Commit Graph

510 Commits (3c50feca19208cccc7fd4a4c20deaa931267662d)

Author SHA1 Message Date
Jo-Philipp Wich b757ca2259 firewall3: update to git head
- fix build on Linux < 3.7
  - limit zone names to 14 bytes

SVN-Revision: 36691
11 years ago
Steven Barth 9c3ac668e0 6relayd: Let OpenWrt override default CFLAGS
SVN-Revision: 36690
11 years ago
Jo-Philipp Wich c12189b379 firewall3: update to git head
- fixes reload when firewall is not running already
  - fixes crash when ipsets are supported but undeclared
  - fixes handling of per zone user chains on reload

SVN-Revision: 36689
11 years ago
Steven Barth 9d115df749 6relayd: Fix a segfault when multiple downstream interfaces are present
SVN-Revision: 36687
11 years ago
Jo-Philipp Wich dd83e87ab0 firewall3: update to git head
- fixes segfault in flush command if ipset support is not available
  - fixes internal rule generation if custom chains are enabled

SVN-Revision: 36686
11 years ago
Jo-Philipp Wich 6eec8009ba ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base
SVN-Revision: 36685
11 years ago
Jo-Philipp Wich 9b6c31d4cc firewall3: move libext*.a copying to compile phase
SVN-Revision: 36684
11 years ago
Jo-Philipp Wich 8df6cd005c netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
SVN-Revision: 36683
11 years ago
Jo-Philipp Wich e8050c6c35 firewall3: update to git head
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
 * make ipset integration more reliable

SVN-Revision: 36681
11 years ago
Jo-Philipp Wich a9a9644efd iptables: use -ffunction-sections, -fdata-sections and --gc-sections
SVN-Revision: 36680
11 years ago
Steven Barth 24c39ddcf7 odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests
SVN-Revision: 36678
11 years ago
Steven Barth 37baf2d6b2 6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better
SVN-Revision: 36677
11 years ago
Steven Barth c6f70381c9 odhcp6c: Fix address / prefix expiry logic
SVN-Revision: 36675
11 years ago
Steven Barth dd161ae62b dnsmasq: add directory for external hosts-files
SVN-Revision: 36655
11 years ago
Steven Barth 334c40da14 6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD
SVN-Revision: 36654
11 years ago
Steven Barth 0f1be4425f netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4
Based on a patch by Kristian Evensen. Thank You.

SVN-Revision: 36653
11 years ago
Felix Fietkau 7365e647f6 uhttpd: update to latest version, fixes index page processing order
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36644
11 years ago
Luka Perkov 4fc8e64a40 iproute2: workaround compile issues with gcc 4.8.x
SVN-Revision: 36642
11 years ago
Steven Barth a62ca72309 odhcp6c: Fix handling of RAs when no DHCPv6-server is present
SVN-Revision: 36641
11 years ago
Luka Perkov 580481cd6d iproute2: upgrade to 3.9.0
SVN-Revision: 36638
11 years ago
Luka Perkov 5be36cbe83 iproute2: print help in connmark
SVN-Revision: 36637
11 years ago
Felix Fietkau d090eea125 uhttpd: update to latest version, fixes a SSL connection memory leak
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36636
11 years ago
Felix Fietkau d481486aad package: fold the IPv6 menu into Network
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36634
11 years ago
Steven Barth e8f3897389 6relayd: Always announce the current MAC-address
* Fixes #13516 thanks to berni for the detailed bugreport.

SVN-Revision: 36629
11 years ago
Steven Barth a1af842016 ds-lite: add ds-lite network protocol handler
SVN-Revision: 36628
11 years ago
Steven Barth 5ce135ed87 netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements
SVN-Revision: 36627
11 years ago
Steven Barth ea71678b09 netifd: added support for setting up 6rd from DHCP
SVN-Revision: 36626
11 years ago
Steven Barth ad93a571c6 odhcp6c: added support for DS-Lite + various fixes
SVN-Revision: 36625
11 years ago
Steven Barth 973dad61b0 firewall3: Remove obsoleted ULA-border
SVN-Revision: 36624
11 years ago
Steven Barth 07d99b62b7 firewall3: add wan6 interface to wan-zone by default
SVN-Revision: 36623
11 years ago
Steven Barth 4cb9d9715c firewall: Remove obsoleted ULA-border rule
SVN-Revision: 36622
11 years ago
Steven Barth 8560648082 6rd: increase metric of default route
This will prefer native IPv6 over 6rd if both are present.

SVN-Revision: 36605
11 years ago
Jo-Philipp Wich d59f8cfa8e iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode
SVN-Revision: 36604
11 years ago
Steven Barth 29d4c36622 add uci support for "proxy-dnssec" in dnsmasq
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.

Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>

SVN-Revision: 36570
11 years ago
Felix Fietkau 9d8e3e03df iw: update to 3.10, sync with nl80211.h changes in compat-wireless
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36569
11 years ago
Steven Barth 9c1ed6447b odhcp6c: Make SLAAC-only work without reqprefix=no
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.

SVN-Revision: 36555
11 years ago
Jo-Philipp Wich 95e139d0b2 ipset-dns: support simultaneously populating IPv4 and IPv6 sets
SVN-Revision: 36554
11 years ago
Jo-Philipp Wich 3c17fd41a4 Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset
SVN-Revision: 36552
11 years ago
Felix Fietkau b85c442e81 hostapd: enable 802.11r for the -full variant (#13250)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36533
11 years ago
Jo-Philipp Wich 4bba31b64c firewall3: update to git head
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422, #13386)
	- add support for fwmark matches and mark setting targets

SVN-Revision: 36521
11 years ago
Jo-Philipp Wich a0b655b8f2 Fix install of iptables pkg-config files.
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146; which should make collectd
appear in snapshots again.

Signed-off-by: Danny Baumann <dannybaumann@web.de>

SVN-Revision: 36509
11 years ago
Jo-Philipp Wich f1e214411d iwinfo: fix iwinfo_hardware() return value if chip id is not found
SVN-Revision: 36471
11 years ago
Jo-Philipp Wich f1497ccf4f netifd: update to git head - disables multicast snooping by default on bridges
SVN-Revision: 36463
11 years ago
Jo-Philipp Wich 05c1424e87 iwinfo: add hw database file
SVN-Revision: 36450
11 years ago
Jo-Philipp Wich e02d373f90 iwinfo: move builtin hardware database to /usr/share/libiwinfo/hardware.txt
SVN-Revision: 36449
11 years ago
Felix Fietkau 5062838fa5 netifd: update to the latest version, fixes interface reload issues when removing the ifname option
SVN-Revision: 36424
11 years ago
Steven Barth 49f97af481 6relayd: Fix generation of RA-messages
SVN-Revision: 36419
11 years ago
Jo-Philipp Wich a040ead1c5 iwinfo: add SR71-15 radio info, fix nl80211 channel/frequency reporting on some architectures
SVN-Revision: 36417
11 years ago
Steven Barth 2c78c1457b firewall3: Make IPv6 ULA-Border generation dynamic
This fixes working behind another router which gives out ULAs.

SVN-Revision: 36416
11 years ago
Steven Barth 2dbcd2ba7b 6relayd: update package description
SVN-Revision: 36413
11 years ago
Steven Barth e17ac4c257 dnsmasq: update to 2.66 Thanks to Christoph König for patches.
SVN-Revision: 36412
11 years ago
Steven Barth 21e4e2a766 odhcp6c: Set default SOL_MAX_RT to 1h
SVN-Revision: 36411
11 years ago
Felix Fietkau d7908e02b5 hostapd: return the frequency to some ubus calls to make integration easier
SVN-Revision: 36410
11 years ago
Jo-Philipp Wich 61a6f45cdc lldpd: upgrade to 0.7.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

SVN-Revision: 36401
11 years ago
Steven Barth 17b8c0c7b8 netifd: Improve IPv6-ULA assignment handling
SVN-Revision: 36383
11 years ago
Steven Barth c96c05d549 odhcp6c: Several fixes and improvements * Add preliminary support for RFC 6603 prefix exclusion * Fix reconfigure-support and reconfigure authentication * Set maximum retransmission timeout for solicitations to 2h * Fix a segfault when parsing IA_PD in advertise messages
SVN-Revision: 36382
11 years ago
Steven Barth 1e78c3e297 6relayd: Add DHCPv6-PD server support, fix relaying in stateful mode
SVN-Revision: 36381
11 years ago
Felix Fietkau 62244d73ae hostapd: update to 2013-04-05
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36376
11 years ago
Felix Fietkau 96bb7c123b build: consistently use 'depends on' instead of 'depends'
make the syntax more compatible with kernel menuconfig

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36351
11 years ago
Jo-Philipp Wich e66a4af8c3 uhttpd: update to git head, fixes regression when parsing IPv6 listen arguments
SVN-Revision: 36348
11 years ago
Jo-Philipp Wich 25ffe0446c iwinfo: print info of all existing wireless ifaces when cli is called without arguments
SVN-Revision: 36339
11 years ago
Felix Fietkau eb10581ce3 uhttpd: update to latest version, fixes compile error with latest libubox
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36338
11 years ago
Felix Fietkau 099e3d8183 netifd: update to latest version, fixes some device handling crashes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36336
11 years ago
Felix Fietkau 88c418bc75 qos-scripts: add queue length and quantum limit, suggested by dtaht
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36294
11 years ago
Jo-Philipp Wich 7ca7bc501e iwinfo: fix frequency/channel and channel/frequency conversions to properly implement 802.11j
SVN-Revision: 36292
11 years ago
John Crispin 04dcd12c91 add portmap support to userland
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36284
11 years ago
John Crispin f13ae9965c add "swconfig list" support
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36282
11 years ago
Jo-Philipp Wich f90f025f20 netifd: fix route / route6 regression (#13303)
SVN-Revision: 36281
11 years ago
Steven Barth 3abc915522 Remove deprecated ip6slaac option * use proto=dhcpv6 with reqprefix=no instead
SVN-Revision: 36280
11 years ago
Steven Barth 2c087dc785 Remove obsoleted ipv6-support meta-package
SVN-Revision: 36279
11 years ago
Steven Barth 35d716fbbb netifd: Bump to latest version * Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow)
SVN-Revision: 36196
11 years ago
Steven Barth 0393e52623 netifd: Rewrite IPv6 prefix assignment * Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion
SVN-Revision: 36193
11 years ago
Felix Fietkau 71e9171717 openvpn: enable password save support (#13245)
SVN-Revision: 36144
11 years ago
Steven Barth eedf9e72f9 odhcp6c: Fix a race-condition in RA-handling
Thanks to Markus Stenberg for investigating and providing a fix

SVN-Revision: 36132
11 years ago
Steven Barth 5a9c2c77b4 iptables: don't use --enable-ipv6 if IPv6 is disabled
SVN-Revision: 36125
11 years ago
Steven Barth 6529cf6cea odhcp6c: minor bug fixes
SVN-Revision: 36123
11 years ago
Jo-Philipp Wich 6fa1b5346e firewall3: update to git head
* fixes parsing of src/dest '*'
	* fixes parsing of proto 'all'

SVN-Revision: 36111
11 years ago
Jo-Philipp Wich 76d1c0a067 firewall3: update to git head
* fixes port remapping rules (#13217)

SVN-Revision: 36100
11 years ago
Hauke Mehrtens c9544f4af0 kernel: add some fixes for kernel 3.9
This patch fixes some compile problems with kernel 3.9 and adds some missing linux 3.9 handling into kernel packages.

SVN-Revision: 36098
11 years ago
Steven Barth 261be7b8f3 netifd: Fix adding IPv6 DNS-servers to resolv.conf
In some cases IPv6 DNS-servers were not added correctly.

SVN-Revision: 36095
11 years ago
Steven Barth eeb88a1df3 odhcp6c: Fix metric for on-link prefix routes
SVN-Revision: 36094
11 years ago
Jo-Philipp Wich 6fbd824e9b firewall3: update to git head
* fixes reload handling of zones and ipsets that are still running but already deleted from the config

SVN-Revision: 36092
11 years ago
Jo-Philipp Wich 03cb7986fc firewall3: update to git head
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197)
	- do not allow src_mac option for SNAT rules

SVN-Revision: 36090
11 years ago
Felix Fietkau 31876c193a hostapd: fix build errors on supplicant-only builds
SVN-Revision: 36085
11 years ago
Steven Barth 3ebdd3b330 odhcp6c: fix preference handling, custom client-ID * thanks to mbidewell for investigating
SVN-Revision: 36083
11 years ago
Felix Fietkau 2167101c90 hostapd: initial prototype of an ubus binding
Supports listing, removing and banning clients, and hooking into
probe/assoc/auth requests via object subscribe.

SVN-Revision: 36081
11 years ago
Felix Fietkau 84069f8534 uhttpd: update to latest version, fixes an occasional crash on CGI scripts
SVN-Revision: 36034
11 years ago
Jo-Philipp Wich 54f9f47a28 firewall3: update to git head
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
 * Allow "network" and "device" commands while firewall is running (to make them usable in includes)

SVN-Revision: 36009
11 years ago
John Crispin fce3deddff use new button scheme
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36004
11 years ago
Jo-Philipp Wich 9faa312dbb firewall3: update to git head
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
 * Make NAT reflection direction configurable
 * Map init script stop action to flush
 * Map init script reload action to reload
 * Respect init script disabled state in hotplug handler

SVN-Revision: 35998
11 years ago
Felix Fietkau 9ddc45bc3f hostapd: fix client reassociation after too many ACK failures
SVN-Revision: 35973
12 years ago
Jo-Philipp Wich 8c7ed1cb7b firewall3: update to git head
* Fixes compilation against eglibc
 * Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
 * Fixes tracking logic for user chains by differentiating between reloads and restarts
 * Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
 * Supports legacy "tcpudp" protocol notation again

SVN-Revision: 35969
12 years ago
Jo-Philipp Wich e259ecad7e Revert "firewall3: update to git head"
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.

SVN-Revision: 35904
12 years ago
Jo-Philipp Wich 50213fc354 firewall3: update to git head
- introduce per-zone user chains
	- support legacy "tcpudp" protocol notation

SVN-Revision: 35903
12 years ago
Steven Barth 39a001dc69 odhcp6c: various bugfixes * Don't prematurely send RENEW / REBIND when T1 or T2 is > 1 day * Add "norelease" option to not send a RELEASE when stopping
SVN-Revision: 35902
12 years ago
Steven Barth 62ea398cd8 iptables: Add missing IPv6 builtin modules
SVN-Revision: 35898
12 years ago
Steven Barth 9779b0b88c iptables: redo update to 1.4.18 with old linking-behaviour
SVN-Revision: 35896
12 years ago
Steven Barth bacd71648b Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx
SVN-Revision: 35894
12 years ago
Felix Fietkau c3faa6be75 hostapd: include the madwifi headers in the package directory to avoid compile breakage if the madwifi build fails
SVN-Revision: 35893
12 years ago
Steven Barth d023a08753 iptables: update to 1.4.18
SVN-Revision: 35892
12 years ago
Jo-Philipp Wich d75c632de6 firewall3: add default config and firewall.user
SVN-Revision: 35889
12 years ago
Felix Fietkau fa1749e668 hostapd: update to git version 2013-03-02
SVN-Revision: 35887
12 years ago
Jo-Philipp Wich 89be702bff firewall3: update to git head, introduces support for "enabled" option
SVN-Revision: 35845
12 years ago
Steven Barth c81945e979 6relayd: Fix illegal memory accesses Spurious errors when receiving netlink-messages lead to unhandled errors which caused SIGBUS. Thanks to tdavis for debugging
SVN-Revision: 35836
12 years ago
Steven Barth 50b7fa217a 6relayd: various fixes cap preferred and valid lifetimes at more reasonable limits decrease memory usage (remove unnecessary book-keeping)
SVN-Revision: 35835
12 years ago
Jo-Philipp Wich 886ce188bf xtables-addons: fix packaging of iptaccount
SVN-Revision: 35831
12 years ago
Jo-Philipp Wich 557c047f71 firewall3: clear contnrack table on flush, set policies to drop during rule reload
SVN-Revision: 35820
12 years ago
Steven Barth a90b6f7d90 6relayd: Fix config behaviour for rewrite_dns_addr option
SVN-Revision: 35804
12 years ago
Steven Barth 32ac53821f 6relayd: compatibility with broken IPv6 devices * Announce ULA as deprecated if other addresses are available * Allow the announced DNS-server to be overwritten
SVN-Revision: 35803
12 years ago
Jo-Philipp Wich 92062542e2 firewall: fix logging rule regression (#12999)
SVN-Revision: 35745
12 years ago
Jo-Philipp Wich 4fb2cd18c1 firewall3: add support for shell script and iptables-restore style includes
SVN-Revision: 35744
12 years ago
Steven Barth a7b262dc0a netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions.
SVN-Revision: 35743
12 years ago
Jo-Philipp Wich 7d7d88b580 firewall3: update to git head
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
	- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
	- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
	- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')

SVN-Revision: 35738
12 years ago
Florian Fainelli 280fa5a1a2 dante: fix broken configure script not using CFLAGS for conftest
Spotted by doing an ARM hard float build.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 35685
12 years ago
Steven Barth 3081c672fc 6relayd: Fix possible memory corruption issue
SVN-Revision: 35673
12 years ago
Steven Barth f5b63ffd33 6relayd: Workaround potential signal handling issue
SVN-Revision: 35665
12 years ago
Jo-Philipp Wich 02b0c62f33 firewall3 - a C implementation of the current firewall scripts
SVN-Revision: 35643
12 years ago
Felix Fietkau 1d6574b9c3 hostapd: fix the scan wait patch for multiple interfaces
SVN-Revision: 35630
12 years ago
Felix Fietkau 99782943d2 hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update
SVN-Revision: 35619
12 years ago
Jonas Gorski c98b12d911 samba36: fix segmentation fault when trying to add non-existent users
Based on a patch from НКВД. Closes #12962.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 35610
12 years ago
Steven Barth 99b69fd9c5 odhcp6c: allow setting a user-provided prefix as well
SVN-Revision: 35570
12 years ago
Jo-Philipp Wich eeaf2c0b5a iptables: fix bad PKG_RELEASE in previous commit
SVN-Revision: 35569
12 years ago
Jo-Philipp Wich 916902b1d2 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
SVN-Revision: 35568
12 years ago
Felix Fietkau 1810b80ec0 mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default
SVN-Revision: 35565
12 years ago
Steven Barth b8c796fbd7 odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging
SVN-Revision: 35553
12 years ago
Felix Fietkau a9058439cf openvpn-easy-rsa: fix typo in version (#12958)
SVN-Revision: 35508
12 years ago
Felix Fietkau dc2ba40af3 openvpn: remove the stale PKG_REV variable
SVN-Revision: 35499
12 years ago
Felix Fietkau b8c903e6f8 openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball
SVN-Revision: 35498
12 years ago
Jo-Philipp Wich e106f25ee7 firewall: various enhancements
- reduce mssfix related log spam (#10681)
	- separate src and dest terminal chains (#11453, #12945)
	- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

SVN-Revision: 35484
12 years ago
Steven Barth 13544edce7 odhcp6c: Fix timing issues
SVN-Revision: 35472
12 years ago
Jo-Philipp Wich e893d4d9a8 libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend()
SVN-Revision: 35471
12 years ago
Steven Barth 6be5a5a73d odhcp6c: Fix RENEW and REBIND requests
SVN-Revision: 35454
12 years ago
Steven Barth e2193a69c8 odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested
SVN-Revision: 35421
12 years ago
Steven Barth 6a43437908 netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
SVN-Revision: 35420
12 years ago
Steven Barth 9a62439c28 odhcp6c: switch to userspace RA-handling and offload address assignment to netifd
SVN-Revision: 35419
12 years ago
Steven Barth a3368da479 6relayd: Fix announced router flags and IPv6 procfs-configuration
SVN-Revision: 35418
12 years ago
Felix Fietkau 416ce374c0 openvpn: add from openvpn-devel from /packages, fix support for current polarssl
SVN-Revision: 35412
12 years ago
Steven Barth 4bd3f54143 6in4: fix typo in last commit
SVN-Revision: 35409
12 years ago
Steven Barth a0a91963af 6in4: work around hanging wget process
SVN-Revision: 35408
12 years ago
Felix Fietkau 65657fb585 netifd: update to latest version
fixes DNS servers on reload (#12910)
fixes ubus object race on reload or down/up (#12612)

SVN-Revision: 35383
12 years ago
Felix Fietkau c16879a385 samba36: update to 3.6.11 and refresh patches (based on patch from #12914)
SVN-Revision: 35382
12 years ago
Steven Barth 777f7b30ae netifd: implement IPv6 prefix deprecation according to RFC 6204
SVN-Revision: 35377
12 years ago
Steven Barth 78a6439784 6relayd: remove IPv6 forwarding-sysctl workaround
SVN-Revision: 35371
12 years ago
Steven Barth 1a0b207d61 odhcp6c: remove IPv6 forwarding-sysctl workaround
SVN-Revision: 35370
12 years ago
Steven Barth fac1ed35ac netifd: remove IPv6 forwarding-sysctl workaround
SVN-Revision: 35369
12 years ago
Felix Fietkau 6ea9abadeb netifd: update to latest version, fixes setting addresses/routes on alias interfaces
SVN-Revision: 35362
12 years ago
Jo-Philipp Wich e804a663e3 hostapd: don't configure wpa_supplicant with empty password="" if no password is specified (#12912)
SVN-Revision: 35358
12 years ago
Jo-Philipp Wich 839f3ab0e7 firewall: flush conntrack table after changing interface rules
SVN-Revision: 35348
12 years ago
Steven Barth ec41a6a08c netifd: IPv6 sysctl, restart IPv6 in static mode to send RS
SVN-Revision: 35347
12 years ago
Steven Barth 75b06607db netifd: add SLAAC ipv6 value for static-proto
SVN-Revision: 35346
12 years ago
Steven Barth e964fa5d8f odhcp6c: work-around for proto-script to avoid loosing the default route
SVN-Revision: 35345
12 years ago
Steven Barth a81c76617e ipv6-support: don't overwrite existing setting across reflashs
SVN-Revision: 35302
12 years ago
Felix Fietkau 55eab5ac44 netifd: update to latest version, adds another fix for interface aliases
SVN-Revision: 35297
12 years ago
Steven Barth 5859fc7a39 netifd: Fix a segfault when globals.ula_prefix is empty
SVN-Revision: 35296
12 years ago
Felix Fietkau a4c7a953e5 uhttpd: always turn on TLS support, include ustream-ssl as a build dependency
SVN-Revision: 35295
12 years ago
Felix Fietkau bab482b93f uhttpd: fix another small hang issue with the same symptoms
SVN-Revision: 35291
12 years ago
Felix Fietkau 166ea3832b uhttpd: fix connection hangs
SVN-Revision: 35290
12 years ago
Felix Fietkau bc1d72c7bf tcpdump: add SLL parsing support to tcpdump-mini, use -ffunction-sections, -fdata-sections and --gc-sections to reduce size
SVN-Revision: 35288
12 years ago
Felix Fietkau c725669079 uhttpd: fix unencrypted passwords in httpd.conf
SVN-Revision: 35265
12 years ago
Steven Barth 38080ae550 6relayd: fix shell library includes in init-script
Thanks to Daniel Golle

SVN-Revision: 35262
12 years ago
Steven Barth 8a97d823a4 6relayd: avoid a race-condition with looping RAs
SVN-Revision: 35260
12 years ago
Steven Barth f129c6786e netifd: Fix segfaults in IPv6 prefix handling
SVN-Revision: 35259
12 years ago
Steven Barth f1fd0f8278 odhcp6c: Fix address assignment with infinite validity
SVN-Revision: 35258
12 years ago
Felix Fietkau 4a86973285 uhttpd: fix selecting the right ustream implementation when openssl is to be used (#12857)
SVN-Revision: 35257
12 years ago
Felix Fietkau 5bc6555e08 netifd: update to latest version, fixes alias support
SVN-Revision: 35251
12 years ago
Felix Fietkau 18a7d0e945 network/iproute2: Bump version to 3.7.0
Updated to latest stable version and added an upstream patch to handle
a link failure

Signed-off-by: Oliver Smith <olipro@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>
[dgolle@allnet.de: refreshed patches]
Signed-off-by: Daniel Golle <dgolle@allnet.de>

SVN-Revision: 35250
12 years ago
Felix Fietkau e55ee0817f uhttpd: update to a newer version, fixes chunked transfer on some POST requests
SVN-Revision: 35249
12 years ago
Felix Fietkau 6f0ecf0541 uhttpd: switch to uhttpd2, it is now feature complete
SVN-Revision: 35247
12 years ago
Jo-Philipp Wich f2766239ea netifd: add a band-aid fix for the wifi setup vs. netifd init race by increasing the wait time to five seconds
SVN-Revision: 35240
12 years ago
Steven Barth 62e9957cc4 ipv6-support: adapt UCI defaults to new ordering
SVN-Revision: 35219
12 years ago
Steven Barth 5a122f7e5f odhcp6c: Fix parsing more than one DNS server
SVN-Revision: 35215
12 years ago
Steven Barth f517d0481a ipv6-support: Rename enable-ipv6 UCI defaults
SVN-Revision: 35205
12 years ago
Jo-Philipp Wich 7250e27869 xtables-addons: rework uid/gid compat patch to use KUIDT_INIT() and KGIDT_INIT() macros
SVN-Revision: 35203
12 years ago
Jo-Philipp Wich 3b798d819d xtables-addons: move to package/, add myself as maintainer
SVN-Revision: 35193
12 years ago
Steven Barth 66fa83d211 odhcp6c: Detect a different MAC if interface has none * Fixes DHCPv6 behaviour over PPP and similar
SVN-Revision: 35189
12 years ago
Steven Barth 73875c1215 ppp: don't automatically set IPv6 default route * Fixes "ndisc_router_discovery() failed to add default route"
SVN-Revision: 35188
12 years ago
Steven Barth 1ecc744583 netifd: @aliases use layer 3 devices instead of main devices Fixes dhcpv6 protocol alias
SVN-Revision: 35187
12 years ago
Steven Barth 3235d860a6 ipv6-support: Switch to native IPv6 support
SVN-Revision: 35174
12 years ago
Steven Barth 955a1e8e28 6rd: add support for native IPv6 prefix handling
SVN-Revision: 35173
12 years ago
Steven Barth 811cd2acf4 6to4: add support for native IPv6 prefix handling
SVN-Revision: 35172
12 years ago
Steven Barth 2a94f67029 6in4: add support for native IPv6 prefix handling
SVN-Revision: 35171
12 years ago
Steven Barth a1e92f6dd1 6relayd: add suitable default configuration
SVN-Revision: 35170
12 years ago
Steven Barth 859fd7f614 6distributed: Remove obsolete service (replaced by netifd)
SVN-Revision: 35169
12 years ago
Steven Barth 06890959d1 netifd: Introduce native IPv6 prefix-handling
SVN-Revision: 35167
12 years ago
Jo-Philipp Wich 03a50b9087 netfilter.mk: add addrtype match to iptables-mod-extra (kmod-ipt-extra)
SVN-Revision: 35155
12 years ago
Jo-Philipp Wich e5548b03e5 netifd: update to git head, adds 64bit counters
SVN-Revision: 35140
12 years ago
Steven Barth 0cd21ca785 odhcp6c: Send RS on start
SVN-Revision: 35137
12 years ago
Steven Barth f0df2006af odhcp6c: Add preliminary proto-handler
SVN-Revision: 35135
12 years ago
Steven Barth b58a13cb2c ipv6-support: don't use disable_ipv6
SVN-Revision: 35134
12 years ago
Steven Barth fde5b934fd 6relayd: Rewrite init-script logic
SVN-Revision: 35133
12 years ago
Steven Barth b077480a59 firewall: Add ULA site border for IPv6 traffic This prevents private traffic from leaking out to the internet
SVN-Revision: 35012
12 years ago
Jo-Philipp Wich 3b7882e775 iwinfo: don't use the txpower value from debugfs for now, it does not match the values reported via wext
SVN-Revision: 35007
12 years ago
John Crispin ff0c7a9ec9 don't depend on lua
Delete +lua from libiwinfo-lua.

Signed-off-by: Stefan Hellermann <stefan@the2masters.de>

SVN-Revision: 35005
12 years ago
Steven Barth 965afef317 ipv6-support: Update iteration * Add support for blocking forwarding while address assignments * Fix relay restarting function
SVN-Revision: 34985
12 years ago
Steven Barth c7d9d7c952 odhcp6c: Add support for SNTP and SIP options
SVN-Revision: 34984
12 years ago
Steven Barth 4a2e55f30f 6relayd: Announce RDNSS and DNSSL via RA
SVN-Revision: 34983
12 years ago
Jo-Philipp Wich 1683a146f4 iwinfo: replace more wext calls with nl80211 equivalents, attempt to infer nl80211 tx power from debugfs before querying wext
SVN-Revision: 34982
12 years ago
Jo-Philipp Wich 54c0b40427 dnsmasq: allow dhcp host entries without mac addresses (#11928)
SVN-Revision: 34971
12 years ago
Jo-Philipp Wich c8a8f8fd55 lldpd: various enhancements
- introduce "list interface" options to specify the ifaces to listen on, takes uci- or network device name
	- set the default system description to distrib @ hostname, e.g. "OpenWrt Barrier Breaker r34744 @ vbox"
	- introduce "option lldp_description" to override the automatically generated description

SVN-Revision: 34970
12 years ago
John Crispin a730e96569 Remove remaining etrax references
SVN-Revision: 34968
12 years ago
Steven Barth 7a25be66c3 6relayd: Detect changes of default routes for RAs
SVN-Revision: 34958
12 years ago
Steven Barth def80bbecf ipv6-support: Remove unnecessary code
SVN-Revision: 34957
12 years ago
Steven Barth 4c09d5dde3 ipv6-support: Fix typo in dhcpv6-script * thanks to KarlHegbloom for reporting
SVN-Revision: 34940
12 years ago
Steven Barth b7c1f24f9b ipv6-support: Use more consistent default values
SVN-Revision: 34913
12 years ago
Steven Barth e7719bb4aa ipv6-support: Updated functionality * Add site-border feature again * Add option to always announce a default router
SVN-Revision: 34908
12 years ago
Steven Barth ce41e59030 6distributed: Add null-route for delegated prefix * Fixes forwarding loops for unused subprefixes
SVN-Revision: 34907
12 years ago
Steven Barth d6c955e39a 6relayd: Announce DNS search domain via DHCPv6
SVN-Revision: 34906
12 years ago
Steven Barth 253d7345e1 ipv6-support: Remove site-border feature * was causing routing problems * will be reimplemented using firewall
SVN-Revision: 34898
12 years ago
Steven Barth 941f4ccd68 Remove site-border routing filter due to problems
SVN-Revision: 34897
12 years ago
Steven Barth 01059c8914 ipv6-support: * Automatically detect and propagate MTU from upstream interfaces * Add site-border feature (RFC 6204, ULA-4) * Fix a typo
SVN-Revision: 34896
12 years ago
Steven Barth 50a9fed238 6distributed: feature update * Add feature to decrease IPv6-specific MTU on-demand * Add commands to enable / disable a site-border
SVN-Revision: 34895
12 years ago
Steven Barth 4bab347e98 6relayd: Advertise IPv6-specific MTU instead of generic * Fixes announced MTU when using tunnels
SVN-Revision: 34894
12 years ago
Steven Barth 970adc9eb9 ipv6-support: Fix default RA settings for dnsmasq
SVN-Revision: 34873
12 years ago
Felix Fietkau 7ed89e8542 dropbear: convert init script to procd
SVN-Revision: 34867
12 years ago
Felix Fietkau 82bd58c793 dropbear: use network_get_device instead of scan_interfaces to get the device name
SVN-Revision: 34863
12 years ago
Steven Barth a4e656ef24 ipv6-support: Preliminary support for dnsmasq >=2.66
SVN-Revision: 34858
12 years ago
Steven Barth 2dbfffef68 6relayd: Fix detection of prefix changes
SVN-Revision: 34857
12 years ago
Steven Barth f36c3067c6 odhcp6c: Fix build on arch where char is unsigned
SVN-Revision: 34856
12 years ago
Steven Barth 970c5d97fe 6distributed: Improve prefix deprecation algorithm
SVN-Revision: 34855
12 years ago
Gabor Juhos 149b1c46c7 ipset: update to 6.16.1 to fix build with kernel 3.7
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

SVN-Revision: 34752
12 years ago
Felix Fietkau bf34eeaea4 netifd: update to latest version, fixes interface error reporting for shell proto handlers
SVN-Revision: 34741
12 years ago
Felix Fietkau 14281559e1 netifd: update to latest version, no longer needs the removed jshn_append() shell function
SVN-Revision: 34734
12 years ago
Felix Fietkau 056d75049d wpa_supplicant.sh: always use parameters from the current section
Using variables from the outer scope unnecessarily complicates the code and
leads to issues.

This patch fixes the bug when having an "adhoc" wifi-iface section before a
"sta" section prevents wpa_supplicant from using the key specified in the
corresponding section as it tries to use the "adhoc" key instead (1 by
default).

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

SVN-Revision: 34716
12 years ago
John Crispin e9c0b95829 fixes uapi helper define
SVN-Revision: 34715
12 years ago
Felix Fietkau 860c2e8116 netifd: call /etc/udhcp.user from the netifd dhcp.script
This was done previously when dhcp was handled by the network scripts.
So netifd should behave the same.

Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 34704
12 years ago
John Crispin 06c9170a7c move ltq-adsl-tool
SVN-Revision: 34694
12 years ago
John Crispin 4583469413 make use of uapi directory wrapper
SVN-Revision: 34684
12 years ago
Gabor Juhos 86cd825c1f package/swconfig: don't use kernel headers
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

SVN-Revision: 34679
12 years ago
Felix Fietkau b85c8a6361 netifd: update to latest version, fixes purging old resolv.conf entries after ifdown
SVN-Revision: 34664
12 years ago
Steven Barth 8d9564af1b ipv6-support: Make ULA addresses secondary * Deprecates ULA prefixes when there are other public prefixes * Fixes issues with clients using incorrect source addresses
SVN-Revision: 34630
12 years ago
Steven Barth 8546f8a401 6distributed: Add support for secondary addresses
SVN-Revision: 34629
12 years ago
Steven Barth 14273e1120 6relayd: Fix announcement of deprecated prefixes
SVN-Revision: 34628
12 years ago
Steven Barth faba477274 ipv6-support: Add support for NPT status tracking
SVN-Revision: 34609
12 years ago
Steven Barth cd76023e97 6distributed: add status-call for luci-integration
SVN-Revision: 34608
12 years ago
Felix Fietkau 01513b7c8b iw: sync with nl80211.h to fix setting antenna gain
SVN-Revision: 34593
12 years ago
Steven Barth a07ddb955f ipv6-support: Next iteration * Make ula_prefix a global option * Add preliminary support for NAT (Linux >= 3.7, ip6tables >= 1.4.17) * Minor fixes for prefix fallback
SVN-Revision: 34586
12 years ago
Steven Barth 57d853ffc4 6distributed: Correctly handle duplicate prefixes
SVN-Revision: 34585
12 years ago
Steven Barth eeeb59e451 6relayd: Always send NA with hop-limit 255 * thanks risa2000 for investigating
SVN-Revision: 34584
12 years ago
Jo-Philipp Wich 16d0957a4e firewall: fix typo in reflection hotplug script
SVN-Revision: 34569
12 years ago
Steven Barth 63135142d8 6to4: Remove static radvd-integration * Please use the new ipv6-support package
SVN-Revision: 34567
12 years ago
Steven Barth 82576f0ca3 ipv6-support: next iteration * Introduce mode 6rd * Introduce mode 6to4 * Fix announcement of DNS-Servers received from DHCPv6 * Fix some corner-cases in relaying behaviour
SVN-Revision: 34542
12 years ago
Steven Barth 61e8c6b83b 6relayd: More RFC-compatibility and size reduction
SVN-Revision: 34541
12 years ago
Steven Barth f14e1f1b1d 6distributed: Add compatibility with 6rd and 6to4
SVN-Revision: 34540
12 years ago
Jo-Philipp Wich d221222907 ppp: unconditionally start pppd with nodefaultroute and usepeerdns (#12580)
Since the switch to netifd, proto handlers may always set the defaultroute
and provide dns server addresses, netifd will decide in the generic code
path whether the announced values are masked or not.

Additionally protocol handlers should not modify the routing tables themselves
and prevent any launched services from doing so.

Remove the additional defaultroute and peerdns option handling from the ppp.sh
protocol handler and rely on netifd to mask or not mask the values.

SVN-Revision: 34536
12 years ago
Felix Fietkau 838d6e3b8d netifd: update to latest version, fixes resolv.conf writes on interface setting changes
SVN-Revision: 34500
12 years ago
Florian Fainelli 9e355444a6 dropbear: update to 2012.55 and refresh patches
Upstream has a few code cleanups, more eagerly burns sensitive memory and
includes the fix for CVE-2012-0920. Full changelog:
https://matt.ucc.asn.au/dropbear/CHANGES

Local changes:
- Removed PKG_MULTI which is no longer in options.h (even before 2011.54)
- Merged DO_HOST_LOOKUP into 120-openwrt_options.patch
- Removed LD from make opts (now included in TARGET_CONFIGURE_OPTS)
- Removed 400-CVE-2012-0920.patch which is included in 2012.55

Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>
Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34496
12 years ago
Jo-Philipp Wich 6504b268b3 firewall: extend nat reflection support
- use comment match to keep track of per-network rules
	- setup reflection for any interface which is part of a masqueraded zone, not just "wan"
	- delete per-network reflection rules if network is brought down

SVN-Revision: 34472
12 years ago
Felix Fietkau 8516ddb133 mac80211, hostapd: Fix macfilter for multi bssid setups
Previously only the first macfilter configuration would have been used
on all interfaces. However, the configuration was always done per vif
already. Hence, move the macfilter setup into hostapd.sh where and
create one mac list file per vif.

Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 34470
12 years ago
Mirko Vogt 4c30952394 Make ltq-dsl-app compile with an eglibc-based toolchain
Signed-Off-By: Frank Meerkötter <frank@meerkoetter.org>

SVN-Revision: 34468
12 years ago
Steven Barth 4bda16cf27 ipv6-support: Second Iteration * mode 'downstream' renamed to 'router' * mode 'upstream' renamed to 'dhcpv6' * mode 'relay' added * cleanups and minor bugfixes in state handling
SVN-Revision: 34466
12 years ago