Commit Graph

218 Commits (a7525f5f5d75d4a2adad6d379a65d0c310f1d6fd)

Author SHA1 Message Date
Jo-Philipp Wich e259ecad7e Revert "firewall3: update to git head"
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.

SVN-Revision: 35904
11 years ago
Jo-Philipp Wich 50213fc354 firewall3: update to git head
- introduce per-zone user chains
	- support legacy "tcpudp" protocol notation

SVN-Revision: 35903
11 years ago
Steven Barth 39a001dc69 odhcp6c: various bugfixes * Don't prematurely send RENEW / REBIND when T1 or T2 is > 1 day * Add "norelease" option to not send a RELEASE when stopping
SVN-Revision: 35902
11 years ago
Steven Barth 62ea398cd8 iptables: Add missing IPv6 builtin modules
SVN-Revision: 35898
12 years ago
Steven Barth 9779b0b88c iptables: redo update to 1.4.18 with old linking-behaviour
SVN-Revision: 35896
12 years ago
Steven Barth bacd71648b Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx
SVN-Revision: 35894
12 years ago
Felix Fietkau c3faa6be75 hostapd: include the madwifi headers in the package directory to avoid compile breakage if the madwifi build fails
SVN-Revision: 35893
12 years ago
Steven Barth d023a08753 iptables: update to 1.4.18
SVN-Revision: 35892
12 years ago
Jo-Philipp Wich d75c632de6 firewall3: add default config and firewall.user
SVN-Revision: 35889
12 years ago
Felix Fietkau fa1749e668 hostapd: update to git version 2013-03-02
SVN-Revision: 35887
12 years ago
Jo-Philipp Wich 89be702bff firewall3: update to git head, introduces support for "enabled" option
SVN-Revision: 35845
12 years ago
Steven Barth c81945e979 6relayd: Fix illegal memory accesses Spurious errors when receiving netlink-messages lead to unhandled errors which caused SIGBUS. Thanks to tdavis for debugging
SVN-Revision: 35836
12 years ago
Steven Barth 50b7fa217a 6relayd: various fixes cap preferred and valid lifetimes at more reasonable limits decrease memory usage (remove unnecessary book-keeping)
SVN-Revision: 35835
12 years ago
Jo-Philipp Wich 886ce188bf xtables-addons: fix packaging of iptaccount
SVN-Revision: 35831
12 years ago
Jo-Philipp Wich 557c047f71 firewall3: clear contnrack table on flush, set policies to drop during rule reload
SVN-Revision: 35820
12 years ago
Steven Barth a90b6f7d90 6relayd: Fix config behaviour for rewrite_dns_addr option
SVN-Revision: 35804
12 years ago
Steven Barth 32ac53821f 6relayd: compatibility with broken IPv6 devices * Announce ULA as deprecated if other addresses are available * Allow the announced DNS-server to be overwritten
SVN-Revision: 35803
12 years ago
Jo-Philipp Wich 92062542e2 firewall: fix logging rule regression (#12999)
SVN-Revision: 35745
12 years ago
Jo-Philipp Wich 4fb2cd18c1 firewall3: add support for shell script and iptables-restore style includes
SVN-Revision: 35744
12 years ago
Steven Barth a7b262dc0a netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions.
SVN-Revision: 35743
12 years ago
Jo-Philipp Wich 7d7d88b580 firewall3: update to git head
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
	- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
	- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
	- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')

SVN-Revision: 35738
12 years ago
Florian Fainelli 280fa5a1a2 dante: fix broken configure script not using CFLAGS for conftest
Spotted by doing an ARM hard float build.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 35685
12 years ago
Steven Barth 3081c672fc 6relayd: Fix possible memory corruption issue
SVN-Revision: 35673
12 years ago
Steven Barth f5b63ffd33 6relayd: Workaround potential signal handling issue
SVN-Revision: 35665
12 years ago
Jo-Philipp Wich 02b0c62f33 firewall3 - a C implementation of the current firewall scripts
SVN-Revision: 35643
12 years ago
Felix Fietkau 1d6574b9c3 hostapd: fix the scan wait patch for multiple interfaces
SVN-Revision: 35630
12 years ago
Felix Fietkau 99782943d2 hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update
SVN-Revision: 35619
12 years ago
Jonas Gorski c98b12d911 samba36: fix segmentation fault when trying to add non-existent users
Based on a patch from НКВД. Closes #12962.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 35610
12 years ago
Steven Barth 99b69fd9c5 odhcp6c: allow setting a user-provided prefix as well
SVN-Revision: 35570
12 years ago
Jo-Philipp Wich eeaf2c0b5a iptables: fix bad PKG_RELEASE in previous commit
SVN-Revision: 35569
12 years ago
Jo-Philipp Wich 916902b1d2 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
SVN-Revision: 35568
12 years ago
Felix Fietkau 1810b80ec0 mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default
SVN-Revision: 35565
12 years ago
Steven Barth b8c796fbd7 odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging
SVN-Revision: 35553
12 years ago
Felix Fietkau a9058439cf openvpn-easy-rsa: fix typo in version (#12958)
SVN-Revision: 35508
12 years ago
Felix Fietkau dc2ba40af3 openvpn: remove the stale PKG_REV variable
SVN-Revision: 35499
12 years ago
Felix Fietkau b8c903e6f8 openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball
SVN-Revision: 35498
12 years ago
Jo-Philipp Wich e106f25ee7 firewall: various enhancements
- reduce mssfix related log spam (#10681)
	- separate src and dest terminal chains (#11453, #12945)
	- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

SVN-Revision: 35484
12 years ago
Steven Barth 13544edce7 odhcp6c: Fix timing issues
SVN-Revision: 35472
12 years ago
Jo-Philipp Wich e893d4d9a8 libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend()
SVN-Revision: 35471
12 years ago
Steven Barth 6be5a5a73d odhcp6c: Fix RENEW and REBIND requests
SVN-Revision: 35454
12 years ago
Steven Barth e2193a69c8 odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested
SVN-Revision: 35421
12 years ago
Steven Barth 6a43437908 netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
SVN-Revision: 35420
12 years ago
Steven Barth 9a62439c28 odhcp6c: switch to userspace RA-handling and offload address assignment to netifd
SVN-Revision: 35419
12 years ago
Steven Barth a3368da479 6relayd: Fix announced router flags and IPv6 procfs-configuration
SVN-Revision: 35418
12 years ago
Felix Fietkau 416ce374c0 openvpn: add from openvpn-devel from /packages, fix support for current polarssl
SVN-Revision: 35412
12 years ago
Steven Barth 4bd3f54143 6in4: fix typo in last commit
SVN-Revision: 35409
12 years ago
Steven Barth a0a91963af 6in4: work around hanging wget process
SVN-Revision: 35408
12 years ago
Felix Fietkau 65657fb585 netifd: update to latest version
fixes DNS servers on reload (#12910)
fixes ubus object race on reload or down/up (#12612)

SVN-Revision: 35383
12 years ago
Felix Fietkau c16879a385 samba36: update to 3.6.11 and refresh patches (based on patch from #12914)
SVN-Revision: 35382
12 years ago
Steven Barth 777f7b30ae netifd: implement IPv6 prefix deprecation according to RFC 6204
SVN-Revision: 35377
12 years ago