Commit Graph

109 Commits

Author SHA1 Message Date
John Crispin
21bbdc24c3 adds a new uci firewall - iptbales and netfilter packages need to be rewrapped when we switch to this firewall as default - there are some examples in the file /etc/config/firewall - iptables-save/restore are still missing - hotplug takes care of adding/removing netdevs during runtime - misisng features ? wishes ? let me know ...
SVN-Revision: 12089
2008-08-04 11:51:58 +00:00
Gabor Juhos
f9518d9a74 netfilter/iptables: enable IMQ on 2.6.25
SVN-Revision: 11335
2008-06-02 19:46:47 +00:00
Florian Fainelli
82247228ea We do not need to make the experimental/install-experimental targets starting with 1.4.x version
SVN-Revision: 11325
2008-06-02 11:54:05 +00:00
Gabor Juhos
1b90498e69 IMQ is not yet available on 2.6.25
SVN-Revision: 11007
2008-05-02 11:29:53 +00:00
Gabor Juhos
d80f43d15f update iptables to 1.4.0 (2.6 kernels only), refresh kernel patches
SVN-Revision: 10843
2008-04-15 06:11:23 +00:00
Florian Fainelli
52315c5150 Fix layer7 user-space iptables compilation (#3307)
SVN-Revision: 10745
2008-04-06 18:01:53 +00:00
Gabor Juhos
4e45a1d1ac iptables: remove obsolete patch
SVN-Revision: 10464
2008-02-15 09:31:07 +00:00
Felix Fietkau
c89de79512 move /etc/config/firewall to /etc/firewall.config to prevent it from interfering with uci - yes, this beast really needs a rewrite :)
SVN-Revision: 10383
2008-02-04 22:03:18 +00:00
Felix Fietkau
0cf1a58282 Here comes the new UCI. Enjoy :)
SVN-Revision: 10367
2008-02-03 06:48:15 +00:00
Felix Fietkau
2a45adfcda remove uninstalldev templates (no longer necessary)
SVN-Revision: 9906
2007-12-25 01:40:47 +00:00
Felix Fietkau
93575b53a7 Use $(CP) instead of $(INSTALL_BIN) for binaries.
Signed-off-by: Andy Boyett <agb-openwrt@padded-cell.net>

SVN-Revision: 9694
2007-12-09 18:53:06 +00:00
Tim Yardley
85b17a4e9e update stripped subset of l7 patterns to 11-03-2007 patterns
SVN-Revision: 9582
2007-11-19 23:07:00 +00:00
Florian Fainelli
9d7192e5fa Add a boolean to allow NAT from LAN or not, default to nat LAN (#2535)
SVN-Revision: 9503
2007-11-05 14:19:16 +00:00
Gabor Juhos
79712043cc iptables: update description of the iptables-mod-ipopt
SVN-Revision: 9468
2007-10-31 20:21:58 +00:00
Florian Fainelli
ada8e5dd95 Only masquerade LAN, other settings need manual tweaking
SVN-Revision: 9461
2007-10-29 11:00:33 +00:00
Florian Fainelli
304d5c8845 Only masquerade non routable addresses (#2535)
SVN-Revision: 9460
2007-10-29 10:31:16 +00:00
Florian Fainelli
109d5fbca4 Update description, iptables-mod-ipsec includes libipt_policy.so
SVN-Revision: 9336
2007-10-16 14:04:59 +00:00
Gabor Juhos
8309e3dff2 add TARPIT support to netfilter/iptables * netfilter: add the xt_TARPIT target module required by xt_CHAOS * include/netfilter.mk: reorder, xt_CHAOS depends on xt_TARPIT and xt_DELUDE * iptables: add libipt_TARPIT to the kmod-ipt-extra package, bump release number * original patchset can be found [http://tinyurl.com/2mjk2kx here]
SVN-Revision: 9178
2007-10-07 17:17:04 +00:00
Felix Fietkau
969ac7459e add $(STAGING_DIR) as argument to the InstallDev template and update packages accordingly - this way we can reuse InstallDev to automatically generate UninstallDev or create -dev packages
SVN-Revision: 9052
2007-09-28 01:45:11 +00:00
Nicolas Thill
3a713ff202 move exec permissions fix at Build/Prepare stage
SVN-Revision: 8802
2007-09-16 16:25:53 +00:00
Nicolas Thill
34bb4638e7 move package description to a separate definition, remove it when DESCRIPTION=TITLE
SVN-Revision: 8659
2007-09-07 08:34:51 +00:00
Florian Fainelli
22282193a9 Package ip6tables-utils as well (#2318)
SVN-Revision: 8636
2007-09-05 21:40:11 +00:00
Tim Yardley
782d02ed1b iptables: refresh patches to 1.3.8
SVN-Revision: 8286
2007-07-31 20:28:55 +00:00
Florian Fainelli
2e4f6093c6 Fix the ip6tables dependency (#2079)
SVN-Revision: 7978
2007-07-15 18:53:33 +00:00
Tim Yardley
5f6dfc231a move to iptables 1.3.8
SVN-Revision: 7946
2007-07-12 16:05:28 +00:00
Felix Fietkau
2cc2d7707b make the firewall script run after the network script again (required for working with dynamically assigned interfaces), include the network state
SVN-Revision: 7806
2007-06-30 19:30:38 +00:00
Florian Fainelli
01b4fd853a Initialise firewall before network (#1988)
SVN-Revision: 7757
2007-06-28 12:56:55 +00:00
Tim Yardley
35d1063a75 package ipset for use
SVN-Revision: 7517
2007-06-07 15:30:59 +00:00
Felix Fietkau
04324c48cf upgrade a few packages to newer versions (includes patch by kaloz) - preparation for 2.6.22
SVN-Revision: 7507
2007-06-05 22:46:02 +00:00
Felix Fietkau
9114220553 refresh all package patches in the buildroot using quilt
SVN-Revision: 7490
2007-06-04 11:25:53 +00:00
Florian Fainelli
908b616d8e Add iprange (#1799)
SVN-Revision: 7462
2007-06-02 22:57:33 +00:00
Imre Kaloz
615e8af841 break trunk temporary - upgrade to 2.6.21.1 and iptables 1.3.7
SVN-Revision: 7315
2007-05-23 19:48:34 +00:00
Florian Fainelli
cd65230eea Add raw and NOTRACK targets (#1583)
SVN-Revision: 6945
2007-04-13 11:28:45 +00:00
Felix Fietkau
235692a7d6 fix iptables extension issue with mac os x builds
SVN-Revision: 6786
2007-04-01 12:28:56 +00:00
Felix Fietkau
c05a061e4e fix a problem with the firewall script (multicast traffic could produce packet loss)
SVN-Revision: 6726
2007-03-27 16:45:10 +00:00
Felix Fietkau
8e85262a8b improve autorebuild for iptables when the kernel config changes
SVN-Revision: 6652
2007-03-23 19:19:23 +00:00
Felix Fietkau
24faf55360 add file type autodetection for the unpack command and nuke PKG_CAT:= in lots of places
SVN-Revision: 6582
2007-03-16 20:21:39 +00:00
Felix Fietkau
1d307eea87 add a default for PKG_BUILD_DIR and PKG_INSTALL_DIR (will use KERNEL_BUILD_DIR if kernel.mk is included, BUILD_DIR otherwise)
SVN-Revision: 6580
2007-03-16 19:18:55 +00:00
Tim Yardley
ccfa4a7af6 trunk.. same deal as changeset:6526
SVN-Revision: 6527
2007-03-05 01:38:44 +00:00
Felix Fietkau
30ef579f48 make the iptables package robust to kernel config changes
SVN-Revision: 6447
2007-03-01 11:59:42 +00:00
Florian Fainelli
780712e30e Add ipt_CLASSIFY target for 2.4 kernels (#1338)
SVN-Revision: 6424
2007-02-28 12:04:58 +00:00
Felix Fietkau
8e88bb54ba port [6229] to kamikaze
SVN-Revision: 6275
2007-02-08 01:25:18 +00:00
Nicolas Thill
574c87a244 fix chaostables patch (closes: #1246)
SVN-Revision: 6184
2007-01-23 16:08:24 +00:00
Florian Fainelli
acf6ec373e Add chaostable from #1187, also enable netfilter modules for ixp4xx.
SVN-Revision: 6182
2007-01-22 23:55:22 +00:00
Nicolas Thill
bed47be36c more use of the INSTALL_DIR variable
SVN-Revision: 6023
2007-01-08 00:53:24 +00:00
Felix Fietkau
34272dbc04 fix iptables warning about 'wierd' interface names (#1082)
SVN-Revision: 5962
2007-01-01 23:31:36 +00:00
Florian Fainelli
343b935afa Forgot kmod-ipt-imq dependency (#1076)
SVN-Revision: 5901
2006-12-25 17:43:06 +00:00
Felix Fietkau
4323774d59 prepare for moving part of the firewall to hotplug. created new chains {input,forwarding,prerouting}_wan for wan port forwardings and updated the examples. syntax of /etc/config/firewall unchanged and old firewall.user files are still compatible
SVN-Revision: 5878
2006-12-20 05:58:41 +00:00
Felix Fietkau
63d865e7a1 prepare packages for kernel upgrade to 2.6.19
SVN-Revision: 5786
2006-12-14 08:00:20 +00:00
Tim Yardley
c962551b3a install-devel puts this here, kill it too
SVN-Revision: 5652
2006-11-26 23:15:20 +00:00
Tim Yardley
7de8690fc7 cleanup some of the custom work for devel libs
SVN-Revision: 5651
2006-11-26 23:13:49 +00:00
Felix Fietkau
680009ecd0 install iptables devel headers into the staging dir
SVN-Revision: 5650
2006-11-26 22:34:15 +00:00
Felix Fietkau
c2211dc51e replace lots of manual install commands with INSTALL_* variables
SVN-Revision: 5624
2006-11-23 00:29:07 +00:00
Felix Fietkau
105a602ecf implement target profiles in menuconfig
SVN-Revision: 5512
2006-11-12 05:06:56 +00:00
Felix Fietkau
223fdb0443 replace br0 with $LAN
SVN-Revision: 5492
2006-11-09 23:13:15 +00:00
Florian Fainelli
a72fd20a82 export WAN variable so that firewall works (#907)
SVN-Revision: 5412
2006-11-03 10:10:08 +00:00
Felix Fietkau
afd6539a65 add firewall protection for wan_device in addition to wan_ifname (fixes #852)
SVN-Revision: 5136
2006-10-15 23:04:23 +00:00
Felix Fietkau
8612d33691 init script cleanup, use /etc/rc.d/ for enabled scripts, /etc/init.d/<pkgname> (enable|disable) manages symlinks
SVN-Revision: 5128
2006-10-15 21:03:30 +00:00
Felix Fietkau
60c1f0f64d finally move buildroot-ng to trunk 2016-03-20 17:29:15 +01:00