Hauke Mehrtens
2cc83fe501
xtables-addons: #15516 Fix compile under linux 3.14
...
Add compatibility inline function.
Signed-off-by: Jan Kardell <jan.kardell@telliq.com>
SVN-Revision: 40613
2014-04-30 22:15:40 +00:00
Steven Barth
ef9f0fa232
odhcp6c: add preliminary support for MAP provisioning
...
SVN-Revision: 40604
2014-04-30 15:52:30 +00:00
Felix Fietkau
d33c6f7b80
netifd: update to the latest version, fixes a use-after-free bug on wireless config reload
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40589
2014-04-29 13:18:59 +00:00
Hauke Mehrtens
513b796698
authsae: Update to latest version
...
Ping tested, add a cool fix
295164a837
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>
SVN-Revision: 40579
2014-04-27 20:49:14 +00:00
Felix Fietkau
e795250a1e
hostapd: fix eglibc 2.15 support
...
This patch fixes compilation failure for hostapd when using eglibc 2.15.
Signed-off-by: Zachery Stoddard <zacherystoddard@gmail.com>
SVN-Revision: 40575
2014-04-27 18:30:50 +00:00
Felix Fietkau
b4532ad21e
netifd: update to the latest version, fixes some route table and dynamic interface issues
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40572
2014-04-26 19:48:11 +00:00
Felix Fietkau
8a831de514
hostapd: update to version 2014-04-24, fixes some dfs related issues
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40571
2014-04-26 19:48:06 +00:00
Steven Barth
e1bd4e9aa4
odhcpd: better dhcpv6 client-compatibility (thanks Hans Dedecker)
...
SVN-Revision: 40567
2014-04-24 09:36:01 +00:00
Steven Barth
c4e09ccb05
6rd: Select first IPv4 address from configured tunlink interface as local tunnel address
...
Gives the user the control to select the correct WAN IPv4 address to be used by the 6rd tunnel when mutiple WAN interfaces are configured
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
SVN-Revision: 40566
2014-04-24 09:11:44 +00:00
Felix Fietkau
b079019bd9
netifd: update to latest version, adds support for disabling interfaces
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40555
2014-04-22 17:28:14 +00:00
Felix Fietkau
3c95232ab7
netifd: update to the latest version, fixes some more issues related to l3_dev handling
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40529
2014-04-19 09:58:40 +00:00
Steven Barth
ba6689b064
ds-lite: disable NAT according to RFC 7084
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 40511
2014-04-14 10:11:54 +00:00
Steven Barth
daf69ee1da
firewall: add support for nat-rules and netifd-proto-originating rules
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 40510
2014-04-14 10:11:34 +00:00
Felix Fietkau
4d0f5b36c4
iw: sync nl80211.h (fixes settting antenna_gain)
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40503
2014-04-13 09:53:51 +00:00
John Crispin
3bc77db5f5
802.11s: fix authsae support in netifd
...
This patch implements support for 802.11s protected mesh wireless networks (using authsae) in the netifd framework.
Until meshd-nl80211 implements a proper -P option for the PID file, this uses shell backgrounding in order to be able to get the PID for the process.
Signed-off-by: Vittorio Gambaletta <openwrt@vittgam.net>
SVN-Revision: 40497
2014-04-12 21:22:17 +00:00
Felix Fietkau
0d7e8ba3a9
hostapd: fix "bad number" error due to missing wps_pbc_in_m1 option (since r39995)
...
r39995 introduced a new parameter wps_pbc_in_m1 to wifi wps config, but
apparently did not provide a default value 0.
When that option's non-existing value is later evaluated in
/lib/netifd/hostapd.sh, it causes the "bad number" error to be logged in
syslog if user has not set the wps_pbc_in_m1 option. The error materialises
only if user has enabled wps.
Sat Apr 12 13:25:01 2014 daemon.notice netifd: radio1 (1254): sh: bad number
Sat Apr 12 13:25:01 2014 daemon.notice netifd: radio0 (1253): sh: bad number
Discussion in bug 15508: https://dev.openwrt.org/ticket/15508#comment:3
Error is caused by line 282:
https://dev.openwrt.org/browser/trunk/package/network/services/hostapd/files/netifd.sh#L282
My patch sets the parameter's default value to 0, which does nothing. The
default might also be set a bit later in the function, but this felt like the
most clear place to do that.
Signed-off-by hnyman <hannu.nyman@iki.fi>
SVN-Revision: 40469
2014-04-12 14:28:34 +00:00
John Crispin
390e856cb2
lantiq: more vdsl related cleanups
...
* atm module needs to be loaded before linux-atm
* use absolute firmware paths
* extended validation
* add a script for mounting an optional firmware partition
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 40460
2014-04-11 20:40:24 +00:00
Felix Fietkau
7b960069a2
netifd: switch to using git.openwrt.org
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40459
2014-04-11 20:28:55 +00:00
Jo-Philipp Wich
e0a3e3d1b6
uhttpd: do not attempt to configure Lua handler if referenced file does not exist
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 40457
2014-04-11 16:13:27 +00:00
Felix Fietkau
92ab194d63
netifd: update to latest version, adds a force_link parameter to bring up an interface without active device carrier
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40456
2014-04-11 13:48:41 +00:00
Felix Fietkau
a28b8ecc47
netifd: update to the latest version, fixes some reload issues with proto=static
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40449
2014-04-10 15:21:13 +00:00
Felix Fietkau
8a7a02bd2e
netifd: fix a regression related to ppp + multiple updates (ipv4 + ipv6)
...
Fixes #15504
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40443
2014-04-10 11:31:21 +00:00
John Crispin
eebc673f1e
lantiq: move the dsl-modem config to network.@dsl-modem[-1]
...
make sure uci_defaults generates a proper uci config for the v/adsl modem
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 40439
2014-04-10 08:14:33 +00:00
John Crispin
8bfe9acecf
lantiq: vdsl init.d script should auto start
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 40438
2014-04-09 16:36:28 +00:00
John Crispin
76e873a289
lantiq: cleanup vdsl driver bringup
...
config interface 'wan'
# a, b, j
option annex b
# a, b, av, bv
option tone b
# vdsl.bin
option firmware
# atm, ptm
option xfer_mode atm
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 40437
2014-04-09 16:31:24 +00:00
Steven Barth
9efa78ebeb
odhcpd: use correct defaults for interfaces not in UCI
...
SVN-Revision: 40435
2014-04-09 12:29:43 +00:00
Steven Barth
d2d8970828
odhcp6c: fix recovering from status where all addresses have been lost
...
SVN-Revision: 40432
2014-04-09 06:57:04 +00:00
Steven Barth
4abcae7a1c
ds-lite: compatibility with ISPs that only offer public PDs
...
SVN-Revision: 40422
2014-04-08 06:19:37 +00:00
Felix Fietkau
255546bbfd
netifd: update to the latest version, fixes a l3_dev handling regression leading to a crash
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40414
2014-04-07 11:12:06 +00:00
Steven Barth
057900bfd1
odhcpd: improve managed PD
...
SVN-Revision: 40395
2014-04-06 14:34:45 +00:00
Felix Fietkau
8994b4b191
hostapd: update to version 2014-04-04
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40394
2014-04-06 12:13:55 +00:00
Felix Fietkau
6d3672b13b
odhcp6c: Add renew handler for proto dhcpv6
...
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
SVN-Revision: 40386
2014-04-05 18:17:25 +00:00
Felix Fietkau
dca014db76
netifd: Add renew handler for proto dhcp
...
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
SVN-Revision: 40385
2014-04-05 18:17:22 +00:00
Felix Fietkau
0dd2d18400
netifd: update to latest version, fixes issues when l3 interface changes on reload (e.g. ppp -> dhcp/static)
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40384
2014-04-05 18:17:18 +00:00
John Crispin
f464b7d176
lantiq: cleanup the dsl control scripts
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 40381
2014-04-05 16:34:20 +00:00
Steven Barth
e544c1607a
odhcpd: add preliminary support for managed DHCPv6-PD and CER-ID
...
SVN-Revision: 40355
2014-04-01 18:52:09 +00:00
Steven Barth
a22190340a
odhcp6c: add preliminary CER-ID support
...
SVN-Revision: 40351
2014-03-31 06:43:50 +00:00
John Crispin
c78af071de
samba36: revert r40341
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 40343
2014-03-30 19:05:25 +00:00
John Crispin
ca1a527187
samba: update to 3.6.23 Signed-off-by: John Crispin <blogic@openwrt.org>
...
SVN-Revision: 40341
2014-03-30 19:03:12 +00:00
John Crispin
c7168b64ef
dhcp: Fix broadcast parameter validation support, remove unused netmask parameter
...
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
SVN-Revision: 40332
2014-03-30 13:07:52 +00:00
John Crispin
1335853ae5
ltq-vdsl: add led status reporting
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 40322
2014-03-30 09:16:27 +00:00
Felix Fietkau
3ecffab050
dropbear: move options.h editing to Build/Configure
...
fixes incremental build with change to CONFIG_DROPBEAR_ECC
drop --with-shared which is unknown to configure
Patch by Catalin Patulea <cat@vv.carleton.ca>
SVN-Revision: 40300
2014-03-29 17:10:52 +00:00
Felix Fietkau
f2fdd8ebdb
dropbear: add options SSHKeepAlive and IdleTimeout.
...
Without timeout mechanism, if ssh client disconnected without sending
FIN or RST, forked dropbear servers would hang there for
KEX_RETRY_TIMEOUT seconds (8 hours).
TCP keepalive is not implemented in dropbear yet, thus the name
SSHKeepAlive.
300 seconds in this patch is selected from the default value of
ServerAliveInterval for Debian ssh client (See man ssh_config).
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
SVN-Revision: 40299
2014-03-29 17:05:35 +00:00
Felix Fietkau
dd5a12c5a1
dropbear: fix interface config setting
...
Patch from #15070
SVN-Revision: 40298
2014-03-29 16:59:33 +00:00
Felix Fietkau
ad52658be7
dropbear: update to 2014.63
...
Upstream changelog:
https://matt.ucc.asn.au/dropbear/CHANGES
This adds elliptic curve cryptography (ECC) support as an option, disabled
by default.
dropbear mips 34kc uClibc binary size:
before: 161,672 bytes
after, without ECC (default): 164,968
after, with ECC: 198,008
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>
SVN-Revision: 40297
2014-03-29 16:59:26 +00:00
Steven Barth
0555ebf66d
6rd / ds-lite: make the firewall-zones of nested-protocols configurable
...
SVN-Revision: 40020
2014-03-26 10:12:49 +00:00
Steven Barth
2a893c2057
dhcp: send 6rd-ORO when expecting 6rd-information
...
SVN-Revision: 40019
2014-03-26 09:48:20 +00:00
Felix Fietkau
abd13cd85b
uhttpd: update to latest version, improves cgi path handling
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40005
2014-03-22 19:38:48 +00:00
Felix Fietkau
9138e8015e
uhttpd: update to latest version, fixes HEAD requests to CGI scripts
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40003
2014-03-21 20:49:56 +00:00
Felix Fietkau
5c53e63836
netifd: update to the latest version, adds support for reloading proto handlers on toplogy changes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40001
2014-03-21 15:55:27 +00:00
Felix Fietkau
c53c7a0fe0
hostapd: add pbc_in_m1 option
...
Option pbc_in_m1 is being used as a WPS capability discovery
workaround for PBC with Windows 7.
Add possibility to enable this workaround from UCI.
To enable it, turn on wps and set wps_pbc_in_m1 parameter to 1.
Signed-off-by: Pawel Kulakowski <pawel.kulakowski@tieto.com>
SVN-Revision: 39995
2014-03-21 15:55:03 +00:00
Felix Fietkau
5a6f00b846
ead: clean up
...
Remove unused variables
Correct some (non important) memory leaks
Remove fclose(NULL)
Correct possible out of bound access
spotted with cppcheck
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>
SVN-Revision: 39994
2014-03-21 15:54:59 +00:00
Felix Fietkau
7c029cc262
ead: set_nonblock() is doing nothing (typo)
...
spotted with cppcheck
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>
SVN-Revision: 39993
2014-03-21 15:54:56 +00:00
Felix Fietkau
0945555e14
ppp: remove ppp requirement from chat
...
This patch removes dependancy of PPP from chat application as chat application can be used for other serial communication as well that is not dependant on PPP and therefore one should be able to install chat without PPP. There also are no dependencies within chat application for PPP.
Signed-off-by: Oskari Rauta <oskari.rauta at gmail.com>
SVN-Revision: 39992
2014-03-21 15:54:52 +00:00
Felix Fietkau
3eb2d6d5d4
netifd: update to the latest version, fixes ubus handling of proto data items
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39970
2014-03-20 20:06:59 +00:00
Felix Fietkau
e926cfd9ac
netifd: update to latest version, fixes an autostart handling with link detection
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39967
2014-03-20 13:57:28 +00:00
Felix Fietkau
66393168d3
firewall: update to latest version, fixes a musl build error
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39965
2014-03-20 13:51:43 +00:00
Felix Fietkau
0ccec8179d
iptables: fix issues with the new musl version
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39964
2014-03-20 13:51:40 +00:00
Felix Fietkau
7fa3fe6741
pppd: fix build errors with musl
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39963
2014-03-20 13:51:36 +00:00
Steven Barth
f4ace532c8
odhcpd: fix more segfaults + ubus interaction
...
SVN-Revision: 39960
2014-03-20 12:25:17 +00:00
Steven Barth
b5cc199ec9
odhcpd: fix possible segfaults
...
SVN-Revision: 39958
2014-03-20 09:39:00 +00:00
Felix Fietkau
ad72198abb
netifd: update to latest version, adds support for specifying a config path
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39956
2014-03-19 14:26:51 +00:00
Felix Fietkau
b9825247c2
polarssl: update to version 1.3.4 and add openssl compat patch
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39930
2014-03-14 15:05:46 +00:00
Steven Barth
7ac0057c1f
odhcp6c: pass on delegate-flag on to ds-lite interface
...
SVN-Revision: 39910
2014-03-13 10:40:56 +00:00
Steven Barth
edd75e332c
netifd: pass on delegate flag from dhcp to 6rd
...
SVN-Revision: 39909
2014-03-13 10:33:26 +00:00
John Crispin
7baf4957cf
72ca3bfc401a4f1b695dcc86640dddee62716cea contained too many files
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39908
2014-03-13 07:42:59 +00:00
John Crispin
0dc9d8d6ff
fstools: add the new fstools package
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39895
2014-03-12 19:32:51 +00:00
Steven Barth
97ea9e3c2a
iptables/netfilter: add connlimit to conntrack-extra
...
SVN-Revision: 39878
2014-03-11 14:58:00 +00:00
Steven Barth
09fd40c28f
iptables: bump to 1.4.21
...
SVN-Revision: 39877
2014-03-11 14:57:55 +00:00
Felix Fietkau
75ac488f4d
openvpn: make size optimization configurable
...
Signed-off-by: Christoph Kottke <christoph.kottke@gmx.de>
SVN-Revision: 39872
2014-03-11 12:07:17 +00:00
Felix Fietkau
83f9fc12d6
netifd: update to latest version, includes interface handling fixes by Hans Dedecker
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39870
2014-03-11 09:28:28 +00:00
Steven Barth
cd695565fb
odhcpd/odhcp6c: fix HMAC-MD5 in DHCPv6-Reconfigure
...
SVN-Revision: 39868
2014-03-11 08:21:58 +00:00
Felix Fietkau
24dae38f43
iproute2: add ip-full variant to disable IP_CONFIG_TINY
...
This change creates a new ip-full variant for the ip package.
It disables IP_CONFIG_TINY to make some iproute2 features available like xfrm, gretap, ...
Signed-off-by: Thomas Wouters <thomaswouters@gmail.com>
SVN-Revision: 39854
2014-03-09 13:32:59 +00:00
Felix Fietkau
452d019d3e
netifd: update to latest version, adds a bridge reload fix and fixes #15157
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39791
2014-03-07 18:14:41 +00:00
Steven Barth
d3f39e89a3
odhcp6c: fix int-overflow after 50d (thx Hauke Mehrtens)
...
SVN-Revision: 39785
2014-03-07 09:35:17 +00:00
Steven Barth
f294f23c02
netifd: don't incorrectly announce up-status via ubus
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 39777
2014-03-05 17:36:14 +00:00
Steven Barth
0a3cb4cdff
odhcp6c: several fixes
...
* Reduce RA/DHCPv6 spam filter to 30s by default and make it configurable
* Don't set nd_ra_{reachable,retransmit] to 0 when received in RAs
SVN-Revision: 39775
2014-03-05 08:59:11 +00:00
Felix Fietkau
a9d4cd35fc
hostapd: fix deletion of wds sta interfaces in AP mode
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39765
2014-02-28 14:43:53 +00:00
Steven Barth
1b3a868309
netifd: Reintroduce link-layer sensing (thx Hans Decker, Karl Vogel)
...
SVN-Revision: 39757
2014-02-27 12:42:38 +00:00
Steven Barth
0bf9032145
netifd: don't always assume addrs & routes are applied
...
netifd didn't check the netlink return values and kept assuming
routes are in place even if they weren't
SVN-Revision: 39755
2014-02-26 13:27:32 +00:00
Felix Fietkau
c01d211259
hostapd: link against librt if eglibc is used
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39741
2014-02-24 15:03:06 +00:00
Steven Barth
8aa91b167f
odhcpd: avoid the unspecificed address being advertised as DNS
...
SVN-Revision: 39740
2014-02-24 13:37:11 +00:00
Steven Barth
e6044ef1c0
odhcpd: fix DNS-server and MSR-entries in RA
...
Similarly to the previously broken address pools, DNS-servers and some
MSRs could be advertised incorrectly as well. This is now fixed.
SVN-Revision: 39739
2014-02-24 13:33:45 +00:00
Felix Fietkau
a15524582c
netifd: depend on libubox directly to rebuild on ABI changes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39723
2014-02-23 17:32:15 +00:00
Felix Fietkau
6c8300df3d
netifd: update to latest version, fixes wireless device reload handling
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39706
2014-02-23 08:13:28 +00:00
Steven Barth
980626aa32
odhcpd: fix wrong address pool being advertised
...
SVN-Revision: 39651
2014-02-21 18:02:25 +00:00
Jo-Philipp Wich
b22ad85bc6
firewall: fix validation constraints
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39649
2014-02-21 00:22:23 +00:00
Jo-Philipp Wich
354efde275
netifd: fix validation constraints
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39648
2014-02-21 00:17:04 +00:00
Jo-Philipp Wich
21f4cf1a73
firewall: fix several ipset integration issues ( #15016 )
...
- Do not consider bitmap storage for IPv6 family sets
- Move ipset family parameter before any additional option
- Only emit family parameter for hash sets
- Do not allow IPv6 iprange for IPv4 sets and vice versa
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39647
2014-02-20 23:20:10 +00:00
Steven Barth
12fa3eae23
6in4: add support for he.net updatekey
...
SVN-Revision: 39646
2014-02-20 21:36:15 +00:00
Steven Barth
97faa098a2
odhcp6c: readd userclass and vendorclass
...
SVN-Revision: 39628
2014-02-18 18:30:47 +00:00
John Crispin
0da7d381f0
odhcp6c: add validation rules to proto handler
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39624
2014-02-18 13:34:16 +00:00
John Crispin
159ee2bbd3
relayd: add uci validation
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39623
2014-02-18 13:34:12 +00:00
John Crispin
8fb44e0d1e
netifd: add validation support
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39621
2014-02-18 13:34:04 +00:00
John Crispin
26e850dafa
hostapd: add validation rules to wireless handler
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39620
2014-02-18 13:33:59 +00:00
John Crispin
ee5cb76c66
ppp: add validation rules to proto handler
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39619
2014-02-18 13:33:56 +00:00
John Crispin
ed72f7102c
comgt: add validation rules to proto handler
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39618
2014-02-18 13:33:52 +00:00
John Crispin
15ebcfc04e
firewall3: update init.d script to make use of procd
...
add validation data
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39617
2014-02-18 13:33:47 +00:00
John Crispin
204e859542
netifd: update to latest git head
...
this adds support for proto and wireless handler adding uci validation rules
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39614
2014-02-18 13:33:36 +00:00
John Crispin
9bf6569f68
authsae: update to latest version
...
Signed-off-by: Stefan May <smay@4finger.net>
SVN-Revision: 39608
2014-02-18 13:33:13 +00:00
Steven Barth
f906a7f565
odhcp6c: send reconfigure-accept again to be compliant
...
SVN-Revision: 39605
2014-02-17 20:31:21 +00:00
Steven Barth
2f2a73f862
odhcpd: Fix RA interval + add support for prefixes > 64 and < 97
...
SVN-Revision: 39604
2014-02-17 20:30:29 +00:00
Steven Barth
41acaaf893
netifd: work around dangling prefix kernel-routes ( fixes #14963 )
...
SVN-Revision: 39597
2014-02-16 11:20:22 +00:00
Steven Barth
af8f06beca
netifd: fix source-routing breaking 6in4 + others
...
6in4 historically allowed an ip6addr without a mask however the newly
introduced source-routing segfaulted in this scenario (#14958 + #14858 ).
Fixes include: "Fix ubus route src mask printing" and
"Disable netlink auto ack" (thanks to Hans Dedecker)
SVN-Revision: 39586
2014-02-14 21:21:44 +00:00
Steven Barth
3194834c55
odhcp6c: remove source-restriction from local routes again (broke relaying)
...
SVN-Revision: 39575
2014-02-12 08:54:43 +00:00
Hauke Mehrtens
6d1fdf875a
authsae: Update authsae to latest version
...
Only compile tested but the changes are minimal
f5693a3...1d1a122
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>
SVN-Revision: 39518
2014-02-06 22:20:20 +00:00
Steven Barth
c666dcfe08
odhcp6c: Fix timing and some regressions from yesterday
...
SVN-Revision: 39502
2014-02-06 10:38:02 +00:00
Hauke Mehrtens
3f07af337c
iw: update to iw 3.14
...
- update iw to 3.14
- remove some patches that are obsolete
- 200-reduce_size.patch has new coalesce removed from Makefile matching prev. ver
- refresh patches
This increases the size of the binary by 6.7%:
87801 4400 320 92521 16969 iw-3.10/iw
93995 4424 324 98743 181b7 iw-3.14/iw
Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>
SVN-Revision: 39486
2014-02-05 20:52:34 +00:00
Steven Barth
ef7bc81961
odhcpd: fix homenet dhcpv6 filter
...
SVN-Revision: 39479
2014-02-05 15:42:02 +00:00
Steven Barth
05c9507cd3
odhcp6c: Add support for userclass and vendorclass
...
SVN-Revision: 39478
2014-02-05 14:56:37 +00:00
Felix Fietkau
8c737e1864
tcpdump: update to current upstream version 4.5.1
...
-size_of(old tcpdump-mini 4.2.1) = 145245 Byte
-size_of(new tcpdump-mini 4.5.1) = 149416 Byte
=> ~4.2 KByte increase
Signed-off-by: Thomas Huehn <thomas@net.t-labs.tu-berlin.de>
SVN-Revision: 39474
2014-02-05 09:54:38 +00:00
Felix Fietkau
38587f87ed
wifi: Introduce 802.11ac support
...
This patch introduces 802.11ac support to mac80211 and hostapd. The split of
VHT160 in two 80 MHz bands is not yet supported, since it requires an
additional user supplied parameter for the channel of the second band.
Signed-off-by: Matti Laakso <malaakso@elisanet.fi>
Signed-off-by: Simon Wunderlich <simon@open-mesh.com>
[sven@open-mesh.com: Rebased patch, merged htmode and vhtmode,
removed special hwmode, replaced uci vht_capab list with overwritable
autoconfig, fixed hostapd integration, fixed commit description, add HT40+/-
for VHT modes, add VHT40 center_freq autoconfig, refactored major parts]
Signed-off-by: Sven Eckelmann <sven@open-mesh.com>
SVN-Revision: 39456
2014-02-03 13:31:44 +00:00
Steven Barth
02c763c4ab
odhcp6c: Revert to slightly modified version of old behaviour
...
Latest changes broke source-restriction of on-link routes. Restoring
old-behaviour but adding correct source-restrictions which prevents
the offlink handler to remove the on-link route.
SVN-Revision: 39454
2014-02-03 09:06:25 +00:00
Steven Barth
a9a0b62785
odhcp6c: improve handling of RA on-link routes and addresses
...
SVN-Revision: 39451
2014-02-02 19:40:33 +00:00
Felix Fietkau
50417b58ad
hostapd: do not get basic_rate as a simple string variable
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39448
2014-02-02 14:25:02 +00:00
Steven Barth
8fa06b7e3c
odhcpd: fix internal router DHCPv4 filter
...
SVN-Revision: 39441
2014-02-01 13:33:05 +00:00
Steven Barth
b965dab148
odhcp6c: several bugfixes and improvements
...
* Fixed broken stateless-mode (fixes #14863 )
* Support for multiple IAIDs, improved server compatibility,
improved NTP/SNTP support and other fixes (thanks to T-Labs)
SVN-Revision: 39433
2014-01-31 11:23:00 +00:00
Felix Fietkau
cfc20090f1
hostapd: fix basic rate list handling with netifd
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39431
2014-01-31 10:43:18 +00:00
Felix Fietkau
2725913d2a
hostapd: fix frequency selection for ap+sta
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39426
2014-01-30 13:21:30 +00:00
Jo-Philipp Wich
76e28f6b6e
lldpd: build without libreadline
...
lldpcli uses libreadline for tab completion. libreadline take around 110kb.
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
SVN-Revision: 39421
2014-01-29 13:10:39 +00:00
Jo-Philipp Wich
b2593a3f49
lldpd: add missing lldpcli
...
lldpd calls on startup lldpcli to configure itself.
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
SVN-Revision: 39420
2014-01-29 13:10:35 +00:00
Jo-Philipp Wich
3aefca6b07
lldpd: push to version 0.7.7
...
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
SVN-Revision: 39419
2014-01-29 13:10:31 +00:00
Jo-Philipp Wich
b5400c775e
hostapd: Fix 80211w setup with netifd
...
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
SVN-Revision: 39412
2014-01-28 21:12:45 +00:00
Jo-Philipp Wich
c1cb867c13
hostapd: Fix basic_rate setup with netifd
...
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
SVN-Revision: 39411
2014-01-28 21:12:36 +00:00
Steven Barth
3787078b26
odhcpd: fix certain config values being overwritten
...
Thanks to Hans Dedecker for the fix.
SVN-Revision: 39371
2014-01-23 11:02:18 +00:00
Steven Barth
e1c5111997
6rd: Make don't fragment bit (df) a configurable variable
...
Make the IPv4 "do not fragment" bit a configurable variable for the 6rd
tunnel interface as the bit should not be set in the encapsulating IPv4
header according to RFC3056.
On top the config variable allows to enable/disable path mtu discovery
for tunnel interfaces.
Config variable can be passed to netifd as tunnel config support is
already present for the "do not fragment" bit.
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
SVN-Revision: 39370
2014-01-23 10:59:04 +00:00
Steven Barth
229d186490
netifd: don't add unnecessary NOP policy rules
...
SVN-Revision: 39351
2014-01-20 18:23:02 +00:00
Steven Barth
c67ec51c85
6in4: fix typo in config variable ( fixes #14830 )
...
SVN-Revision: 39347
2014-01-20 12:53:15 +00:00
Steven Barth
fac5e62abd
firewall: don't reload if there were no address or data changes
...
This fixes packet loss due to reloading firewall every minute with IPv6
implementation of certain ISPs.
SVN-Revision: 39332
2014-01-19 17:35:33 +00:00
Steven Barth
471095f869
odhcpd: Fix a memory corruption when static leases are used
...
SVN-Revision: 39319
2014-01-18 10:11:03 +00:00
Steven Barth
24ba434185
odhcpd: be even less verbose and don't start unnecessary relays
...
SVN-Revision: 39315
2014-01-17 19:05:54 +00:00
Steven Barth
2c9d868900
odhcpd: fix logspam
...
SVN-Revision: 39314
2014-01-17 15:53:43 +00:00
Steven Barth
17b0d874eb
odhcpd: use hybrid management mode by default
...
SVN-Revision: 39313
2014-01-17 15:48:02 +00:00
Steven Barth
9ec0e5df14
dnsmasq: add dnsmasq.d config folder & improve odhcpd coexistence
...
SVN-Revision: 39312
2014-01-17 14:00:09 +00:00
Steven Barth
140a5b22d9
odhcp6c: Use sourcerouting by default
...
SVN-Revision: 39311
2014-01-17 14:00:04 +00:00
Steven Barth
570eb45f23
odhcp6c: fix several small issues + decrease size
...
SVN-Revision: 39310
2014-01-17 14:00:00 +00:00
Steven Barth
684537f3e7
odhcpd: several bugfixes and improved integration
...
SVN-Revision: 39308
2014-01-17 13:59:51 +00:00
Steven Barth
a5ee266cd9
6in4, 6rd, 6to4: Use source-restricted routes by default
...
SVN-Revision: 39307
2014-01-17 13:59:47 +00:00
Steven Barth
bc8412b90e
netifd: Add IFUPDATE-flags and use main IPv6 routing table again
...
SVN-Revision: 39306
2014-01-17 13:59:40 +00:00
John Crispin
a844275f37
firewall: improve logging in hotplug script
...
Signed-off-by: Nathan Hintz <nlhintz@hotmail.com>
SVN-Revision: 39300
2014-01-15 18:29:59 +00:00
Zoltan Herpai
c87513de6b
packages: ifenslave: add kernel dependencies as source was removed from 3.12
...
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
SVN-Revision: 39295
2014-01-15 09:28:41 +00:00
John Crispin
4ae2d6f293
hostapd: fix mcast_rate setting
...
Introduced by ("netifd: add wireless configuration support and port mac80211 to
the new framework")
Reported-by: René van Weert <r.vanweert@sowifi.com>
Signed-off-by: Antonio Quartulli <antonio@meshcoding.com>
SVN-Revision: 39288
2014-01-14 19:35:55 +00:00
John Crispin
2f9048d8d3
hostapd: fix frequency setting for IBSS/RSN
...
Introduced by ("netifd: add wireless configuration support and port mac80211 to
the new framework")
Reported-by: René van Weert <rene@sowifi.com>
Signed-off-by: Antonio Quartulli <antonio@meshcoding.com>
SVN-Revision: 39231
2014-01-12 12:07:11 +00:00
John Crispin
4810de8e4b
swconfig: improve usability when switch device incorrect
...
http://patchwork.openwrt.org/patch/4701/
Signed-off-by: Andreas Mohr <andim2@users.sf.net>
SVN-Revision: 39229
2014-01-12 12:07:01 +00:00
John Crispin
efad45bb0b
samba: add browsable option
...
https://dev.openwrt.org/ticket/14682
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39227
2014-01-12 12:06:53 +00:00
Steven Barth
bc370646cd
6relayd: try to workaround race condition at startup
...
SVN-Revision: 39184
2014-01-02 11:38:36 +00:00
Felix Fietkau
20151a3394
netifd: initialize the switch early at start time and on reload ( fixes #13015 )
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39183
2013-12-31 13:09:20 +00:00
Felix Fietkau
6865f1d6b2
netifd: update to the latest version, fixes wireless related segfaults on arm
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39180
2013-12-29 02:26:34 +00:00
Felix Fietkau
5607a13aa1
netifd: update to the latest version, fixes wifi related segfaults
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39176
2013-12-28 14:19:54 +00:00
Felix Fietkau
c7d23cbeb9
hostapd: fix mixed wep/wpa with netifd
...
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>
SVN-Revision: 39174
2013-12-28 11:07:37 +00:00
Felix Fietkau
da886d761a
hostapd: fix the uci option name for ap isolate
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39173
2013-12-28 11:07:28 +00:00
John Crispin
d1156bca0a
swconfig: remove useless variables, return -1 on errors
...
spotted with cppcheck
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>
SVN-Revision: 39170
2013-12-27 21:15:20 +00:00
Felix Fietkau
aab522e1e3
hostapd: fix wep with netifd
...
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>
SVN-Revision: 39156
2013-12-23 12:11:28 +00:00
Felix Fietkau
fd4cd3825b
wpa_supplicant: fix interface combination parsing issues
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39155
2013-12-21 19:42:45 +00:00
Jo-Philipp Wich
efce764f0e
dnsmasq: rework init procedure
...
- cache udhcp check results to speed up subsequent reloads
- enable procd file tracking for /var/etc/dnsmasq.conf to only reload service if needed
- implement reload action to only restart dnsmasq if /var/etc/dnsmasq.conf actually changed
- launch dnsmasq from interface hotplug to avoid race conditions with network bringup
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39152
2013-12-21 13:31:28 +00:00
Jo-Philipp Wich
1789744958
netifd: add reload trigger for /etc/config/wireless as well
...
SVN-Revision: 39131
2013-12-18 12:38:29 +00:00
Jo-Philipp Wich
de5ebc19c0
firewall: fix handling of tcp_ecn parameter
...
The firewall3 implementation as well as the shell implementation predating it
used to process the tcp_ecnoption as boolean while it actually is an integer.
Change the code to parse tcp_ecn as integer.
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39122
2013-12-17 16:59:47 +00:00
Felix Fietkau
088eea282d
iproute2: reduce .ipk package size from ~100k down to ~60k
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39119
2013-12-17 15:59:29 +00:00
Felix Fietkau
b6bcb7ff2d
hostapd: move old wifi setup scripts to hostapd-common-old
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39103
2013-12-16 18:42:43 +00:00
Jo-Philipp Wich
eda27e8382
dnsmasq: switch to /lib/functions/network.sh
...
This commit changes the dnsmasq init script to use the interface
status exposed by netifd. The old references to scan_interfaces()
and (indirect) accesses to uci state variables are removed and
replaced with corresponding network_*() calls.
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39101
2013-12-16 16:47:41 +00:00
Felix Fietkau
12c05542e8
netifd: update to latest version, fixes a null pointer crash
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39088
2013-12-16 10:08:13 +00:00
Steven Barth
e49d67f192
Convert DHCP->6rd and DHCPv6->DS-Lite autoconfig to dynamic interface
...
SVN-Revision: 39061
2013-12-15 19:38:53 +00:00
Steven Barth
fd50416248
odhcp6c: add source routing support
...
SVN-Revision: 39058
2013-12-15 19:10:20 +00:00
Jo-Philipp Wich
e444eb0bbd
uhttpd: don't process ubus_* and lua_* options if corresponding plugin is not installed ( #14618 )
...
SVN-Revision: 39057
2013-12-15 15:32:37 +00:00
Felix Fietkau
ce062a7b5c
netifd: update to the latest version, adds a revert of the link state handling patches which caused regressions in combination with wifi devices
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39050
2013-12-14 14:59:05 +00:00
Felix Fietkau
47730fe355
netifd: prevent an unnecessary restart of netifd-managed wifi interfaces at boot time
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39046
2013-12-13 16:43:11 +00:00
Felix Fietkau
9c3adcb2e6
iw: reduce size and make the phy dump output more readable
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39041
2013-12-13 11:02:05 +00:00
Felix Fietkau
3f744a4ad3
netifd: fix crashes triggered by adding/removing wireless devices on reload
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39035
2013-12-11 18:23:52 +00:00
Jo-Philipp Wich
32223b3c4d
hostapd: fix short_preamble option
...
SVN-Revision: 39027
2013-12-10 16:24:48 +00:00
John Crispin
31a2912cd9
netifd: enable coredumps again
...
got broken due procd startup. Requires procd resource limit patch.
Signed-off-by: Ulrich Weber <uw@xyne.com>
SVN-Revision: 39020
2013-12-09 17:29:34 +00:00
Jo-Philipp Wich
18dd101903
hostapd: properly parse wmm and hidden uci options ( #14589 )
...
SVN-Revision: 39005
2013-12-08 20:51:21 +00:00
Felix Fietkau
6242255df2
netifd: update to the latest version, adds tunnel fixes by Hans Dedecker and adds back support for multiple networks per wifi-iface
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39004
2013-12-08 18:00:05 +00:00
Steven Barth
4bdd40c08b
odhcpd/6c: Add config menu for prefix class ext.
...
SVN-Revision: 38996
2013-12-05 12:17:09 +00:00
Steven Barth
fb6ebac74a
odhcpd: Fix ubus integration
...
SVN-Revision: 38994
2013-12-04 13:14:27 +00:00
Felix Fietkau
4155016637
netifd: update to the latest version, improves wireless status output and fixes some bridge handling issues
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38992
2013-12-03 14:17:44 +00:00
Felix Fietkau
603c532eed
hostapd: fix maclist processing with netifd
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38991
2013-12-03 09:02:58 +00:00
Felix Fietkau
3c50feca19
wifi: rename the "reload" (restarting non-netifd wifi) command to "reload_legacy"
...
Add a new "reload" command that reloads the netifd config as well
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38989
2013-12-02 16:53:24 +00:00
Felix Fietkau
498d84fc4e
netifd: add wireless configuration support and port mac80211 to the new framework
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38988
2013-12-02 16:41:03 +00:00
Felix Fietkau
a26242cb63
hostapd: change the wildcard for the hostapd control socket directory
...
prepare for using /var/run/hostapd instead of /var/run/hostapd-phy*
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38986
2013-12-02 13:08:14 +00:00
Felix Fietkau
9381eaccb3
wpa_supplicant: clean up hostapd control socket on exit to fix socket leak in ap+sta mode on wifi restarts
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38985
2013-12-02 13:08:11 +00:00
Felix Fietkau
6960ae4e65
hostapd: fix os_daemonize vs starting process race by creating the pid file in the parent
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38984
2013-12-02 13:08:08 +00:00
Felix Fietkau
107bcb5de3
netifd: remove redundant calls to /sbin/wifi down
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38982
2013-12-02 13:08:00 +00:00
Felix Fietkau
5022b3949a
hostapd: always include p2p options in wpa_cli
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38981
2013-12-02 13:07:46 +00:00
Felix Fietkau
15b4975925
hostapd: add support for auto-channel selection
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38915
2013-11-25 15:43:30 +00:00
Felix Fietkau
1d75f7506d
hostapd: update to version 2013-11-20
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38914
2013-11-25 15:43:15 +00:00
John Crispin
cba772f5bc
pppd: Place plugin-specific options after plugin name
.
...
Before this patch, if we specify a plugin specific option through
`pppd_options` in /etc/config/network, e.g. `rp_pppoe_verbose 1`, pppd
would quit with the following error in log.
Wed Oct 9 09:42:58 2013 daemon.notice netifd: GORG (1689): /usr/sbin/pppd: unrecognized option 'rp_pppoe_verbose'
Wed Oct 9 09:42:58 2013 daemon.err pppd[1689]: unrecognized option 'rp_pppoe_verbose'
Wed Oct 9 09:42:58 2013 daemon.notice netifd: GORG (1689): pppd version 2.4.5
Wed Oct 9 09:42:58 2013 daemon.notice netifd: GORG (1689): Usage: /usr/sbin/pppd [ options ], where options are:
This is due to the requirement that function add_option() should be
called by the plugin_init() function first before pppd can parse those
options.
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
SVN-Revision: 38911
2013-11-25 14:09:16 +00:00
Felix Fietkau
5143157af8
uhttpd: update to the latest version, fixes crashes in the ubus plugin
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38888
2013-11-21 21:52:24 +00:00
Felix Fietkau
cd1c8d463f
hostapd: remove random pool support - the entropy it gathers is questionable and we have better entropy sources on common platforms now
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38852
2013-11-18 13:54:26 +00:00
Jo-Philipp Wich
bc9043cc53
firewall: optimize DNAT rules and skip invalid rules and redirects ( #14485 )
...
- instead of writing one (or more) ACCEPT rules in the filter table
for each redirect install a global ctstate DNAT accept rule per zone
- discard rules and redirects which have invalid options set instead
of silently skipping the invalid values
SVN-Revision: 38849
2013-11-18 11:59:27 +00:00
Steven Barth
b5a4fb1c95
6rd: Clear correct IPv6 address bits in 6rdcalc
...
The correct bits are now cleared in the IPv6 address as the shift
value to the correct byte in the IPv6 address was wrong. Depending
on the stack values this could result in a hanging 6rdcalc program
due to an endless loop.
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
SVN-Revision: 38818
2013-11-16 09:18:14 +00:00
John Crispin
a9cfb4b827
procd: fixup 2 wrong option types
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38789
2013-11-13 11:07:24 +00:00
John Crispin
1f93857092
procd: convert services to the new validation api
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38787
2013-11-13 10:49:41 +00:00
Felix Fietkau
37756a97a0
hostapd: remove #ifdef MULTICALL around ap+sta support code (to support separately installed supplicant+hostapd)
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38782
2013-11-12 22:11:14 +00:00
Jo-Philipp Wich
7ad5350dfb
Add patch to fix ipset timeout setting problem
...
Fixes #14325
Signed-off-by: Nikolay Martynov <mar.kolya@gmail.com>
SVN-Revision: 38779
2013-11-12 11:01:11 +00:00
Jo-Philipp Wich
c9bc0e12a9
Update ipset to version 6.20.1
...
Signed-off-by: Nikolay Martynov <mar.kolya@gmail.com>
SVN-Revision: 38778
2013-11-12 11:00:49 +00:00
Hauke Mehrtens
20d64e929f
iwinfo: don't report associations for broadcom wds interfaces
...
The associations list for Broadcom WDS interfaces are duplicate to those
reported by the corresponding AP interface; so there is no need to report
them again.
Signed-off-by: Nathan Hintz <nlhintz@hotmail.com>
SVN-Revision: 38746
2013-11-11 21:54:55 +00:00
Hauke Mehrtens
e3a5401fb2
iwinfo: fix hwmodelist reporting for broadcom wl
...
Modify the hwmodelist reporting for broadcom devices to include
proper reporting of 802.11n support.
Signed-off-by: Nathan Hintz <nlhintz@hotmail.com>
SVN-Revision: 38745
2013-11-11 21:54:25 +00:00
Jo-Philipp Wich
8a1d77efed
uhttpd: return after processing -d switch, only set ubus prefix if not already defined
...
SVN-Revision: 38743
2013-11-11 19:14:01 +00:00
John Crispin
989783255e
uhttp: add ubus.default
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38741
2013-11-11 18:12:26 +00:00
John Crispin
f48568af8e
pppd: don't call modprobe at all from pppoatm
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38737
2013-11-11 13:40:28 +00:00
John Crispin
3cc0f479dc
uhttp: make the service auto respawn if it crashes
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38724
2013-11-11 12:19:02 +00:00
John Crispin
9f3b161a57
uhttp: make sure that the ubus module is loaded when when installed
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38723
2013-11-11 12:18:58 +00:00
Felix Fietkau
e78e720a6f
netifd: remove connect_time from /var/state, it is unused
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38704
2013-11-10 10:01:33 +00:00
John Crispin
edf6236838
lantiq: fix vdsl-app dependency
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38666
2013-11-07 12:45:39 +00:00
Jo-Philipp Wich
5db9587b5f
dnsmasq: fix backward compatibility with existing configs
...
Changeset r36943 ("dnsmasq: use host-record instead of address") removed
the automatic domain expansion for config domain sections, this breaks
existing setups and alters the old behaviour in unexpected ways, therfore
restore behaviour of the current stable release.
Additionally handle fully qualified hostnames properly when setting up the
own hostrecord by stripping the local domain part form the given name
instead of unconditionally appending it, so that "example.lan" results
in "example example.lan" and not "example.lan example.lan.lan".
SVN-Revision: 38648
2013-11-04 22:40:56 +00:00
Felix Fietkau
2c84ff42f7
openvpn: clean up and fix the init script
...
- clean up duplication of procd instance handling code
- using --cd *after* --config is rather pointless
- to be able to log errors properly, --syslog needs to be passed before --config
- tell procd about the generated or referenced config file instead of
the uci file. this avoids having to restart all instances if only one
of them changes.
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38632
2013-10-31 17:36:24 +00:00
Felix Fietkau
e16f104a6f
netifd: update to the latest version, fixes regression in proto-shell scripts ( #14400 , #14402 )
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38627
2013-10-31 11:22:01 +00:00
Felix Fietkau
22890e6382
netifd: update to latest version, adds fixes and some preparation for supporting wifi devices
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38606
2013-10-30 11:25:01 +00:00
Steven Barth
dfa9ca772b
odhcp6c: Multiple improvements and fixes
...
* Various RFC compliance fixes (thanks to Hans Dedecker)
* Fix RA spam filter logic causing ipv6 connection issues
* Fix parameters -F and -P being order dependent
SVN-Revision: 38577
2013-10-29 13:23:28 +00:00
Steven Barth
d8d0e2c536
odhcp6c: filter similar RAs spammed by some ISPs
...
SVN-Revision: 38505
2013-10-23 10:31:06 +00:00
Steven Barth
bb699867e0
firewall: Improve ubus support
...
* Use network.interface dump call instead of individual status calls
to reduce overall netifd lookups and invokes to 1 per fw3 process.
* Allow protocol handlers to assign a firewall zone for an interface
in the data section to allow for dynamic firewall zone assignment.
SVN-Revision: 38504
2013-10-23 10:25:26 +00:00
Steven Barth
a54f104701
odhcpd: fix cleaning of configuration on reload
...
SVN-Revision: 38503
2013-10-23 09:30:28 +00:00
Steven Barth
1ff15bfe83
6relayd: reduce fallout of RA spamming a bit
...
SVN-Revision: 38488
2013-10-21 10:26:57 +00:00
Steven Barth
91b173d231
netifd: Fix ifupdate events
...
SVN-Revision: 38458
2013-10-19 11:01:25 +00:00
Steven Barth
579e2df8c5
odhcpd: various bugfixes
...
SVN-Revision: 38454
2013-10-18 13:39:48 +00:00
Steven Barth
c3bcdd59de
netifd: various improvements
...
* Add ubus methods for global interface status
* Add ubus function to create nested interfaces
* Add protocol update notifications and hotplug legacy calls
* Fix: key to data elements point at wrong memory area
* Add support for source-restricted routes
* Add option "delegate" to toggle prefix delegation
* Reevaluate target routes also on interface update
SVN-Revision: 38453
2013-10-18 13:39:43 +00:00
Jo-Philipp Wich
4f1e282238
wpa_supplicant: fix beacon_int configuration option
...
wpa_supplicant expects beacon_int instead of beacon_interval in its config
file.
Signed-off-by: Bruno Randolf <br1@einfach.org>
SVN-Revision: 38451
2013-10-18 11:47:47 +00:00
Jo-Philipp Wich
6da1c9d3ea
iw: add patch to support 802.11j frequencies
...
A similar change was recently merged in iw commit
58b46da26ab9b5ff31c7033e175351eb1301d9af
Signed-off-by: Bruno Randolf <br1@einfach.org>
SVN-Revision: 38449
2013-10-18 11:43:02 +00:00
Jo-Philipp Wich
c8e0c28c15
iwinfo: make 'type' visible in wrapped iwinfo
...
There are several cases within 'luci' that attempt to access the interface
'type' from within the 'type' specific meta tables; however, 'type' is not
currently available there. Replicate the common metadata in the 'type'
specific meta tables.
Signed-off-by: Nathan Hintz <nlhintz@hotmail.com>
SVN-Revision: 38448
2013-10-18 11:42:43 +00:00
Steven Barth
56bc536713
netifd: rename customopts to sendopts for consistency
...
SVN-Revision: 38437
2013-10-17 13:12:06 +00:00
Steven Barth
c759b49a4f
Added 'customopts' dhcp protocol option, which is an array passed along to udhcpc as series of -x options.
...
Signed-off-by: Markus Stenberg <markus.stenberg@iki.fi>
SVN-Revision: 38436
2013-10-17 12:55:40 +00:00
Steven Barth
7e13c80b3d
odhcp6c: fix parsing of IA_PD adverts
...
SVN-Revision: 38433
2013-10-17 07:19:32 +00:00
Steven Barth
76dfe21a27
odhcpd: add new experimental dhcp-server
...
SVN-Revision: 38428
2013-10-16 09:03:55 +00:00
Jo-Philipp Wich
fce216ac7e
dropbear: add dropbear.nl mirror, provided by dropbear maintainer
...
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>
SVN-Revision: 38413
2013-10-15 13:10:32 +00:00
Luka Perkov
5dc102ce04
openvpn: make comp_lzo a parameter
...
Possible parameters are yes, no and adaptive. See manpage for more information.
Signed-off-by: Philipp Borgers <borgers@mi.fu-berlin.de>
SVN-Revision: 38412
2013-10-15 12:42:58 +00:00
Jo-Philipp Wich
eda0fc3c6c
openvpn-easy-rsa: restore essential patch to make it actually work on the target ( #14324 )
...
SVN-Revision: 38411
2013-10-15 12:23:21 +00:00
Steven Barth
156ea733d4
odhcp6c: various fixes
...
* Make SOL_MAX_RT configurable and default back to 120s
* Prefer servers with bigger prefixes (allows to use Comcast /60)
* Don't hang indefinitely if DHCPv6 REQUEST is not answered
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 38393
2013-10-14 18:53:02 +00:00
Hauke Mehrtens
232a654833
iputils: do not compile this for brcm47xx with -O2
...
ping is now working for me with -Os on brcm47xx.
This revert r26278.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
SVN-Revision: 38389
2013-10-13 22:51:33 +00:00
Hauke Mehrtens
e1523b5504
switch: remove old switch driver
...
The switch driver is not used by brcm47xx any more and can be removed,
instead of this switch driver b53 is used now.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
SVN-Revision: 38387
2013-10-13 22:15:31 +00:00
Hauke Mehrtens
af32e63bae
lantiq: add some missing PKG_SOURCE_URLs
...
These URLs where missing and causes build failures.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
SVN-Revision: 38376
2013-10-12 22:33:55 +00:00
Jo-Philipp Wich
78f69b66d4
dnsmasq: add option broadcast to host sections
...
There are certain consumer devices which are outliers in protocol conformance.
An example is Samsung bluray players, which require broadcast DHCP responses
(on Ethernet only, strangely not on Wifi).
By specifying:
config host
...
option broadcast 1
this will enable the response to be sent as an Ethernet broadcast and not as
a unicast.
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
SVN-Revision: 38365
2013-10-11 18:33:15 +00:00
Jo-Philipp Wich
db3013852a
firewall: small improvements in nat reflection
...
- do not insert duplicate rules when setting up reflection to a zone containing multiple interfaces
- set up reflection for any protocol, not just TCP and UDP
SVN-Revision: 38361
2013-10-10 18:15:10 +00:00
Jo-Philipp Wich
5380fa27e9
ppp: correct module loaded check in proto_pptp_setup
...
proto_pptp_setup is responsible for loading the required modules to establish
a pptp connection to a foreign peer. The function checks whether all required
modules are already loaded, before actually loading them.
It seems that the filter being used to accomplish this, is not restrictive
enough in some cases. For instance when pptp nat helper modules are present on
a system, and already loaded before a pptp connection is enabled. Then the
search filter (possibly) returns the following for module=pptp, where actually
no matches are expected, resulting in the pptp.ko module not being loaded,
thereby failing to establish the pptp connection.
# module="pptp" ; grep "$module" /proc/modules
nf_nat_pptp 1312 0 - Live 0x86ce7000
nf_conntrack_pptp 3072 1 nf_nat_pptp, Live 0x86cb9000
nf_nat_proto_gre 784 1 nf_nat_pptp, Live 0x86cba000
nf_conntrack_proto_gre 2368 1 nf_conntrack_pptp, Live 0x86cbf000
nf_nat 9792 13 nf_nat_rtsp,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_h323,nf_nat_proto_gre,nf_nat_amanda,nf_nat_irc,nf_nat_ftp,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,iptable_nat, Live 0x86ca8000
nf_conntrack 37264 31 nf_nat_rtsp,nf_conntrack_rtsp,nf_nat_tftp,nf_conntrack_tftp,nf_nat_snmp_basic,nf_conntrack_snmp,nf_nat_sip,nf_conntrack_sip,nf_nat_pptp,nf_conntrack_pptp,nf_nat_h323,nf_conntrack_h323,nf_conntrack_proto_gre,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_broadcast,nf_nat_irc,nf_conntrack_irc,nf_nat_ftp,nf_conntrack_ftp,ipt_MASQUERADE,iptable_nat,nf_nat,xt_helper,xt_connmark,xt_connbytes,xt_conntrack,xt_CT,xt_NOTRACK,xt_state,nf_conntrack_ipv4, Live 0x86c90000
The search filter can be made more accurate/restrictive, by requiring the
occurance of the exact name of the module at the beginning of a line in
/proc/modules.
# module="pptp" ; grep "^$module " /proc/modules
pptp 13296 2 - Live 0x86e80000
Signed-off-by: Tijs Van Buggenhout <tvb@able.be>
SVN-Revision: 38358
2013-10-10 14:58:12 +00:00
Jo-Philipp Wich
61e83f9c29
dropbear: update to 2013.59 (released 4 october 2013)
...
- drop mirror www.mirrors.wiretapped.net (not working anymore)
- drop patch 300-ipv6_addr_port_split.patch, included upstream
- refresh patches
- various upstream changes: http://matt.ucc.asn.au/dropbear/CHANGES
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>
SVN-Revision: 38356
2013-10-10 14:42:05 +00:00
Luka Perkov
cdb871ac48
openvpn: rework initscript ( fixes #14299 )
...
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 38351
2013-10-09 11:25:09 +00:00
Felix Fietkau
ff40bc2db9
hostapd: recognize 8021x as an authentication mode
...
Currently, in order to configure the authentication daemon in
8021x mode, we need to set wireless.@wifi-iface[0].encryption="wpa"
Though it works it confuses folks as 8021x is using WEP
encryption and not WPA. Therefore the terminology itself is
confusing. This change adds 8021x as a recognized string for 8021x
authentication.
Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>
SVN-Revision: 38339
2013-10-08 11:09:52 +00:00
Felix Fietkau
9beaea6fc2
hostapd: add external registrar support
...
Setting wireless.@wifi-iface[N].ext_registrar=1 will enable UPNP
advertising and add an external registrar to the interface this vif
belongs to (br-lan if the vif is included in the LAN bridge). By
enabling this we append upnp_iface=xxx to the hostapd config file.
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>
SVN-Revision: 38338
2013-10-08 11:09:48 +00:00
Felix Fietkau
246e9b449b
hostapd: enable WPS2 support on hostapd-full.config
...
Enable CONFIG_WPS2 for hostapd. This is required to support
options like Virtual Push Button in WPS.
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>
SVN-Revision: 38337
2013-10-08 11:09:44 +00:00
Felix Fietkau
bcbc9b1e89
hostapd: fix hostapd RSN preauthentication PMKSA caching
...
In 2009 OpenWrt's hostapd config added an "auth_cache" boolean
to be used to address a reported issue #12129 [0] on a forum [1].
The reported issue on the ticket is different that the one
described on the forum. The commit was r33359. This change broke
proper RSN preauthentication [2] [3] [4] expectations on hostapd's
configuration for WPA2 and this in turn disabled PMKSA caching and
Opportunistic Key Caching. This change:
* Leaves the "auth_cache" to be used only for WPA networks for those
looking to use this as a workaround to a reported issue but annotates
a warning over its usage.
* Separate "auth_cache" from WPA2 RSN preauthentication, leaving
WPA2 RSN preauthentication to enabled only with "rsn_preauth" with
the expected and recommended settings.
* Adds a new WPA2 RSN preauthentication "rsn_preauth_testing" to
be used when evaluating funcionality for WPA2 RSN preauthentication
with the expected and recommended settings with the only difference
so far with what should be enabled by default to disable Opportunistic
Key Caching.
Disabling the PMKSA cache should mean the STA could not roam off and back
onto the AP that had PMKSA caching disabled and would require a full
authentication cycle. This fixes this for WPA2 networks with
RSN preauthentication enabled.
This change should be applied to AA as well as trunk.
TL DR;
The issue described on the forum has to do with failure of a STA
being able to try to authenticate again with the AP if it failed
its first try. This may have been an issue with hostapd in 2009
but as per some tests I cannot reproduce this today on a WPA2
network.
The issue described on the ticket alludes to a security issue with the
design of using a Radius server to authenticate to an AP. The issue
vaguely alludes to the circumstances of zapping a user, deleting their
authentication credentials to log in to the network, and that if
RSN preauthentication is enabled with PMKSA caching that the user
that was zapped would still be able to authenticate.
Lets treat these as separate issues.
I cannot reproduce the first issue reported on the forums of not
being able to authenticate anymore on a WPA2 network.
The issue reported on the ticket modified WPA2 RSN preauthentication
by adding two fields to the hostapd configuration if auth_cache
was enabled:
* disable_pmksa_caching=1
* okc=0
The first one disables PMKSA authentication cache.
The second one disables Opportunistic Key Caching.
The issue reported on the ticket was fixed by implementing a workaround
in hostapd's configuration. Disabling PMKSA caching breaks proper use
of WPA2 RSN pre authentication. The usage of disable_pmksa_caching=1
prevents hostapd from adding PMKSA entries into its cache when a successful
802.1x authentication occurs. In practice RSN preauthentication would
trigger a STA to perform authentication with other APs on the same SSID,
it would then have its own supplicant PMKSA cache held. If a STA roams
between one AP to another no new authenitcation would need to be performed
as the new AP would already have authenticated the STA. The purpose of the
PMKSA cache on the AP side would be for the AP to use the same PMKID for
a STA when the STA roams off onto another BSSID and later comes back to it.
Disabling Opportunistic Key Caching could help the reported issue
as well but its not the correct place to address this. Opportunistic
Key Caching enables an AP with different interfaces to share the
PMKSA cache. Its a technical enhancement and disabling it would
be useful to let a testing suite properly test for RSN preauthentication
given that otherwise Opportunistic Key Caching would enable an
interface being tested to derive its own derive the PMKSA entry.
In production though okc=1 should be enabled to help with RSN
preauthentication.
The real fix for this particular issue outside of the scope of hostapd's
configuration and it should not be dealt with as a workaround to
its configuration and breaking expected RSN preauthentication and
technical optimizations. Revert this change and enable users to pick
and choose to enable or disable disable_pmksa_caching and okc expecting them
to instead have read clearly more what these do.
As for the core issure ported, the correct place to fix this is to
enable a sort of messaging between the RADIUS server and its peers
so that if caching for authentication is enabled that cache can be
cleared upon user credential updates. Updating a user password
(not just zapping a user) is another possible issue that would need
to be resolved here. Another part of the solution might be to reduce
the cache timing to account for any systematic limitations (RADIUS
server not able to ask peers to clear cache might be
one).
[0] https://dev.openwrt.org/changeset/33359
[1] https://forum.openwrt.org/viewtopic.php?id=19596
[2] http://wireless.kernel.org/en/users/Documentation/hostapd#IEEE_802.11i.2FRSN.2FWPA2_pre-authentication
[3] http://wireless.kernel.org/en/users/Documentation/wpa_supplicant#RSN_preauthentication
[4] http://wiki.openwrt.org/doc/recipes/rsn_preauthentication
Signed-off-by: Luis R. Rodriguez <mcgrof@do-not-panic.com>
SVN-Revision: 38336
2013-10-08 11:09:40 +00:00
Felix Fietkau
40aec9ed46
hostapd: Add WPS unconfigured & WPS pin method support
...
Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>
SVN-Revision: 38335
2013-10-08 11:09:36 +00:00
Felix Fietkau
4689bc8517
hostapd: Add eap_reauth_period config option
...
This adds the eap_reauth_period to be used for modifying
the RADIUS server reauthentication authentication period,
a parameter that gets passed directly to the hostapd
configuration file.
Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>
SVN-Revision: 38334
2013-10-08 11:09:27 +00:00
Luka Perkov
c5bd00d82a
openvpn: switch to new procd init script style
...
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 38331
2013-10-07 21:28:14 +00:00
Steven Barth
6dbfe22601
odhcp6c: improve server selection, introduce "forceprefix" option
...
SVN-Revision: 38314
2013-10-07 08:43:33 +00:00
Luka Perkov
702936f4c9
iproute2: update to 3.11
...
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 38313
2013-10-07 08:26:41 +00:00
Felix Fietkau
e96695df10
netifd: update to latest version, adds macvlan support
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38299
2013-10-03 14:51:34 +00:00
Steven Barth
95e9c260bc
odhcp6c: validate hop-limit on RAs
...
SVN-Revision: 38285
2013-10-02 14:16:05 +00:00
Steven Barth
0ad1d06c13
6relayd: remove compat ULA setting by default (too many bad sideeffects)
...
SVN-Revision: 38283
2013-10-02 06:14:39 +00:00
Steven Barth
1d485c737e
netifd: don't remove & readd addresses that only have a changed lifetime
...
SVN-Revision: 38269
2013-10-01 17:30:05 +00:00
Felix Fietkau
f8ee248701
uhttpd: add a config option for using ustream-polarssl, and use it by default
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38250
2013-09-29 11:26:09 +00:00
Felix Fietkau
59c05778f0
uhttpd: fix appending https ports to cmdline
...
Otherwise it is started only on non-secure ports.
Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@neratec.com>
SVN-Revision: 38171
2013-09-25 07:44:48 +00:00
Gabor Juhos
99d13b09b9
iwinfo: add Ubiquiti WispStation M5 to hardware.txt
...
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
SVN-Revision: 38145
2013-09-24 05:58:29 +00:00
Luka Perkov
ef5f836207
fix various init scripts
...
Changes include:
* removing unused variables
* replacing spaces with tabs where appropriate
* more consistency with variable declarations
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 38142
2013-09-23 21:58:36 +00:00
Felix Fietkau
5137cdb1e1
xtables-addons: fix missing conversion from r38021 (resolves a broken dependency)
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38124
2013-09-22 19:49:23 +00:00
Steven Barth
4894800bdd
odhcp6c: handle NoAddrsAvail IA-status
...
SVN-Revision: 38092
2013-09-21 10:54:13 +00:00
Steven Barth
808a1c7808
odhcp6c: Restart when server returns IAID error
...
SVN-Revision: 38032
2013-09-18 10:27:15 +00:00
John Crispin
f874094402
procd: convert various packages to procd style init.d scripts
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38023
2013-09-17 21:45:30 +00:00
John Crispin
f12f4074af
kernel: make most modules use AutoProbe
...
now that we have modprobe we can set more than half of the modules to AutoProbe
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38021
2013-09-17 21:45:17 +00:00
Felix Fietkau
b2447d1fca
hostapd: adjust the md5sum for the uploaded source tarball ( fixes #14155 )
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37990
2013-09-14 20:07:35 +00:00
Felix Fietkau
28eceb0343
iwinfo: when using nl80211, parse interface combinations instead of creating/deleting interfaces
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37983
2013-09-14 14:46:51 +00:00
Jo-Philipp Wich
c3cc912ed9
uhttpd: udpat to git head
...
- fixes buffer corruption with JSON-RPC list calls
- change JSON-RPC protocol to include the session ID into the call
attributes instead of passing it via the URL
- forcibly pass effective session ID as "ubus_rpc_session" attribute
to called procedures
- change ubus acl checking to conform with new ubus session namespace
SVN-Revision: 37962
2013-09-13 13:24:45 +00:00
Steven Barth
eba3ab9ade
odhcp6c: Timing workaround for buggy servers
...
SVN-Revision: 37951
2013-09-12 12:57:42 +00:00
Steven Barth
b2a71fedd9
odhcp6c: more compatibility fixes
...
SVN-Revision: 37907
2013-09-05 21:13:51 +00:00
Steven Barth
0a85c59040
netfilter: Add IPv6-NAT support for kernel and ipt Thanks to Berni, Adam Novak and Sedat Dilek for patches and inspiration
...
SVN-Revision: 37866
2013-09-01 17:59:48 +00:00
Steven Barth
3e647ac9b6
iptables: Update to 1.4.20
...
SVN-Revision: 37865
2013-09-01 13:46:10 +00:00
Felix Fietkau
7fc90889d5
netifd: update to the latest version, fixes a bridge handling corner case on config reload
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37856
2013-08-29 22:20:36 +00:00
Vasilis Tsiligiannis
03b1d4289b
lldpd: Add libbsd dependency when using eglibc
...
Signed-off-by: Vasilis Tsiligiannis <acinonyx@openwrt.gr>
SVN-Revision: 37837
2013-08-25 18:47:08 +00:00
Jo-Philipp Wich
2864fb107f
firewall: update to git head
...
- uses "-j CT --notrack" instead of deprecated "-j NOTRACK"
- fixes support for rule sections with target "NOTRACK"
SVN-Revision: 37777
2013-08-14 15:40:38 +00:00
Felix Fietkau
4cda88a879
hostapd: fix typo in version number
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37742
2013-08-08 20:45:15 +00:00
Felix Fietkau
9df75e7f34
hostapd: fix ubus reconnect handling
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37741
2013-08-08 20:45:12 +00:00
Felix Fietkau
750197b3af
hostapd: add a build variant for wpa_supplicant with p2p (aka Wi-Fi Direct) support
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37739
2013-08-08 16:24:50 +00:00
Felix Fietkau
f53b96813e
hostapd: update to latest version (20130707)
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37738
2013-08-08 16:04:19 +00:00
Felix Fietkau
9a22315ca4
hostapd: Settings for DAE/CoA server
...
hostapd supports "Dynamic Authorization Extensions", making it possible
to forcibly disconnect a user by sending it a RADIUS "Disconnect-Request"
packet.
I've added three new variables to enable setting of the
"radius_das_client" and "radius_das_port" variables in the hostapd
configuration, which enable these extensions.
* dae_client - IP of the client that can send disconnect requests
* dae_secret - shared secret for DAE packets
These are combined into the "radius_das_client" option in hostapd.conf
To enable the server, both dae_client and dae_secret must be set.
* dae_port - optional, default value is 3799 as specified in RFC 5176
Signed-off-by: Martijn van de Streek <martijn@vandestreek.net>
SVN-Revision: 37734
2013-08-06 18:55:30 +00:00
Felix Fietkau
91f0b411f4
hostapd: Fix WDS/WEP usage
...
WEP in WDS is currently broken in hostapd. Add a patch
to fix the issue.
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
SVN-Revision: 37733
2013-08-06 17:59:12 +00:00
Felix Fietkau
76ca564e79
hostapd: Refresh patches
...
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
SVN-Revision: 37731
2013-08-06 17:59:05 +00:00
Felix Fietkau
22e012bad8
hostapd: Add an option to disable beaconing
...
Add a patch for hostapd that introduces a config option
"start_disabled" which can be used to bring up an AP
interface with beaconing disabled. This is useful in
a Repeater-AP setup where the Repeater AP has to start
beaconing only after the WDS link has been established.
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
SVN-Revision: 37730
2013-08-06 17:59:02 +00:00
Felix Fietkau
719adb6471
uhttpd: update to the latest version, fixes a crash on early cgi/lua process termination
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37628
2013-07-31 22:07:09 +00:00
Luka Perkov
1646bd096c
iproute2: update to 3.10.0
...
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 37590
2013-07-28 23:27:35 +00:00
Felix Fietkau
aff8c18ad0
openvpn: update to 2.3.2
...
this patches updates openvpn to v2.3.2
and adds a PKG_MD5SUM to the Makefile
This release fixes a memory access violation when cipher none is used
on ar71xx - at least with my config
Signed-off-by: Peter Wagner <tripolar@gmx.at>
SVN-Revision: 37560
2013-07-26 12:35:22 +00:00
Steven Barth
4d37ae33b6
6relayd: Overridden DNS should affect DHCPv6
...
SVN-Revision: 37558
2013-07-26 11:59:25 +00:00
Felix Fietkau
8faa8a6420
uhttpd: update to latest version, fixes issues with POST and keep-alive ( #13940 )
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37556
2013-07-26 10:03:07 +00:00
Felix Fietkau
3d2ace5d71
authsae: add myself as a maintainer
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37555
2013-07-26 10:03:03 +00:00
Felix Fietkau
4478c69b86
authsae: adapt uci scripts to use authsae
...
This patch modifies the uci scripts to be able to
start meshd-nl80211 for encrypted mesh networks,
therefor a new script (authsae.sh) is inserted.
Signed-off-by: Emanuel Taube <emanuel.taube@gmail.com>
[etienne.champetier@free.fr: just update mac80211.sh path]
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>
SVN-Revision: 37554
2013-07-26 10:02:59 +00:00
Felix Fietkau
6dbea6416b
authsae 80211s authentication daemon
...
This patch adds authsae open80211s authentication daemon (http://open80211s.org )
It's a rework of Peter Naulls patch (http://patchwork.openwrt.org/patch/1350/ )
I've excluded the sample conf file as it's useless when used with mac80211.sh (Emanuel Taube patch)
It now link against libnl-tiny instead of libnl (patch merged in authsae git)
Authsae is 58 Ko (OPENSSL_WITH_EC option adds 35Ko to libopenssl)
Signed-off-by: Peter Naulls <peter@chocky.org>
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>
SVN-Revision: 37553
2013-07-26 10:02:55 +00:00
Felix Fietkau
85e585ddce
ead: fix compile errors with recent kernels
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37482
2013-07-20 12:56:07 +00:00
Hauke Mehrtens
96f1953fb1
kernel: fix xtables-addons dependencies with kernel 3.3
...
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
SVN-Revision: 37461
2013-07-19 22:36:47 +00:00
Jo-Philipp Wich
7bbe1656cb
xtables-addons: use a select of kmod-ipt-core instead of depending on it
...
SVN-Revision: 37425
2013-07-19 09:58:17 +00:00
Jo-Philipp Wich
d474a77edf
xtables-addons: add missing kmod dependencies
...
SVN-Revision: 37424
2013-07-19 09:58:11 +00:00
Jo-Philipp Wich
d6e8047f83
firewall: update to git head
...
- handles redirects as port relocations if the dest_ip points to the router itself
SVN-Revision: 37374
2013-07-16 14:04:59 +00:00
Steven Barth
54ae5ce507
netifd: Fix IPv6-prefix assignment with continuous hints
...
SVN-Revision: 37371
2013-07-16 12:07:11 +00:00
Steven Barth
6a034ce5b1
6relayd: Fix DHCPv6-PD with continuous hints
...
SVN-Revision: 37370
2013-07-16 12:07:06 +00:00
Steven Barth
0444e32acd
Bump iptables version
...
SVN-Revision: 37329
2013-07-15 06:12:07 +00:00
Steven Barth
ea6a5d0c22
iptables: restore reap functionality to recent module
...
The reap functionality appears to have been accidentally disabled by
commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see:
git://git.netfilter.org/iptables.git
and subsequently in iptables 1.4.15 and later. This adds a patch to
restore reap functionality for recent_opts_v1.
Signed-off-by: Russell Senior <russell@personaltelco.net>
SVN-Revision: 37328
2013-07-15 06:12:03 +00:00
Luka Perkov
1a963355b0
netifd: update to latest version, add bridge_empty option
...
with this option enabled it's possible to create empty bridges
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 37318
2013-07-14 18:50:04 +00:00
John Crispin
7d7c2ff5f9
swconfig: fix dependency bug introduced by [37304]
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 37316
2013-07-14 18:16:42 +00:00
Hauke Mehrtens
f8d55e7541
brcm47xx: use b53 phy driver for the switch in kernel 3.10
...
This makes it possible to use swconfig to controll the switch.
This was tested with devices using b43 and bgmac.
This was not tested on devices using tg3.
This does not support the adm switch used in some very old devices.
SVN-Revision: 37304
2013-07-14 14:11:17 +00:00
John Crispin
8d546699c5
dropbear: register a config.change trigger
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 37245
2013-07-11 17:00:40 +00:00
Felix Fietkau
4e042e4a84
ipset: force the shell to bash to fix build issues on mac os x
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37227
2013-07-10 14:59:00 +00:00
Felix Fietkau
4a0c312dc3
xtables-addons: update to version 2.3, adds linux 3.10 compatibility
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37226
2013-07-10 14:51:13 +00:00
Felix Fietkau
f98f69adc9
firewall: add missing dependencies
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37224
2013-07-10 11:33:48 +00:00
John Crispin
fc40051569
lantiq: move dsl tools to package/network/config
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 37198
2013-07-08 09:01:38 +00:00
Luka Perkov
4a7439401b
linux-atm: fix dependencies
...
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 37189
2013-07-08 00:37:49 +00:00
Jo-Philipp Wich
4aa82d07a6
firewall: allow routed lan<->lan traffic by default
...
SVN-Revision: 37171
2013-07-04 18:10:36 +00:00
Jo-Philipp Wich
2561bce232
lldpd: upgrade to 0.7.5
...
lldpd 0.7.1 has several alignment issues that trip a system configured
to fault on misaligned accesses. Version 0.7.5 fixes that along with a
few other minor issues.
Signed-off-by: John Szakmeister <john@szakmeister.net>
SVN-Revision: 37168
2013-07-04 16:57:03 +00:00
Steven Barth
e3a369e597
odhcp6c: avoid integer overflows in resend logic
...
SVN-Revision: 37150
2013-07-03 16:14:24 +00:00
Steven Barth
b9aa47d5b6
odhcp6c: add missing config parameter
...
SVN-Revision: 37148
2013-07-03 13:50:06 +00:00
Jo-Philipp Wich
7c197d9f0e
hostapd: truncate default mac file before adding entries to it ( #13797 )
...
SVN-Revision: 37114
2013-07-01 10:52:35 +00:00
Felix Fietkau
ee68734929
hostapd: fix multi-ssid and AP+STA, clean up code
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37111
2013-06-30 21:01:13 +00:00
Felix Fietkau
60b040bbaf
hostapd: update to latest git version
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37110
2013-06-30 20:27:38 +00:00
Felix Fietkau
12c033dfd9
mac80211: update to wireless-testing 2013-06-27, fix ATH_USER_REGD handling
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37097
2013-06-30 10:44:19 +00:00
Jo-Philipp Wich
2d506f46fb
firewall: update to git head
...
- uses custom formatting for mac addresses to ensure leading zeroes, required for older iptables mac match parser
SVN-Revision: 37082
2013-06-29 13:28:27 +00:00
Steven Barth
d8051a8814
netifd: fix typo in dhcp script
...
SVN-Revision: 37051
2013-06-28 04:19:21 +00:00
Florian Fainelli
fe7c236a06
6relayd: prevent build on AVR32
...
AVR32 misses a bunch of updated syscalls, including timerfd_create()
which is used by 6relayd. Since that requires Linux/libc changes, just
prevent building it for now.
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 37040
2013-06-27 15:33:05 +00:00
Steven Barth
cb66ed972b
odhcp6c: Add missing config option "ifaceid"
...
SVN-Revision: 37033
2013-06-25 05:18:20 +00:00
John Crispin
e7dbdad43b
hostapd: fix superflous coma
...
this cause the wps trigegr to be copied to the wrong place
https://dev.openwrt.org/ticket/13753
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 37031
2013-06-24 16:44:18 +00:00
Steven Barth
eecce5abad
arptables: Bump to 0.0.4
...
SVN-Revision: 37020
2013-06-24 05:48:12 +00:00
Steven Barth
69cd09ebbf
6relayd: don't accidentally remove regular prefix routes
...
SVN-Revision: 37018
2013-06-23 16:26:09 +00:00
Steven Barth
f47c4c80d4
6relayd: fix lease-update behaviour for clients without reconfigure
...
SVN-Revision: 37011
2013-06-22 08:31:28 +00:00
Steven Barth
d0d5f109d8
6relayd: Keep PD-downstream across RENEW/REBIND
...
SVN-Revision: 37009
2013-06-22 08:19:25 +00:00
John Crispin
4ebf19b48f
packages: clean up the package folder
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 37007
2013-06-21 16:54:37 +00:00
John Crispin
4999ae4236
hostapd: remove old button hotplug script
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36991
2013-06-21 16:53:07 +00:00
Steven Barth
5108318edb
6relayd: Fix DHCPv6-PD assignment logic
...
SVN-Revision: 36980
2013-06-21 06:15:09 +00:00
Steven Barth
de2a7547b7
6relayd: correctly set downstream routes for DHCPv6-PD
...
SVN-Revision: 36969
2013-06-19 13:08:33 +00:00
Felix Fietkau
b4babf9f81
netifd: update to latest version, fixes a NULL pointer deref bug
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36965
2013-06-18 16:24:48 +00:00
Jo-Philipp Wich
65f82e2311
firewall: update to git head
...
- fixes misprocessing of unknown symbolic protocol names
SVN-Revision: 36963
2013-06-18 14:30:51 +00:00
Jo-Philipp Wich
37ae268729
firewall: update to git head
...
- fixes calculation of IPv4 netmasks derived from 0.0.0.0/0 CIDRs
SVN-Revision: 36960
2013-06-18 14:14:35 +00:00
Steven Barth
5219d38da2
odhcp6c: Add option to override interface identifier in RA-client
...
SVN-Revision: 36959
2013-06-18 12:51:14 +00:00
Steven Barth
9f1899242c
netifd: IPv6: Fix sorting order in last commit.
...
SVN-Revision: 36952
2013-06-17 21:29:14 +00:00
Steven Barth
213269a8f7
netifd: Satisfy IPv6 assignments ordered by prefix length
...
SVN-Revision: 36950
2013-06-17 21:16:22 +00:00
Jo-Philipp Wich
541fbfbb9e
hostapd: correctly handle macfile uci option
...
Make hostapd.sh correctly handle the macfile uci option.
Such option specifies the macfile name to pass into the
hostapd configuration file. Moreover, if a maclist option
has been specified, copy the macfile before appending new
entries.
Signed-off-by: Antonio Quartulli <antonio@open-mesh.com>
SVN-Revision: 36944
2013-06-17 11:59:29 +00:00
Jo-Philipp Wich
dfea3bae11
dnsmasq: use host-record instead of address
...
Using "--address" for individual host A records is broken, use "--host-record" instead.
The following patch changes dnsmasq.init to build individual host records using "--host-record" instead of "--address".
Signed-off-by: Adam Gensler <openwrt at gnslr.us>
[jow: shorter description, simplified shell script code]
SVN-Revision: 36943
2013-06-17 11:55:30 +00:00
Jo-Philipp Wich
36d3fafd77
firewall: update to git head
...
- properly process intermediate "!" options in argument list (fixes negated ipsets)
SVN-Revision: 36935
2013-06-13 18:54:49 +00:00
Jo-Philipp Wich
0db38adf1c
firewall: update to git head
...
- fixes handling of reject target for rule sections with specific destination zone
SVN-Revision: 36933
2013-06-13 12:49:00 +00:00
Jo-Philipp Wich
1150e299bb
uhttpd: expose missing options to uci
...
SVN-Revision: 36932
2013-06-13 11:55:12 +00:00
Steven Barth
302cf427cb
odhcp6c: add sanity checks for NDP and MTU parameters from RAs
...
SVN-Revision: 36930
2013-06-13 06:38:48 +00:00
Steven Barth
4f0a0defa6
6relayd: make route preference and prefix on-link flag configurable
...
SVN-Revision: 36922
2013-06-11 20:52:27 +00:00
Steven Barth
f6dd266c97
iproute2: add drop-failed rule action (patch by Jonas Gorski)
...
SVN-Revision: 36910
2013-06-11 09:27:46 +00:00
Felix Fietkau
9fb5bf176e
netifd: update to latest version, uses the new uci/blob code from libuci
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36909
2013-06-10 12:42:30 +00:00
Steven Barth
5caa45d0b3
ppp: correctly handle address when reloading
...
SVN-Revision: 36904
2013-06-10 10:42:34 +00:00
Steven Barth
491deaed2c
netifd: improve reloading behaviour
...
SVN-Revision: 36903
2013-06-10 10:42:15 +00:00
Jo-Philipp Wich
bc73ca5619
iwinfo: add phyname attribute, this is useful to group networks by radio phy
...
SVN-Revision: 36889
2013-06-09 14:39:14 +00:00
Jo-Philipp Wich
cb24c37858
libiwinfo: ignore log messages from wpa_supplicant while scanning
...
wpa_supplicant may send log and event messages intermixed with the
expected scan results. This makes "iwinfo wlan0 scan" and LuCI
"site survey" display nothing when many AP's are around.
Eliminate the CTRL-EVENT-BSS-ADDED events, interspersed log messages,
lines with unexpected format. Increase timeout to handle the max
number of channels (2.4, 3.6, 4.9, 5 GHz). Insure receive buffer is
null-terminated.
Signed-off-by: Jean-Pierre Tosoni <jp.tosoni@acksys.fr>
SVN-Revision: 36888
2013-06-09 14:39:09 +00:00
Steven Barth
f995c90329
netifd: Improve IPv6 source-routing policies
...
SVN-Revision: 36884
2013-06-08 13:26:33 +00:00
Jonas Gorski
b9de8ca7f5
netifd: bring wifi down before shutting down
...
works around wifiX references not being freed on network restart.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36883
2013-06-08 11:44:12 +00:00
Jo-Philipp Wich
e7b15446a8
firewall: udpate to git head ( #13652 , #13654 , #13658 )
...
- optimizes chain usage for ingress rules
- adds limit match support for redirect rules
- fixes automatic redirect dest detection on little endian systems
- leaves base chains in place on reload to allow user rules to target e.g. "reject"
SVN-Revision: 36871
2013-06-06 14:12:02 +00:00
Jo-Philipp Wich
5cf06bd17b
firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols
...
SVN-Revision: 36868
2013-06-06 14:02:29 +00:00
Jo-Philipp Wich
e94cf1c72b
iptables: install libext*.a into staging dir
...
SVN-Revision: 36867
2013-06-06 14:02:24 +00:00
Jo-Philipp Wich
ecc95dcba8
firewall: update to git head ( #13652 )
...
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
- uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones
SVN-Revision: 36854
2013-06-05 11:40:40 +00:00
Jo-Philipp Wich
0a74d9d5c3
firewall3: fix accidentally changed install directive
...
SVN-Revision: 36840
2013-06-04 12:30:50 +00:00
Jo-Philipp Wich
07a3110e88
firewall: fix git source url
...
SVN-Revision: 36839
2013-06-04 12:23:47 +00:00
Jo-Philipp Wich
b721c92221
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA
...
SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
Jo-Philipp Wich
0dd6753c09
Drop legacy firewall package
...
SVN-Revision: 36837
2013-06-04 12:21:44 +00:00
Jo-Philipp Wich
6f60308257
firewall3: update to git head ( #13641 )
...
* Fixes wrong chain used for zone forward policy
SVN-Revision: 36830
2013-06-04 10:26:49 +00:00
Jo-Philipp Wich
6eeca5176e
firewall3: update to git head
...
- Fixes problems with reusing matches or targets from loadable extensions
SVN-Revision: 36826
2013-06-03 16:38:29 +00:00
Felix Fietkau
8c69057980
uhttpd: update to latest version, fixes CGI related crashes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36817
2013-06-01 21:43:06 +00:00
Steven Barth
089d6612ce
6relayd: Work around Windows DHCPv6 quirks Announcing deprecated addresses breaks Windows clients
...
SVN-Revision: 36815
2013-06-01 17:51:02 +00:00
Steven Barth
7ae506c7d4
odhcp6c: work around spurious false-positive address DECLINEs
...
SVN-Revision: 36809
2013-05-31 13:49:17 +00:00
Jo-Philipp Wich
3bb397c997
firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly
...
SVN-Revision: 36806
2013-05-31 13:23:23 +00:00
Steven Barth
bf582fbb7b
odhcp6c: fix handling of multiple RAs in a row
...
SVN-Revision: 36804
2013-05-31 10:02:39 +00:00
Steven Barth
cdc3caf533
6relayd: Better compatibility with misbheaving DHCPv6 clients * Make the "best" address / prefix the first one being announced * Only add the "best" address to the hosts-file
...
SVN-Revision: 36772
2013-05-30 15:42:30 +00:00
Steven Barth
519f27cd33
netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes
...
SVN-Revision: 36771
2013-05-30 15:42:25 +00:00
Felix Fietkau
02fe12c00d
uhttpd: update again to fix a ubus plugin crash bug
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36770
2013-05-30 13:16:38 +00:00
Felix Fietkau
eeb7fdc13e
uhttpd: update to latest version, fixes script timeout for ubus requests
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36767
2013-05-30 10:44:20 +00:00
Steven Barth
dc6625f977
6relayd: more verbosity in leases and logging
...
SVN-Revision: 36764
2013-05-30 07:56:55 +00:00
Steven Barth
56a3396bf2
iptables: bump to 1.4.19.1
...
SVN-Revision: 36760
2013-05-29 14:58:04 +00:00
Steven Barth
439fdd4d65
netifd: fix IPv6-addresses disappearing due to lifetime-overflows
...
SVN-Revision: 36748
2013-05-28 18:32:01 +00:00
Steven Barth
23b3cebd56
odhcp6c: fix or debug disappearing IPv6 addresses
...
SVN-Revision: 36745
2013-05-28 16:28:14 +00:00
Felix Fietkau
e6250644be
mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36743
2013-05-28 11:10:41 +00:00
Steven Barth
61c0c6ab68
6relayd: RFC 6204 and naming improvements * Announce delegated prefixes using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default
...
SVN-Revision: 36738
2013-05-27 20:38:13 +00:00
Jo-Philipp Wich
63603ee478
firewall3: update to git head
...
- allows building without IPv6 support
- uses more robust rules to cope with missing libext.a
- uses better linking strategy to avoid symbol clashes with older iptables
- introduces source compatiblity layer for different libxtables versions
SVN-Revision: 36736
2013-05-27 15:13:19 +00:00
Jo-Philipp Wich
e4f8c38ed1
firewall3: update to git head
...
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
- automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
- properly support output rules with dest '*' to hook directly into delegate_output
- fixes crash when processing rules with unresolved targets
SVN-Revision: 36721
2013-05-26 15:48:04 +00:00
Steven Barth
f63064a257
6relayd: Fix DHCPv6-server picking up addresses from master interface
...
SVN-Revision: 36718
2013-05-26 10:06:02 +00:00
Jo-Philipp Wich
90887b5fb3
firewall3: update to git head
...
- fixes linking issues with some toolchains
SVN-Revision: 36703
2013-05-24 12:49:06 +00:00
Steven Barth
d8d7d7f4aa
6relayd: fix a lease-timing issue with stateful DHCPv6
...
SVN-Revision: 36702
2013-05-24 12:31:30 +00:00
Jo-Philipp Wich
c1ff8cd9bb
firewall3: update to git head
...
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
- Do not leak memory when processing rules with unknown targets or matches
SVN-Revision: 36698
2013-05-23 13:07:44 +00:00
Felix Fietkau
75bb3138aa
uhttpd: update to latest version, fixes #13564 , #13560 , improves error handling as pointed out in #13537
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36696
2013-05-23 10:50:42 +00:00
Steven Barth
32c6ffb5a1
firewall3: Remove abandonend include
...
SVN-Revision: 36692
2013-05-23 06:38:25 +00:00
Jo-Philipp Wich
b757ca2259
firewall3: update to git head
...
- fix build on Linux < 3.7
- limit zone names to 14 bytes
SVN-Revision: 36691
2013-05-22 14:15:53 +00:00
Steven Barth
9c3ac668e0
6relayd: Let OpenWrt override default CFLAGS
...
SVN-Revision: 36690
2013-05-22 11:58:54 +00:00
Jo-Philipp Wich
c12189b379
firewall3: update to git head
...
- fixes reload when firewall is not running already
- fixes crash when ipsets are supported but undeclared
- fixes handling of per zone user chains on reload
SVN-Revision: 36689
2013-05-22 11:37:41 +00:00
Steven Barth
9d115df749
6relayd: Fix a segfault when multiple downstream interfaces are present
...
SVN-Revision: 36687
2013-05-21 18:05:37 +00:00
Jo-Philipp Wich
dd83e87ab0
firewall3: update to git head
...
- fixes segfault in flush command if ipset support is not available
- fixes internal rule generation if custom chains are enabled
SVN-Revision: 36686
2013-05-21 14:49:37 +00:00
Jo-Philipp Wich
6eec8009ba
ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base
...
SVN-Revision: 36685
2013-05-21 13:00:28 +00:00
Jo-Philipp Wich
9b6c31d4cc
firewall3: move libext*.a copying to compile phase
...
SVN-Revision: 36684
2013-05-21 12:58:36 +00:00
Jo-Philipp Wich
8df6cd005c
netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
...
SVN-Revision: 36683
2013-05-21 12:58:15 +00:00
Jo-Philipp Wich
e8050c6c35
firewall3: update to git head
...
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
* make ipset integration more reliable
SVN-Revision: 36681
2013-05-21 10:15:14 +00:00
Jo-Philipp Wich
a9a9644efd
iptables: use -ffunction-sections, -fdata-sections and --gc-sections
...
SVN-Revision: 36680
2013-05-21 10:15:10 +00:00
Steven Barth
24c39ddcf7
odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests
...
SVN-Revision: 36678
2013-05-21 09:13:48 +00:00
Steven Barth
37baf2d6b2
6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better
...
SVN-Revision: 36677
2013-05-21 09:13:40 +00:00
Steven Barth
c6f70381c9
odhcp6c: Fix address / prefix expiry logic
...
SVN-Revision: 36675
2013-05-20 14:54:20 +00:00
Steven Barth
dd161ae62b
dnsmasq: add directory for external hosts-files
...
SVN-Revision: 36655
2013-05-17 14:44:12 +00:00
Steven Barth
334c40da14
6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD
...
SVN-Revision: 36654
2013-05-17 14:44:07 +00:00
Steven Barth
0f1be4425f
netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4
...
Based on a patch by Kristian Evensen. Thank You.
SVN-Revision: 36653
2013-05-17 14:44:02 +00:00
Felix Fietkau
7365e647f6
uhttpd: update to latest version, fixes index page processing order
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36644
2013-05-16 11:38:19 +00:00
Luka Perkov
4fc8e64a40
iproute2: workaround compile issues with gcc 4.8.x
...
SVN-Revision: 36642
2013-05-16 00:04:48 +00:00
Steven Barth
a62ca72309
odhcp6c: Fix handling of RAs when no DHCPv6-server is present
...
SVN-Revision: 36641
2013-05-15 11:07:01 +00:00
Luka Perkov
580481cd6d
iproute2: upgrade to 3.9.0
...
SVN-Revision: 36638
2013-05-14 23:49:34 +00:00
Luka Perkov
5be36cbe83
iproute2: print help in connmark
...
SVN-Revision: 36637
2013-05-14 23:49:31 +00:00
Felix Fietkau
d090eea125
uhttpd: update to latest version, fixes a SSL connection memory leak
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36636
2013-05-14 17:43:00 +00:00
Felix Fietkau
d481486aad
package: fold the IPv6 menu into Network
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36634
2013-05-14 15:02:31 +00:00
Steven Barth
e8f3897389
6relayd: Always announce the current MAC-address
...
* Fixes #13516 thanks to berni for the detailed bugreport.
SVN-Revision: 36629
2013-05-13 17:54:36 +00:00
Steven Barth
a1af842016
ds-lite: add ds-lite network protocol handler
...
SVN-Revision: 36628
2013-05-13 17:12:39 +00:00
Steven Barth
5ce135ed87
netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements
...
SVN-Revision: 36627
2013-05-13 17:12:34 +00:00
Steven Barth
ea71678b09
netifd: added support for setting up 6rd from DHCP
...
SVN-Revision: 36626
2013-05-13 17:12:30 +00:00
Steven Barth
ad93a571c6
odhcp6c: added support for DS-Lite + various fixes
...
SVN-Revision: 36625
2013-05-13 17:12:25 +00:00
Steven Barth
973dad61b0
firewall3: Remove obsoleted ULA-border
...
SVN-Revision: 36624
2013-05-13 17:12:20 +00:00
Steven Barth
07d99b62b7
firewall3: add wan6 interface to wan-zone by default
...
SVN-Revision: 36623
2013-05-13 17:12:15 +00:00
Steven Barth
4cb9d9715c
firewall: Remove obsoleted ULA-border rule
...
SVN-Revision: 36622
2013-05-13 17:12:10 +00:00
Steven Barth
8560648082
6rd: increase metric of default route
...
This will prefer native IPv6 over 6rd if both are present.
SVN-Revision: 36605
2013-05-12 08:07:15 +00:00
Jo-Philipp Wich
d59f8cfa8e
iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode
...
SVN-Revision: 36604
2013-05-12 01:12:56 +00:00
Steven Barth
29d4c36622
add uci support for "proxy-dnssec" in dnsmasq
...
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.
Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>
SVN-Revision: 36570
2013-05-07 07:19:51 +00:00
Felix Fietkau
9d8e3e03df
iw: update to 3.10, sync with nl80211.h changes in compat-wireless
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36569
2013-05-06 22:35:50 +00:00
Steven Barth
9c1ed6447b
odhcp6c: Make SLAAC-only work without reqprefix=no
...
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.
SVN-Revision: 36555
2013-05-06 10:20:43 +00:00
Jo-Philipp Wich
95e139d0b2
ipset-dns: support simultaneously populating IPv4 and IPv6 sets
...
SVN-Revision: 36554
2013-05-06 10:01:45 +00:00
Jo-Philipp Wich
3c17fd41a4
Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset
...
SVN-Revision: 36552
2013-05-06 08:44:54 +00:00
Felix Fietkau
b85c442e81
hostapd: enable 802.11r for the -full variant ( #13250 )
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36533
2013-05-03 10:39:57 +00:00
Jo-Philipp Wich
4bba31b64c
firewall3: update to git head
...
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422 , #13386 )
- add support for fwmark matches and mark setting targets
SVN-Revision: 36521
2013-05-02 13:42:20 +00:00
Jo-Philipp Wich
a0b655b8f2
Fix install of iptables pkg-config files.
...
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146 ; which should make collectd
appear in snapshots again.
Signed-off-by: Danny Baumann <dannybaumann@web.de>
SVN-Revision: 36509
2013-05-02 08:10:55 +00:00
Jo-Philipp Wich
f1e214411d
iwinfo: fix iwinfo_hardware() return value if chip id is not found
...
SVN-Revision: 36471
2013-04-28 14:04:39 +00:00
Jo-Philipp Wich
f1497ccf4f
netifd: update to git head - disables multicast snooping by default on bridges
...
SVN-Revision: 36463
2013-04-27 09:28:40 +00:00
Jo-Philipp Wich
05c1424e87
iwinfo: add hw database file
...
SVN-Revision: 36450
2013-04-26 13:21:01 +00:00
Jo-Philipp Wich
e02d373f90
iwinfo: move builtin hardware database to /usr/share/libiwinfo/hardware.txt
...
SVN-Revision: 36449
2013-04-26 13:20:15 +00:00
Felix Fietkau
5062838fa5
netifd: update to the latest version, fixes interface reload issues when removing the ifname option
...
SVN-Revision: 36424
2013-04-25 16:28:19 +00:00
Steven Barth
49f97af481
6relayd: Fix generation of RA-messages
...
SVN-Revision: 36419
2013-04-24 18:22:08 +00:00
Jo-Philipp Wich
a040ead1c5
iwinfo: add SR71-15 radio info, fix nl80211 channel/frequency reporting on some architectures
...
SVN-Revision: 36417
2013-04-24 14:44:20 +00:00
Steven Barth
2c78c1457b
firewall3: Make IPv6 ULA-Border generation dynamic
...
This fixes working behind another router which gives out ULAs.
SVN-Revision: 36416
2013-04-24 14:17:24 +00:00
Steven Barth
2dbcd2ba7b
6relayd: update package description
...
SVN-Revision: 36413
2013-04-24 07:21:42 +00:00
Steven Barth
e17ac4c257
dnsmasq: update to 2.66 Thanks to Christoph König for patches.
...
SVN-Revision: 36412
2013-04-24 05:55:39 +00:00
Steven Barth
21e4e2a766
odhcp6c: Set default SOL_MAX_RT to 1h
...
SVN-Revision: 36411
2013-04-24 05:02:45 +00:00
Felix Fietkau
d7908e02b5
hostapd: return the frequency to some ubus calls to make integration easier
...
SVN-Revision: 36410
2013-04-23 18:35:50 +00:00
Jo-Philipp Wich
61a6f45cdc
lldpd: upgrade to 0.7.1
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
SVN-Revision: 36401
2013-04-23 10:37:23 +00:00
Steven Barth
17b8c0c7b8
netifd: Improve IPv6-ULA assignment handling
...
SVN-Revision: 36383
2013-04-22 19:40:06 +00:00
Steven Barth
c96c05d549
odhcp6c: Several fixes and improvements * Add preliminary support for RFC 6603 prefix exclusion * Fix reconfigure-support and reconfigure authentication * Set maximum retransmission timeout for solicitations to 2h * Fix a segfault when parsing IA_PD in advertise messages
...
SVN-Revision: 36382
2013-04-22 19:40:01 +00:00
Steven Barth
1e78c3e297
6relayd: Add DHCPv6-PD server support, fix relaying in stateful mode
...
SVN-Revision: 36381
2013-04-22 19:39:55 +00:00
Felix Fietkau
62244d73ae
hostapd: update to 2013-04-05
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36376
2013-04-22 13:24:48 +00:00
Felix Fietkau
96bb7c123b
build: consistently use 'depends on' instead of 'depends'
...
make the syntax more compatible with kernel menuconfig
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36351
2013-04-17 15:36:41 +00:00
Jo-Philipp Wich
e66a4af8c3
uhttpd: update to git head, fixes regression when parsing IPv6 listen arguments
...
SVN-Revision: 36348
2013-04-17 11:34:39 +00:00
Jo-Philipp Wich
25ffe0446c
iwinfo: print info of all existing wireless ifaces when cli is called without arguments
...
SVN-Revision: 36339
2013-04-15 15:00:16 +00:00
Felix Fietkau
eb10581ce3
uhttpd: update to latest version, fixes compile error with latest libubox
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36338
2013-04-15 14:49:52 +00:00
Felix Fietkau
099e3d8183
netifd: update to latest version, fixes some device handling crashes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36336
2013-04-15 14:21:45 +00:00
Felix Fietkau
88c418bc75
qos-scripts: add queue length and quantum limit, suggested by dtaht
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36294
2013-04-09 14:59:10 +00:00
Jo-Philipp Wich
7ca7bc501e
iwinfo: fix frequency/channel and channel/frequency conversions to properly implement 802.11j
...
SVN-Revision: 36292
2013-04-09 14:37:55 +00:00
John Crispin
04dcd12c91
add portmap support to userland
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36284
2013-04-09 14:19:13 +00:00
John Crispin
f13ae9965c
add "swconfig list" support
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36282
2013-04-09 14:19:05 +00:00
Jo-Philipp Wich
f90f025f20
netifd: fix route / route6 regression ( #13303 )
...
SVN-Revision: 36281
2013-04-09 12:21:12 +00:00
Steven Barth
3abc915522
Remove deprecated ip6slaac option * use proto=dhcpv6 with reqprefix=no instead
...
SVN-Revision: 36280
2013-04-09 12:12:30 +00:00
Steven Barth
2c087dc785
Remove obsoleted ipv6-support meta-package
...
SVN-Revision: 36279
2013-04-09 09:45:51 +00:00
Steven Barth
35d716fbbb
netifd: Bump to latest version * Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow)
...
SVN-Revision: 36196
2013-04-05 12:28:06 +00:00
Steven Barth
0393e52623
netifd: Rewrite IPv6 prefix assignment * Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion
...
SVN-Revision: 36193
2013-04-03 17:08:21 +00:00
Felix Fietkau
71e9171717
openvpn: enable password save support ( #13245 )
...
SVN-Revision: 36144
2013-04-01 10:02:43 +00:00
Steven Barth
eedf9e72f9
odhcp6c: Fix a race-condition in RA-handling
...
Thanks to Markus Stenberg for investigating and providing a fix
SVN-Revision: 36132
2013-03-26 13:39:17 +00:00
Steven Barth
5a9c2c77b4
iptables: don't use --enable-ipv6 if IPv6 is disabled
...
SVN-Revision: 36125
2013-03-25 11:22:12 +00:00
Steven Barth
6529cf6cea
odhcp6c: minor bug fixes
...
SVN-Revision: 36123
2013-03-25 10:58:48 +00:00
Jo-Philipp Wich
6fa1b5346e
firewall3: update to git head
...
* fixes parsing of src/dest '*'
* fixes parsing of proto 'all'
SVN-Revision: 36111
2013-03-22 14:10:29 +00:00
Jo-Philipp Wich
76d1c0a067
firewall3: update to git head
...
* fixes port remapping rules (#13217 )
SVN-Revision: 36100
2013-03-21 14:25:17 +00:00
Hauke Mehrtens
c9544f4af0
kernel: add some fixes for kernel 3.9
...
This patch fixes some compile problems with kernel 3.9 and adds some missing linux 3.9 handling into kernel packages.
SVN-Revision: 36098
2013-03-20 21:59:24 +00:00
Steven Barth
261be7b8f3
netifd: Fix adding IPv6 DNS-servers to resolv.conf
...
In some cases IPv6 DNS-servers were not added correctly.
SVN-Revision: 36095
2013-03-20 13:49:39 +00:00
Steven Barth
eeb88a1df3
odhcp6c: Fix metric for on-link prefix routes
...
SVN-Revision: 36094
2013-03-20 09:26:52 +00:00
Jo-Philipp Wich
6fbd824e9b
firewall3: update to git head
...
* fixes reload handling of zones and ipsets that are still running but already deleted from the config
SVN-Revision: 36092
2013-03-19 16:18:05 +00:00
Jo-Philipp Wich
03cb7986fc
firewall3: update to git head
...
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197 )
- do not allow src_mac option for SNAT rules
SVN-Revision: 36090
2013-03-19 13:54:34 +00:00
Felix Fietkau
31876c193a
hostapd: fix build errors on supplicant-only builds
...
SVN-Revision: 36085
2013-03-18 16:11:32 +00:00
Steven Barth
3ebdd3b330
odhcp6c: fix preference handling, custom client-ID * thanks to mbidewell for investigating
...
SVN-Revision: 36083
2013-03-18 07:24:49 +00:00
Felix Fietkau
2167101c90
hostapd: initial prototype of an ubus binding
...
Supports listing, removing and banning clients, and hooking into
probe/assoc/auth requests via object subscribe.
SVN-Revision: 36081
2013-03-17 20:47:18 +00:00
Felix Fietkau
84069f8534
uhttpd: update to latest version, fixes an occasional crash on CGI scripts
...
SVN-Revision: 36034
2013-03-15 13:43:55 +00:00
Jo-Philipp Wich
54f9f47a28
firewall3: update to git head
...
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
* Allow "network" and "device" commands while firewall is running (to make them usable in includes)
SVN-Revision: 36009
2013-03-14 15:29:43 +00:00
John Crispin
fce3deddff
use new button scheme
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36004
2013-03-13 18:11:25 +00:00
Jo-Philipp Wich
9faa312dbb
firewall3: update to git head
...
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
* Make NAT reflection direction configurable
* Map init script stop action to flush
* Map init script reload action to reload
* Respect init script disabled state in hotplug handler
SVN-Revision: 35998
2013-03-13 15:46:30 +00:00
Felix Fietkau
9ddc45bc3f
hostapd: fix client reassociation after too many ACK failures
...
SVN-Revision: 35973
2013-03-12 00:19:25 +00:00
Jo-Philipp Wich
8c7ed1cb7b
firewall3: update to git head
...
* Fixes compilation against eglibc
* Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
* Fixes tracking logic for user chains by differentiating between reloads and restarts
* Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
* Supports legacy "tcpudp" protocol notation again
SVN-Revision: 35969
2013-03-11 20:52:20 +00:00
Jo-Philipp Wich
e259ecad7e
Revert "firewall3: update to git head"
...
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.
SVN-Revision: 35904
2013-03-08 19:52:18 +00:00
Jo-Philipp Wich
50213fc354
firewall3: update to git head
...
- introduce per-zone user chains
- support legacy "tcpudp" protocol notation
SVN-Revision: 35903
2013-03-08 15:27:33 +00:00
Steven Barth
39a001dc69
odhcp6c: various bugfixes * Don't prematurely send RENEW / REBIND when T1 or T2 is > 1 day * Add "norelease" option to not send a RELEASE when stopping
...
SVN-Revision: 35902
2013-03-08 07:04:38 +00:00
Steven Barth
62ea398cd8
iptables: Add missing IPv6 builtin modules
...
SVN-Revision: 35898
2013-03-07 08:48:41 +00:00
Steven Barth
9779b0b88c
iptables: redo update to 1.4.18 with old linking-behaviour
...
SVN-Revision: 35896
2013-03-06 17:05:34 +00:00
Steven Barth
bacd71648b
Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx
...
SVN-Revision: 35894
2013-03-06 12:55:48 +00:00
Felix Fietkau
c3faa6be75
hostapd: include the madwifi headers in the package directory to avoid compile breakage if the madwifi build fails
...
SVN-Revision: 35893
2013-03-05 22:06:30 +00:00
Steven Barth
d023a08753
iptables: update to 1.4.18
...
SVN-Revision: 35892
2013-03-05 20:51:57 +00:00
Jo-Philipp Wich
d75c632de6
firewall3: add default config and firewall.user
...
SVN-Revision: 35889
2013-03-05 13:45:09 +00:00
Felix Fietkau
fa1749e668
hostapd: update to git version 2013-03-02
...
SVN-Revision: 35887
2013-03-04 17:16:38 +00:00
Jo-Philipp Wich
89be702bff
firewall3: update to git head, introduces support for "enabled" option
...
SVN-Revision: 35845
2013-03-02 17:09:33 +00:00
Steven Barth
c81945e979
6relayd: Fix illegal memory accesses Spurious errors when receiving netlink-messages lead to unhandled errors which caused SIGBUS. Thanks to tdavis for debugging
...
SVN-Revision: 35836
2013-02-28 16:37:20 +00:00
Steven Barth
50b7fa217a
6relayd: various fixes cap preferred and valid lifetimes at more reasonable limits decrease memory usage (remove unnecessary book-keeping)
...
SVN-Revision: 35835
2013-02-28 14:57:19 +00:00
Jo-Philipp Wich
886ce188bf
xtables-addons: fix packaging of iptaccount
...
SVN-Revision: 35831
2013-02-28 10:58:12 +00:00
Jo-Philipp Wich
557c047f71
firewall3: clear contnrack table on flush, set policies to drop during rule reload
...
SVN-Revision: 35820
2013-02-27 14:09:37 +00:00
Steven Barth
a90b6f7d90
6relayd: Fix config behaviour for rewrite_dns_addr option
...
SVN-Revision: 35804
2013-02-26 12:50:52 +00:00
Steven Barth
32ac53821f
6relayd: compatibility with broken IPv6 devices * Announce ULA as deprecated if other addresses are available * Allow the announced DNS-server to be overwritten
...
SVN-Revision: 35803
2013-02-26 12:42:53 +00:00
Jo-Philipp Wich
92062542e2
firewall: fix logging rule regression ( #12999 )
...
SVN-Revision: 35745
2013-02-22 13:45:20 +00:00
Jo-Philipp Wich
4fb2cd18c1
firewall3: add support for shell script and iptables-restore style includes
...
SVN-Revision: 35744
2013-02-22 12:45:38 +00:00
Steven Barth
a7b262dc0a
netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions.
...
SVN-Revision: 35743
2013-02-22 08:56:29 +00:00
Jo-Philipp Wich
7d7d88b580
firewall3: update to git head
...
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')
SVN-Revision: 35738
2013-02-21 22:33:44 +00:00
Florian Fainelli
280fa5a1a2
dante: fix broken configure script not using CFLAGS for conftest
...
Spotted by doing an ARM hard float build.
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 35685
2013-02-19 17:22:55 +00:00
Steven Barth
3081c672fc
6relayd: Fix possible memory corruption issue
...
SVN-Revision: 35673
2013-02-19 12:04:41 +00:00
Steven Barth
f5b63ffd33
6relayd: Workaround potential signal handling issue
...
SVN-Revision: 35665
2013-02-18 12:50:36 +00:00
Jo-Philipp Wich
02b0c62f33
firewall3 - a C implementation of the current firewall scripts
...
SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
Felix Fietkau
1d6574b9c3
hostapd: fix the scan wait patch for multiple interfaces
...
SVN-Revision: 35630
2013-02-16 19:00:34 +00:00
Felix Fietkau
99782943d2
hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update
...
SVN-Revision: 35619
2013-02-16 14:26:03 +00:00
Jonas Gorski
c98b12d911
samba36: fix segmentation fault when trying to add non-existent users
...
Based on a patch from НКВД. Closes #12962 .
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 35610
2013-02-16 11:39:42 +00:00
Steven Barth
99b69fd9c5
odhcp6c: allow setting a user-provided prefix as well
...
SVN-Revision: 35570
2013-02-12 08:23:54 +00:00
Jo-Philipp Wich
eeaf2c0b5a
iptables: fix bad PKG_RELEASE in previous commit
...
SVN-Revision: 35569
2013-02-11 22:14:38 +00:00
Jo-Philipp Wich
916902b1d2
iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
...
SVN-Revision: 35568
2013-02-11 21:58:42 +00:00
Felix Fietkau
1810b80ec0
mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default
...
SVN-Revision: 35565
2013-02-11 18:59:10 +00:00
Steven Barth
b8c796fbd7
odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging
...
SVN-Revision: 35553
2013-02-11 12:30:16 +00:00
Felix Fietkau
a9058439cf
openvpn-easy-rsa: fix typo in version ( #12958 )
...
SVN-Revision: 35508
2013-02-06 22:17:11 +00:00
Felix Fietkau
dc2ba40af3
openvpn: remove the stale PKG_REV variable
...
SVN-Revision: 35499
2013-02-05 10:40:19 +00:00
Felix Fietkau
b8c903e6f8
openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball
...
SVN-Revision: 35498
2013-02-05 10:40:13 +00:00
Jo-Philipp Wich
e106f25ee7
firewall: various enhancements
...
- reduce mssfix related log spam (#10681 )
- separate src and dest terminal chains (#11453 , #12945 )
- disable per-zone custom chains by default, they're rarely used
Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.
SVN-Revision: 35484
2013-02-04 14:38:33 +00:00
Steven Barth
13544edce7
odhcp6c: Fix timing issues
...
SVN-Revision: 35472
2013-02-03 17:26:40 +00:00
Jo-Philipp Wich
e893d4d9a8
libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend()
...
SVN-Revision: 35471
2013-02-03 12:03:24 +00:00
Steven Barth
6be5a5a73d
odhcp6c: Fix RENEW and REBIND requests
...
SVN-Revision: 35454
2013-02-02 10:44:13 +00:00
Steven Barth
e2193a69c8
odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested
...
SVN-Revision: 35421
2013-02-01 13:38:47 +00:00
Steven Barth
6a43437908
netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
...
SVN-Revision: 35420
2013-02-01 12:28:43 +00:00
Steven Barth
9a62439c28
odhcp6c: switch to userspace RA-handling and offload address assignment to netifd
...
SVN-Revision: 35419
2013-02-01 12:28:39 +00:00
Steven Barth
a3368da479
6relayd: Fix announced router flags and IPv6 procfs-configuration
...
SVN-Revision: 35418
2013-02-01 12:28:34 +00:00
Felix Fietkau
416ce374c0
openvpn: add from openvpn-devel from /packages, fix support for current polarssl
...
SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
Steven Barth
4bd3f54143
6in4: fix typo in last commit
...
SVN-Revision: 35409
2013-01-30 09:07:23 +00:00
Steven Barth
a0a91963af
6in4: work around hanging wget process
...
SVN-Revision: 35408
2013-01-30 09:05:53 +00:00
Felix Fietkau
65657fb585
netifd: update to latest version
...
fixes DNS servers on reload (#12910 )
fixes ubus object race on reload or down/up (#12612 )
SVN-Revision: 35383
2013-01-29 14:40:04 +00:00
Felix Fietkau
c16879a385
samba36: update to 3.6.11 and refresh patches (based on patch from #12914 )
...
SVN-Revision: 35382
2013-01-29 13:18:56 +00:00
Steven Barth
777f7b30ae
netifd: implement IPv6 prefix deprecation according to RFC 6204
...
SVN-Revision: 35377
2013-01-29 11:05:22 +00:00
Steven Barth
78a6439784
6relayd: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35371
2013-01-29 10:13:49 +00:00
Steven Barth
1a0b207d61
odhcp6c: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35370
2013-01-29 10:13:44 +00:00
Steven Barth
fac1ed35ac
netifd: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35369
2013-01-29 10:13:39 +00:00
Felix Fietkau
6ea9abadeb
netifd: update to latest version, fixes setting addresses/routes on alias interfaces
...
SVN-Revision: 35362
2013-01-28 20:35:55 +00:00
Jo-Philipp Wich
e804a663e3
hostapd: don't configure wpa_supplicant with empty password="" if no password is specified ( #12912 )
...
SVN-Revision: 35358
2013-01-28 18:05:33 +00:00
Jo-Philipp Wich
839f3ab0e7
firewall: flush conntrack table after changing interface rules
...
SVN-Revision: 35348
2013-01-28 15:53:44 +00:00
Steven Barth
ec41a6a08c
netifd: IPv6 sysctl, restart IPv6 in static mode to send RS
...
SVN-Revision: 35347
2013-01-28 14:07:27 +00:00
Steven Barth
75b06607db
netifd: add SLAAC ipv6 value for static-proto
...
SVN-Revision: 35346
2013-01-28 13:53:48 +00:00
Steven Barth
e964fa5d8f
odhcp6c: work-around for proto-script to avoid loosing the default route
...
SVN-Revision: 35345
2013-01-28 13:53:43 +00:00
Steven Barth
a81c76617e
ipv6-support: don't overwrite existing setting across reflashs
...
SVN-Revision: 35302
2013-01-23 08:15:09 +00:00
Felix Fietkau
55eab5ac44
netifd: update to latest version, adds another fix for interface aliases
...
SVN-Revision: 35297
2013-01-22 16:05:59 +00:00
Steven Barth
5859fc7a39
netifd: Fix a segfault when globals.ula_prefix is empty
...
SVN-Revision: 35296
2013-01-22 15:49:42 +00:00
Felix Fietkau
a4c7a953e5
uhttpd: always turn on TLS support, include ustream-ssl as a build dependency
...
SVN-Revision: 35295
2013-01-22 15:05:04 +00:00
Felix Fietkau
bab482b93f
uhttpd: fix another small hang issue with the same symptoms
...
SVN-Revision: 35291
2013-01-22 09:38:00 +00:00
Felix Fietkau
166ea3832b
uhttpd: fix connection hangs
...
SVN-Revision: 35290
2013-01-22 09:28:55 +00:00
Felix Fietkau
bc1d72c7bf
tcpdump: add SLL parsing support to tcpdump-mini, use -ffunction-sections, -fdata-sections and --gc-sections to reduce size
...
SVN-Revision: 35288
2013-01-22 07:51:15 +00:00
Felix Fietkau
c725669079
uhttpd: fix unencrypted passwords in httpd.conf
...
SVN-Revision: 35265
2013-01-21 12:46:41 +00:00
Steven Barth
38080ae550
6relayd: fix shell library includes in init-script
...
Thanks to Daniel Golle
SVN-Revision: 35262
2013-01-21 11:27:03 +00:00
Steven Barth
8a97d823a4
6relayd: avoid a race-condition with looping RAs
...
SVN-Revision: 35260
2013-01-21 10:42:31 +00:00
Steven Barth
f129c6786e
netifd: Fix segfaults in IPv6 prefix handling
...
SVN-Revision: 35259
2013-01-21 09:21:30 +00:00
Steven Barth
f1fd0f8278
odhcp6c: Fix address assignment with infinite validity
...
SVN-Revision: 35258
2013-01-21 07:58:58 +00:00
Felix Fietkau
4a86973285
uhttpd: fix selecting the right ustream implementation when openssl is to be used ( #12857 )
...
SVN-Revision: 35257
2013-01-20 21:15:43 +00:00
Felix Fietkau
5bc6555e08
netifd: update to latest version, fixes alias support
...
SVN-Revision: 35251
2013-01-20 15:47:09 +00:00
Felix Fietkau
18a7d0e945
network/iproute2: Bump version to 3.7.0
...
Updated to latest stable version and added an upstream patch to handle
a link failure
Signed-off-by: Oliver Smith <olipro@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>
[dgolle@allnet.de: refreshed patches]
Signed-off-by: Daniel Golle <dgolle@allnet.de>
SVN-Revision: 35250
2013-01-20 11:25:18 +00:00
Felix Fietkau
e55ee0817f
uhttpd: update to a newer version, fixes chunked transfer on some POST requests
...
SVN-Revision: 35249
2013-01-19 22:55:46 +00:00
Felix Fietkau
6f0ecf0541
uhttpd: switch to uhttpd2, it is now feature complete
...
SVN-Revision: 35247
2013-01-19 18:47:09 +00:00
Jo-Philipp Wich
f2766239ea
netifd: add a band-aid fix for the wifi setup vs. netifd init race by increasing the wait time to five seconds
...
SVN-Revision: 35240
2013-01-19 10:13:14 +00:00
Steven Barth
62e9957cc4
ipv6-support: adapt UCI defaults to new ordering
...
SVN-Revision: 35219
2013-01-18 12:52:51 +00:00
Steven Barth
5a122f7e5f
odhcp6c: Fix parsing more than one DNS server
...
SVN-Revision: 35215
2013-01-18 08:21:35 +00:00
Steven Barth
f517d0481a
ipv6-support: Rename enable-ipv6 UCI defaults
...
SVN-Revision: 35205
2013-01-17 16:16:06 +00:00
Jo-Philipp Wich
7250e27869
xtables-addons: rework uid/gid compat patch to use KUIDT_INIT() and KGIDT_INIT() macros
...
SVN-Revision: 35203
2013-01-17 16:05:30 +00:00
Jo-Philipp Wich
3b798d819d
xtables-addons: move to package/, add myself as maintainer
...
SVN-Revision: 35193
2013-01-17 12:29:26 +00:00
Steven Barth
66fa83d211
odhcp6c: Detect a different MAC if interface has none * Fixes DHCPv6 behaviour over PPP and similar
...
SVN-Revision: 35189
2013-01-17 08:29:01 +00:00
Steven Barth
73875c1215
ppp: don't automatically set IPv6 default route * Fixes "ndisc_router_discovery() failed to add default route"
...
SVN-Revision: 35188
2013-01-17 08:28:57 +00:00
Steven Barth
1ecc744583
netifd: @aliases use layer 3 devices instead of main devices Fixes dhcpv6 protocol alias
...
SVN-Revision: 35187
2013-01-17 08:28:51 +00:00
Steven Barth
3235d860a6
ipv6-support: Switch to native IPv6 support
...
SVN-Revision: 35174
2013-01-15 13:08:19 +00:00
Steven Barth
955a1e8e28
6rd: add support for native IPv6 prefix handling
...
SVN-Revision: 35173
2013-01-15 13:08:14 +00:00
Steven Barth
811cd2acf4
6to4: add support for native IPv6 prefix handling
...
SVN-Revision: 35172
2013-01-15 13:08:10 +00:00
Steven Barth
2a94f67029
6in4: add support for native IPv6 prefix handling
...
SVN-Revision: 35171
2013-01-15 13:08:05 +00:00
Steven Barth
a1e92f6dd1
6relayd: add suitable default configuration
...
SVN-Revision: 35170
2013-01-15 13:08:00 +00:00
Steven Barth
859fd7f614
6distributed: Remove obsolete service (replaced by netifd)
...
SVN-Revision: 35169
2013-01-15 13:07:56 +00:00
Steven Barth
06890959d1
netifd: Introduce native IPv6 prefix-handling
...
SVN-Revision: 35167
2013-01-15 13:07:41 +00:00
Jo-Philipp Wich
03a50b9087
netfilter.mk: add addrtype match to iptables-mod-extra (kmod-ipt-extra)
...
SVN-Revision: 35155
2013-01-14 16:12:56 +00:00
Jo-Philipp Wich
e5548b03e5
netifd: update to git head, adds 64bit counters
...
SVN-Revision: 35140
2013-01-13 19:48:52 +00:00
Steven Barth
0cd21ca785
odhcp6c: Send RS on start
...
SVN-Revision: 35137
2013-01-13 18:06:24 +00:00
Steven Barth
f0df2006af
odhcp6c: Add preliminary proto-handler
...
SVN-Revision: 35135
2013-01-13 17:35:09 +00:00
Steven Barth
b58a13cb2c
ipv6-support: don't use disable_ipv6
...
SVN-Revision: 35134
2013-01-13 17:25:43 +00:00
Steven Barth
fde5b934fd
6relayd: Rewrite init-script logic
...
SVN-Revision: 35133
2013-01-13 17:25:38 +00:00
Steven Barth
b077480a59
firewall: Add ULA site border for IPv6 traffic This prevents private traffic from leaking out to the internet
...
SVN-Revision: 35012
2013-01-04 15:59:28 +00:00
Jo-Philipp Wich
3b7882e775
iwinfo: don't use the txpower value from debugfs for now, it does not match the values reported via wext
...
SVN-Revision: 35007
2013-01-04 14:08:08 +00:00
John Crispin
ff0c7a9ec9
don't depend on lua
...
Delete +lua from libiwinfo-lua.
Signed-off-by: Stefan Hellermann <stefan@the2masters.de>
SVN-Revision: 35005
2013-01-04 09:32:06 +00:00
Steven Barth
965afef317
ipv6-support: Update iteration * Add support for blocking forwarding while address assignments * Fix relay restarting function
...
SVN-Revision: 34985
2013-01-02 23:05:44 +00:00
Steven Barth
c7d9d7c952
odhcp6c: Add support for SNTP and SIP options
...
SVN-Revision: 34984
2013-01-02 23:05:39 +00:00
Steven Barth
4a2e55f30f
6relayd: Announce RDNSS and DNSSL via RA
...
SVN-Revision: 34983
2013-01-02 23:05:35 +00:00
Jo-Philipp Wich
1683a146f4
iwinfo: replace more wext calls with nl80211 equivalents, attempt to infer nl80211 tx power from debugfs before querying wext
...
SVN-Revision: 34982
2013-01-02 19:10:29 +00:00
Jo-Philipp Wich
54c0b40427
dnsmasq: allow dhcp host entries without mac addresses ( #11928 )
...
SVN-Revision: 34971
2013-01-02 15:14:19 +00:00
Jo-Philipp Wich
c8a8f8fd55
lldpd: various enhancements
...
- introduce "list interface" options to specify the ifaces to listen on, takes uci- or network device name
- set the default system description to distrib @ hostname, e.g. "OpenWrt Barrier Breaker r34744 @ vbox"
- introduce "option lldp_description" to override the automatically generated description
SVN-Revision: 34970
2013-01-02 14:35:43 +00:00
John Crispin
a730e96569
Remove remaining etrax references
...
SVN-Revision: 34968
2013-01-02 11:28:11 +00:00
Steven Barth
7a25be66c3
6relayd: Detect changes of default routes for RAs
...
SVN-Revision: 34958
2013-01-01 21:41:37 +00:00
Steven Barth
def80bbecf
ipv6-support: Remove unnecessary code
...
SVN-Revision: 34957
2013-01-01 21:41:32 +00:00
Steven Barth
4c09d5dde3
ipv6-support: Fix typo in dhcpv6-script * thanks to KarlHegbloom for reporting
...
SVN-Revision: 34940
2012-12-31 09:38:59 +00:00
Steven Barth
b7c1f24f9b
ipv6-support: Use more consistent default values
...
SVN-Revision: 34913
2012-12-29 10:12:31 +00:00
Steven Barth
e7719bb4aa
ipv6-support: Updated functionality * Add site-border feature again * Add option to always announce a default router
...
SVN-Revision: 34908
2012-12-28 12:02:22 +00:00
Steven Barth
ce41e59030
6distributed: Add null-route for delegated prefix * Fixes forwarding loops for unused subprefixes
...
SVN-Revision: 34907
2012-12-28 12:02:17 +00:00
Steven Barth
d6c955e39a
6relayd: Announce DNS search domain via DHCPv6
...
SVN-Revision: 34906
2012-12-28 12:02:12 +00:00
Steven Barth
253d7345e1
ipv6-support: Remove site-border feature * was causing routing problems * will be reimplemented using firewall
...
SVN-Revision: 34898
2012-12-27 15:47:53 +00:00
Steven Barth
941f4ccd68
Remove site-border routing filter due to problems
...
SVN-Revision: 34897
2012-12-27 15:47:47 +00:00
Steven Barth
01059c8914
ipv6-support: * Automatically detect and propagate MTU from upstream interfaces * Add site-border feature (RFC 6204, ULA-4) * Fix a typo
...
SVN-Revision: 34896
2012-12-27 14:10:17 +00:00
Steven Barth
50a9fed238
6distributed: feature update * Add feature to decrease IPv6-specific MTU on-demand * Add commands to enable / disable a site-border
...
SVN-Revision: 34895
2012-12-27 14:10:12 +00:00
Steven Barth
4bab347e98
6relayd: Advertise IPv6-specific MTU instead of generic * Fixes announced MTU when using tunnels
...
SVN-Revision: 34894
2012-12-27 14:10:07 +00:00
Steven Barth
970adc9eb9
ipv6-support: Fix default RA settings for dnsmasq
...
SVN-Revision: 34873
2012-12-23 18:22:48 +00:00
Felix Fietkau
7ed89e8542
dropbear: convert init script to procd
...
SVN-Revision: 34867
2012-12-22 18:56:13 +00:00
Felix Fietkau
82bd58c793
dropbear: use network_get_device instead of scan_interfaces to get the device name
...
SVN-Revision: 34863
2012-12-22 18:55:57 +00:00
Steven Barth
a4e656ef24
ipv6-support: Preliminary support for dnsmasq >=2.66
...
SVN-Revision: 34858
2012-12-22 13:00:53 +00:00
Steven Barth
2dbfffef68
6relayd: Fix detection of prefix changes
...
SVN-Revision: 34857
2012-12-22 13:00:49 +00:00
Steven Barth
f36c3067c6
odhcp6c: Fix build on arch where char is unsigned
...
SVN-Revision: 34856
2012-12-22 13:00:45 +00:00
Steven Barth
970c5d97fe
6distributed: Improve prefix deprecation algorithm
...
SVN-Revision: 34855
2012-12-22 13:00:40 +00:00
Gabor Juhos
149b1c46c7
ipset: update to 6.16.1 to fix build with kernel 3.7
...
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
SVN-Revision: 34752
2012-12-18 14:50:44 +00:00
Felix Fietkau
bf34eeaea4
netifd: update to latest version, fixes interface error reporting for shell proto handlers
...
SVN-Revision: 34741
2012-12-17 22:24:31 +00:00
Felix Fietkau
14281559e1
netifd: update to latest version, no longer needs the removed jshn_append() shell function
...
SVN-Revision: 34734
2012-12-17 14:57:15 +00:00
Felix Fietkau
056d75049d
wpa_supplicant.sh: always use parameters from the current section
...
Using variables from the outer scope unnecessarily complicates the code and
leads to issues.
This patch fixes the bug when having an "adhoc" wifi-iface section before a
"sta" section prevents wpa_supplicant from using the key specified in the
corresponding section as it tries to use the "adhoc" key instead (1 by
default).
Signed-off-by: Paul Fertser <fercerpav@gmail.com>
SVN-Revision: 34716
2012-12-16 13:23:37 +00:00
John Crispin
e9c0b95829
fixes uapi helper define
...
SVN-Revision: 34715
2012-12-16 11:04:27 +00:00
Felix Fietkau
860c2e8116
netifd: call /etc/udhcp.user from the netifd dhcp.script
...
This was done previously when dhcp was handled by the network scripts.
So netifd should behave the same.
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
SVN-Revision: 34704
2012-12-15 17:19:24 +00:00
John Crispin
06c9170a7c
move ltq-adsl-tool
...
SVN-Revision: 34694
2012-12-15 02:00:39 +00:00
John Crispin
4583469413
make use of uapi directory wrapper
...
SVN-Revision: 34684
2012-12-15 01:59:19 +00:00
Gabor Juhos
86cd825c1f
package/swconfig: don't use kernel headers
...
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
SVN-Revision: 34679
2012-12-14 12:11:50 +00:00
Felix Fietkau
b85c8a6361
netifd: update to latest version, fixes purging old resolv.conf entries after ifdown
...
SVN-Revision: 34664
2012-12-13 16:14:41 +00:00
Steven Barth
8d9564af1b
ipv6-support: Make ULA addresses secondary * Deprecates ULA prefixes when there are other public prefixes * Fixes issues with clients using incorrect source addresses
...
SVN-Revision: 34630
2012-12-11 16:56:37 +00:00
Steven Barth
8546f8a401
6distributed: Add support for secondary addresses
...
SVN-Revision: 34629
2012-12-11 16:56:32 +00:00
Steven Barth
14273e1120
6relayd: Fix announcement of deprecated prefixes
...
SVN-Revision: 34628
2012-12-11 16:56:27 +00:00
Steven Barth
faba477274
ipv6-support: Add support for NPT status tracking
...
SVN-Revision: 34609
2012-12-10 16:46:59 +00:00
Steven Barth
cd76023e97
6distributed: add status-call for luci-integration
...
SVN-Revision: 34608
2012-12-10 16:46:54 +00:00
Felix Fietkau
01513b7c8b
iw: sync with nl80211.h to fix setting antenna gain
...
SVN-Revision: 34593
2012-12-10 13:51:06 +00:00
Steven Barth
a07ddb955f
ipv6-support: Next iteration * Make ula_prefix a global option * Add preliminary support for NAT (Linux >= 3.7, ip6tables >= 1.4.17) * Minor fixes for prefix fallback
...
SVN-Revision: 34586
2012-12-09 13:54:22 +00:00
Steven Barth
57d853ffc4
6distributed: Correctly handle duplicate prefixes
...
SVN-Revision: 34585
2012-12-09 13:32:30 +00:00
Steven Barth
eeeb59e451
6relayd: Always send NA with hop-limit 255 * thanks risa2000 for investigating
...
SVN-Revision: 34584
2012-12-09 12:33:28 +00:00
Jo-Philipp Wich
16d0957a4e
firewall: fix typo in reflection hotplug script
...
SVN-Revision: 34569
2012-12-07 13:08:28 +00:00
Steven Barth
63135142d8
6to4: Remove static radvd-integration * Please use the new ipv6-support package
...
SVN-Revision: 34567
2012-12-07 08:53:53 +00:00
Steven Barth
82576f0ca3
ipv6-support: next iteration * Introduce mode 6rd * Introduce mode 6to4 * Fix announcement of DNS-Servers received from DHCPv6 * Fix some corner-cases in relaying behaviour
...
SVN-Revision: 34542
2012-12-06 20:52:40 +00:00
Steven Barth
61e8c6b83b
6relayd: More RFC-compatibility and size reduction
...
SVN-Revision: 34541
2012-12-06 20:52:35 +00:00
Steven Barth
f14e1f1b1d
6distributed: Add compatibility with 6rd and 6to4
...
SVN-Revision: 34540
2012-12-06 20:52:30 +00:00
Jo-Philipp Wich
d221222907
ppp: unconditionally start pppd with nodefaultroute and usepeerdns ( #12580 )
...
Since the switch to netifd, proto handlers may always set the defaultroute
and provide dns server addresses, netifd will decide in the generic code
path whether the announced values are masked or not.
Additionally protocol handlers should not modify the routing tables themselves
and prevent any launched services from doing so.
Remove the additional defaultroute and peerdns option handling from the ppp.sh
protocol handler and rely on netifd to mask or not mask the values.
SVN-Revision: 34536
2012-12-06 18:17:21 +00:00
Felix Fietkau
838d6e3b8d
netifd: update to latest version, fixes resolv.conf writes on interface setting changes
...
SVN-Revision: 34500
2012-12-05 13:28:56 +00:00
Florian Fainelli
9e355444a6
dropbear: update to 2012.55 and refresh patches
...
Upstream has a few code cleanups, more eagerly burns sensitive memory and
includes the fix for CVE-2012-0920. Full changelog:
https://matt.ucc.asn.au/dropbear/CHANGES
Local changes:
- Removed PKG_MULTI which is no longer in options.h (even before 2011.54)
- Merged DO_HOST_LOOKUP into 120-openwrt_options.patch
- Removed LD from make opts (now included in TARGET_CONFIGURE_OPTS)
- Removed 400-CVE-2012-0920.patch which is included in 2012.55
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34496
2012-12-04 16:40:17 +00:00
Jo-Philipp Wich
6504b268b3
firewall: extend nat reflection support
...
- use comment match to keep track of per-network rules
- setup reflection for any interface which is part of a masqueraded zone, not just "wan"
- delete per-network reflection rules if network is brought down
SVN-Revision: 34472
2012-12-04 15:24:21 +00:00
Felix Fietkau
8516ddb133
mac80211, hostapd: Fix macfilter for multi bssid setups
...
Previously only the first macfilter configuration would have been used
on all interfaces. However, the configuration was always done per vif
already. Hence, move the macfilter setup into hostapd.sh where and
create one mac list file per vif.
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
SVN-Revision: 34470
2012-12-04 12:06:40 +00:00
Mirko Vogt
4c30952394
Make ltq-dsl-app compile with an eglibc-based toolchain
...
Signed-Off-By: Frank Meerkötter <frank@meerkoetter.org>
SVN-Revision: 34468
2012-12-03 12:46:57 +00:00
Steven Barth
4bda16cf27
ipv6-support: Second Iteration * mode 'downstream' renamed to 'router' * mode 'upstream' renamed to 'dhcpv6' * mode 'relay' added * cleanups and minor bugfixes in state handling
...
SVN-Revision: 34466
2012-12-03 09:18:53 +00:00
Steven Barth
71ed7ae842
netifd: empty hotplug handler removed
...
SVN-Revision: 34465
2012-12-03 07:20:44 +00:00
Steven Barth
c6b0c63cad
6distributed: Poll for ubus to come up (fix race)
...
SVN-Revision: 34462
2012-12-02 19:06:48 +00:00
Gabor Juhos
5d8a7a0ce5
Make teql hotplug script run sooner
...
In particular, it wants to run before the ntpclient script. Which may
block for a long time attempting to do DNS lookups for NTP servers. In
my case, that would have *worked* if the new device had been added to
teql first, rather than timing out.
This was effectively causing a huge delay between an interface coming
up, and routing actually starting to work.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
SVN-Revision: 34442
2012-12-02 13:04:03 +00:00
Steven Barth
a0f0c23109
ipv6-support: Add conffiles section
...
SVN-Revision: 34423
2012-11-29 20:33:17 +00:00
Steven Barth
a4edea5ef3
ipv6-support: Add new IPv6-support meta-package
...
SVN-Revision: 34422
2012-11-29 20:14:28 +00:00
Steven Barth
e6e6e0d152
odhcp6c: Add new embedded DHCPv6 client
...
SVN-Revision: 34421
2012-11-29 20:14:23 +00:00
Steven Barth
25d943e872
6distributed: add local IPv6 prefix distributor
...
SVN-Revision: 34420
2012-11-29 20:14:18 +00:00
Steven Barth
7d3495b431
6relayd: Fix some RFC 6204 compatibility issues
...
SVN-Revision: 34419
2012-11-29 20:14:14 +00:00
Steven Barth
dffa972af1
Remove old IPv6 sysctl-config (deprecated)
...
SVN-Revision: 34418
2012-11-29 20:14:09 +00:00
Florian Fainelli
062d3c1e67
iptables: fix typo in iptables musl patch after r34313
...
Thanks to Frank Meerkötter and Szabolcs Nagy for spotting the issue.
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34326
2012-11-25 11:40:59 +00:00
Florian Fainelli
14ed3f0f22
iptables: add some musl portability fixes
...
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34313
2012-11-23 20:02:23 +00:00
Florian Fainelli
94bdc366d4
netfid: fix build on musl
...
AF_INET* is provided by sys/socket.h
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34310
2012-11-23 20:02:10 +00:00
Florian Fainelli
f1498531c7
hostapd: include sys/stat.h for a struct stat definition
...
Some libcs need this header to be explicitely included (e.g: musl)
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34295
2012-11-21 20:27:06 +00:00
Steven Barth
417af03ba5
6relayd: add conffiles section, thanks swalker
...
SVN-Revision: 34222
2012-11-17 09:44:41 +00:00
Steven Barth
45137b0896
6relayd: various updates & fixes - Add RD- and DHCPv6-server functionality - Rework configuration and add example UCI file - Fix various bugs and be more RFC compliant
...
SVN-Revision: 34204
2012-11-16 09:27:56 +00:00
Jo-Philipp Wich
db207e2a87
ppp: - fix multilink ppp with custom ifnames, patch by George Kashperko <george@znau.edu.ua> - refresh patches
...
SVN-Revision: 34171
2012-11-12 19:13:45 +00:00
Jo-Philipp Wich
3a81f75d72
resolveip: fix endless getopt() loop when compiled for arm ( #12290 )
...
SVN-Revision: 34116
2012-11-08 10:48:08 +00:00
Jo-Philipp Wich
611b2e8bb3
netifd: don't send a default client identifier in DHCP requests if no clientid uci option is given ( #12426 )
...
SVN-Revision: 34089
2012-11-05 19:28:24 +00:00
Felix Fietkau
c1aae78816
ppp: add more pppol2tpv3 related structs from the kernel headers to fix compile issues with linux 3.6
...
SVN-Revision: 34070
2012-11-04 17:01:27 +00:00
Felix Fietkau
16c72b09cc
iptables: remove support for libipq, it has been obsolete for years and is unsupported in newer kernels
...
SVN-Revision: 34069
2012-11-04 17:01:23 +00:00
Steven Barth
9aba83eced
6relayd: auto-configure local interfaces as well
...
SVN-Revision: 34027
2012-10-31 12:48:54 +00:00
Jo-Philipp Wich
73c75e0dd8
uhttpd: update to latest git head, improves handling of invalid requests
...
SVN-Revision: 34010
2012-10-30 13:13:21 +00:00
Steven Barth
c3d04d4630
6relayd: update to work around a raw-socket bug
...
SVN-Revision: 34009
2012-10-30 07:43:07 +00:00
Steven Barth
1fe7efbddb
ipv6: add 6relayd (RD-, DHCPv6- & NDP-Proxy)
...
6relayd is an IPv6-tool that relays IPv6-management protocols like router
discovery, neighbor discovery and DHCPv6 so that clients on routed
(non-bridged) interfaces can use the public address prefix, DHCPv6 and
DNS-service of a master interface. This is useful to avoid NAT in chained
IPv6-routers.
SVN-Revision: 34008
2012-10-30 07:14:07 +00:00
Felix Fietkau
fc3939a996
netifd: update to latest version, fixes adding an alias during config reload for an interface that is already up
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 34006
2012-10-30 00:24:31 +00:00
Jo-Philipp Wich
0e3de8eff7
iwinfo: properly initialize memory of global nl80211_state, fixes random libnl-tiny assertions when using nl80211_probe() on not supported devices
...
SVN-Revision: 34003
2012-10-29 22:11:57 +00:00
Felix Fietkau
f911fb32fe
hostapd: merge some pending fixes (fixes assoc errors when moving between vaps of the same wifi device)
...
SVN-Revision: 33919
2012-10-25 14:31:17 +00:00
Jo-Philipp Wich
1895d55e9d
ltq-dsl-app: fix offline postinstall for dsl_control
...
SVN-Revision: 33901
2012-10-23 19:57:47 +00:00
Hamish Guthrie
81a3d9ba31
licensing: Add licensing metadata to many packages Two new variables are introduces to many packages, namely PKG_LICENSE and PKG_LICENSE_FILES - there may be more than one license applied to packages, and these are listed in the PKG_LICENSE variable and separated by spaces. All relevant license files are also added to the PKG_LICENSE_FILES variable, also space separated.
...
The licensing metadata is put into the bin/<platform>/packages/Packages file
for later parsing. A script for that is on it's way!
SVN-Revision: 33861
2012-10-19 15:34:28 +00:00
Jo-Philipp Wich
5fb6cf9a11
uhttpd: fix compilation with eglibc
...
SVN-Revision: 33860
2012-10-19 13:54:29 +00:00
Felix Fietkau
825592b54b
netifd: update to latest version, fixes device cleanup and config reload issues when assigning a device to a different bridge
...
SVN-Revision: 33858
2012-10-19 13:51:48 +00:00
Felix Fietkau
88f3c59fb9
netifd: enable parallel build
...
SVN-Revision: 33832
2012-10-18 00:09:45 +00:00
John Crispin
a34499e095
move lots of kernel related packages to the new system/ folder
...
SVN-Revision: 33830
2012-10-17 22:45:58 +00:00
Felix Fietkau
965710d3e1
samba36: enable parallel build
...
SVN-Revision: 33829
2012-10-17 22:18:30 +00:00
John Crispin
c2b8d1a619
Fix broadcast DHCP client startup option in dhcp.sh
...
Signed-off-by: Hans Dedecker (hans.dedecker at technicolor.com)
Fixes the DHCP request broadcasts replies option parsing
SVN-Revision: 33826
2012-10-17 21:53:46 +00:00
Felix Fietkau
26944502e3
hostapd: merge a security fix for a TLS message buffer overflow (CVE-2012-4445)
...
SVN-Revision: 33815
2012-10-17 18:16:56 +00:00
Florian Fainelli
8fc2b30281
iftop: update iftop to 1.0pre2
...
Most significantly, includes IPv6 support. This version forces
libncurses, by patching the configure script, instead of allowing
libncursesw, saving (~65k) image space.
Signed-off-by: Russell Senior <russell@personaltelco.net>
SVN-Revision: 33782
2012-10-16 15:49:49 +00:00
Jo-Philipp Wich
160c2ef011
uhttpd: update to latest git head - introduces support for multiple index files - fixes build with only the TLS module selected
...
SVN-Revision: 33778
2012-10-15 18:19:57 +00:00
Jo-Philipp Wich
14e14faa0b
uhttpd: switch to external git repo + cmake build system
...
SVN-Revision: 33775
2012-10-15 12:31:33 +00:00
Florian Fainelli
19f91b26f5
rssileds: improve performance
...
LEDs brightness is now only updated if the value actually changed, thus reducing
the number of fwrite syscalls significantly.
Signed-off-by: Daniel Golle <dgolle@allnet.de>
SVN-Revision: 33766
2012-10-14 16:22:04 +00:00
Jo-Philipp Wich
a00110a063
6in4: make local ip6addr optional
...
SVN-Revision: 33761
2012-10-14 09:17:14 +00:00
Jo-Philipp Wich
1eded4f376
ipset: update to v6.14, drop obsolete patches
...
SVN-Revision: 33735
2012-10-12 12:19:46 +00:00
Jo-Philipp Wich
9e9efd8e49
lldpd: fix minor whitespace quirk in init script
...
SVN-Revision: 33730
2012-10-12 12:02:56 +00:00
Jo-Philipp Wich
0019b39001
lldpd: bump to v0.6.1, enable privilege separation and chrooting
...
SVN-Revision: 33729
2012-10-12 11:58:19 +00:00
Jo-Philipp Wich
f248332d52
thc-ipv6: update to v2.0, package all available utilities
...
SVN-Revision: 33728
2012-10-11 21:57:56 +00:00
Jo-Philipp Wich
f5d12a126d
thc-ipv6: move to trunk and add myself as maintainer
...
SVN-Revision: 33727
2012-10-11 21:17:08 +00:00
Jo-Philipp Wich
936c1b9424
iputils: move to trunk and add myself as maintainer
...
SVN-Revision: 33704
2012-10-10 13:22:18 +00:00
Jo-Philipp Wich
c748c36d2c
iftop: move to trunk and add myself as maintainer
...
SVN-Revision: 33702
2012-10-10 13:21:30 +00:00
Jo-Philipp Wich
711fdc3b09
conntrack-tools: move to trunk and add myself as maintainer
...
SVN-Revision: 33701
2012-10-10 13:19:43 +00:00
Jo-Philipp Wich
47ea3c7fee
lldpd: move to trunk and add myself as maintainer
...
SVN-Revision: 33700
2012-10-10 13:17:14 +00:00
Jo-Philipp Wich
11549e1b73
dante: move to trunk and add myself as maintainer
...
SVN-Revision: 33699
2012-10-10 13:14:39 +00:00
Jo-Philipp Wich
b5ab35e816
ipset: move to trunk and add myself as maintainer
...
SVN-Revision: 33698
2012-10-10 13:13:17 +00:00
Felix Fietkau
05c2442957
package/network/utils/rssileds: claim maintainership
...
SVN-Revision: 33697
2012-10-10 13:07:29 +00:00
Jo-Philipp Wich
d1d1ae994b
claim maintainership for resolveip and lua
...
SVN-Revision: 33694
2012-10-10 12:57:20 +00:00
Felix Fietkau
e51eb6046d
add myself as a maintainer for a few more packages
...
SVN-Revision: 33693
2012-10-10 12:49:37 +00:00
Felix Fietkau
2fb3792fa9
hostapd: remove redundant MAINTAINER lines
...
SVN-Revision: 33692
2012-10-10 12:36:44 +00:00
Felix Fietkau
ed33bd8c7c
iperf: move to trunk and add myself as maintainer
...
SVN-Revision: 33691
2012-10-10 12:35:43 +00:00
Felix Fietkau
5806525653
tcpdump: move to trunk and add myself as maintainer
...
SVN-Revision: 33690
2012-10-10 12:35:26 +00:00
Felix Fietkau
445936955e
samba36: move to trunk and add myself as a maintainer
...
SVN-Revision: 33689
2012-10-10 12:34:29 +00:00
Felix Fietkau
405e21d167
packages: sort network related packages into package/network/
...
SVN-Revision: 33688
2012-10-10 12:32:29 +00:00