute2: upgrade to 3.9.0 
SVN-Revision: 36638
 2013-05-14 23:49:34 +00:00