mr/openwrt
2
0
Fork 1
Code Issues 7 Pull Requests Releases Wiki Activity
27,109 Commits 3 Branches 0 Tags 517 MiB
31ccc84c37
Commit Graph

684 Commits

Author SHA1 Message Date
Felix Fietkau
5137cdb1e1 xtables-addons: fix missing conversion from r38021 (resolves a broken dependency) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38124
 2013-09-22 19:49:23 +00:00
Steven Barth
4894800bdd odhcp6c: handle NoAddrsAvail IA-status 
SVN-Revision: 38092
 2013-09-21 10:54:13 +00:00
Steven Barth
808a1c7808 odhcp6c: Restart when server returns IAID error 
SVN-Revision: 38032
 2013-09-18 10:27:15 +00:00
John Crispin
f874094402 procd: convert various packages to procd style init.d scripts 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38023
 2013-09-17 21:45:30 +00:00
John Crispin
f12f4074af kernel: make most modules use AutoProbe 
now that we have modprobe we can set more than half of the modules to AutoProbe

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38021
 2013-09-17 21:45:17 +00:00
Felix Fietkau
b2447d1fca hostapd: adjust the md5sum for the uploaded source tarball (fixes #14155) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37990
 2013-09-14 20:07:35 +00:00
Felix Fietkau
28eceb0343 iwinfo: when using nl80211, parse interface combinations instead of creating/deleting interfaces 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37983
 2013-09-14 14:46:51 +00:00
Jo-Philipp Wich
c3cc912ed9 uhttpd: udpat to git head 
- fixes buffer corruption with JSON-RPC list calls
	- change JSON-RPC protocol to include the session ID into the call
	  attributes instead of passing it via the URL
	- forcibly pass effective session ID as "ubus_rpc_session" attribute
	  to called procedures
	- change ubus acl checking to conform with new ubus session namespace

SVN-Revision: 37962
 2013-09-13 13:24:45 +00:00
Steven Barth
eba3ab9ade odhcp6c: Timing workaround for buggy servers 
SVN-Revision: 37951
 2013-09-12 12:57:42 +00:00
Steven Barth
b2a71fedd9 odhcp6c: more compatibility fixes 
SVN-Revision: 37907
 2013-09-05 21:13:51 +00:00
Steven Barth
0a85c59040 netfilter: Add IPv6-NAT support for kernel and ipt Thanks to Berni, Adam Novak and Sedat Dilek for patches and inspiration 
SVN-Revision: 37866
 2013-09-01 17:59:48 +00:00
Steven Barth
3e647ac9b6 iptables: Update to 1.4.20 
SVN-Revision: 37865
 2013-09-01 13:46:10 +00:00
Felix Fietkau
7fc90889d5 netifd: update to the latest version, fixes a bridge handling corner case on config reload 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37856
 2013-08-29 22:20:36 +00:00
Vasilis Tsiligiannis
03b1d4289b lldpd: Add libbsd dependency when using eglibc 
Signed-off-by: Vasilis Tsiligiannis <acinonyx@openwrt.gr>

SVN-Revision: 37837
 2013-08-25 18:47:08 +00:00
Jo-Philipp Wich
2864fb107f firewall: update to git head 
- uses "-j CT --notrack" instead of deprecated "-j NOTRACK"
	- fixes support for rule sections with target "NOTRACK"

SVN-Revision: 37777
 2013-08-14 15:40:38 +00:00
Felix Fietkau
4cda88a879 hostapd: fix typo in version number 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37742
 2013-08-08 20:45:15 +00:00
Felix Fietkau
9df75e7f34 hostapd: fix ubus reconnect handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37741
 2013-08-08 20:45:12 +00:00
Felix Fietkau
750197b3af hostapd: add a build variant for wpa_supplicant with p2p (aka Wi-Fi Direct) support 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37739
 2013-08-08 16:24:50 +00:00
Felix Fietkau
f53b96813e hostapd: update to latest version (20130707) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37738
 2013-08-08 16:04:19 +00:00
Felix Fietkau
9a22315ca4 hostapd: Settings for DAE/CoA server 
hostapd supports "Dynamic Authorization Extensions", making it possible
to forcibly disconnect a user by sending it a RADIUS "Disconnect-Request"
packet.

I've added three new variables to enable setting of the
"radius_das_client" and "radius_das_port" variables in the hostapd
configuration, which enable these extensions.

* dae_client - IP of the client that can send disconnect requests
* dae_secret - shared secret for DAE packets

These are combined into the "radius_das_client" option in hostapd.conf
To enable the server, both dae_client and dae_secret must be set.

* dae_port - optional, default value is 3799 as specified in RFC 5176

Signed-off-by: Martijn van de Streek <martijn@vandestreek.net>

SVN-Revision: 37734
 2013-08-06 18:55:30 +00:00
Felix Fietkau
91f0b411f4 hostapd: Fix WDS/WEP usage 
WEP in WDS is currently broken in hostapd. Add a patch
to fix the issue.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37733
 2013-08-06 17:59:12 +00:00
Felix Fietkau
76ca564e79 hostapd: Refresh patches 
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37731
 2013-08-06 17:59:05 +00:00
Felix Fietkau
22e012bad8 hostapd: Add an option to disable beaconing 
Add a patch for hostapd that introduces a config option
"start_disabled" which can be used to bring up an AP
interface with beaconing disabled. This is useful in
a Repeater-AP setup where the Repeater AP has to start
beaconing only after the WDS link has been established.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37730
 2013-08-06 17:59:02 +00:00
Felix Fietkau
719adb6471 uhttpd: update to the latest version, fixes a crash on early cgi/lua process termination 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37628
 2013-07-31 22:07:09 +00:00
Luka Perkov
1646bd096c iproute2: update to 3.10.0 
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37590
 2013-07-28 23:27:35 +00:00
Felix Fietkau
aff8c18ad0 openvpn: update to 2.3.2 
this patches updates openvpn to v2.3.2
and adds a PKG_MD5SUM to the Makefile

This release fixes a memory access violation when cipher none is used
on ar71xx - at least with my config

Signed-off-by: Peter Wagner <tripolar@gmx.at>

SVN-Revision: 37560
 2013-07-26 12:35:22 +00:00
Steven Barth
4d37ae33b6 6relayd: Overridden DNS should affect DHCPv6 
SVN-Revision: 37558
 2013-07-26 11:59:25 +00:00
Felix Fietkau
8faa8a6420 uhttpd: update to latest version, fixes issues with POST and keep-alive (#13940) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37556
 2013-07-26 10:03:07 +00:00
Felix Fietkau
3d2ace5d71 authsae: add myself as a maintainer 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37555
 2013-07-26 10:03:03 +00:00
Felix Fietkau
4478c69b86 authsae: adapt uci scripts to use authsae 
This patch modifies the uci scripts to be able to
start meshd-nl80211 for encrypted mesh networks,
therefor a new script (authsae.sh) is inserted.

Signed-off-by: Emanuel Taube <emanuel.taube@gmail.com>
[etienne.champetier@free.fr: just update mac80211.sh path]
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37554
 2013-07-26 10:02:59 +00:00
Felix Fietkau
6dbea6416b authsae 80211s authentication daemon 
This patch adds authsae open80211s authentication daemon (http://open80211s.org)
It's a rework of Peter Naulls patch (http://patchwork.openwrt.org/patch/1350/)
I've excluded the sample conf file as it's useless when used with mac80211.sh (Emanuel Taube patch)
It now link against libnl-tiny instead of libnl (patch merged in authsae git)
Authsae is 58 Ko (OPENSSL_WITH_EC option adds 35Ko to libopenssl)

Signed-off-by: Peter Naulls <peter@chocky.org>
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37553
 2013-07-26 10:02:55 +00:00
Felix Fietkau
85e585ddce ead: fix compile errors with recent kernels 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37482
 2013-07-20 12:56:07 +00:00
Hauke Mehrtens
96f1953fb1 kernel: fix xtables-addons dependencies with kernel 3.3 
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 37461
 2013-07-19 22:36:47 +00:00
Jo-Philipp Wich
7bbe1656cb xtables-addons: use a select of kmod-ipt-core instead of depending on it 
SVN-Revision: 37425
 2013-07-19 09:58:17 +00:00
Jo-Philipp Wich
d474a77edf xtables-addons: add missing kmod dependencies 
SVN-Revision: 37424
 2013-07-19 09:58:11 +00:00
Jo-Philipp Wich
d6e8047f83 firewall: update to git head 
- handles redirects as port relocations if the dest_ip points to the router itself

SVN-Revision: 37374
 2013-07-16 14:04:59 +00:00
Steven Barth
54ae5ce507 netifd: Fix IPv6-prefix assignment with continuous hints 
SVN-Revision: 37371
 2013-07-16 12:07:11 +00:00
Steven Barth
6a034ce5b1 6relayd: Fix DHCPv6-PD with continuous hints 
SVN-Revision: 37370
 2013-07-16 12:07:06 +00:00
Steven Barth
0444e32acd Bump iptables version 
SVN-Revision: 37329
 2013-07-15 06:12:07 +00:00
Steven Barth
ea6a5d0c22 iptables: restore reap functionality to recent module 
The reap functionality appears to have been accidentally disabled by
commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see:

  git://git.netfilter.org/iptables.git

and subsequently in iptables 1.4.15 and later.  This adds a patch to
restore reap functionality for recent_opts_v1.

Signed-off-by: Russell Senior <russell@personaltelco.net>

SVN-Revision: 37328
 2013-07-15 06:12:03 +00:00
Luka Perkov
1a963355b0 netifd: update to latest version, add bridge_empty option 
with this option enabled it's possible to create empty bridges

Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37318
 2013-07-14 18:50:04 +00:00
John Crispin
7d7c2ff5f9 swconfig: fix dependency bug introduced by [37304] 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37316
 2013-07-14 18:16:42 +00:00
Hauke Mehrtens
f8d55e7541 brcm47xx: use b53 phy driver for the switch in kernel 3.10 
This makes it possible to use swconfig to controll the switch.

This was tested with devices using b43 and bgmac.
This was not tested on devices using tg3.
This does not support the adm switch used in some very old devices.

SVN-Revision: 37304
 2013-07-14 14:11:17 +00:00
John Crispin
8d546699c5 dropbear: register a config.change trigger 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37245
 2013-07-11 17:00:40 +00:00
Felix Fietkau
4e042e4a84 ipset: force the shell to bash to fix build issues on mac os x 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37227
 2013-07-10 14:59:00 +00:00
Felix Fietkau
4a0c312dc3 xtables-addons: update to version 2.3, adds linux 3.10 compatibility 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37226
 2013-07-10 14:51:13 +00:00
Felix Fietkau
f98f69adc9 firewall: add missing dependencies 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37224
 2013-07-10 11:33:48 +00:00
John Crispin
fc40051569 lantiq: move dsl tools to package/network/config 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37198
 2013-07-08 09:01:38 +00:00
Luka Perkov
4a7439401b linux-atm: fix dependencies 
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37189
 2013-07-08 00:37:49 +00:00
Jo-Philipp Wich
4aa82d07a6 firewall: allow routed lan<->lan traffic by default 
SVN-Revision: 37171
 2013-07-04 18:10:36 +00:00
Jo-Philipp Wich
2561bce232 lldpd: upgrade to 0.7.5 
lldpd 0.7.1 has several alignment issues that trip a system configured
to fault on misaligned accesses.  Version 0.7.5 fixes that along with a
few other minor issues.

Signed-off-by: John Szakmeister <john@szakmeister.net>

SVN-Revision: 37168
 2013-07-04 16:57:03 +00:00
Steven Barth
e3a369e597 odhcp6c: avoid integer overflows in resend logic 
SVN-Revision: 37150
 2013-07-03 16:14:24 +00:00
Steven Barth
b9aa47d5b6 odhcp6c: add missing config parameter 
SVN-Revision: 37148
 2013-07-03 13:50:06 +00:00
Jo-Philipp Wich
7c197d9f0e hostapd: truncate default mac file before adding entries to it (#13797) 
SVN-Revision: 37114
 2013-07-01 10:52:35 +00:00
Felix Fietkau
ee68734929 hostapd: fix multi-ssid and AP+STA, clean up code 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37111
 2013-06-30 21:01:13 +00:00
Felix Fietkau
60b040bbaf hostapd: update to latest git version 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37110
 2013-06-30 20:27:38 +00:00
Felix Fietkau
12c033dfd9 mac80211: update to wireless-testing 2013-06-27, fix ATH_USER_REGD handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37097
 2013-06-30 10:44:19 +00:00
Jo-Philipp Wich
2d506f46fb firewall: update to git head 
- uses custom formatting for mac addresses to ensure leading zeroes, required for older iptables mac match parser

SVN-Revision: 37082
 2013-06-29 13:28:27 +00:00
Steven Barth
d8051a8814 netifd: fix typo in dhcp script 
SVN-Revision: 37051
 2013-06-28 04:19:21 +00:00
Florian Fainelli
fe7c236a06 6relayd: prevent build on AVR32 
AVR32 misses a bunch of updated syscalls, including timerfd_create()
which is used by 6relayd. Since that requires Linux/libc changes, just
prevent building it for now.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 37040
 2013-06-27 15:33:05 +00:00
Steven Barth
cb66ed972b odhcp6c: Add missing config option "ifaceid" 
SVN-Revision: 37033
 2013-06-25 05:18:20 +00:00
John Crispin
e7dbdad43b hostapd: fix superflous coma 
this cause the wps trigegr to be copied to the wrong place

https://dev.openwrt.org/ticket/13753

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37031
 2013-06-24 16:44:18 +00:00
Steven Barth
eecce5abad arptables: Bump to 0.0.4 
SVN-Revision: 37020
 2013-06-24 05:48:12 +00:00
Steven Barth
69cd09ebbf 6relayd: don't accidentally remove regular prefix routes 
SVN-Revision: 37018
 2013-06-23 16:26:09 +00:00
Steven Barth
f47c4c80d4 6relayd: fix lease-update behaviour for clients without reconfigure 
SVN-Revision: 37011
 2013-06-22 08:31:28 +00:00
Steven Barth
d0d5f109d8 6relayd: Keep PD-downstream across RENEW/REBIND 
SVN-Revision: 37009
 2013-06-22 08:19:25 +00:00
John Crispin
4ebf19b48f packages: clean up the package folder 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37007
 2013-06-21 16:54:37 +00:00
John Crispin
4999ae4236 hostapd: remove old button hotplug script 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36991
 2013-06-21 16:53:07 +00:00
Steven Barth
5108318edb 6relayd: Fix DHCPv6-PD assignment logic 
SVN-Revision: 36980
 2013-06-21 06:15:09 +00:00
Steven Barth
de2a7547b7 6relayd: correctly set downstream routes for DHCPv6-PD 
SVN-Revision: 36969
 2013-06-19 13:08:33 +00:00
Felix Fietkau
b4babf9f81 netifd: update to latest version, fixes a NULL pointer deref bug 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36965
 2013-06-18 16:24:48 +00:00
Jo-Philipp Wich
65f82e2311 firewall: update to git head 
- fixes misprocessing of unknown symbolic protocol names

SVN-Revision: 36963
 2013-06-18 14:30:51 +00:00
Jo-Philipp Wich
37ae268729 firewall: update to git head 
- fixes calculation of IPv4 netmasks derived from 0.0.0.0/0 CIDRs

SVN-Revision: 36960
 2013-06-18 14:14:35 +00:00
Steven Barth
5219d38da2 odhcp6c: Add option to override interface identifier in RA-client 
SVN-Revision: 36959
 2013-06-18 12:51:14 +00:00
Steven Barth
9f1899242c netifd: IPv6: Fix sorting order in last commit. 
SVN-Revision: 36952
 2013-06-17 21:29:14 +00:00
Steven Barth
213269a8f7 netifd: Satisfy IPv6 assignments ordered by prefix length 
SVN-Revision: 36950
 2013-06-17 21:16:22 +00:00
Jo-Philipp Wich
541fbfbb9e hostapd: correctly handle macfile uci option 
Make hostapd.sh correctly handle the macfile uci option.

Such option specifies the macfile name to pass into the
hostapd configuration file. Moreover, if a maclist option
has been specified, copy the macfile before appending new
entries.

Signed-off-by: Antonio Quartulli <antonio@open-mesh.com>

SVN-Revision: 36944
 2013-06-17 11:59:29 +00:00
Jo-Philipp Wich
dfea3bae11 dnsmasq: use host-record instead of address 
Using "--address" for individual host A records is broken, use "--host-record" instead.
The following patch changes dnsmasq.init to build individual host records using "--host-record" instead of "--address".

Signed-off-by: Adam Gensler <openwrt at gnslr.us>

[jow: shorter description, simplified shell script code]

SVN-Revision: 36943
 2013-06-17 11:55:30 +00:00
Jo-Philipp Wich
36d3fafd77 firewall: update to git head 
- properly process intermediate "!" options in argument list (fixes negated ipsets)

SVN-Revision: 36935
 2013-06-13 18:54:49 +00:00
Jo-Philipp Wich
0db38adf1c firewall: update to git head 
- fixes handling of reject target for rule sections with specific destination zone

SVN-Revision: 36933
 2013-06-13 12:49:00 +00:00
Jo-Philipp Wich
1150e299bb uhttpd: expose missing options to uci 
SVN-Revision: 36932
 2013-06-13 11:55:12 +00:00
Steven Barth
302cf427cb odhcp6c: add sanity checks for NDP and MTU parameters from RAs 
SVN-Revision: 36930
 2013-06-13 06:38:48 +00:00
Steven Barth
4f0a0defa6 6relayd: make route preference and prefix on-link flag configurable 
SVN-Revision: 36922
 2013-06-11 20:52:27 +00:00
Steven Barth
f6dd266c97 iproute2: add drop-failed rule action (patch by Jonas Gorski) 
SVN-Revision: 36910
 2013-06-11 09:27:46 +00:00
Felix Fietkau
9fb5bf176e netifd: update to latest version, uses the new uci/blob code from libuci 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36909
 2013-06-10 12:42:30 +00:00
Steven Barth
5caa45d0b3 ppp: correctly handle address when reloading 
SVN-Revision: 36904
 2013-06-10 10:42:34 +00:00
Steven Barth
491deaed2c netifd: improve reloading behaviour 
SVN-Revision: 36903
 2013-06-10 10:42:15 +00:00
Jo-Philipp Wich
bc73ca5619 iwinfo: add phyname attribute, this is useful to group networks by radio phy 
SVN-Revision: 36889
 2013-06-09 14:39:14 +00:00
Jo-Philipp Wich
cb24c37858 libiwinfo: ignore log messages from wpa_supplicant while scanning 
wpa_supplicant may send log and event messages intermixed with the
expected scan results.  This makes "iwinfo wlan0 scan" and LuCI
"site survey" display nothing when many AP's are around.

Eliminate the CTRL-EVENT-BSS-ADDED events, interspersed log messages,
lines with unexpected format.  Increase timeout to handle the max
number of channels (2.4, 3.6, 4.9, 5 GHz).  Insure receive buffer is
null-terminated.

Signed-off-by: Jean-Pierre Tosoni <jp.tosoni@acksys.fr>

SVN-Revision: 36888
 2013-06-09 14:39:09 +00:00
Steven Barth
f995c90329 netifd: Improve IPv6 source-routing policies 
SVN-Revision: 36884
 2013-06-08 13:26:33 +00:00
Jonas Gorski
b9de8ca7f5 netifd: bring wifi down before shutting down 
works around wifiX references not being freed on network restart.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 36883
 2013-06-08 11:44:12 +00:00
Jo-Philipp Wich
e7b15446a8 firewall: udpate to git head (#13652, #13654, #13658) 
- optimizes chain usage for ingress rules
  - adds limit match support for redirect rules
  - fixes automatic redirect dest detection on little endian systems
  - leaves base chains in place on reload to allow user rules to target e.g. "reject"

SVN-Revision: 36871
 2013-06-06 14:12:02 +00:00
Jo-Philipp Wich
5cf06bd17b firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols 
SVN-Revision: 36868
 2013-06-06 14:02:29 +00:00
Jo-Philipp Wich
e94cf1c72b iptables: install libext*.a into staging dir 
SVN-Revision: 36867
 2013-06-06 14:02:24 +00:00
Jo-Philipp Wich
ecc95dcba8 firewall: update to git head (#13652) 
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
  - uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones

SVN-Revision: 36854
 2013-06-05 11:40:40 +00:00
Jo-Philipp Wich
0a74d9d5c3 firewall3: fix accidentally changed install directive 
SVN-Revision: 36840
 2013-06-04 12:30:50 +00:00
Jo-Philipp Wich
07a3110e88 firewall: fix git source url 
SVN-Revision: 36839
 2013-06-04 12:23:47 +00:00
Jo-Philipp Wich
b721c92221 firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA 
SVN-Revision: 36838
 2013-06-04 12:21:52 +00:00
Jo-Philipp Wich
0dd6753c09 Drop legacy firewall package 
SVN-Revision: 36837
 2013-06-04 12:21:44 +00:00
Jo-Philipp Wich
6f60308257 firewall3: update to git head (#13641) 
* Fixes wrong chain used for zone forward policy

SVN-Revision: 36830
 2013-06-04 10:26:49 +00:00
Jo-Philipp Wich
6eeca5176e firewall3: update to git head 
- Fixes problems with reusing matches or targets from loadable extensions

SVN-Revision: 36826
 2013-06-03 16:38:29 +00:00
Felix Fietkau
8c69057980 uhttpd: update to latest version, fixes CGI related crashes 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36817
 2013-06-01 21:43:06 +00:00
Steven Barth
089d6612ce 6relayd: Work around Windows DHCPv6 quirks Announcing deprecated addresses breaks Windows clients 
SVN-Revision: 36815
 2013-06-01 17:51:02 +00:00
Steven Barth
7ae506c7d4 odhcp6c: work around spurious false-positive address DECLINEs 
SVN-Revision: 36809
 2013-05-31 13:49:17 +00:00
Jo-Philipp Wich
3bb397c997 firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly 
SVN-Revision: 36806
 2013-05-31 13:23:23 +00:00
Steven Barth
bf582fbb7b odhcp6c: fix handling of multiple RAs in a row 
SVN-Revision: 36804
 2013-05-31 10:02:39 +00:00
Steven Barth
cdc3caf533 6relayd: Better compatibility with misbheaving DHCPv6 clients * Make the "best" address / prefix the first one being announced * Only add the "best" address to the hosts-file 
SVN-Revision: 36772
 2013-05-30 15:42:30 +00:00
Steven Barth
519f27cd33 netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes 
SVN-Revision: 36771
 2013-05-30 15:42:25 +00:00
Felix Fietkau
02fe12c00d uhttpd: update again to fix a ubus plugin crash bug 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36770
 2013-05-30 13:16:38 +00:00
Felix Fietkau
eeb7fdc13e uhttpd: update to latest version, fixes script timeout for ubus requests 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36767
 2013-05-30 10:44:20 +00:00
Steven Barth
dc6625f977 6relayd: more verbosity in leases and logging 
SVN-Revision: 36764
 2013-05-30 07:56:55 +00:00
Steven Barth
56a3396bf2 iptables: bump to 1.4.19.1 
SVN-Revision: 36760
 2013-05-29 14:58:04 +00:00
Steven Barth
439fdd4d65 netifd: fix IPv6-addresses disappearing due to lifetime-overflows 
SVN-Revision: 36748
 2013-05-28 18:32:01 +00:00
Steven Barth
23b3cebd56 odhcp6c: fix or debug disappearing IPv6 addresses 
SVN-Revision: 36745
 2013-05-28 16:28:14 +00:00
Felix Fietkau
e6250644be mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36743
 2013-05-28 11:10:41 +00:00
Steven Barth
61c0c6ab68 6relayd: RFC 6204 and naming improvements * Announce delegated prefixes using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default 
SVN-Revision: 36738
 2013-05-27 20:38:13 +00:00
Jo-Philipp Wich
63603ee478 firewall3: update to git head 
- allows building without IPv6 support
	- uses more robust rules to cope with missing libext.a
	- uses better linking strategy to avoid symbol clashes with older iptables
	- introduces source compatiblity layer for different libxtables versions

SVN-Revision: 36736
 2013-05-27 15:13:19 +00:00
Jo-Philipp Wich
e4f8c38ed1 firewall3: update to git head 
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
  - automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
  - properly support output rules with dest '*' to hook directly into delegate_output
  - fixes crash when processing rules with unresolved targets

SVN-Revision: 36721
 2013-05-26 15:48:04 +00:00
Steven Barth
f63064a257 6relayd: Fix DHCPv6-server picking up addresses from master interface 
SVN-Revision: 36718
 2013-05-26 10:06:02 +00:00
Jo-Philipp Wich
90887b5fb3 firewall3: update to git head 
- fixes linking issues with some toolchains

SVN-Revision: 36703
 2013-05-24 12:49:06 +00:00
Steven Barth
d8d7d7f4aa 6relayd: fix a lease-timing issue with stateful DHCPv6 
SVN-Revision: 36702
 2013-05-24 12:31:30 +00:00
Jo-Philipp Wich
c1ff8cd9bb firewall3: update to git head 
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
  - Do not leak memory when processing rules with unknown targets or matches

SVN-Revision: 36698
 2013-05-23 13:07:44 +00:00
Felix Fietkau
75bb3138aa uhttpd: update to latest version, fixes #13564, #13560, improves error handling as pointed out in #13537 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36696
 2013-05-23 10:50:42 +00:00
Steven Barth
32c6ffb5a1 firewall3: Remove abandonend include 
SVN-Revision: 36692
 2013-05-23 06:38:25 +00:00
Jo-Philipp Wich
b757ca2259 firewall3: update to git head 
- fix build on Linux < 3.7
  - limit zone names to 14 bytes

SVN-Revision: 36691
 2013-05-22 14:15:53 +00:00
Steven Barth
9c3ac668e0 6relayd: Let OpenWrt override default CFLAGS 
SVN-Revision: 36690
 2013-05-22 11:58:54 +00:00
Jo-Philipp Wich
c12189b379 firewall3: update to git head 
- fixes reload when firewall is not running already
  - fixes crash when ipsets are supported but undeclared
  - fixes handling of per zone user chains on reload

SVN-Revision: 36689
 2013-05-22 11:37:41 +00:00
Steven Barth
9d115df749 6relayd: Fix a segfault when multiple downstream interfaces are present 
SVN-Revision: 36687
 2013-05-21 18:05:37 +00:00
Jo-Philipp Wich
dd83e87ab0 firewall3: update to git head 
- fixes segfault in flush command if ipset support is not available
  - fixes internal rule generation if custom chains are enabled

SVN-Revision: 36686
 2013-05-21 14:49:37 +00:00
Jo-Philipp Wich
6eec8009ba ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base 
SVN-Revision: 36685
 2013-05-21 13:00:28 +00:00
Jo-Philipp Wich
9b6c31d4cc firewall3: move libext*.a copying to compile phase 
SVN-Revision: 36684
 2013-05-21 12:58:36 +00:00
Jo-Philipp Wich
8df6cd005c netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset 
SVN-Revision: 36683
 2013-05-21 12:58:15 +00:00
Jo-Philipp Wich
e8050c6c35 firewall3: update to git head 
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
 * make ipset integration more reliable

SVN-Revision: 36681
 2013-05-21 10:15:14 +00:00
Jo-Philipp Wich
a9a9644efd iptables: use -ffunction-sections, -fdata-sections and --gc-sections 
SVN-Revision: 36680
 2013-05-21 10:15:10 +00:00
Steven Barth
24c39ddcf7 odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests 
SVN-Revision: 36678
 2013-05-21 09:13:48 +00:00
Steven Barth
37baf2d6b2 6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better 
SVN-Revision: 36677
 2013-05-21 09:13:40 +00:00
Steven Barth
c6f70381c9 odhcp6c: Fix address / prefix expiry logic 
SVN-Revision: 36675
 2013-05-20 14:54:20 +00:00
Steven Barth
dd161ae62b dnsmasq: add directory for external hosts-files 
SVN-Revision: 36655
 2013-05-17 14:44:12 +00:00
Steven Barth
334c40da14 6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD 
SVN-Revision: 36654
 2013-05-17 14:44:07 +00:00
Steven Barth
0f1be4425f netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4 
Based on a patch by Kristian Evensen. Thank You.

SVN-Revision: 36653
 2013-05-17 14:44:02 +00:00
Felix Fietkau
7365e647f6 uhttpd: update to latest version, fixes index page processing order 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36644
 2013-05-16 11:38:19 +00:00
Luka Perkov
4fc8e64a40 iproute2: workaround compile issues with gcc 4.8.x 
SVN-Revision: 36642
 2013-05-16 00:04:48 +00:00
Steven Barth
a62ca72309 odhcp6c: Fix handling of RAs when no DHCPv6-server is present 
SVN-Revision: 36641
 2013-05-15 11:07:01 +00:00
Luka Perkov
580481cd6d iproute2: upgrade to 3.9.0 
SVN-Revision: 36638
 2013-05-14 23:49:34 +00:00
Luka Perkov
5be36cbe83 iproute2: print help in connmark 
SVN-Revision: 36637
 2013-05-14 23:49:31 +00:00
Felix Fietkau
d090eea125 uhttpd: update to latest version, fixes a SSL connection memory leak 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36636
 2013-05-14 17:43:00 +00:00
Felix Fietkau
d481486aad package: fold the IPv6 menu into Network 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36634
 2013-05-14 15:02:31 +00:00
Steven Barth
e8f3897389 6relayd: Always announce the current MAC-address 
* Fixes #13516 thanks to berni for the detailed bugreport.

SVN-Revision: 36629
 2013-05-13 17:54:36 +00:00
Steven Barth
a1af842016 ds-lite: add ds-lite network protocol handler 
SVN-Revision: 36628
 2013-05-13 17:12:39 +00:00
Steven Barth
5ce135ed87 netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements 
SVN-Revision: 36627
 2013-05-13 17:12:34 +00:00
Steven Barth
ea71678b09 netifd: added support for setting up 6rd from DHCP 
SVN-Revision: 36626
 2013-05-13 17:12:30 +00:00
Steven Barth
ad93a571c6 odhcp6c: added support for DS-Lite + various fixes 
SVN-Revision: 36625
 2013-05-13 17:12:25 +00:00
Steven Barth
973dad61b0 firewall3: Remove obsoleted ULA-border 
SVN-Revision: 36624
 2013-05-13 17:12:20 +00:00
Steven Barth
07d99b62b7 firewall3: add wan6 interface to wan-zone by default 
SVN-Revision: 36623
 2013-05-13 17:12:15 +00:00
Steven Barth
4cb9d9715c firewall: Remove obsoleted ULA-border rule 
SVN-Revision: 36622
 2013-05-13 17:12:10 +00:00
Steven Barth
8560648082 6rd: increase metric of default route 
This will prefer native IPv6 over 6rd if both are present.

SVN-Revision: 36605
 2013-05-12 08:07:15 +00:00
Jo-Philipp Wich
d59f8cfa8e iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode 
SVN-Revision: 36604
 2013-05-12 01:12:56 +00:00
Steven Barth
29d4c36622 add uci support for "proxy-dnssec" in dnsmasq 
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.

Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>

SVN-Revision: 36570
 2013-05-07 07:19:51 +00:00
Felix Fietkau
9d8e3e03df iw: update to 3.10, sync with nl80211.h changes in compat-wireless 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36569
 2013-05-06 22:35:50 +00:00
Steven Barth
9c1ed6447b odhcp6c: Make SLAAC-only work without reqprefix=no 
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.

SVN-Revision: 36555
 2013-05-06 10:20:43 +00:00
Jo-Philipp Wich
95e139d0b2 ipset-dns: support simultaneously populating IPv4 and IPv6 sets 
SVN-Revision: 36554
 2013-05-06 10:01:45 +00:00
Jo-Philipp Wich
3c17fd41a4 Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset 
SVN-Revision: 36552
 2013-05-06 08:44:54 +00:00
Felix Fietkau
b85c442e81 hostapd: enable 802.11r for the -full variant (#13250) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36533
 2013-05-03 10:39:57 +00:00
Jo-Philipp Wich
4bba31b64c firewall3: update to git head 
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422, #13386)
	- add support for fwmark matches and mark setting targets

SVN-Revision: 36521
 2013-05-02 13:42:20 +00:00
Jo-Philipp Wich
a0b655b8f2 Fix install of iptables pkg-config files. 
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146; which should make collectd
appear in snapshots again.

Signed-off-by: Danny Baumann <dannybaumann@web.de>

SVN-Revision: 36509
 2013-05-02 08:10:55 +00:00
Jo-Philipp Wich
f1e214411d iwinfo: fix iwinfo_hardware() return value if chip id is not found 
SVN-Revision: 36471
 2013-04-28 14:04:39 +00:00
Jo-Philipp Wich
f1497ccf4f netifd: update to git head - disables multicast snooping by default on bridges 
SVN-Revision: 36463
 2013-04-27 09:28:40 +00:00
Jo-Philipp Wich
05c1424e87 iwinfo: add hw database file 
SVN-Revision: 36450
 2013-04-26 13:21:01 +00:00
Jo-Philipp Wich
e02d373f90 iwinfo: move builtin hardware database to /usr/share/libiwinfo/hardware.txt 
SVN-Revision: 36449
 2013-04-26 13:20:15 +00:00
Felix Fietkau
5062838fa5 netifd: update to the latest version, fixes interface reload issues when removing the ifname option 
SVN-Revision: 36424
 2013-04-25 16:28:19 +00:00
Steven Barth
49f97af481 6relayd: Fix generation of RA-messages 
SVN-Revision: 36419
 2013-04-24 18:22:08 +00:00
Jo-Philipp Wich
a040ead1c5 iwinfo: add SR71-15 radio info, fix nl80211 channel/frequency reporting on some architectures 
SVN-Revision: 36417
 2013-04-24 14:44:20 +00:00
Steven Barth
2c78c1457b firewall3: Make IPv6 ULA-Border generation dynamic 
This fixes working behind another router which gives out ULAs.

SVN-Revision: 36416
 2013-04-24 14:17:24 +00:00
Steven Barth
2dbcd2ba7b 6relayd: update package description 
SVN-Revision: 36413
 2013-04-24 07:21:42 +00:00
Steven Barth
e17ac4c257 dnsmasq: update to 2.66 Thanks to Christoph König for patches. 
SVN-Revision: 36412
 2013-04-24 05:55:39 +00:00
Steven Barth
21e4e2a766 odhcp6c: Set default SOL_MAX_RT to 1h 
SVN-Revision: 36411
 2013-04-24 05:02:45 +00:00
Felix Fietkau
d7908e02b5 hostapd: return the frequency to some ubus calls to make integration easier 
SVN-Revision: 36410
 2013-04-23 18:35:50 +00:00
Jo-Philipp Wich
61a6f45cdc lldpd: upgrade to 0.7.1 
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

SVN-Revision: 36401
 2013-04-23 10:37:23 +00:00
Steven Barth
17b8c0c7b8 netifd: Improve IPv6-ULA assignment handling 
SVN-Revision: 36383
 2013-04-22 19:40:06 +00:00
Steven Barth
c96c05d549 odhcp6c: Several fixes and improvements * Add preliminary support for RFC 6603 prefix exclusion * Fix reconfigure-support and reconfigure authentication * Set maximum retransmission timeout for solicitations to 2h * Fix a segfault when parsing IA_PD in advertise messages 
SVN-Revision: 36382
 2013-04-22 19:40:01 +00:00
Steven Barth
1e78c3e297 6relayd: Add DHCPv6-PD server support, fix relaying in stateful mode 
SVN-Revision: 36381
 2013-04-22 19:39:55 +00:00
Felix Fietkau
62244d73ae hostapd: update to 2013-04-05 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36376
 2013-04-22 13:24:48 +00:00
Felix Fietkau
96bb7c123b build: consistently use 'depends on' instead of 'depends' 
make the syntax more compatible with kernel menuconfig

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36351
 2013-04-17 15:36:41 +00:00
Jo-Philipp Wich
e66a4af8c3 uhttpd: update to git head, fixes regression when parsing IPv6 listen arguments 
SVN-Revision: 36348
 2013-04-17 11:34:39 +00:00
Jo-Philipp Wich
25ffe0446c iwinfo: print info of all existing wireless ifaces when cli is called without arguments 
SVN-Revision: 36339
 2013-04-15 15:00:16 +00:00
Felix Fietkau
eb10581ce3 uhttpd: update to latest version, fixes compile error with latest libubox 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36338
 2013-04-15 14:49:52 +00:00
Felix Fietkau
099e3d8183 netifd: update to latest version, fixes some device handling crashes 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36336
 2013-04-15 14:21:45 +00:00
Felix Fietkau
88c418bc75 qos-scripts: add queue length and quantum limit, suggested by dtaht 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36294
 2013-04-09 14:59:10 +00:00
Jo-Philipp Wich
7ca7bc501e iwinfo: fix frequency/channel and channel/frequency conversions to properly implement 802.11j 
SVN-Revision: 36292
 2013-04-09 14:37:55 +00:00
John Crispin
04dcd12c91 add portmap support to userland 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36284
 2013-04-09 14:19:13 +00:00
John Crispin
f13ae9965c add "swconfig list" support 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36282
 2013-04-09 14:19:05 +00:00
Jo-Philipp Wich
f90f025f20 netifd: fix route / route6 regression (#13303) 
SVN-Revision: 36281
 2013-04-09 12:21:12 +00:00
Steven Barth
3abc915522 Remove deprecated ip6slaac option * use proto=dhcpv6 with reqprefix=no instead 
SVN-Revision: 36280
 2013-04-09 12:12:30 +00:00
Steven Barth
2c087dc785 Remove obsoleted ipv6-support meta-package 
SVN-Revision: 36279
 2013-04-09 09:45:51 +00:00
Steven Barth
35d716fbbb netifd: Bump to latest version * Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow) 
SVN-Revision: 36196
 2013-04-05 12:28:06 +00:00
Steven Barth
0393e52623 netifd: Rewrite IPv6 prefix assignment * Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion 
SVN-Revision: 36193
 2013-04-03 17:08:21 +00:00
Felix Fietkau
71e9171717 openvpn: enable password save support (#13245) 
SVN-Revision: 36144
 2013-04-01 10:02:43 +00:00
Steven Barth
eedf9e72f9 odhcp6c: Fix a race-condition in RA-handling 
Thanks to Markus Stenberg for investigating and providing a fix

SVN-Revision: 36132
 2013-03-26 13:39:17 +00:00
Steven Barth
5a9c2c77b4 iptables: don't use --enable-ipv6 if IPv6 is disabled 
SVN-Revision: 36125
 2013-03-25 11:22:12 +00:00
Steven Barth
6529cf6cea odhcp6c: minor bug fixes 
SVN-Revision: 36123
 2013-03-25 10:58:48 +00:00
Jo-Philipp Wich
6fa1b5346e firewall3: update to git head 
* fixes parsing of src/dest '*'
	* fixes parsing of proto 'all'

SVN-Revision: 36111
 2013-03-22 14:10:29 +00:00
Jo-Philipp Wich
76d1c0a067 firewall3: update to git head 
* fixes port remapping rules (#13217)

SVN-Revision: 36100
 2013-03-21 14:25:17 +00:00
Hauke Mehrtens
c9544f4af0 kernel: add some fixes for kernel 3.9 
This patch fixes some compile problems with kernel 3.9 and adds some missing linux 3.9 handling into kernel packages.

SVN-Revision: 36098
 2013-03-20 21:59:24 +00:00
Steven Barth
261be7b8f3 netifd: Fix adding IPv6 DNS-servers to resolv.conf 
In some cases IPv6 DNS-servers were not added correctly.

SVN-Revision: 36095
 2013-03-20 13:49:39 +00:00
Steven Barth
eeb88a1df3 odhcp6c: Fix metric for on-link prefix routes 
SVN-Revision: 36094
 2013-03-20 09:26:52 +00:00
Jo-Philipp Wich
6fbd824e9b firewall3: update to git head 
* fixes reload handling of zones and ipsets that are still running but already deleted from the config

SVN-Revision: 36092
 2013-03-19 16:18:05 +00:00
Jo-Philipp Wich
03cb7986fc firewall3: update to git head 
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197)
	- do not allow src_mac option for SNAT rules

SVN-Revision: 36090
 2013-03-19 13:54:34 +00:00
Felix Fietkau
31876c193a hostapd: fix build errors on supplicant-only builds 
SVN-Revision: 36085
 2013-03-18 16:11:32 +00:00
Steven Barth
3ebdd3b330 odhcp6c: fix preference handling, custom client-ID * thanks to mbidewell for investigating 
SVN-Revision: 36083
 2013-03-18 07:24:49 +00:00
Felix Fietkau
2167101c90 hostapd: initial prototype of an ubus binding 
Supports listing, removing and banning clients, and hooking into
probe/assoc/auth requests via object subscribe.

SVN-Revision: 36081
 2013-03-17 20:47:18 +00:00
Felix Fietkau
84069f8534 uhttpd: update to latest version, fixes an occasional crash on CGI scripts 
SVN-Revision: 36034
 2013-03-15 13:43:55 +00:00
Jo-Philipp Wich
54f9f47a28 firewall3: update to git head 
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
 * Allow "network" and "device" commands while firewall is running (to make them usable in includes)

SVN-Revision: 36009
 2013-03-14 15:29:43 +00:00
John Crispin
fce3deddff use new button scheme 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36004
 2013-03-13 18:11:25 +00:00
Jo-Philipp Wich
9faa312dbb firewall3: update to git head 
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
 * Make NAT reflection direction configurable
 * Map init script stop action to flush
 * Map init script reload action to reload
 * Respect init script disabled state in hotplug handler

SVN-Revision: 35998
 2013-03-13 15:46:30 +00:00
Felix Fietkau
9ddc45bc3f hostapd: fix client reassociation after too many ACK failures 
SVN-Revision: 35973
 2013-03-12 00:19:25 +00:00
Jo-Philipp Wich
8c7ed1cb7b firewall3: update to git head 
* Fixes compilation against eglibc
 * Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
 * Fixes tracking logic for user chains by differentiating between reloads and restarts
 * Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
 * Supports legacy "tcpudp" protocol notation again

SVN-Revision: 35969
 2013-03-11 20:52:20 +00:00
Jo-Philipp Wich
e259ecad7e Revert "firewall3: update to git head" 
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.

SVN-Revision: 35904
 2013-03-08 19:52:18 +00:00
Jo-Philipp Wich
50213fc354 firewall3: update to git head 
- introduce per-zone user chains
	- support legacy "tcpudp" protocol notation

SVN-Revision: 35903
 2013-03-08 15:27:33 +00:00
Steven Barth
39a001dc69 odhcp6c: various bugfixes * Don't prematurely send RENEW / REBIND when T1 or T2 is > 1 day * Add "norelease" option to not send a RELEASE when stopping 
SVN-Revision: 35902
 2013-03-08 07:04:38 +00:00
Steven Barth
62ea398cd8 iptables: Add missing IPv6 builtin modules 
SVN-Revision: 35898
 2013-03-07 08:48:41 +00:00
Steven Barth
9779b0b88c iptables: redo update to 1.4.18 with old linking-behaviour 
SVN-Revision: 35896
 2013-03-06 17:05:34 +00:00
Steven Barth
bacd71648b Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx 
SVN-Revision: 35894
 2013-03-06 12:55:48 +00:00
Felix Fietkau
c3faa6be75 hostapd: include the madwifi headers in the package directory to avoid compile breakage if the madwifi build fails 
SVN-Revision: 35893
 2013-03-05 22:06:30 +00:00
Steven Barth
d023a08753 iptables: update to 1.4.18 
SVN-Revision: 35892
 2013-03-05 20:51:57 +00:00
Jo-Philipp Wich
d75c632de6 firewall3: add default config and firewall.user 
SVN-Revision: 35889
 2013-03-05 13:45:09 +00:00
Felix Fietkau
fa1749e668 hostapd: update to git version 2013-03-02 
SVN-Revision: 35887
 2013-03-04 17:16:38 +00:00
Jo-Philipp Wich
89be702bff firewall3: update to git head, introduces support for "enabled" option 
SVN-Revision: 35845
 2013-03-02 17:09:33 +00:00
Steven Barth
c81945e979 6relayd: Fix illegal memory accesses Spurious errors when receiving netlink-messages lead to unhandled errors which caused SIGBUS. Thanks to tdavis for debugging 
SVN-Revision: 35836
 2013-02-28 16:37:20 +00:00
Steven Barth
50b7fa217a 6relayd: various fixes cap preferred and valid lifetimes at more reasonable limits decrease memory usage (remove unnecessary book-keeping) 
SVN-Revision: 35835
 2013-02-28 14:57:19 +00:00
Jo-Philipp Wich
886ce188bf xtables-addons: fix packaging of iptaccount 
SVN-Revision: 35831
 2013-02-28 10:58:12 +00:00
Jo-Philipp Wich
557c047f71 firewall3: clear contnrack table on flush, set policies to drop during rule reload 
SVN-Revision: 35820
 2013-02-27 14:09:37 +00:00
Steven Barth
a90b6f7d90 6relayd: Fix config behaviour for rewrite_dns_addr option 
SVN-Revision: 35804
 2013-02-26 12:50:52 +00:00
Steven Barth
32ac53821f 6relayd: compatibility with broken IPv6 devices * Announce ULA as deprecated if other addresses are available * Allow the announced DNS-server to be overwritten 
SVN-Revision: 35803
 2013-02-26 12:42:53 +00:00
Jo-Philipp Wich
92062542e2 firewall: fix logging rule regression (#12999) 
SVN-Revision: 35745
 2013-02-22 13:45:20 +00:00
Jo-Philipp Wich
4fb2cd18c1 firewall3: add support for shell script and iptables-restore style includes 
SVN-Revision: 35744
 2013-02-22 12:45:38 +00:00
Steven Barth
a7b262dc0a netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions. 
SVN-Revision: 35743
 2013-02-22 08:56:29 +00:00
Jo-Philipp Wich
7d7d88b580 firewall3: update to git head 
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
	- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
	- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
	- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')

SVN-Revision: 35738
 2013-02-21 22:33:44 +00:00
Florian Fainelli
280fa5a1a2 dante: fix broken configure script not using CFLAGS for conftest 
Spotted by doing an ARM hard float build.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 35685
 2013-02-19 17:22:55 +00:00
Steven Barth
3081c672fc 6relayd: Fix possible memory corruption issue 
SVN-Revision: 35673
 2013-02-19 12:04:41 +00:00
Steven Barth
f5b63ffd33 6relayd: Workaround potential signal handling issue 
SVN-Revision: 35665
 2013-02-18 12:50:36 +00:00
Jo-Philipp Wich
02b0c62f33 firewall3 - a C implementation of the current firewall scripts 
SVN-Revision: 35643
 2013-02-17 19:26:52 +00:00
Felix Fietkau
1d6574b9c3 hostapd: fix the scan wait patch for multiple interfaces 
SVN-Revision: 35630
 2013-02-16 19:00:34 +00:00
Felix Fietkau
99782943d2 hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update 
SVN-Revision: 35619
 2013-02-16 14:26:03 +00:00
Jonas Gorski
c98b12d911 samba36: fix segmentation fault when trying to add non-existent users 
Based on a patch from НКВД. Closes #12962.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 35610
 2013-02-16 11:39:42 +00:00
Steven Barth
99b69fd9c5 odhcp6c: allow setting a user-provided prefix as well 
SVN-Revision: 35570
 2013-02-12 08:23:54 +00:00
Jo-Philipp Wich
eeaf2c0b5a iptables: fix bad PKG_RELEASE in previous commit 
SVN-Revision: 35569
 2013-02-11 22:14:38 +00:00
Jo-Philipp Wich
916902b1d2 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines 
SVN-Revision: 35568
 2013-02-11 21:58:42 +00:00
Felix Fietkau
1810b80ec0 mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default 
SVN-Revision: 35565
 2013-02-11 18:59:10 +00:00
Steven Barth
b8c796fbd7 odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging 
SVN-Revision: 35553
 2013-02-11 12:30:16 +00:00
Felix Fietkau
a9058439cf openvpn-easy-rsa: fix typo in version (#12958) 
SVN-Revision: 35508
 2013-02-06 22:17:11 +00:00
Felix Fietkau
dc2ba40af3 openvpn: remove the stale PKG_REV variable 
SVN-Revision: 35499
 2013-02-05 10:40:19 +00:00
Felix Fietkau
b8c903e6f8 openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball 
SVN-Revision: 35498
 2013-02-05 10:40:13 +00:00
Jo-Philipp Wich
e106f25ee7 firewall: various enhancements 
- reduce mssfix related log spam (#10681)
	- separate src and dest terminal chains (#11453, #12945)
	- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

SVN-Revision: 35484
 2013-02-04 14:38:33 +00:00
Steven Barth
13544edce7 odhcp6c: Fix timing issues 
SVN-Revision: 35472
 2013-02-03 17:26:40 +00:00
Jo-Philipp Wich
e893d4d9a8 libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend() 
SVN-Revision: 35471
 2013-02-03 12:03:24 +00:00
Steven Barth
6be5a5a73d odhcp6c: Fix RENEW and REBIND requests 
SVN-Revision: 35454
 2013-02-02 10:44:13 +00:00
Steven Barth
e2193a69c8 odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested 
SVN-Revision: 35421
 2013-02-01 13:38:47 +00:00
Steven Barth
6a43437908 netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes 
SVN-Revision: 35420
 2013-02-01 12:28:43 +00:00
Steven Barth
9a62439c28 odhcp6c: switch to userspace RA-handling and offload address assignment to netifd 
SVN-Revision: 35419
 2013-02-01 12:28:39 +00:00
Steven Barth
a3368da479 6relayd: Fix announced router flags and IPv6 procfs-configuration 
SVN-Revision: 35418
 2013-02-01 12:28:34 +00:00
Felix Fietkau
416ce374c0 openvpn: add from openvpn-devel from /packages, fix support for current polarssl 
SVN-Revision: 35412
 2013-01-30 20:07:15 +00:00
Steven Barth
4bd3f54143 6in4: fix typo in last commit 
SVN-Revision: 35409
 2013-01-30 09:07:23 +00:00
Steven Barth
a0a91963af 6in4: work around hanging wget process 
SVN-Revision: 35408
 2013-01-30 09:05:53 +00:00
Felix Fietkau
65657fb585 netifd: update to latest version 
fixes DNS servers on reload (#12910)
fixes ubus object race on reload or down/up (#12612)

SVN-Revision: 35383
 2013-01-29 14:40:04 +00:00
Felix Fietkau
c16879a385 samba36: update to 3.6.11 and refresh patches (based on patch from #12914) 
SVN-Revision: 35382
 2013-01-29 13:18:56 +00:00
Steven Barth
777f7b30ae netifd: implement IPv6 prefix deprecation according to RFC 6204 
SVN-Revision: 35377
 2013-01-29 11:05:22 +00:00
Steven Barth
78a6439784 6relayd: remove IPv6 forwarding-sysctl workaround 
SVN-Revision: 35371
 2013-01-29 10:13:49 +00:00
Steven Barth
1a0b207d61 odhcp6c: remove IPv6 forwarding-sysctl workaround 
SVN-Revision: 35370
 2013-01-29 10:13:44 +00:00
Steven Barth
fac1ed35ac netifd: remove IPv6 forwarding-sysctl workaround 
SVN-Revision: 35369
 2013-01-29 10:13:39 +00:00
Felix Fietkau
6ea9abadeb netifd: update to latest version, fixes setting addresses/routes on alias interfaces 
SVN-Revision: 35362
 2013-01-28 20:35:55 +00:00
Jo-Philipp Wich
e804a663e3 hostapd: don't configure wpa_supplicant with empty password="" if no password is specified (#12912) 
SVN-Revision: 35358
 2013-01-28 18:05:33 +00:00
Jo-Philipp Wich
839f3ab0e7 firewall: flush conntrack table after changing interface rules 
SVN-Revision: 35348
 2013-01-28 15:53:44 +00:00
Steven Barth
ec41a6a08c netifd: IPv6 sysctl, restart IPv6 in static mode to send RS 
SVN-Revision: 35347
 2013-01-28 14:07:27 +00:00
Steven Barth
75b06607db netifd: add SLAAC ipv6 value for static-proto 
SVN-Revision: 35346
 2013-01-28 13:53:48 +00:00
Steven Barth
e964fa5d8f odhcp6c: work-around for proto-script to avoid loosing the default route 
SVN-Revision: 35345
 2013-01-28 13:53:43 +00:00
Steven Barth
a81c76617e ipv6-support: don't overwrite existing setting across reflashs 
SVN-Revision: 35302
 2013-01-23 08:15:09 +00:00
Felix Fietkau
55eab5ac44 netifd: update to latest version, adds another fix for interface aliases 
SVN-Revision: 35297
 2013-01-22 16:05:59 +00:00
Steven Barth
5859fc7a39 netifd: Fix a segfault when globals.ula_prefix is empty 
SVN-Revision: 35296
 2013-01-22 15:49:42 +00:00
Felix Fietkau
a4c7a953e5 uhttpd: always turn on TLS support, include ustream-ssl as a build dependency 
SVN-Revision: 35295
 2013-01-22 15:05:04 +00:00
Felix Fietkau
bab482b93f uhttpd: fix another small hang issue with the same symptoms 
SVN-Revision: 35291
 2013-01-22 09:38:00 +00:00
Felix Fietkau
166ea3832b uhttpd: fix connection hangs 
SVN-Revision: 35290
 2013-01-22 09:28:55 +00:00
Felix Fietkau
bc1d72c7bf tcpdump: add SLL parsing support to tcpdump-mini, use -ffunction-sections, -fdata-sections and --gc-sections to reduce size 
SVN-Revision: 35288
 2013-01-22 07:51:15 +00:00
Felix Fietkau
c725669079 uhttpd: fix unencrypted passwords in httpd.conf 
SVN-Revision: 35265
 2013-01-21 12:46:41 +00:00
Steven Barth
38080ae550 6relayd: fix shell library includes in init-script 
Thanks to Daniel Golle

SVN-Revision: 35262
 2013-01-21 11:27:03 +00:00
Steven Barth
8a97d823a4 6relayd: avoid a race-condition with looping RAs 
SVN-Revision: 35260
 2013-01-21 10:42:31 +00:00
Steven Barth
f129c6786e netifd: Fix segfaults in IPv6 prefix handling 
SVN-Revision: 35259
 2013-01-21 09:21:30 +00:00
Steven Barth
f1fd0f8278 odhcp6c: Fix address assignment with infinite validity 
SVN-Revision: 35258
 2013-01-21 07:58:58 +00:00
Felix Fietkau
4a86973285 uhttpd: fix selecting the right ustream implementation when openssl is to be used (#12857) 
SVN-Revision: 35257
 2013-01-20 21:15:43 +00:00
Felix Fietkau
5bc6555e08 netifd: update to latest version, fixes alias support 
SVN-Revision: 35251
 2013-01-20 15:47:09 +00:00
Felix Fietkau
18a7d0e945 network/iproute2: Bump version to 3.7.0 
Updated to latest stable version and added an upstream patch to handle
a link failure

Signed-off-by: Oliver Smith <olipro@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>
[dgolle@allnet.de: refreshed patches]
Signed-off-by: Daniel Golle <dgolle@allnet.de>

SVN-Revision: 35250
 2013-01-20 11:25:18 +00:00
Felix Fietkau
e55ee0817f uhttpd: update to a newer version, fixes chunked transfer on some POST requests 
SVN-Revision: 35249
 2013-01-19 22:55:46 +00:00
Felix Fietkau
6f0ecf0541 uhttpd: switch to uhttpd2, it is now feature complete 
SVN-Revision: 35247
 2013-01-19 18:47:09 +00:00
Jo-Philipp Wich
f2766239ea netifd: add a band-aid fix for the wifi setup vs. netifd init race by increasing the wait time to five seconds 
SVN-Revision: 35240
 2013-01-19 10:13:14 +00:00
Steven Barth
62e9957cc4 ipv6-support: adapt UCI defaults to new ordering 
SVN-Revision: 35219
 2013-01-18 12:52:51 +00:00
Steven Barth
5a122f7e5f odhcp6c: Fix parsing more than one DNS server 
SVN-Revision: 35215
 2013-01-18 08:21:35 +00:00
Steven Barth
f517d0481a ipv6-support: Rename enable-ipv6 UCI defaults 
SVN-Revision: 35205
 2013-01-17 16:16:06 +00:00
Jo-Philipp Wich
7250e27869 xtables-addons: rework uid/gid compat patch to use KUIDT_INIT() and KGIDT_INIT() macros 
SVN-Revision: 35203
 2013-01-17 16:05:30 +00:00
Jo-Philipp Wich
3b798d819d xtables-addons: move to package/, add myself as maintainer 
SVN-Revision: 35193
 2013-01-17 12:29:26 +00:00
Steven Barth
66fa83d211 odhcp6c: Detect a different MAC if interface has none * Fixes DHCPv6 behaviour over PPP and similar 
SVN-Revision: 35189
 2013-01-17 08:29:01 +00:00
Steven Barth
73875c1215 ppp: don't automatically set IPv6 default route * Fixes "ndisc_router_discovery() failed to add default route" 
SVN-Revision: 35188
 2013-01-17 08:28:57 +00:00