- allows building without IPv6 support
- uses more robust rules to cope with missing libext.a
- uses better linking strategy to avoid symbol clashes with older iptables
- introduces source compatiblity layer for different libxtables versions
SVN-Revision: 36736
At offset 0x40, signature for TL-MR10U/TL-MR11U begin
from 0x00, not 0x10/0x11.
Signed-off-by: Cezary Jackiewicz <cezary.jackiewicz@gmail.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
SVN-Revision: 36727
MR10U is closer to MR3040 than WR703N. This changes also
enable USB power on GPIO18.
Signed-off-by: Cezary Jackiewicz <cezary.jackiewicz@gmail.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
SVN-Revision: 36726
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
- automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
- properly support output rules with dest '*' to hook directly into delegate_output
- fixes crash when processing rules with unresolved targets
SVN-Revision: 36721
Tested on Buffalo WZR-600DHP with ar8316 switch. Commands used to mirror both
RX and TX traffic from LAN port 1 to LAN port 4:
$ swconfig dev switch0 set enable_mirror_rx 1
$ swconfig dev switch0 set enable_mirror_tx 1
$ swconfig dev switch0 set mirror_monitor_port 4
$ swconfig dev switch0 set mirror_source_port 1
Signed-off-by: Colin Leitner <colin.leitner@googlemail.com>
Tested-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 36713
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
- Do not leak memory when processing rules with unknown targets or matches
SVN-Revision: 36698
- fixes reload when firewall is not running already
- fixes crash when ipsets are supported but undeclared
- fixes handling of per zone user chains on reload
SVN-Revision: 36689
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
* make ipset integration more reliable
SVN-Revision: 36681
* update the bootcode.bin to the newest version
- gpu/cpu mem split is now configured through config.txt, so no need
to create more than one sd card image (just edit the config.txt)
- bootcode.bin now supports the never revision 2 raspberry pis
* add a commented prepopulated config.txt for easier config changes
Taken from <https://github.com/Evilpaul/RPi-config>
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36668
* Use the gzipped download feature from github to get a tarball with a
stable hash.
* Use Liam McLoughlin's git which has a subset of the original git's
contents, dropping all the precompiled modules and kernels.
Reduces the download size from ~1.27 GiB to ~25 MiB.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36667
This is already handles in compat-3.8.h as prandom* was introduced
in 3.8; only the aliases were removed in 3.10.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36666
Felix Fietkau
Steven Barth
Jo-Philipp Wich
Gabor Juhos
Luka Perkov
Jonas Gorski