Commit Graph

828 Commits

Author SHA1 Message Date
Jo-Philipp Wich
2dd087ccee firewall: implement support for abritary netmasks
Properly parse and pass arbritary netmasks to iptables, this allows
specifying ranges like '::c23f:eff:fe7a:a094/::ffff:ffff:ffff:ffff' to
match the host part of an IPv6 address regardless of the currently active
IPv6 prefix.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41760
2014-07-19 16:30:47 +00:00
Felix Fietkau
51fbfde474 netifd: update to the latest version, adds a small validation fix
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41731
2014-07-18 11:45:42 +00:00
Felix Fietkau
4ecb9289ef qos-scripts: convert to procd
Signed-off-by: John Crispin <blogic@openwrt.org>
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41730
2014-07-18 11:25:07 +00:00
Steven Barth
c05d6ba1ff odhcpd: rewrite NDP proxy feature
SVN-Revision: 41703
2014-07-17 19:11:17 +00:00
Felix Fietkau
51b11ba5ea netifd: update to the latest version, enables igmp snooping by default
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41683
2014-07-17 14:55:17 +00:00
Felix Fietkau
4ef8d2e014 qos-scripts: fix ingress packet marking with ifb
Split connection mark into two parts:

The lower nibble contains the confirmed conntrack mark which is not
generated by default/reclassify rules.
The upper nibble contains the current value specified by
default/reclassify rules.

For egress, the default/reclassify value is preferred
For ingress, the connection mark is preferred

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41682
2014-07-17 12:02:06 +00:00
Felix Fietkau
1ecb74024b iwinfo: fix crash on parsing mtd (#15807)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41675
2014-07-16 18:57:23 +00:00
Felix Fietkau
b24e77714e hostapd: add a require_mode option in wifi-device sections to select the minimum hardware mode that the AP requires from clients
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41665
2014-07-15 10:30:08 +00:00
Steven Barth
7264389699 odhcpd: disable packet socket if unneeded to preserve performance
SVN-Revision: 41644
2014-07-14 13:39:03 +00:00
Jo-Philipp Wich
f4781cae6d firewall: fix segfault introduced by latest update
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41558
2014-07-10 16:44:20 +00:00
Jo-Philipp Wich
8b0650838d firewall: fix regressions introduced after latest ubus rework
The commit 92281eb747b56e748b7c3d754055919c23befdd4 broke fw3_ubus_addresses() so that
no addresses where returned at all, this caused fw3 to not emit NAT reflection rules
anymore.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41556
2014-07-10 10:21:17 +00:00
Felix Fietkau
a6c4ef18b7 qos-scripts: remove maxsize options and packet size based reclassify from the default config
They should be unnecessary with fq_codel, and simplifying rules helps
with performance

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41549
2014-07-08 11:19:51 +00:00
Hauke Mehrtens
3861bdad99 samba36: update to minor version 3.6.24
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 41525
2014-07-06 11:23:13 +00:00
Felix Fietkau
363eb4cf7a samba36: disable acl support to avoid picking up a dependency on libacl (#16988)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41509
2014-07-04 11:42:57 +00:00
Felix Fietkau
4d04e666a4 samba36: do not pick up libattr as a dependency
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41508
2014-07-04 09:55:14 +00:00
Jo-Philipp Wich
b321f718c2 firewall: fix issue with parsing network options
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41491
2014-07-03 09:21:44 +00:00
Hauke Mehrtens
2dba3f8aca iwinfo: fix string format for country code
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 41485
2014-07-02 21:43:17 +00:00
Felix Fietkau
e9b8f24ded igmpproxy: automatically add firewall rules for multicast routing based on the current config
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41483
2014-07-02 19:18:23 +00:00
Felix Fietkau
2b274eb719 firewall: update to the latest version, adds support for fetching firewall rules from procd
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41480
2014-07-02 19:18:13 +00:00
Felix Fietkau
3445645d18 iptables: refresh patches
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41479
2014-07-02 19:18:09 +00:00
Jo-Philipp Wich
16d8827150 iproute2: re-enable PIC, it is only applied to libnetlink.a and required for collectd
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41460
2014-07-02 12:41:36 +00:00
Jo-Philipp Wich
1c891e0d45 iptables: pass --disable-ipv6 is CONFIG_IPV6 is unset
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41458
2014-07-02 11:39:24 +00:00
John Crispin
bf75e37030 ppp: fix keep alive option
currently the keepalive option needs to be removed to fully disable it. this patch allows us to set it to 0.

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 41438
2014-07-01 10:26:07 +00:00
Steven Barth
d5340f6092 odhcpd: some minor DHCP/DHCPv6 fixes
SVN-Revision: 41432
2014-07-01 08:15:28 +00:00
Felix Fietkau
d78404c24a openvpn: fix compile error with musl
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41425
2014-06-30 15:34:03 +00:00
Felix Fietkau
b1c4a0aed5 openvpn: update to version 2.3.4
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41416
2014-06-30 12:43:03 +00:00
Felix Fietkau
b3b55de395 build: disable the PKG_CHECK_FORMAT_SECURITY check for the failing packages
The idea is to gradually fix the packages

Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 41411
2014-06-30 08:19:48 +00:00
Steven Barth
3c791c31bf odhcpd: fix build failure with musl
SVN-Revision: 41409
2014-06-30 07:56:33 +00:00
Felix Fietkau
1c499abcda pppd: fix build with musl
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41404
2014-06-29 22:26:08 +00:00
Felix Fietkau
cdee846385 samba36: fix build error with musl
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41402
2014-06-29 22:26:02 +00:00
Felix Fietkau
78fcf50de4 relayd: update to the latest version, fixes musl compile and multicast relaying
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41401
2014-06-29 22:25:58 +00:00
Felix Fietkau
5db42f92fd netifd: update to the latest version, fixes a crash on reload with hotplugged devices
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41393
2014-06-29 21:27:28 +00:00
Felix Fietkau
50c05b20cb netifd: update to the latest version, addds a few fixes and enables multicast->unicast for igmp snooping on wireless devices
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41390
2014-06-29 18:34:22 +00:00
Felix Fietkau
c41dae37bf conntrack-tools: fix build on octeon
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41377
2014-06-29 11:33:03 +00:00
Felix Fietkau
d73e2c5528 conntrack-tools: leave out bogus reject files on unpacking
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41376
2014-06-29 11:33:00 +00:00
Jo-Philipp Wich
42bc2c49ae 6in4: send password unhashed
The preferred he.net /nic/update endpoint expects the password or updatekey in
plain text and not as md5 sum, therfore remove the hashing operation from the
script.

This effectively renders the "updatekey" option redundant but we keep it around
for backwards compatibility. Both "option password" and "option updatekey" will
have end up in the "&password=" parameter of the update url and are passed through
unmodified.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41358
2014-06-27 10:40:44 +00:00
Steven Barth
2ad9907cd5 firewall3: add fw3 zone function to enumerate devices
SVN-Revision: 41349
2014-06-26 12:20:47 +00:00
John Crispin
d3be71e141 mdns: add the new openwrt mdns daemon
this is still wip, you can use the following ubus calls.

ubus call mdns scan	# triggers a scan
ubus call mdns browse	# look at the currenlty cached records
ubus call mdns hosts	# look at the currenlty cached hosts

TODO
- ipv6, currenlty AAAA records are handled but only on v4 sockets
- finish the service announce code

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 41345
2014-06-26 11:43:34 +00:00
John Crispin
3cb08b4811 iputils: fix compile when using eglibc
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 41342
2014-06-26 11:42:57 +00:00
Steven Barth
2dd6d4a4f0 dnsmasq: use config_get_bool for dnsmasq
SVN-Revision: 41302
2014-06-22 15:34:36 +00:00
Felix Fietkau
8db0fcf1f7 iw: update to 3.15
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 41299
2014-06-22 11:42:28 +00:00
Steven Barth
17d3ce64cf dnsmasq: set procd respawn
SVN-Revision: 41297
2014-06-22 09:08:14 +00:00
Steven Barth
22ffa5ef16 netifd: various routing table handling fixes
SVN-Revision: 41287
2014-06-20 17:51:25 +00:00
Jo-Philipp Wich
005884bff4 Revert "netifd: fix handling of "lookup main" for ip rules (#15315)"
The netifd fixes went to the wrong repository, revert until it is sorted out.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41283
2014-06-20 12:28:35 +00:00
Jo-Philipp Wich
de51f6022f netifd: fix handling of "lookup main" for ip rules (#15315)
Reworks the handling of RT_TABLE_MAIN in system-linux.c so that ip rules
with lookup main can be properly setup.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 41282
2014-06-20 09:58:16 +00:00
Steven Barth
9af2e45080 dnsmasq: removing nettle 3.0 support due to nettle downgrade
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 41264
2014-06-18 17:06:37 +00:00
Steven Barth
bff5e3822c odhcpd: improve static DHCPv4 leases (thanks arnd)
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 41260
2014-06-18 12:10:10 +00:00
Steven Barth
8d177a8e78 netifd: various bugfixes (thanks Hans Dedecker)
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 41259
2014-06-18 11:29:09 +00:00
John Crispin
4925f710f6 relayd: update to latest git head
this fixes multicast fowarding on relayd links

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 41254
2014-06-18 10:08:05 +00:00
Steven Barth
087ea853b4 dnsmasq: compatibility with nettle 3.0
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 41249
2014-06-18 10:04:47 +00:00