KumiSystems/openwrtv4
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
26048 commits 3 branches 0 tags 154 MiB
Commit graph

519 commits

Author SHA1 Message Date
Felix Fietkau
4cda88a879 hostapd: fix typo in version number 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37742
 2013-08-08 20:45:15 +00:00
Felix Fietkau
9df75e7f34 hostapd: fix ubus reconnect handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37741
 2013-08-08 20:45:12 +00:00
Felix Fietkau
750197b3af hostapd: add a build variant for wpa_supplicant with p2p (aka Wi-Fi Direct) support 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37739
 2013-08-08 16:24:50 +00:00
Felix Fietkau
f53b96813e hostapd: update to latest version (20130707) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37738
 2013-08-08 16:04:19 +00:00
Felix Fietkau
9a22315ca4 hostapd: Settings for DAE/CoA server 
hostapd supports "Dynamic Authorization Extensions", making it possible
to forcibly disconnect a user by sending it a RADIUS "Disconnect-Request"
packet.

I've added three new variables to enable setting of the
"radius_das_client" and "radius_das_port" variables in the hostapd
configuration, which enable these extensions.

* dae_client - IP of the client that can send disconnect requests
* dae_secret - shared secret for DAE packets

These are combined into the "radius_das_client" option in hostapd.conf
To enable the server, both dae_client and dae_secret must be set.

* dae_port - optional, default value is 3799 as specified in RFC 5176

Signed-off-by: Martijn van de Streek <martijn@vandestreek.net>

SVN-Revision: 37734
 2013-08-06 18:55:30 +00:00
Felix Fietkau
91f0b411f4 hostapd: Fix WDS/WEP usage 
WEP in WDS is currently broken in hostapd. Add a patch
to fix the issue.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37733
 2013-08-06 17:59:12 +00:00
Felix Fietkau
76ca564e79 hostapd: Refresh patches 
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37731
 2013-08-06 17:59:05 +00:00
Felix Fietkau
22e012bad8 hostapd: Add an option to disable beaconing 
Add a patch for hostapd that introduces a config option
"start_disabled" which can be used to bring up an AP
interface with beaconing disabled. This is useful in
a Repeater-AP setup where the Repeater AP has to start
beaconing only after the WDS link has been established.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37730
 2013-08-06 17:59:02 +00:00
Felix Fietkau
719adb6471 uhttpd: update to the latest version, fixes a crash on early cgi/lua process termination 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37628
 2013-07-31 22:07:09 +00:00
Luka Perkov
1646bd096c iproute2: update to 3.10.0 
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37590
 2013-07-28 23:27:35 +00:00
Felix Fietkau
aff8c18ad0 openvpn: update to 2.3.2 
this patches updates openvpn to v2.3.2
and adds a PKG_MD5SUM to the Makefile

This release fixes a memory access violation when cipher none is used
on ar71xx - at least with my config

Signed-off-by: Peter Wagner <tripolar@gmx.at>

SVN-Revision: 37560
 2013-07-26 12:35:22 +00:00
Steven Barth
4d37ae33b6 6relayd: Overridden DNS should affect DHCPv6 
SVN-Revision: 37558
 2013-07-26 11:59:25 +00:00
Felix Fietkau
8faa8a6420 uhttpd: update to latest version, fixes issues with POST and keep-alive (#13940) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37556
 2013-07-26 10:03:07 +00:00
Felix Fietkau
3d2ace5d71 authsae: add myself as a maintainer 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37555
 2013-07-26 10:03:03 +00:00
Felix Fietkau
4478c69b86 authsae: adapt uci scripts to use authsae 
This patch modifies the uci scripts to be able to
start meshd-nl80211 for encrypted mesh networks,
therefor a new script (authsae.sh) is inserted.

Signed-off-by: Emanuel Taube <emanuel.taube@gmail.com>
[etienne.champetier@free.fr: just update mac80211.sh path]
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37554
 2013-07-26 10:02:59 +00:00
Felix Fietkau
6dbea6416b authsae 80211s authentication daemon 
This patch adds authsae open80211s authentication daemon (http://open80211s.org)
It's a rework of Peter Naulls patch (http://patchwork.openwrt.org/patch/1350/)
I've excluded the sample conf file as it's useless when used with mac80211.sh (Emanuel Taube patch)
It now link against libnl-tiny instead of libnl (patch merged in authsae git)
Authsae is 58 Ko (OPENSSL_WITH_EC option adds 35Ko to libopenssl)

Signed-off-by: Peter Naulls <peter@chocky.org>
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37553
 2013-07-26 10:02:55 +00:00
Felix Fietkau
85e585ddce ead: fix compile errors with recent kernels 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37482
 2013-07-20 12:56:07 +00:00
Hauke Mehrtens
96f1953fb1 kernel: fix xtables-addons dependencies with kernel 3.3 
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 37461
 2013-07-19 22:36:47 +00:00
Jo-Philipp Wich
7bbe1656cb xtables-addons: use a select of kmod-ipt-core instead of depending on it 
SVN-Revision: 37425
 2013-07-19 09:58:17 +00:00
Jo-Philipp Wich
d474a77edf xtables-addons: add missing kmod dependencies 
SVN-Revision: 37424
 2013-07-19 09:58:11 +00:00
Jo-Philipp Wich
d6e8047f83 firewall: update to git head 
- handles redirects as port relocations if the dest_ip points to the router itself

SVN-Revision: 37374
 2013-07-16 14:04:59 +00:00
Steven Barth
54ae5ce507 netifd: Fix IPv6-prefix assignment with continuous hints 
SVN-Revision: 37371
 2013-07-16 12:07:11 +00:00
Steven Barth
6a034ce5b1 6relayd: Fix DHCPv6-PD with continuous hints 
SVN-Revision: 37370
 2013-07-16 12:07:06 +00:00
Steven Barth
0444e32acd Bump iptables version 
SVN-Revision: 37329
 2013-07-15 06:12:07 +00:00
Steven Barth
ea6a5d0c22 iptables: restore reap functionality to recent module 
The reap functionality appears to have been accidentally disabled by
commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see:

  git://git.netfilter.org/iptables.git

and subsequently in iptables 1.4.15 and later.  This adds a patch to
restore reap functionality for recent_opts_v1.

Signed-off-by: Russell Senior <russell@personaltelco.net>

SVN-Revision: 37328
 2013-07-15 06:12:03 +00:00
Luka Perkov
1a963355b0 netifd: update to latest version, add bridge_empty option 
with this option enabled it's possible to create empty bridges

Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37318
 2013-07-14 18:50:04 +00:00
John Crispin
7d7c2ff5f9 swconfig: fix dependency bug introduced by [37304] 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37316
 2013-07-14 18:16:42 +00:00
Hauke Mehrtens
f8d55e7541 brcm47xx: use b53 phy driver for the switch in kernel 3.10 
This makes it possible to use swconfig to controll the switch.

This was tested with devices using b43 and bgmac.
This was not tested on devices using tg3.
This does not support the adm switch used in some very old devices.

SVN-Revision: 37304
 2013-07-14 14:11:17 +00:00
John Crispin
8d546699c5 dropbear: register a config.change trigger 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37245
 2013-07-11 17:00:40 +00:00
Felix Fietkau
4e042e4a84 ipset: force the shell to bash to fix build issues on mac os x 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37227
 2013-07-10 14:59:00 +00:00
Felix Fietkau
4a0c312dc3 xtables-addons: update to version 2.3, adds linux 3.10 compatibility 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37226
 2013-07-10 14:51:13 +00:00
Felix Fietkau
f98f69adc9 firewall: add missing dependencies 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37224
 2013-07-10 11:33:48 +00:00
John Crispin
fc40051569 lantiq: move dsl tools to package/network/config 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37198
 2013-07-08 09:01:38 +00:00
Luka Perkov
4a7439401b linux-atm: fix dependencies 
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37189
 2013-07-08 00:37:49 +00:00
Jo-Philipp Wich
4aa82d07a6 firewall: allow routed lan<->lan traffic by default 
SVN-Revision: 37171
 2013-07-04 18:10:36 +00:00
Jo-Philipp Wich
2561bce232 lldpd: upgrade to 0.7.5 
lldpd 0.7.1 has several alignment issues that trip a system configured
to fault on misaligned accesses.  Version 0.7.5 fixes that along with a
few other minor issues.

Signed-off-by: John Szakmeister <john@szakmeister.net>

SVN-Revision: 37168
 2013-07-04 16:57:03 +00:00
Steven Barth
e3a369e597 odhcp6c: avoid integer overflows in resend logic 
SVN-Revision: 37150
 2013-07-03 16:14:24 +00:00
Steven Barth
b9aa47d5b6 odhcp6c: add missing config parameter 
SVN-Revision: 37148
 2013-07-03 13:50:06 +00:00
Jo-Philipp Wich
7c197d9f0e hostapd: truncate default mac file before adding entries to it (#13797) 
SVN-Revision: 37114
 2013-07-01 10:52:35 +00:00
Felix Fietkau
ee68734929 hostapd: fix multi-ssid and AP+STA, clean up code 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37111
 2013-06-30 21:01:13 +00:00
Felix Fietkau
60b040bbaf hostapd: update to latest git version 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37110
 2013-06-30 20:27:38 +00:00
Felix Fietkau
12c033dfd9 mac80211: update to wireless-testing 2013-06-27, fix ATH_USER_REGD handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37097
 2013-06-30 10:44:19 +00:00
Jo-Philipp Wich
2d506f46fb firewall: update to git head 
- uses custom formatting for mac addresses to ensure leading zeroes, required for older iptables mac match parser

SVN-Revision: 37082
 2013-06-29 13:28:27 +00:00
Steven Barth
d8051a8814 netifd: fix typo in dhcp script 
SVN-Revision: 37051
 2013-06-28 04:19:21 +00:00
Florian Fainelli
fe7c236a06 6relayd: prevent build on AVR32 
AVR32 misses a bunch of updated syscalls, including timerfd_create()
which is used by 6relayd. Since that requires Linux/libc changes, just
prevent building it for now.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 37040
 2013-06-27 15:33:05 +00:00
Steven Barth
cb66ed972b odhcp6c: Add missing config option "ifaceid" 
SVN-Revision: 37033
 2013-06-25 05:18:20 +00:00
John Crispin
e7dbdad43b hostapd: fix superflous coma 
this cause the wps trigegr to be copied to the wrong place

https://dev.openwrt.org/ticket/13753

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37031
 2013-06-24 16:44:18 +00:00
Steven Barth
eecce5abad arptables: Bump to 0.0.4 
SVN-Revision: 37020
 2013-06-24 05:48:12 +00:00
Steven Barth
69cd09ebbf 6relayd: don't accidentally remove regular prefix routes 
SVN-Revision: 37018
 2013-06-23 16:26:09 +00:00
Steven Barth
f47c4c80d4 6relayd: fix lease-update behaviour for clients without reconfigure 
SVN-Revision: 37011
 2013-06-22 08:31:28 +00:00
Steven Barth
d0d5f109d8 6relayd: Keep PD-downstream across RENEW/REBIND 
SVN-Revision: 37009
 2013-06-22 08:19:25 +00:00
John Crispin
4ebf19b48f packages: clean up the package folder 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37007
 2013-06-21 16:54:37 +00:00
John Crispin
4999ae4236 hostapd: remove old button hotplug script 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36991
 2013-06-21 16:53:07 +00:00
Steven Barth
5108318edb 6relayd: Fix DHCPv6-PD assignment logic 
SVN-Revision: 36980
 2013-06-21 06:15:09 +00:00
Steven Barth
de2a7547b7 6relayd: correctly set downstream routes for DHCPv6-PD 
SVN-Revision: 36969
 2013-06-19 13:08:33 +00:00
Felix Fietkau
b4babf9f81 netifd: update to latest version, fixes a NULL pointer deref bug 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36965
 2013-06-18 16:24:48 +00:00
Jo-Philipp Wich
65f82e2311 firewall: update to git head 
- fixes misprocessing of unknown symbolic protocol names

SVN-Revision: 36963
 2013-06-18 14:30:51 +00:00
Jo-Philipp Wich
37ae268729 firewall: update to git head 
- fixes calculation of IPv4 netmasks derived from 0.0.0.0/0 CIDRs

SVN-Revision: 36960
 2013-06-18 14:14:35 +00:00
Steven Barth
5219d38da2 odhcp6c: Add option to override interface identifier in RA-client 
SVN-Revision: 36959
 2013-06-18 12:51:14 +00:00
Steven Barth
9f1899242c netifd: IPv6: Fix sorting order in last commit. 
SVN-Revision: 36952
 2013-06-17 21:29:14 +00:00
Steven Barth
213269a8f7 netifd: Satisfy IPv6 assignments ordered by prefix length 
SVN-Revision: 36950
 2013-06-17 21:16:22 +00:00
Jo-Philipp Wich
541fbfbb9e hostapd: correctly handle macfile uci option 
Make hostapd.sh correctly handle the macfile uci option.

Such option specifies the macfile name to pass into the
hostapd configuration file. Moreover, if a maclist option
has been specified, copy the macfile before appending new
entries.

Signed-off-by: Antonio Quartulli <antonio@open-mesh.com>

SVN-Revision: 36944
 2013-06-17 11:59:29 +00:00
Jo-Philipp Wich
dfea3bae11 dnsmasq: use host-record instead of address 
Using "--address" for individual host A records is broken, use "--host-record" instead.
The following patch changes dnsmasq.init to build individual host records using "--host-record" instead of "--address".

Signed-off-by: Adam Gensler <openwrt at gnslr.us>

[jow: shorter description, simplified shell script code]

SVN-Revision: 36943
 2013-06-17 11:55:30 +00:00
Jo-Philipp Wich
36d3fafd77 firewall: update to git head 
- properly process intermediate "!" options in argument list (fixes negated ipsets)

SVN-Revision: 36935
 2013-06-13 18:54:49 +00:00
Jo-Philipp Wich
0db38adf1c firewall: update to git head 
- fixes handling of reject target for rule sections with specific destination zone

SVN-Revision: 36933
 2013-06-13 12:49:00 +00:00
Jo-Philipp Wich
1150e299bb uhttpd: expose missing options to uci 
SVN-Revision: 36932
 2013-06-13 11:55:12 +00:00
Steven Barth
302cf427cb odhcp6c: add sanity checks for NDP and MTU parameters from RAs 
SVN-Revision: 36930
 2013-06-13 06:38:48 +00:00
Steven Barth
4f0a0defa6 6relayd: make route preference and prefix on-link flag configurable 
SVN-Revision: 36922
 2013-06-11 20:52:27 +00:00
Steven Barth
f6dd266c97 iproute2: add drop-failed rule action (patch by Jonas Gorski) 
SVN-Revision: 36910
 2013-06-11 09:27:46 +00:00
Felix Fietkau
9fb5bf176e netifd: update to latest version, uses the new uci/blob code from libuci 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36909
 2013-06-10 12:42:30 +00:00
Steven Barth
5caa45d0b3 ppp: correctly handle address when reloading 
SVN-Revision: 36904
 2013-06-10 10:42:34 +00:00
Steven Barth
491deaed2c netifd: improve reloading behaviour 
SVN-Revision: 36903
 2013-06-10 10:42:15 +00:00
Jo-Philipp Wich
bc73ca5619 iwinfo: add phyname attribute, this is useful to group networks by radio phy 
SVN-Revision: 36889
 2013-06-09 14:39:14 +00:00
Jo-Philipp Wich
cb24c37858 libiwinfo: ignore log messages from wpa_supplicant while scanning 
wpa_supplicant may send log and event messages intermixed with the
expected scan results.  This makes "iwinfo wlan0 scan" and LuCI
"site survey" display nothing when many AP's are around.

Eliminate the CTRL-EVENT-BSS-ADDED events, interspersed log messages,
lines with unexpected format.  Increase timeout to handle the max
number of channels (2.4, 3.6, 4.9, 5 GHz).  Insure receive buffer is
null-terminated.

Signed-off-by: Jean-Pierre Tosoni <jp.tosoni@acksys.fr>

SVN-Revision: 36888
 2013-06-09 14:39:09 +00:00
Steven Barth
f995c90329 netifd: Improve IPv6 source-routing policies 
SVN-Revision: 36884
 2013-06-08 13:26:33 +00:00
Jonas Gorski
b9de8ca7f5 netifd: bring wifi down before shutting down 
works around wifiX references not being freed on network restart.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 36883
 2013-06-08 11:44:12 +00:00
Jo-Philipp Wich
e7b15446a8 firewall: udpate to git head (#13652, #13654, #13658) 
- optimizes chain usage for ingress rules
  - adds limit match support for redirect rules
  - fixes automatic redirect dest detection on little endian systems
  - leaves base chains in place on reload to allow user rules to target e.g. "reject"

SVN-Revision: 36871
 2013-06-06 14:12:02 +00:00
Jo-Philipp Wich
5cf06bd17b firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols 
SVN-Revision: 36868
 2013-06-06 14:02:29 +00:00
Jo-Philipp Wich
e94cf1c72b iptables: install libext*.a into staging dir 
SVN-Revision: 36867
 2013-06-06 14:02:24 +00:00
Jo-Philipp Wich
ecc95dcba8 firewall: update to git head (#13652) 
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
  - uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones

SVN-Revision: 36854
 2013-06-05 11:40:40 +00:00
Jo-Philipp Wich
0a74d9d5c3 firewall3: fix accidentally changed install directive 
SVN-Revision: 36840
 2013-06-04 12:30:50 +00:00
Jo-Philipp Wich
07a3110e88 firewall: fix git source url 
SVN-Revision: 36839
 2013-06-04 12:23:47 +00:00
Jo-Philipp Wich
b721c92221 firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA 
SVN-Revision: 36838
 2013-06-04 12:21:52 +00:00
Jo-Philipp Wich
0dd6753c09 Drop legacy firewall package 
SVN-Revision: 36837
 2013-06-04 12:21:44 +00:00
Jo-Philipp Wich
6f60308257 firewall3: update to git head (#13641) 
* Fixes wrong chain used for zone forward policy

SVN-Revision: 36830
 2013-06-04 10:26:49 +00:00
Jo-Philipp Wich
6eeca5176e firewall3: update to git head 
- Fixes problems with reusing matches or targets from loadable extensions

SVN-Revision: 36826
 2013-06-03 16:38:29 +00:00
Felix Fietkau
8c69057980 uhttpd: update to latest version, fixes CGI related crashes 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36817
 2013-06-01 21:43:06 +00:00
Steven Barth
089d6612ce 6relayd: Work around Windows DHCPv6 quirks Announcing deprecated addresses breaks Windows clients 
SVN-Revision: 36815
 2013-06-01 17:51:02 +00:00
Steven Barth
7ae506c7d4 odhcp6c: work around spurious false-positive address DECLINEs 
SVN-Revision: 36809
 2013-05-31 13:49:17 +00:00
Jo-Philipp Wich
3bb397c997 firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly 
SVN-Revision: 36806
 2013-05-31 13:23:23 +00:00
Steven Barth
bf582fbb7b odhcp6c: fix handling of multiple RAs in a row 
SVN-Revision: 36804
 2013-05-31 10:02:39 +00:00
Steven Barth
cdc3caf533 6relayd: Better compatibility with misbheaving DHCPv6 clients * Make the "best" address / prefix the first one being announced * Only add the "best" address to the hosts-file 
SVN-Revision: 36772
 2013-05-30 15:42:30 +00:00
Steven Barth
519f27cd33 netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes 
SVN-Revision: 36771
 2013-05-30 15:42:25 +00:00
Felix Fietkau
02fe12c00d uhttpd: update again to fix a ubus plugin crash bug 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36770
 2013-05-30 13:16:38 +00:00
Felix Fietkau
eeb7fdc13e uhttpd: update to latest version, fixes script timeout for ubus requests 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36767
 2013-05-30 10:44:20 +00:00
Steven Barth
dc6625f977 6relayd: more verbosity in leases and logging 
SVN-Revision: 36764
 2013-05-30 07:56:55 +00:00
Steven Barth
56a3396bf2 iptables: bump to 1.4.19.1 
SVN-Revision: 36760
 2013-05-29 14:58:04 +00:00
Steven Barth
439fdd4d65 netifd: fix IPv6-addresses disappearing due to lifetime-overflows 
SVN-Revision: 36748
 2013-05-28 18:32:01 +00:00
Steven Barth
23b3cebd56 odhcp6c: fix or debug disappearing IPv6 addresses 
SVN-Revision: 36745
 2013-05-28 16:28:14 +00:00
Felix Fietkau
e6250644be mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36743
 2013-05-28 11:10:41 +00:00
Steven Barth
61c0c6ab68 6relayd: RFC 6204 and naming improvements * Announce delegated prefixes using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default 
SVN-Revision: 36738
 2013-05-27 20:38:13 +00:00
Jo-Philipp Wich
63603ee478 firewall3: update to git head 
- allows building without IPv6 support
	- uses more robust rules to cope with missing libext.a
	- uses better linking strategy to avoid symbol clashes with older iptables
	- introduces source compatiblity layer for different libxtables versions

SVN-Revision: 36736
 2013-05-27 15:13:19 +00:00
Jo-Philipp Wich
e4f8c38ed1 firewall3: update to git head 
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
  - automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
  - properly support output rules with dest '*' to hook directly into delegate_output
  - fixes crash when processing rules with unresolved targets

SVN-Revision: 36721
 2013-05-26 15:48:04 +00:00
Steven Barth
f63064a257 6relayd: Fix DHCPv6-server picking up addresses from master interface 
SVN-Revision: 36718
 2013-05-26 10:06:02 +00:00
Jo-Philipp Wich
90887b5fb3 firewall3: update to git head 
- fixes linking issues with some toolchains

SVN-Revision: 36703
 2013-05-24 12:49:06 +00:00
Steven Barth
d8d7d7f4aa 6relayd: fix a lease-timing issue with stateful DHCPv6 
SVN-Revision: 36702
 2013-05-24 12:31:30 +00:00
Jo-Philipp Wich
c1ff8cd9bb firewall3: update to git head 
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
  - Do not leak memory when processing rules with unknown targets or matches

SVN-Revision: 36698
 2013-05-23 13:07:44 +00:00
Felix Fietkau
75bb3138aa uhttpd: update to latest version, fixes #13564, #13560, improves error handling as pointed out in #13537 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36696
 2013-05-23 10:50:42 +00:00
Steven Barth
32c6ffb5a1 firewall3: Remove abandonend include 
SVN-Revision: 36692
 2013-05-23 06:38:25 +00:00
Jo-Philipp Wich
b757ca2259 firewall3: update to git head 
- fix build on Linux < 3.7
  - limit zone names to 14 bytes

SVN-Revision: 36691
 2013-05-22 14:15:53 +00:00
Steven Barth
9c3ac668e0 6relayd: Let OpenWrt override default CFLAGS 
SVN-Revision: 36690
 2013-05-22 11:58:54 +00:00
Jo-Philipp Wich
c12189b379 firewall3: update to git head 
- fixes reload when firewall is not running already
  - fixes crash when ipsets are supported but undeclared
  - fixes handling of per zone user chains on reload

SVN-Revision: 36689
 2013-05-22 11:37:41 +00:00
Steven Barth
9d115df749 6relayd: Fix a segfault when multiple downstream interfaces are present 
SVN-Revision: 36687
 2013-05-21 18:05:37 +00:00
Jo-Philipp Wich
dd83e87ab0 firewall3: update to git head 
- fixes segfault in flush command if ipset support is not available
  - fixes internal rule generation if custom chains are enabled

SVN-Revision: 36686
 2013-05-21 14:49:37 +00:00
Jo-Philipp Wich
6eec8009ba ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base 
SVN-Revision: 36685
 2013-05-21 13:00:28 +00:00
Jo-Philipp Wich
9b6c31d4cc firewall3: move libext*.a copying to compile phase 
SVN-Revision: 36684
 2013-05-21 12:58:36 +00:00
Jo-Philipp Wich
8df6cd005c netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset 
SVN-Revision: 36683
 2013-05-21 12:58:15 +00:00
Jo-Philipp Wich
e8050c6c35 firewall3: update to git head 
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
 * make ipset integration more reliable

SVN-Revision: 36681
 2013-05-21 10:15:14 +00:00
Jo-Philipp Wich
a9a9644efd iptables: use -ffunction-sections, -fdata-sections and --gc-sections 
SVN-Revision: 36680
 2013-05-21 10:15:10 +00:00
Steven Barth
24c39ddcf7 odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests 
SVN-Revision: 36678
 2013-05-21 09:13:48 +00:00
Steven Barth
37baf2d6b2 6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better 
SVN-Revision: 36677
 2013-05-21 09:13:40 +00:00
Steven Barth
c6f70381c9 odhcp6c: Fix address / prefix expiry logic 
SVN-Revision: 36675
 2013-05-20 14:54:20 +00:00
Steven Barth
dd161ae62b dnsmasq: add directory for external hosts-files 
SVN-Revision: 36655
 2013-05-17 14:44:12 +00:00
Steven Barth
334c40da14 6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD 
SVN-Revision: 36654
 2013-05-17 14:44:07 +00:00
Steven Barth
0f1be4425f netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4 
Based on a patch by Kristian Evensen. Thank You.

SVN-Revision: 36653
 2013-05-17 14:44:02 +00:00
Felix Fietkau
7365e647f6 uhttpd: update to latest version, fixes index page processing order 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36644
 2013-05-16 11:38:19 +00:00
Luka Perkov
4fc8e64a40 iproute2: workaround compile issues with gcc 4.8.x 
SVN-Revision: 36642
 2013-05-16 00:04:48 +00:00
Steven Barth
a62ca72309 odhcp6c: Fix handling of RAs when no DHCPv6-server is present 
SVN-Revision: 36641
 2013-05-15 11:07:01 +00:00
Luka Perkov
580481cd6d iproute2: upgrade to 3.9.0 
SVN-Revision: 36638
 2013-05-14 23:49:34 +00:00
Luka Perkov
5be36cbe83 iproute2: print help in connmark 
SVN-Revision: 36637
 2013-05-14 23:49:31 +00:00
Felix Fietkau
d090eea125 uhttpd: update to latest version, fixes a SSL connection memory leak 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36636
 2013-05-14 17:43:00 +00:00
Felix Fietkau
d481486aad package: fold the IPv6 menu into Network 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36634
 2013-05-14 15:02:31 +00:00
Steven Barth
e8f3897389 6relayd: Always announce the current MAC-address 
* Fixes #13516 thanks to berni for the detailed bugreport.

SVN-Revision: 36629
 2013-05-13 17:54:36 +00:00
Steven Barth
a1af842016 ds-lite: add ds-lite network protocol handler 
SVN-Revision: 36628
 2013-05-13 17:12:39 +00:00
Steven Barth
5ce135ed87 netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements 
SVN-Revision: 36627
 2013-05-13 17:12:34 +00:00
Steven Barth
ea71678b09 netifd: added support for setting up 6rd from DHCP 
SVN-Revision: 36626
 2013-05-13 17:12:30 +00:00
Steven Barth
ad93a571c6 odhcp6c: added support for DS-Lite + various fixes 
SVN-Revision: 36625
 2013-05-13 17:12:25 +00:00
Steven Barth
973dad61b0 firewall3: Remove obsoleted ULA-border 
SVN-Revision: 36624
 2013-05-13 17:12:20 +00:00
Steven Barth
07d99b62b7 firewall3: add wan6 interface to wan-zone by default 
SVN-Revision: 36623
 2013-05-13 17:12:15 +00:00
Steven Barth
4cb9d9715c firewall: Remove obsoleted ULA-border rule 
SVN-Revision: 36622
 2013-05-13 17:12:10 +00:00
Steven Barth
8560648082 6rd: increase metric of default route 
This will prefer native IPv6 over 6rd if both are present.

SVN-Revision: 36605
 2013-05-12 08:07:15 +00:00
Jo-Philipp Wich
d59f8cfa8e iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode 
SVN-Revision: 36604
 2013-05-12 01:12:56 +00:00
Steven Barth
29d4c36622 add uci support for "proxy-dnssec" in dnsmasq 
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.

Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>

SVN-Revision: 36570
 2013-05-07 07:19:51 +00:00
Felix Fietkau
9d8e3e03df iw: update to 3.10, sync with nl80211.h changes in compat-wireless 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36569
 2013-05-06 22:35:50 +00:00
Steven Barth
9c1ed6447b odhcp6c: Make SLAAC-only work without reqprefix=no 
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.

SVN-Revision: 36555
 2013-05-06 10:20:43 +00:00
Jo-Philipp Wich
95e139d0b2 ipset-dns: support simultaneously populating IPv4 and IPv6 sets 
SVN-Revision: 36554
 2013-05-06 10:01:45 +00:00
Jo-Philipp Wich
3c17fd41a4 Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset 
SVN-Revision: 36552
 2013-05-06 08:44:54 +00:00
Felix Fietkau
b85c442e81 hostapd: enable 802.11r for the -full variant (#13250) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36533
 2013-05-03 10:39:57 +00:00
Jo-Philipp Wich
4bba31b64c firewall3: update to git head 
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422, #13386)
	- add support for fwmark matches and mark setting targets

SVN-Revision: 36521
 2013-05-02 13:42:20 +00:00
Jo-Philipp Wich
a0b655b8f2 Fix install of iptables pkg-config files. 
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146; which should make collectd
appear in snapshots again.

Signed-off-by: Danny Baumann <dannybaumann@web.de>

SVN-Revision: 36509
 2013-05-02 08:10:55 +00:00