hak5
/
openwrt-owl
mirror of https://github.com/hak5/openwrt-owl.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
26,216 Commits
4 Branches
8 Tags
169 MiB
Commit Graph

541 Commits (1ae42098e9aaaf04b096d595f9a5525fa741c4ea)

Author SHA1 Message Date
Steven Barth 95e9c260bc odhcp6c: validate hop-limit on RAs 
SVN-Revision: 38285
 2013-10-02 14:16:05 +00:00
Steven Barth 0ad1d06c13 6relayd: remove compat ULA setting by default (too many bad sideeffects) 
SVN-Revision: 38283
 2013-10-02 06:14:39 +00:00
Steven Barth 1d485c737e netifd: don't remove & readd addresses that only have a changed lifetime 
SVN-Revision: 38269
 2013-10-01 17:30:05 +00:00
Felix Fietkau f8ee248701 uhttpd: add a config option for using ustream-polarssl, and use it by default 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38250
 2013-09-29 11:26:09 +00:00
Felix Fietkau 59c05778f0 uhttpd: fix appending https ports to cmdline 
Otherwise it is started only on non-secure ports.

Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@neratec.com>

SVN-Revision: 38171
 2013-09-25 07:44:48 +00:00
Gabor Juhos 99d13b09b9 iwinfo: add Ubiquiti WispStation M5 to hardware.txt 
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

SVN-Revision: 38145
 2013-09-24 05:58:29 +00:00
Luka Perkov ef5f836207 fix various init scripts 
Changes include:

* removing unused variables
* replacing spaces with tabs where appropriate
* more consistency with variable declarations

Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 38142
 2013-09-23 21:58:36 +00:00
Felix Fietkau 5137cdb1e1 xtables-addons: fix missing conversion from r38021 (resolves a broken dependency) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38124
 2013-09-22 19:49:23 +00:00
Steven Barth 4894800bdd odhcp6c: handle NoAddrsAvail IA-status 
SVN-Revision: 38092
 2013-09-21 10:54:13 +00:00
Steven Barth 808a1c7808 odhcp6c: Restart when server returns IAID error 
SVN-Revision: 38032
 2013-09-18 10:27:15 +00:00
John Crispin f874094402 procd: convert various packages to procd style init.d scripts 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38023
 2013-09-17 21:45:30 +00:00
John Crispin f12f4074af kernel: make most modules use AutoProbe 
now that we have modprobe we can set more than half of the modules to AutoProbe

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38021
 2013-09-17 21:45:17 +00:00
Felix Fietkau b2447d1fca hostapd: adjust the md5sum for the uploaded source tarball (fixes #14155) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37990
 2013-09-14 20:07:35 +00:00
Felix Fietkau 28eceb0343 iwinfo: when using nl80211, parse interface combinations instead of creating/deleting interfaces 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37983
 2013-09-14 14:46:51 +00:00
Jo-Philipp Wich c3cc912ed9 uhttpd: udpat to git head 
- fixes buffer corruption with JSON-RPC list calls
	- change JSON-RPC protocol to include the session ID into the call
	  attributes instead of passing it via the URL
	- forcibly pass effective session ID as "ubus_rpc_session" attribute
	  to called procedures
	- change ubus acl checking to conform with new ubus session namespace

SVN-Revision: 37962
 2013-09-13 13:24:45 +00:00
Steven Barth eba3ab9ade odhcp6c: Timing workaround for buggy servers 
SVN-Revision: 37951
 2013-09-12 12:57:42 +00:00
Steven Barth b2a71fedd9 odhcp6c: more compatibility fixes 
SVN-Revision: 37907
 2013-09-05 21:13:51 +00:00
Steven Barth 0a85c59040 netfilter: Add IPv6-NAT support for kernel and ipt Thanks to Berni, Adam Novak and Sedat Dilek for patches and inspiration 
SVN-Revision: 37866
 2013-09-01 17:59:48 +00:00
Steven Barth 3e647ac9b6 iptables: Update to 1.4.20 
SVN-Revision: 37865
 2013-09-01 13:46:10 +00:00
Felix Fietkau 7fc90889d5 netifd: update to the latest version, fixes a bridge handling corner case on config reload 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37856
 2013-08-29 22:20:36 +00:00
Vasilis Tsiligiannis 03b1d4289b lldpd: Add libbsd dependency when using eglibc 
Signed-off-by: Vasilis Tsiligiannis <acinonyx@openwrt.gr>

SVN-Revision: 37837
 2013-08-25 18:47:08 +00:00
Jo-Philipp Wich 2864fb107f firewall: update to git head 
- uses "-j CT --notrack" instead of deprecated "-j NOTRACK"
	- fixes support for rule sections with target "NOTRACK"

SVN-Revision: 37777
 2013-08-14 15:40:38 +00:00
Felix Fietkau 4cda88a879 hostapd: fix typo in version number 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37742
 2013-08-08 20:45:15 +00:00
Felix Fietkau 9df75e7f34 hostapd: fix ubus reconnect handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37741
 2013-08-08 20:45:12 +00:00
Felix Fietkau 750197b3af hostapd: add a build variant for wpa_supplicant with p2p (aka Wi-Fi Direct) support 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37739
 2013-08-08 16:24:50 +00:00
Felix Fietkau f53b96813e hostapd: update to latest version (20130707) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37738
 2013-08-08 16:04:19 +00:00
Felix Fietkau 9a22315ca4 hostapd: Settings for DAE/CoA server 
hostapd supports "Dynamic Authorization Extensions", making it possible
to forcibly disconnect a user by sending it a RADIUS "Disconnect-Request"
packet.

I've added three new variables to enable setting of the
"radius_das_client" and "radius_das_port" variables in the hostapd
configuration, which enable these extensions.

* dae_client - IP of the client that can send disconnect requests
* dae_secret - shared secret for DAE packets

These are combined into the "radius_das_client" option in hostapd.conf
To enable the server, both dae_client and dae_secret must be set.

* dae_port - optional, default value is 3799 as specified in RFC 5176

Signed-off-by: Martijn van de Streek <martijn@vandestreek.net>

SVN-Revision: 37734
 2013-08-06 18:55:30 +00:00
Felix Fietkau 91f0b411f4 hostapd: Fix WDS/WEP usage 
WEP in WDS is currently broken in hostapd. Add a patch
to fix the issue.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37733
 2013-08-06 17:59:12 +00:00
Felix Fietkau 76ca564e79 hostapd: Refresh patches 
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37731
 2013-08-06 17:59:05 +00:00
Felix Fietkau 22e012bad8 hostapd: Add an option to disable beaconing 
Add a patch for hostapd that introduces a config option
"start_disabled" which can be used to bring up an AP
interface with beaconing disabled. This is useful in
a Repeater-AP setup where the Repeater AP has to start
beaconing only after the WDS link has been established.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37730
 2013-08-06 17:59:02 +00:00
Felix Fietkau 719adb6471 uhttpd: update to the latest version, fixes a crash on early cgi/lua process termination 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37628
 2013-07-31 22:07:09 +00:00
Luka Perkov 1646bd096c iproute2: update to 3.10.0 
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37590
 2013-07-28 23:27:35 +00:00
Felix Fietkau aff8c18ad0 openvpn: update to 2.3.2 
this patches updates openvpn to v2.3.2
and adds a PKG_MD5SUM to the Makefile

This release fixes a memory access violation when cipher none is used
on ar71xx - at least with my config

Signed-off-by: Peter Wagner <tripolar@gmx.at>

SVN-Revision: 37560
 2013-07-26 12:35:22 +00:00
Steven Barth 4d37ae33b6 6relayd: Overridden DNS should affect DHCPv6 
SVN-Revision: 37558
 2013-07-26 11:59:25 +00:00
Felix Fietkau 8faa8a6420 uhttpd: update to latest version, fixes issues with POST and keep-alive (#13940) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37556
 2013-07-26 10:03:07 +00:00
Felix Fietkau 3d2ace5d71 authsae: add myself as a maintainer 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37555
 2013-07-26 10:03:03 +00:00
Felix Fietkau 4478c69b86 authsae: adapt uci scripts to use authsae 
This patch modifies the uci scripts to be able to
start meshd-nl80211 for encrypted mesh networks,
therefor a new script (authsae.sh) is inserted.

Signed-off-by: Emanuel Taube <emanuel.taube@gmail.com>
[etienne.champetier@free.fr: just update mac80211.sh path]
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37554
 2013-07-26 10:02:59 +00:00
Felix Fietkau 6dbea6416b authsae 80211s authentication daemon 
This patch adds authsae open80211s authentication daemon (http://open80211s.org)
It's a rework of Peter Naulls patch (http://patchwork.openwrt.org/patch/1350/)
I've excluded the sample conf file as it's useless when used with mac80211.sh (Emanuel Taube patch)
It now link against libnl-tiny instead of libnl (patch merged in authsae git)
Authsae is 58 Ko (OPENSSL_WITH_EC option adds 35Ko to libopenssl)

Signed-off-by: Peter Naulls <peter@chocky.org>
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37553
 2013-07-26 10:02:55 +00:00
Felix Fietkau 85e585ddce ead: fix compile errors with recent kernels 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37482
 2013-07-20 12:56:07 +00:00
Hauke Mehrtens 96f1953fb1 kernel: fix xtables-addons dependencies with kernel 3.3 
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 37461
 2013-07-19 22:36:47 +00:00
Jo-Philipp Wich 7bbe1656cb xtables-addons: use a select of kmod-ipt-core instead of depending on it 
SVN-Revision: 37425
 2013-07-19 09:58:17 +00:00
Jo-Philipp Wich d474a77edf xtables-addons: add missing kmod dependencies 
SVN-Revision: 37424
 2013-07-19 09:58:11 +00:00
Jo-Philipp Wich d6e8047f83 firewall: update to git head 
- handles redirects as port relocations if the dest_ip points to the router itself

SVN-Revision: 37374
 2013-07-16 14:04:59 +00:00
Steven Barth 54ae5ce507 netifd: Fix IPv6-prefix assignment with continuous hints 
SVN-Revision: 37371
 2013-07-16 12:07:11 +00:00
Steven Barth 6a034ce5b1 6relayd: Fix DHCPv6-PD with continuous hints 
SVN-Revision: 37370
 2013-07-16 12:07:06 +00:00
Steven Barth 0444e32acd Bump iptables version 
SVN-Revision: 37329
 2013-07-15 06:12:07 +00:00
Steven Barth ea6a5d0c22 iptables: restore reap functionality to recent module 
The reap functionality appears to have been accidentally disabled by
commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see:

  git://git.netfilter.org/iptables.git

and subsequently in iptables 1.4.15 and later.  This adds a patch to
restore reap functionality for recent_opts_v1.

Signed-off-by: Russell Senior <russell@personaltelco.net>

SVN-Revision: 37328
 2013-07-15 06:12:03 +00:00
Luka Perkov 1a963355b0 netifd: update to latest version, add bridge_empty option 
with this option enabled it's possible to create empty bridges

Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37318
 2013-07-14 18:50:04 +00:00
John Crispin 7d7c2ff5f9 swconfig: fix dependency bug introduced by [37304] 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37316
 2013-07-14 18:16:42 +00:00
Hauke Mehrtens f8d55e7541 brcm47xx: use b53 phy driver for the switch in kernel 3.10 
This makes it possible to use swconfig to controll the switch.

This was tested with devices using b43 and bgmac.
This was not tested on devices using tg3.
This does not support the adm switch used in some very old devices.

SVN-Revision: 37304
 2013-07-14 14:11:17 +00:00
John Crispin 8d546699c5 dropbear: register a config.change trigger 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37245
 2013-07-11 17:00:40 +00:00
Felix Fietkau 4e042e4a84 ipset: force the shell to bash to fix build issues on mac os x 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37227
 2013-07-10 14:59:00 +00:00
Felix Fietkau 4a0c312dc3 xtables-addons: update to version 2.3, adds linux 3.10 compatibility 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37226
 2013-07-10 14:51:13 +00:00
Felix Fietkau f98f69adc9 firewall: add missing dependencies 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37224
 2013-07-10 11:33:48 +00:00
John Crispin fc40051569 lantiq: move dsl tools to package/network/config 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37198
 2013-07-08 09:01:38 +00:00
Luka Perkov 4a7439401b linux-atm: fix dependencies 
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37189
 2013-07-08 00:37:49 +00:00
Jo-Philipp Wich 4aa82d07a6 firewall: allow routed lan<->lan traffic by default 
SVN-Revision: 37171
 2013-07-04 18:10:36 +00:00
Jo-Philipp Wich 2561bce232 lldpd: upgrade to 0.7.5 
lldpd 0.7.1 has several alignment issues that trip a system configured
to fault on misaligned accesses.  Version 0.7.5 fixes that along with a
few other minor issues.

Signed-off-by: John Szakmeister <john@szakmeister.net>

SVN-Revision: 37168
 2013-07-04 16:57:03 +00:00
Steven Barth e3a369e597 odhcp6c: avoid integer overflows in resend logic 
SVN-Revision: 37150
 2013-07-03 16:14:24 +00:00
Steven Barth b9aa47d5b6 odhcp6c: add missing config parameter 
SVN-Revision: 37148
 2013-07-03 13:50:06 +00:00
Jo-Philipp Wich 7c197d9f0e hostapd: truncate default mac file before adding entries to it (#13797) 
SVN-Revision: 37114
 2013-07-01 10:52:35 +00:00
Felix Fietkau ee68734929 hostapd: fix multi-ssid and AP+STA, clean up code 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37111
 2013-06-30 21:01:13 +00:00
Felix Fietkau 60b040bbaf hostapd: update to latest git version 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37110
 2013-06-30 20:27:38 +00:00
Felix Fietkau 12c033dfd9 mac80211: update to wireless-testing 2013-06-27, fix ATH_USER_REGD handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37097
 2013-06-30 10:44:19 +00:00
Jo-Philipp Wich 2d506f46fb firewall: update to git head 
- uses custom formatting for mac addresses to ensure leading zeroes, required for older iptables mac match parser

SVN-Revision: 37082
 2013-06-29 13:28:27 +00:00
Steven Barth d8051a8814 netifd: fix typo in dhcp script 
SVN-Revision: 37051
 2013-06-28 04:19:21 +00:00
Florian Fainelli fe7c236a06 6relayd: prevent build on AVR32 
AVR32 misses a bunch of updated syscalls, including timerfd_create()
which is used by 6relayd. Since that requires Linux/libc changes, just
prevent building it for now.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 37040
 2013-06-27 15:33:05 +00:00
Steven Barth cb66ed972b odhcp6c: Add missing config option "ifaceid" 
SVN-Revision: 37033
 2013-06-25 05:18:20 +00:00
John Crispin e7dbdad43b hostapd: fix superflous coma 
this cause the wps trigegr to be copied to the wrong place

https://dev.openwrt.org/ticket/13753

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37031
 2013-06-24 16:44:18 +00:00
Steven Barth eecce5abad arptables: Bump to 0.0.4 
SVN-Revision: 37020
 2013-06-24 05:48:12 +00:00
Steven Barth 69cd09ebbf 6relayd: don't accidentally remove regular prefix routes 
SVN-Revision: 37018
 2013-06-23 16:26:09 +00:00
Steven Barth f47c4c80d4 6relayd: fix lease-update behaviour for clients without reconfigure 
SVN-Revision: 37011
 2013-06-22 08:31:28 +00:00
Steven Barth d0d5f109d8 6relayd: Keep PD-downstream across RENEW/REBIND 
SVN-Revision: 37009
 2013-06-22 08:19:25 +00:00
John Crispin 4ebf19b48f packages: clean up the package folder 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37007
 2013-06-21 16:54:37 +00:00
John Crispin 4999ae4236 hostapd: remove old button hotplug script 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36991
 2013-06-21 16:53:07 +00:00
Steven Barth 5108318edb 6relayd: Fix DHCPv6-PD assignment logic 
SVN-Revision: 36980
 2013-06-21 06:15:09 +00:00
Steven Barth de2a7547b7 6relayd: correctly set downstream routes for DHCPv6-PD 
SVN-Revision: 36969
 2013-06-19 13:08:33 +00:00
Felix Fietkau b4babf9f81 netifd: update to latest version, fixes a NULL pointer deref bug 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36965
 2013-06-18 16:24:48 +00:00
Jo-Philipp Wich 65f82e2311 firewall: update to git head 
- fixes misprocessing of unknown symbolic protocol names

SVN-Revision: 36963
 2013-06-18 14:30:51 +00:00
Jo-Philipp Wich 37ae268729 firewall: update to git head 
- fixes calculation of IPv4 netmasks derived from 0.0.0.0/0 CIDRs

SVN-Revision: 36960
 2013-06-18 14:14:35 +00:00
Steven Barth 5219d38da2 odhcp6c: Add option to override interface identifier in RA-client 
SVN-Revision: 36959
 2013-06-18 12:51:14 +00:00
Steven Barth 9f1899242c netifd: IPv6: Fix sorting order in last commit. 
SVN-Revision: 36952
 2013-06-17 21:29:14 +00:00
Steven Barth 213269a8f7 netifd: Satisfy IPv6 assignments ordered by prefix length 
SVN-Revision: 36950
 2013-06-17 21:16:22 +00:00
Jo-Philipp Wich 541fbfbb9e hostapd: correctly handle macfile uci option 
Make hostapd.sh correctly handle the macfile uci option.

Such option specifies the macfile name to pass into the
hostapd configuration file. Moreover, if a maclist option
has been specified, copy the macfile before appending new
entries.

Signed-off-by: Antonio Quartulli <antonio@open-mesh.com>

SVN-Revision: 36944
 2013-06-17 11:59:29 +00:00
Jo-Philipp Wich dfea3bae11 dnsmasq: use host-record instead of address 
Using "--address" for individual host A records is broken, use "--host-record" instead.
The following patch changes dnsmasq.init to build individual host records using "--host-record" instead of "--address".

Signed-off-by: Adam Gensler <openwrt at gnslr.us>

[jow: shorter description, simplified shell script code]

SVN-Revision: 36943
 2013-06-17 11:55:30 +00:00
Jo-Philipp Wich 36d3fafd77 firewall: update to git head 
- properly process intermediate "!" options in argument list (fixes negated ipsets)

SVN-Revision: 36935
 2013-06-13 18:54:49 +00:00
Jo-Philipp Wich 0db38adf1c firewall: update to git head 
- fixes handling of reject target for rule sections with specific destination zone

SVN-Revision: 36933
 2013-06-13 12:49:00 +00:00
Jo-Philipp Wich 1150e299bb uhttpd: expose missing options to uci 
SVN-Revision: 36932
 2013-06-13 11:55:12 +00:00
Steven Barth 302cf427cb odhcp6c: add sanity checks for NDP and MTU parameters from RAs 
SVN-Revision: 36930
 2013-06-13 06:38:48 +00:00
Steven Barth 4f0a0defa6 6relayd: make route preference and prefix on-link flag configurable 
SVN-Revision: 36922
 2013-06-11 20:52:27 +00:00
Steven Barth f6dd266c97 iproute2: add drop-failed rule action (patch by Jonas Gorski) 
SVN-Revision: 36910
 2013-06-11 09:27:46 +00:00
Felix Fietkau 9fb5bf176e netifd: update to latest version, uses the new uci/blob code from libuci 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36909
 2013-06-10 12:42:30 +00:00
Steven Barth 5caa45d0b3 ppp: correctly handle address when reloading 
SVN-Revision: 36904
 2013-06-10 10:42:34 +00:00
Steven Barth 491deaed2c netifd: improve reloading behaviour 
SVN-Revision: 36903
 2013-06-10 10:42:15 +00:00
Jo-Philipp Wich bc73ca5619 iwinfo: add phyname attribute, this is useful to group networks by radio phy 
SVN-Revision: 36889
 2013-06-09 14:39:14 +00:00
Jo-Philipp Wich cb24c37858 libiwinfo: ignore log messages from wpa_supplicant while scanning 
wpa_supplicant may send log and event messages intermixed with the
expected scan results.  This makes "iwinfo wlan0 scan" and LuCI
"site survey" display nothing when many AP's are around.

Eliminate the CTRL-EVENT-BSS-ADDED events, interspersed log messages,
lines with unexpected format.  Increase timeout to handle the max
number of channels (2.4, 3.6, 4.9, 5 GHz).  Insure receive buffer is
null-terminated.

Signed-off-by: Jean-Pierre Tosoni <jp.tosoni@acksys.fr>

SVN-Revision: 36888
 2013-06-09 14:39:09 +00:00
Steven Barth f995c90329 netifd: Improve IPv6 source-routing policies 
SVN-Revision: 36884
 2013-06-08 13:26:33 +00:00
Jonas Gorski b9de8ca7f5 netifd: bring wifi down before shutting down 
works around wifiX references not being freed on network restart.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 36883
 2013-06-08 11:44:12 +00:00
Jo-Philipp Wich e7b15446a8 firewall: udpate to git head (#13652, #13654, #13658) 
- optimizes chain usage for ingress rules
  - adds limit match support for redirect rules
  - fixes automatic redirect dest detection on little endian systems
  - leaves base chains in place on reload to allow user rules to target e.g. "reject"

SVN-Revision: 36871
 2013-06-06 14:12:02 +00:00
Jo-Philipp Wich 5cf06bd17b firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols 
SVN-Revision: 36868
 2013-06-06 14:02:29 +00:00
Jo-Philipp Wich e94cf1c72b iptables: install libext*.a into staging dir 
SVN-Revision: 36867
 2013-06-06 14:02:24 +00:00
Jo-Philipp Wich ecc95dcba8 firewall: update to git head (#13652) 
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
  - uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones

SVN-Revision: 36854
 2013-06-05 11:40:40 +00:00
Jo-Philipp Wich 0a74d9d5c3 firewall3: fix accidentally changed install directive 
SVN-Revision: 36840
 2013-06-04 12:30:50 +00:00
Jo-Philipp Wich 07a3110e88 firewall: fix git source url 
SVN-Revision: 36839
 2013-06-04 12:23:47 +00:00
Jo-Philipp Wich b721c92221 firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA 
SVN-Revision: 36838
 2013-06-04 12:21:52 +00:00
Jo-Philipp Wich 0dd6753c09 Drop legacy firewall package 
SVN-Revision: 36837
 2013-06-04 12:21:44 +00:00
Jo-Philipp Wich 6f60308257 firewall3: update to git head (#13641) 
* Fixes wrong chain used for zone forward policy

SVN-Revision: 36830
 2013-06-04 10:26:49 +00:00
Jo-Philipp Wich 6eeca5176e firewall3: update to git head 
- Fixes problems with reusing matches or targets from loadable extensions

SVN-Revision: 36826
 2013-06-03 16:38:29 +00:00
Felix Fietkau 8c69057980 uhttpd: update to latest version, fixes CGI related crashes 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36817
 2013-06-01 21:43:06 +00:00
Steven Barth 089d6612ce 6relayd: Work around Windows DHCPv6 quirks Announcing deprecated addresses breaks Windows clients 
SVN-Revision: 36815
 2013-06-01 17:51:02 +00:00
Steven Barth 7ae506c7d4 odhcp6c: work around spurious false-positive address DECLINEs 
SVN-Revision: 36809
 2013-05-31 13:49:17 +00:00
Jo-Philipp Wich 3bb397c997 firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly 
SVN-Revision: 36806
 2013-05-31 13:23:23 +00:00
Steven Barth bf582fbb7b odhcp6c: fix handling of multiple RAs in a row 
SVN-Revision: 36804
 2013-05-31 10:02:39 +00:00
Steven Barth cdc3caf533 6relayd: Better compatibility with misbheaving DHCPv6 clients * Make the "best" address / prefix the first one being announced * Only add the "best" address to the hosts-file 
SVN-Revision: 36772
 2013-05-30 15:42:30 +00:00
Steven Barth 519f27cd33 netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes 
SVN-Revision: 36771
 2013-05-30 15:42:25 +00:00
Felix Fietkau 02fe12c00d uhttpd: update again to fix a ubus plugin crash bug 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36770
 2013-05-30 13:16:38 +00:00
Felix Fietkau eeb7fdc13e uhttpd: update to latest version, fixes script timeout for ubus requests 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36767
 2013-05-30 10:44:20 +00:00
Steven Barth dc6625f977 6relayd: more verbosity in leases and logging 
SVN-Revision: 36764
 2013-05-30 07:56:55 +00:00
Steven Barth 56a3396bf2 iptables: bump to 1.4.19.1 
SVN-Revision: 36760
 2013-05-29 14:58:04 +00:00
Steven Barth 439fdd4d65 netifd: fix IPv6-addresses disappearing due to lifetime-overflows 
SVN-Revision: 36748
 2013-05-28 18:32:01 +00:00
Steven Barth 23b3cebd56 odhcp6c: fix or debug disappearing IPv6 addresses 
SVN-Revision: 36745
 2013-05-28 16:28:14 +00:00
Felix Fietkau e6250644be mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36743
 2013-05-28 11:10:41 +00:00
Steven Barth 61c0c6ab68 6relayd: RFC 6204 and naming improvements * Announce delegated prefixes using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default 
SVN-Revision: 36738
 2013-05-27 20:38:13 +00:00
Jo-Philipp Wich 63603ee478 firewall3: update to git head 
- allows building without IPv6 support
	- uses more robust rules to cope with missing libext.a
	- uses better linking strategy to avoid symbol clashes with older iptables
	- introduces source compatiblity layer for different libxtables versions

SVN-Revision: 36736
 2013-05-27 15:13:19 +00:00
Jo-Philipp Wich e4f8c38ed1 firewall3: update to git head 
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
  - automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
  - properly support output rules with dest '*' to hook directly into delegate_output
  - fixes crash when processing rules with unresolved targets

SVN-Revision: 36721
 2013-05-26 15:48:04 +00:00
Steven Barth f63064a257 6relayd: Fix DHCPv6-server picking up addresses from master interface 
SVN-Revision: 36718
 2013-05-26 10:06:02 +00:00
Jo-Philipp Wich 90887b5fb3 firewall3: update to git head 
- fixes linking issues with some toolchains

SVN-Revision: 36703
 2013-05-24 12:49:06 +00:00
Steven Barth d8d7d7f4aa 6relayd: fix a lease-timing issue with stateful DHCPv6 
SVN-Revision: 36702
 2013-05-24 12:31:30 +00:00
Jo-Philipp Wich c1ff8cd9bb firewall3: update to git head 
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
  - Do not leak memory when processing rules with unknown targets or matches

SVN-Revision: 36698
 2013-05-23 13:07:44 +00:00
Felix Fietkau 75bb3138aa uhttpd: update to latest version, fixes #13564, #13560, improves error handling as pointed out in #13537 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36696
 2013-05-23 10:50:42 +00:00
Steven Barth 32c6ffb5a1 firewall3: Remove abandonend include 
SVN-Revision: 36692
 2013-05-23 06:38:25 +00:00
Jo-Philipp Wich b757ca2259 firewall3: update to git head 
- fix build on Linux < 3.7
  - limit zone names to 14 bytes

SVN-Revision: 36691
 2013-05-22 14:15:53 +00:00
Steven Barth 9c3ac668e0 6relayd: Let OpenWrt override default CFLAGS 
SVN-Revision: 36690
 2013-05-22 11:58:54 +00:00
Jo-Philipp Wich c12189b379 firewall3: update to git head 
- fixes reload when firewall is not running already
  - fixes crash when ipsets are supported but undeclared
  - fixes handling of per zone user chains on reload

SVN-Revision: 36689
 2013-05-22 11:37:41 +00:00
Steven Barth 9d115df749 6relayd: Fix a segfault when multiple downstream interfaces are present 
SVN-Revision: 36687
 2013-05-21 18:05:37 +00:00
Jo-Philipp Wich dd83e87ab0 firewall3: update to git head 
- fixes segfault in flush command if ipset support is not available
  - fixes internal rule generation if custom chains are enabled

SVN-Revision: 36686
 2013-05-21 14:49:37 +00:00
Jo-Philipp Wich 6eec8009ba ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base 
SVN-Revision: 36685
 2013-05-21 13:00:28 +00:00
Jo-Philipp Wich 9b6c31d4cc firewall3: move libext*.a copying to compile phase 
SVN-Revision: 36684
 2013-05-21 12:58:36 +00:00
Jo-Philipp Wich 8df6cd005c netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset 
SVN-Revision: 36683
 2013-05-21 12:58:15 +00:00
Jo-Philipp Wich e8050c6c35 firewall3: update to git head 
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
 * make ipset integration more reliable

SVN-Revision: 36681
 2013-05-21 10:15:14 +00:00
Jo-Philipp Wich a9a9644efd iptables: use -ffunction-sections, -fdata-sections and --gc-sections 
SVN-Revision: 36680
 2013-05-21 10:15:10 +00:00
Steven Barth 24c39ddcf7 odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests 
SVN-Revision: 36678
 2013-05-21 09:13:48 +00:00
Steven Barth 37baf2d6b2 6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better 
SVN-Revision: 36677
 2013-05-21 09:13:40 +00:00
Steven Barth c6f70381c9 odhcp6c: Fix address / prefix expiry logic 
SVN-Revision: 36675
 2013-05-20 14:54:20 +00:00
Steven Barth dd161ae62b dnsmasq: add directory for external hosts-files 
SVN-Revision: 36655
 2013-05-17 14:44:12 +00:00
Steven Barth 334c40da14 6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD 
SVN-Revision: 36654
 2013-05-17 14:44:07 +00:00
Steven Barth 0f1be4425f netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4 
Based on a patch by Kristian Evensen. Thank You.

SVN-Revision: 36653
 2013-05-17 14:44:02 +00:00
Felix Fietkau 7365e647f6 uhttpd: update to latest version, fixes index page processing order 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36644
 2013-05-16 11:38:19 +00:00
Luka Perkov 4fc8e64a40 iproute2: workaround compile issues with gcc 4.8.x 
SVN-Revision: 36642
 2013-05-16 00:04:48 +00:00
Steven Barth a62ca72309 odhcp6c: Fix handling of RAs when no DHCPv6-server is present 
SVN-Revision: 36641
 2013-05-15 11:07:01 +00:00