e926cfd9ac
netifd: update to latest version, fixes an autostart handling with link detection
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39967
10 years ago
66393168d3
firewall: update to latest version, fixes a musl build error
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39965
10 years ago
ad72198abb
netifd: update to latest version, adds support for specifying a config path
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39956
10 years ago
edd75e332c
netifd: pass on delegate flag from dhcp to 6rd
...
SVN-Revision: 39909
10 years ago
83f9fc12d6
netifd: update to latest version, includes interface handling fixes by Hans Dedecker
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39870
10 years ago
452d019d3e
netifd: update to latest version, adds a bridge reload fix and fixes #15157
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39791
10 years ago
f294f23c02
netifd: don't incorrectly announce up-status via ubus
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 39777
10 years ago
1b3a868309
netifd: Reintroduce link-layer sensing (thx Hans Decker, Karl Vogel)
...
SVN-Revision: 39757
10 years ago
0bf9032145
netifd: don't always assume addrs & routes are applied
...
netifd didn't check the netlink return values and kept assuming
routes are in place even if they weren't
SVN-Revision: 39755
10 years ago
a15524582c
netifd: depend on libubox directly to rebuild on ABI changes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39723
10 years ago
6c8300df3d
netifd: update to latest version, fixes wireless device reload handling
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39706
10 years ago
b22ad85bc6
firewall: fix validation constraints
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39649
10 years ago
354efde275
netifd: fix validation constraints
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39648
10 years ago
21f4cf1a73
firewall: fix several ipset integration issues ( #15016 )
...
- Do not consider bitmap storage for IPv6 family sets
- Move ipset family parameter before any additional option
- Only emit family parameter for hash sets
- Do not allow IPv6 iprange for IPv4 sets and vice versa
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39647
10 years ago
8fb44e0d1e
netifd: add validation support
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39621
10 years ago
15ebcfc04e
firewall3: update init.d script to make use of procd
...
add validation data
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39617
10 years ago
204e859542
netifd: update to latest git head
...
this adds support for proto and wireless handler adding uci validation rules
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39614
10 years ago
41acaaf893
netifd: work around dangling prefix kernel-routes ( fixes #14963 )
...
SVN-Revision: 39597
10 years ago
af8f06beca
netifd: fix source-routing breaking 6in4 + others
...
6in4 historically allowed an ip6addr without a mask however the newly
introduced source-routing segfaulted in this scenario (#14958 + #14858 ).
Fixes include: "Fix ubus route src mask printing" and
"Disable netlink auto ack" (thanks to Hans Dedecker)
SVN-Revision: 39586
10 years ago
229d186490
netifd: don't add unnecessary NOP policy rules
...
SVN-Revision: 39351
11 years ago
fac5e62abd
firewall: don't reload if there were no address or data changes
...
This fixes packet loss due to reloading firewall every minute with IPv6
implementation of certain ISPs.
SVN-Revision: 39332
11 years ago
bc8412b90e
netifd: Add IFUPDATE-flags and use main IPv6 routing table again
...
SVN-Revision: 39306
11 years ago
a844275f37
firewall: improve logging in hotplug script
...
Signed-off-by: Nathan Hintz <nlhintz@hotmail.com>
SVN-Revision: 39300
11 years ago
4810de8e4b
swconfig: improve usability when switch device incorrect
...
http://patchwork.openwrt.org/patch/4701/
Signed-off-by: Andreas Mohr <andim2@users.sf.net>
SVN-Revision: 39229
11 years ago
20151a3394
netifd: initialize the switch early at start time and on reload ( fixes #13015 )
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39183
11 years ago
6865f1d6b2
netifd: update to the latest version, fixes wireless related segfaults on arm
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39180
11 years ago
5607a13aa1
netifd: update to the latest version, fixes wifi related segfaults
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39176
11 years ago
d1156bca0a
swconfig: remove useless variables, return -1 on errors
...
spotted with cppcheck
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>
SVN-Revision: 39170
11 years ago
1789744958
netifd: add reload trigger for /etc/config/wireless as well
...
SVN-Revision: 39131
11 years ago
de5ebc19c0
firewall: fix handling of tcp_ecn parameter
...
The firewall3 implementation as well as the shell implementation predating it
used to process the tcp_ecnoption as boolean while it actually is an integer.
Change the code to parse tcp_ecn as integer.
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39122
11 years ago
12c05542e8
netifd: update to latest version, fixes a null pointer crash
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39088
11 years ago
e49d67f192
Convert DHCP->6rd and DHCPv6->DS-Lite autoconfig to dynamic interface
...
SVN-Revision: 39061
11 years ago
ce062a7b5c
netifd: update to the latest version, adds a revert of the link state handling patches which caused regressions in combination with wifi devices
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39050
11 years ago
47730fe355
netifd: prevent an unnecessary restart of netifd-managed wifi interfaces at boot time
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39046
11 years ago
3f744a4ad3
netifd: fix crashes triggered by adding/removing wireless devices on reload
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39035
11 years ago
31a2912cd9
netifd: enable coredumps again
...
got broken due procd startup. Requires procd resource limit patch.
Signed-off-by: Ulrich Weber <uw@xyne.com>
SVN-Revision: 39020
11 years ago
6242255df2
netifd: update to the latest version, adds tunnel fixes by Hans Dedecker and adds back support for multiple networks per wifi-iface
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39004
11 years ago
4155016637
netifd: update to the latest version, improves wireless status output and fixes some bridge handling issues
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38992
11 years ago
3c50feca19
wifi: rename the "reload" (restarting non-netifd wifi) command to "reload_legacy"
...
Add a new "reload" command that reloads the netifd config as well
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38989
11 years ago
498d84fc4e
netifd: add wireless configuration support and port mac80211 to the new framework
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38988
11 years ago
107bcb5de3
netifd: remove redundant calls to /sbin/wifi down
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38982
11 years ago
bc9043cc53
firewall: optimize DNAT rules and skip invalid rules and redirects ( #14485 )
...
- instead of writing one (or more) ACCEPT rules in the filter table
for each redirect install a global ctstate DNAT accept rule per zone
- discard rules and redirects which have invalid options set instead
of silently skipping the invalid values
SVN-Revision: 38849
11 years ago
e78e720a6f
netifd: remove connect_time from /var/state, it is unused
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38704
11 years ago
edf6236838
lantiq: fix vdsl-app dependency
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38666
11 years ago
e16f104a6f
netifd: update to the latest version, fixes regression in proto-shell scripts ( #14400 , #14402 )
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38627
11 years ago
22890e6382
netifd: update to latest version, adds fixes and some preparation for supporting wifi devices
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38606
11 years ago
bb699867e0
firewall: Improve ubus support
...
* Use network.interface dump call instead of individual status calls
to reduce overall netifd lookups and invokes to 1 per fw3 process.
* Allow protocol handlers to assign a firewall zone for an interface
in the data section to allow for dynamic firewall zone assignment.
SVN-Revision: 38504
11 years ago
91b173d231
netifd: Fix ifupdate events
...
SVN-Revision: 38458
11 years ago
c3bcdd59de
netifd: various improvements
...
* Add ubus methods for global interface status
* Add ubus function to create nested interfaces
* Add protocol update notifications and hotplug legacy calls
* Fix: key to data elements point at wrong memory area
* Add support for source-restricted routes
* Add option "delegate" to toggle prefix delegation
* Reevaluate target routes also on interface update
SVN-Revision: 38453
11 years ago
56bc536713
netifd: rename customopts to sendopts for consistency
...
SVN-Revision: 38437
11 years ago
c759b49a4f
Added 'customopts' dhcp protocol option, which is an array passed along to udhcpc as series of -x options.
...
Signed-off-by: Markus Stenberg <markus.stenberg@iki.fi>
SVN-Revision: 38436
11 years ago
e1523b5504
switch: remove old switch driver
...
The switch driver is not used by brcm47xx any more and can be removed,
instead of this switch driver b53 is used now.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
SVN-Revision: 38387
11 years ago
af32e63bae
lantiq: add some missing PKG_SOURCE_URLs
...
These URLs where missing and causes build failures.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
SVN-Revision: 38376
11 years ago
db3013852a
firewall: small improvements in nat reflection
...
- do not insert duplicate rules when setting up reflection to a zone containing multiple interfaces
- set up reflection for any protocol, not just TCP and UDP
SVN-Revision: 38361
11 years ago
e96695df10
netifd: update to latest version, adds macvlan support
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38299
11 years ago
1d485c737e
netifd: don't remove & readd addresses that only have a changed lifetime
...
SVN-Revision: 38269
11 years ago
f874094402
procd: convert various packages to procd style init.d scripts
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38023
11 years ago
7fc90889d5
netifd: update to the latest version, fixes a bridge handling corner case on config reload
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37856
11 years ago
2864fb107f
firewall: update to git head
...
- uses "-j CT --notrack" instead of deprecated "-j NOTRACK"
- fixes support for rule sections with target "NOTRACK"
SVN-Revision: 37777
11 years ago
d6e8047f83
firewall: update to git head
...
- handles redirects as port relocations if the dest_ip points to the router itself
SVN-Revision: 37374
11 years ago
54ae5ce507
netifd: Fix IPv6-prefix assignment with continuous hints
...
SVN-Revision: 37371
11 years ago
1a963355b0
netifd: update to latest version, add bridge_empty option
...
with this option enabled it's possible to create empty bridges
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 37318
11 years ago
7d7c2ff5f9
swconfig: fix dependency bug introduced by [37304]
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 37316
11 years ago
f8d55e7541
brcm47xx: use b53 phy driver for the switch in kernel 3.10
...
This makes it possible to use swconfig to controll the switch.
This was tested with devices using b43 and bgmac.
This was not tested on devices using tg3.
This does not support the adm switch used in some very old devices.
SVN-Revision: 37304
11 years ago
f98f69adc9
firewall: add missing dependencies
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37224
11 years ago
fc40051569
lantiq: move dsl tools to package/network/config
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 37198
11 years ago
4aa82d07a6
firewall: allow routed lan<->lan traffic by default
...
SVN-Revision: 37171
11 years ago
2d506f46fb
firewall: update to git head
...
- uses custom formatting for mac addresses to ensure leading zeroes, required for older iptables mac match parser
SVN-Revision: 37082
11 years ago
d8051a8814
netifd: fix typo in dhcp script
...
SVN-Revision: 37051
11 years ago
b4babf9f81
netifd: update to latest version, fixes a NULL pointer deref bug
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36965
11 years ago
65f82e2311
firewall: update to git head
...
- fixes misprocessing of unknown symbolic protocol names
SVN-Revision: 36963
11 years ago
37ae268729
firewall: update to git head
...
- fixes calculation of IPv4 netmasks derived from 0.0.0.0/0 CIDRs
SVN-Revision: 36960
11 years ago
9f1899242c
netifd: IPv6: Fix sorting order in last commit.
...
SVN-Revision: 36952
11 years ago
213269a8f7
netifd: Satisfy IPv6 assignments ordered by prefix length
...
SVN-Revision: 36950
11 years ago
36d3fafd77
firewall: update to git head
...
- properly process intermediate "!" options in argument list (fixes negated ipsets)
SVN-Revision: 36935
11 years ago
0db38adf1c
firewall: update to git head
...
- fixes handling of reject target for rule sections with specific destination zone
SVN-Revision: 36933
11 years ago
9fb5bf176e
netifd: update to latest version, uses the new uci/blob code from libuci
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36909
11 years ago
491deaed2c
netifd: improve reloading behaviour
...
SVN-Revision: 36903
11 years ago
f995c90329
netifd: Improve IPv6 source-routing policies
...
SVN-Revision: 36884
11 years ago
b9de8ca7f5
netifd: bring wifi down before shutting down
...
works around wifiX references not being freed on network restart.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36883
11 years ago
e7b15446a8
firewall: udpate to git head ( #13652 , #13654 , #13658 )
...
- optimizes chain usage for ingress rules
- adds limit match support for redirect rules
- fixes automatic redirect dest detection on little endian systems
- leaves base chains in place on reload to allow user rules to target e.g. "reject"
SVN-Revision: 36871
11 years ago
5cf06bd17b
firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols
...
SVN-Revision: 36868
11 years ago
ecc95dcba8
firewall: update to git head ( #13652 )
...
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
- uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones
SVN-Revision: 36854
11 years ago
0a74d9d5c3
firewall3: fix accidentally changed install directive
...
SVN-Revision: 36840
11 years ago
07a3110e88
firewall: fix git source url
...
SVN-Revision: 36839
11 years ago
b721c92221
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA
...
SVN-Revision: 36838
11 years ago
0dd6753c09
Drop legacy firewall package
...
SVN-Revision: 36837
11 years ago
6f60308257
firewall3: update to git head ( #13641 )
...
* Fixes wrong chain used for zone forward policy
SVN-Revision: 36830
11 years ago
6eeca5176e
firewall3: update to git head
...
- Fixes problems with reusing matches or targets from loadable extensions
SVN-Revision: 36826
11 years ago
3bb397c997
firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly
...
SVN-Revision: 36806
11 years ago
519f27cd33
netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes
...
SVN-Revision: 36771
11 years ago
439fdd4d65
netifd: fix IPv6-addresses disappearing due to lifetime-overflows
...
SVN-Revision: 36748
11 years ago
63603ee478
firewall3: update to git head
...
- allows building without IPv6 support
- uses more robust rules to cope with missing libext.a
- uses better linking strategy to avoid symbol clashes with older iptables
- introduces source compatiblity layer for different libxtables versions
SVN-Revision: 36736
11 years ago
e4f8c38ed1
firewall3: update to git head
...
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
- automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
- properly support output rules with dest '*' to hook directly into delegate_output
- fixes crash when processing rules with unresolved targets
SVN-Revision: 36721
11 years ago
90887b5fb3
firewall3: update to git head
...
- fixes linking issues with some toolchains
SVN-Revision: 36703
11 years ago
c1ff8cd9bb
firewall3: update to git head
...
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
- Do not leak memory when processing rules with unknown targets or matches
SVN-Revision: 36698
11 years ago
32c6ffb5a1
firewall3: Remove abandonend include
...
SVN-Revision: 36692
11 years ago
b757ca2259
firewall3: update to git head
...
- fix build on Linux < 3.7
- limit zone names to 14 bytes
SVN-Revision: 36691
11 years ago
c12189b379
firewall3: update to git head
...
- fixes reload when firewall is not running already
- fixes crash when ipsets are supported but undeclared
- fixes handling of per zone user chains on reload
SVN-Revision: 36689
11 years ago
dd83e87ab0
firewall3: update to git head
...
- fixes segfault in flush command if ipset support is not available
- fixes internal rule generation if custom chains are enabled
SVN-Revision: 36686
11 years ago
9b6c31d4cc
firewall3: move libext*.a copying to compile phase
...
SVN-Revision: 36684
11 years ago
e8050c6c35
firewall3: update to git head
...
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
* make ipset integration more reliable
SVN-Revision: 36681
11 years ago
0f1be4425f
netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4
...
Based on a patch by Kristian Evensen. Thank You.
SVN-Revision: 36653
11 years ago
5ce135ed87
netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements
...
SVN-Revision: 36627
11 years ago
ea71678b09
netifd: added support for setting up 6rd from DHCP
...
SVN-Revision: 36626
11 years ago
973dad61b0
firewall3: Remove obsoleted ULA-border
...
SVN-Revision: 36624
11 years ago
07d99b62b7
firewall3: add wan6 interface to wan-zone by default
...
SVN-Revision: 36623
11 years ago
4cb9d9715c
firewall: Remove obsoleted ULA-border rule
...
SVN-Revision: 36622
11 years ago
4bba31b64c
firewall3: update to git head
...
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422 , #13386 )
- add support for fwmark matches and mark setting targets
SVN-Revision: 36521
11 years ago
f1497ccf4f
netifd: update to git head - disables multicast snooping by default on bridges
...
SVN-Revision: 36463
11 years ago
5062838fa5
netifd: update to the latest version, fixes interface reload issues when removing the ifname option
...
SVN-Revision: 36424
11 years ago
2c78c1457b
firewall3: Make IPv6 ULA-Border generation dynamic
...
This fixes working behind another router which gives out ULAs.
SVN-Revision: 36416
11 years ago
17b8c0c7b8
netifd: Improve IPv6-ULA assignment handling
...
SVN-Revision: 36383
11 years ago
099e3d8183
netifd: update to latest version, fixes some device handling crashes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36336
11 years ago
88c418bc75
qos-scripts: add queue length and quantum limit, suggested by dtaht
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36294
11 years ago
04dcd12c91
add portmap support to userland
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36284
11 years ago
f13ae9965c
add "swconfig list" support
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36282
11 years ago
f90f025f20
netifd: fix route / route6 regression ( #13303 )
...
SVN-Revision: 36281
11 years ago
3abc915522
Remove deprecated ip6slaac option * use proto=dhcpv6 with reqprefix=no instead
...
SVN-Revision: 36280
11 years ago
35d716fbbb
netifd: Bump to latest version * Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow)
...
SVN-Revision: 36196
11 years ago
0393e52623
netifd: Rewrite IPv6 prefix assignment * Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion
...
SVN-Revision: 36193
11 years ago
6fa1b5346e
firewall3: update to git head
...
* fixes parsing of src/dest '*'
* fixes parsing of proto 'all'
SVN-Revision: 36111
11 years ago
76d1c0a067
firewall3: update to git head
...
* fixes port remapping rules (#13217 )
SVN-Revision: 36100
11 years ago
261be7b8f3
netifd: Fix adding IPv6 DNS-servers to resolv.conf
...
In some cases IPv6 DNS-servers were not added correctly.
SVN-Revision: 36095
11 years ago
6fbd824e9b
firewall3: update to git head
...
* fixes reload handling of zones and ipsets that are still running but already deleted from the config
SVN-Revision: 36092
11 years ago
03cb7986fc
firewall3: update to git head
...
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197 )
- do not allow src_mac option for SNAT rules
SVN-Revision: 36090
11 years ago
54f9f47a28
firewall3: update to git head
...
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
* Allow "network" and "device" commands while firewall is running (to make them usable in includes)
SVN-Revision: 36009
11 years ago
9faa312dbb
firewall3: update to git head
...
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
* Make NAT reflection direction configurable
* Map init script stop action to flush
* Map init script reload action to reload
* Respect init script disabled state in hotplug handler
SVN-Revision: 35998
11 years ago
8c7ed1cb7b
firewall3: update to git head
...
* Fixes compilation against eglibc
* Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
* Fixes tracking logic for user chains by differentiating between reloads and restarts
* Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
* Supports legacy "tcpudp" protocol notation again
SVN-Revision: 35969
11 years ago
e259ecad7e
Revert "firewall3: update to git head"
...
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.
SVN-Revision: 35904
11 years ago
50213fc354
firewall3: update to git head
...
- introduce per-zone user chains
- support legacy "tcpudp" protocol notation
SVN-Revision: 35903
11 years ago
d75c632de6
firewall3: add default config and firewall.user
...
SVN-Revision: 35889
11 years ago
89be702bff
firewall3: update to git head, introduces support for "enabled" option
...
SVN-Revision: 35845
11 years ago
557c047f71
firewall3: clear contnrack table on flush, set policies to drop during rule reload
...
SVN-Revision: 35820
11 years ago
92062542e2
firewall: fix logging rule regression ( #12999 )
...
SVN-Revision: 35745
11 years ago
4fb2cd18c1
firewall3: add support for shell script and iptables-restore style includes
...
SVN-Revision: 35744
11 years ago
a7b262dc0a
netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions.
...
SVN-Revision: 35743
11 years ago
7d7d88b580
firewall3: update to git head
...
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')
SVN-Revision: 35738
11 years ago
02b0c62f33
firewall3 - a C implementation of the current firewall scripts
...
SVN-Revision: 35643
11 years ago
e106f25ee7
firewall: various enhancements
...
- reduce mssfix related log spam (#10681 )
- separate src and dest terminal chains (#11453 , #12945 )
- disable per-zone custom chains by default, they're rarely used
Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.
SVN-Revision: 35484
11 years ago
6a43437908
netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
...
SVN-Revision: 35420
11 years ago
65657fb585
netifd: update to latest version
...
fixes DNS servers on reload (#12910 )
fixes ubus object race on reload or down/up (#12612 )
SVN-Revision: 35383
12 years ago
777f7b30ae
netifd: implement IPv6 prefix deprecation according to RFC 6204
...
SVN-Revision: 35377
12 years ago
fac1ed35ac
netifd: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35369
12 years ago
6ea9abadeb
netifd: update to latest version, fixes setting addresses/routes on alias interfaces
...
SVN-Revision: 35362
12 years ago
839f3ab0e7
firewall: flush conntrack table after changing interface rules
...
SVN-Revision: 35348
12 years ago
ec41a6a08c
netifd: IPv6 sysctl, restart IPv6 in static mode to send RS
...
SVN-Revision: 35347
12 years ago
75b06607db
netifd: add SLAAC ipv6 value for static-proto
...
SVN-Revision: 35346
12 years ago
55eab5ac44
netifd: update to latest version, adds another fix for interface aliases
...
SVN-Revision: 35297
12 years ago
5859fc7a39
netifd: Fix a segfault when globals.ula_prefix is empty
...
SVN-Revision: 35296
12 years ago
f129c6786e
netifd: Fix segfaults in IPv6 prefix handling
...
SVN-Revision: 35259
12 years ago
5bc6555e08
netifd: update to latest version, fixes alias support
...
SVN-Revision: 35251
12 years ago
f2766239ea
netifd: add a band-aid fix for the wifi setup vs. netifd init race by increasing the wait time to five seconds
...
SVN-Revision: 35240
12 years ago
1ecc744583
netifd: @aliases use layer 3 devices instead of main devices Fixes dhcpv6 protocol alias
...
SVN-Revision: 35187
12 years ago
06890959d1
netifd: Introduce native IPv6 prefix-handling
...
SVN-Revision: 35167
12 years ago
e5548b03e5
netifd: update to git head, adds 64bit counters
...
SVN-Revision: 35140
12 years ago
b077480a59
firewall: Add ULA site border for IPv6 traffic This prevents private traffic from leaking out to the internet
...
SVN-Revision: 35012
12 years ago
bf34eeaea4
netifd: update to latest version, fixes interface error reporting for shell proto handlers
...
SVN-Revision: 34741
12 years ago
14281559e1
netifd: update to latest version, no longer needs the removed jshn_append() shell function
...
SVN-Revision: 34734
12 years ago
860c2e8116
netifd: call /etc/udhcp.user from the netifd dhcp.script
...
This was done previously when dhcp was handled by the network scripts.
So netifd should behave the same.
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
SVN-Revision: 34704
12 years ago
06c9170a7c
move ltq-adsl-tool
...
SVN-Revision: 34694
12 years ago
86cd825c1f
package/swconfig: don't use kernel headers
...
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
SVN-Revision: 34679
12 years ago
b85c8a6361
netifd: update to latest version, fixes purging old resolv.conf entries after ifdown
...
SVN-Revision: 34664
12 years ago
16d0957a4e
firewall: fix typo in reflection hotplug script
...
SVN-Revision: 34569
12 years ago
838d6e3b8d
netifd: update to latest version, fixes resolv.conf writes on interface setting changes
...
SVN-Revision: 34500
12 years ago
6504b268b3
firewall: extend nat reflection support
...
- use comment match to keep track of per-network rules
- setup reflection for any interface which is part of a masqueraded zone, not just "wan"
- delete per-network reflection rules if network is brought down
SVN-Revision: 34472
12 years ago
4c30952394
Make ltq-dsl-app compile with an eglibc-based toolchain
...
Signed-Off-By: Frank Meerkötter <frank@meerkoetter.org>
SVN-Revision: 34468
12 years ago
71ed7ae842
netifd: empty hotplug handler removed
...
SVN-Revision: 34465
12 years ago
dffa972af1
Remove old IPv6 sysctl-config (deprecated)
...
SVN-Revision: 34418
12 years ago
94bdc366d4
netfid: fix build on musl
...
AF_INET* is provided by sys/socket.h
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34310
12 years ago
611b2e8bb3
netifd: don't send a default client identifier in DHCP requests if no clientid uci option is given ( #12426 )
...
SVN-Revision: 34089
12 years ago
fc3939a996
netifd: update to latest version, fixes adding an alias during config reload for an interface that is already up
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 34006
12 years ago
1895d55e9d
ltq-dsl-app: fix offline postinstall for dsl_control
...
SVN-Revision: 33901
12 years ago
81a3d9ba31
licensing: Add licensing metadata to many packages Two new variables are introduces to many packages, namely PKG_LICENSE and PKG_LICENSE_FILES - there may be more than one license applied to packages, and these are listed in the PKG_LICENSE variable and separated by spaces. All relevant license files are also added to the PKG_LICENSE_FILES variable, also space separated.
...
The licensing metadata is put into the bin/<platform>/packages/Packages file
for later parsing. A script for that is on it's way!
SVN-Revision: 33861
12 years ago
825592b54b
netifd: update to latest version, fixes device cleanup and config reload issues when assigning a device to a different bridge
...
SVN-Revision: 33858
12 years ago
88f3c59fb9
netifd: enable parallel build
...
SVN-Revision: 33832
12 years ago
a34499e095
move lots of kernel related packages to the new system/ folder
...
SVN-Revision: 33830
12 years ago
c2b8d1a619
Fix broadcast DHCP client startup option in dhcp.sh
...
Signed-off-by: Hans Dedecker (hans.dedecker at technicolor.com)
Fixes the DHCP request broadcasts replies option parsing
SVN-Revision: 33826
12 years ago
e51eb6046d
add myself as a maintainer for a few more packages
...
SVN-Revision: 33693
12 years ago
405e21d167
packages: sort network related packages into package/network/
...
SVN-Revision: 33688
12 years ago
Felix Fietkau
Steven Barth
Jo-Philipp Wich
John Crispin
Hauke Mehrtens
Luka Perkov
Jonas Gorski
Gabor Juhos
Mirko Vogt
Florian Fainelli
Hamish Guthrie