Commit Graph

365 Commits (c86eeac4352323d5bc988f10b9ec5d9c30f5e80b)

Author SHA1 Message Date
Jo-Philipp Wich 90887b5fb3 firewall3: update to git head
- fixes linking issues with some toolchains

SVN-Revision: 36703
11 years ago
Steven Barth d8d7d7f4aa 6relayd: fix a lease-timing issue with stateful DHCPv6
SVN-Revision: 36702
11 years ago
Jo-Philipp Wich c1ff8cd9bb firewall3: update to git head
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
  - Do not leak memory when processing rules with unknown targets or matches

SVN-Revision: 36698
11 years ago
Felix Fietkau 75bb3138aa uhttpd: update to latest version, fixes #13564, #13560, improves error handling as pointed out in #13537
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36696
11 years ago
Steven Barth 32c6ffb5a1 firewall3: Remove abandonend include
SVN-Revision: 36692
11 years ago
Jo-Philipp Wich b757ca2259 firewall3: update to git head
- fix build on Linux < 3.7
  - limit zone names to 14 bytes

SVN-Revision: 36691
11 years ago
Steven Barth 9c3ac668e0 6relayd: Let OpenWrt override default CFLAGS
SVN-Revision: 36690
11 years ago
Jo-Philipp Wich c12189b379 firewall3: update to git head
- fixes reload when firewall is not running already
  - fixes crash when ipsets are supported but undeclared
  - fixes handling of per zone user chains on reload

SVN-Revision: 36689
11 years ago
Steven Barth 9d115df749 6relayd: Fix a segfault when multiple downstream interfaces are present
SVN-Revision: 36687
11 years ago
Jo-Philipp Wich dd83e87ab0 firewall3: update to git head
- fixes segfault in flush command if ipset support is not available
  - fixes internal rule generation if custom chains are enabled

SVN-Revision: 36686
11 years ago
Jo-Philipp Wich 6eec8009ba ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base
SVN-Revision: 36685
11 years ago
Jo-Philipp Wich 9b6c31d4cc firewall3: move libext*.a copying to compile phase
SVN-Revision: 36684
11 years ago
Jo-Philipp Wich 8df6cd005c netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
SVN-Revision: 36683
11 years ago
Jo-Philipp Wich e8050c6c35 firewall3: update to git head
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
 * make ipset integration more reliable

SVN-Revision: 36681
11 years ago
Jo-Philipp Wich a9a9644efd iptables: use -ffunction-sections, -fdata-sections and --gc-sections
SVN-Revision: 36680
11 years ago
Steven Barth 24c39ddcf7 odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests
SVN-Revision: 36678
11 years ago
Steven Barth 37baf2d6b2 6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better
SVN-Revision: 36677
11 years ago
Steven Barth c6f70381c9 odhcp6c: Fix address / prefix expiry logic
SVN-Revision: 36675
11 years ago
Steven Barth dd161ae62b dnsmasq: add directory for external hosts-files
SVN-Revision: 36655
11 years ago
Steven Barth 334c40da14 6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD
SVN-Revision: 36654
11 years ago
Steven Barth 0f1be4425f netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4
Based on a patch by Kristian Evensen. Thank You.

SVN-Revision: 36653
11 years ago
Felix Fietkau 7365e647f6 uhttpd: update to latest version, fixes index page processing order
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36644
11 years ago
Luka Perkov 4fc8e64a40 iproute2: workaround compile issues with gcc 4.8.x
SVN-Revision: 36642
11 years ago
Steven Barth a62ca72309 odhcp6c: Fix handling of RAs when no DHCPv6-server is present
SVN-Revision: 36641
11 years ago
Luka Perkov 580481cd6d iproute2: upgrade to 3.9.0
SVN-Revision: 36638
11 years ago
Luka Perkov 5be36cbe83 iproute2: print help in connmark
SVN-Revision: 36637
11 years ago
Felix Fietkau d090eea125 uhttpd: update to latest version, fixes a SSL connection memory leak
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36636
11 years ago
Felix Fietkau d481486aad package: fold the IPv6 menu into Network
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36634
11 years ago
Steven Barth e8f3897389 6relayd: Always announce the current MAC-address
* Fixes #13516 thanks to berni for the detailed bugreport.

SVN-Revision: 36629
11 years ago
Steven Barth a1af842016 ds-lite: add ds-lite network protocol handler
SVN-Revision: 36628
11 years ago
Steven Barth 5ce135ed87 netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements
SVN-Revision: 36627
11 years ago
Steven Barth ea71678b09 netifd: added support for setting up 6rd from DHCP
SVN-Revision: 36626
11 years ago
Steven Barth ad93a571c6 odhcp6c: added support for DS-Lite + various fixes
SVN-Revision: 36625
11 years ago
Steven Barth 973dad61b0 firewall3: Remove obsoleted ULA-border
SVN-Revision: 36624
11 years ago
Steven Barth 07d99b62b7 firewall3: add wan6 interface to wan-zone by default
SVN-Revision: 36623
11 years ago
Steven Barth 4cb9d9715c firewall: Remove obsoleted ULA-border rule
SVN-Revision: 36622
11 years ago
Steven Barth 8560648082 6rd: increase metric of default route
This will prefer native IPv6 over 6rd if both are present.

SVN-Revision: 36605
11 years ago
Jo-Philipp Wich d59f8cfa8e iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode
SVN-Revision: 36604
11 years ago
Steven Barth 29d4c36622 add uci support for "proxy-dnssec" in dnsmasq
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.

Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>

SVN-Revision: 36570
11 years ago
Felix Fietkau 9d8e3e03df iw: update to 3.10, sync with nl80211.h changes in compat-wireless
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36569
11 years ago
Steven Barth 9c1ed6447b odhcp6c: Make SLAAC-only work without reqprefix=no
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.

SVN-Revision: 36555
11 years ago
Jo-Philipp Wich 95e139d0b2 ipset-dns: support simultaneously populating IPv4 and IPv6 sets
SVN-Revision: 36554
11 years ago
Jo-Philipp Wich 3c17fd41a4 Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset
SVN-Revision: 36552
11 years ago
Felix Fietkau b85c442e81 hostapd: enable 802.11r for the -full variant (#13250)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36533
11 years ago
Jo-Philipp Wich 4bba31b64c firewall3: update to git head
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422, #13386)
	- add support for fwmark matches and mark setting targets

SVN-Revision: 36521
11 years ago
Jo-Philipp Wich a0b655b8f2 Fix install of iptables pkg-config files.
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146; which should make collectd
appear in snapshots again.

Signed-off-by: Danny Baumann <dannybaumann@web.de>

SVN-Revision: 36509
11 years ago
Jo-Philipp Wich f1e214411d iwinfo: fix iwinfo_hardware() return value if chip id is not found
SVN-Revision: 36471
11 years ago
Jo-Philipp Wich f1497ccf4f netifd: update to git head - disables multicast snooping by default on bridges
SVN-Revision: 36463
11 years ago
Jo-Philipp Wich 05c1424e87 iwinfo: add hw database file
SVN-Revision: 36450
11 years ago
Jo-Philipp Wich e02d373f90 iwinfo: move builtin hardware database to /usr/share/libiwinfo/hardware.txt
SVN-Revision: 36449
11 years ago
Felix Fietkau 5062838fa5 netifd: update to the latest version, fixes interface reload issues when removing the ifname option
SVN-Revision: 36424
11 years ago
Steven Barth 49f97af481 6relayd: Fix generation of RA-messages
SVN-Revision: 36419
11 years ago
Jo-Philipp Wich a040ead1c5 iwinfo: add SR71-15 radio info, fix nl80211 channel/frequency reporting on some architectures
SVN-Revision: 36417
11 years ago
Steven Barth 2c78c1457b firewall3: Make IPv6 ULA-Border generation dynamic
This fixes working behind another router which gives out ULAs.

SVN-Revision: 36416
11 years ago
Steven Barth 2dbcd2ba7b 6relayd: update package description
SVN-Revision: 36413
11 years ago
Steven Barth e17ac4c257 dnsmasq: update to 2.66 Thanks to Christoph König for patches.
SVN-Revision: 36412
11 years ago
Steven Barth 21e4e2a766 odhcp6c: Set default SOL_MAX_RT to 1h
SVN-Revision: 36411
11 years ago
Felix Fietkau d7908e02b5 hostapd: return the frequency to some ubus calls to make integration easier
SVN-Revision: 36410
11 years ago
Jo-Philipp Wich 61a6f45cdc lldpd: upgrade to 0.7.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

SVN-Revision: 36401
11 years ago
Steven Barth 17b8c0c7b8 netifd: Improve IPv6-ULA assignment handling
SVN-Revision: 36383
11 years ago
Steven Barth c96c05d549 odhcp6c: Several fixes and improvements * Add preliminary support for RFC 6603 prefix exclusion * Fix reconfigure-support and reconfigure authentication * Set maximum retransmission timeout for solicitations to 2h * Fix a segfault when parsing IA_PD in advertise messages
SVN-Revision: 36382
11 years ago
Steven Barth 1e78c3e297 6relayd: Add DHCPv6-PD server support, fix relaying in stateful mode
SVN-Revision: 36381
11 years ago
Felix Fietkau 62244d73ae hostapd: update to 2013-04-05
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36376
11 years ago
Felix Fietkau 96bb7c123b build: consistently use 'depends on' instead of 'depends'
make the syntax more compatible with kernel menuconfig

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36351
11 years ago
Jo-Philipp Wich e66a4af8c3 uhttpd: update to git head, fixes regression when parsing IPv6 listen arguments
SVN-Revision: 36348
11 years ago
Jo-Philipp Wich 25ffe0446c iwinfo: print info of all existing wireless ifaces when cli is called without arguments
SVN-Revision: 36339
11 years ago
Felix Fietkau eb10581ce3 uhttpd: update to latest version, fixes compile error with latest libubox
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36338
11 years ago
Felix Fietkau 099e3d8183 netifd: update to latest version, fixes some device handling crashes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36336
11 years ago
Felix Fietkau 88c418bc75 qos-scripts: add queue length and quantum limit, suggested by dtaht
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36294
11 years ago
Jo-Philipp Wich 7ca7bc501e iwinfo: fix frequency/channel and channel/frequency conversions to properly implement 802.11j
SVN-Revision: 36292
11 years ago
John Crispin 04dcd12c91 add portmap support to userland
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36284
11 years ago
John Crispin f13ae9965c add "swconfig list" support
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36282
11 years ago
Jo-Philipp Wich f90f025f20 netifd: fix route / route6 regression (#13303)
SVN-Revision: 36281
11 years ago
Steven Barth 3abc915522 Remove deprecated ip6slaac option * use proto=dhcpv6 with reqprefix=no instead
SVN-Revision: 36280
11 years ago
Steven Barth 2c087dc785 Remove obsoleted ipv6-support meta-package
SVN-Revision: 36279
11 years ago
Steven Barth 35d716fbbb netifd: Bump to latest version * Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow)
SVN-Revision: 36196
11 years ago
Steven Barth 0393e52623 netifd: Rewrite IPv6 prefix assignment * Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion
SVN-Revision: 36193
11 years ago
Felix Fietkau 71e9171717 openvpn: enable password save support (#13245)
SVN-Revision: 36144
11 years ago
Steven Barth eedf9e72f9 odhcp6c: Fix a race-condition in RA-handling
Thanks to Markus Stenberg for investigating and providing a fix

SVN-Revision: 36132
11 years ago
Steven Barth 5a9c2c77b4 iptables: don't use --enable-ipv6 if IPv6 is disabled
SVN-Revision: 36125
11 years ago
Steven Barth 6529cf6cea odhcp6c: minor bug fixes
SVN-Revision: 36123
11 years ago
Jo-Philipp Wich 6fa1b5346e firewall3: update to git head
* fixes parsing of src/dest '*'
	* fixes parsing of proto 'all'

SVN-Revision: 36111
11 years ago
Jo-Philipp Wich 76d1c0a067 firewall3: update to git head
* fixes port remapping rules (#13217)

SVN-Revision: 36100
11 years ago
Hauke Mehrtens c9544f4af0 kernel: add some fixes for kernel 3.9
This patch fixes some compile problems with kernel 3.9 and adds some missing linux 3.9 handling into kernel packages.

SVN-Revision: 36098
11 years ago
Steven Barth 261be7b8f3 netifd: Fix adding IPv6 DNS-servers to resolv.conf
In some cases IPv6 DNS-servers were not added correctly.

SVN-Revision: 36095
11 years ago
Steven Barth eeb88a1df3 odhcp6c: Fix metric for on-link prefix routes
SVN-Revision: 36094
11 years ago
Jo-Philipp Wich 6fbd824e9b firewall3: update to git head
* fixes reload handling of zones and ipsets that are still running but already deleted from the config

SVN-Revision: 36092
11 years ago
Jo-Philipp Wich 03cb7986fc firewall3: update to git head
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197)
	- do not allow src_mac option for SNAT rules

SVN-Revision: 36090
11 years ago
Felix Fietkau 31876c193a hostapd: fix build errors on supplicant-only builds
SVN-Revision: 36085
11 years ago
Steven Barth 3ebdd3b330 odhcp6c: fix preference handling, custom client-ID * thanks to mbidewell for investigating
SVN-Revision: 36083
11 years ago
Felix Fietkau 2167101c90 hostapd: initial prototype of an ubus binding
Supports listing, removing and banning clients, and hooking into
probe/assoc/auth requests via object subscribe.

SVN-Revision: 36081
11 years ago
Felix Fietkau 84069f8534 uhttpd: update to latest version, fixes an occasional crash on CGI scripts
SVN-Revision: 36034
11 years ago
Jo-Philipp Wich 54f9f47a28 firewall3: update to git head
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
 * Allow "network" and "device" commands while firewall is running (to make them usable in includes)

SVN-Revision: 36009
11 years ago
John Crispin fce3deddff use new button scheme
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36004
11 years ago
Jo-Philipp Wich 9faa312dbb firewall3: update to git head
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
 * Make NAT reflection direction configurable
 * Map init script stop action to flush
 * Map init script reload action to reload
 * Respect init script disabled state in hotplug handler

SVN-Revision: 35998
11 years ago
Felix Fietkau 9ddc45bc3f hostapd: fix client reassociation after too many ACK failures
SVN-Revision: 35973
12 years ago
Jo-Philipp Wich 8c7ed1cb7b firewall3: update to git head
* Fixes compilation against eglibc
 * Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
 * Fixes tracking logic for user chains by differentiating between reloads and restarts
 * Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
 * Supports legacy "tcpudp" protocol notation again

SVN-Revision: 35969
12 years ago
Jo-Philipp Wich e259ecad7e Revert "firewall3: update to git head"
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.

SVN-Revision: 35904
12 years ago
Jo-Philipp Wich 50213fc354 firewall3: update to git head
- introduce per-zone user chains
	- support legacy "tcpudp" protocol notation

SVN-Revision: 35903
12 years ago
Steven Barth 39a001dc69 odhcp6c: various bugfixes * Don't prematurely send RENEW / REBIND when T1 or T2 is > 1 day * Add "norelease" option to not send a RELEASE when stopping
SVN-Revision: 35902
12 years ago