hak5
/
openwrt-owl
mirror of https://github.com/hak5/openwrt-owl.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
27,153 Commits
4 Branches
8 Tags
169 MiB
Commit Graph

690 Commits (b4d93a52cfdc75fde4e56979f6749977197effca)

Author SHA1 Message Date
Steven Barth 0ad1d06c13 6relayd: remove compat ULA setting by default (too many bad sideeffects) 
SVN-Revision: 38283
 2013-10-02 06:14:39 +00:00
Steven Barth 1d485c737e netifd: don't remove & readd addresses that only have a changed lifetime 
SVN-Revision: 38269
 2013-10-01 17:30:05 +00:00
Felix Fietkau f8ee248701 uhttpd: add a config option for using ustream-polarssl, and use it by default 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38250
 2013-09-29 11:26:09 +00:00
Felix Fietkau 59c05778f0 uhttpd: fix appending https ports to cmdline 
Otherwise it is started only on non-secure ports.

Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@neratec.com>

SVN-Revision: 38171
 2013-09-25 07:44:48 +00:00
Gabor Juhos 99d13b09b9 iwinfo: add Ubiquiti WispStation M5 to hardware.txt 
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

SVN-Revision: 38145
 2013-09-24 05:58:29 +00:00
Luka Perkov ef5f836207 fix various init scripts 
Changes include:

* removing unused variables
* replacing spaces with tabs where appropriate
* more consistency with variable declarations

Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 38142
 2013-09-23 21:58:36 +00:00
Felix Fietkau 5137cdb1e1 xtables-addons: fix missing conversion from r38021 (resolves a broken dependency) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38124
 2013-09-22 19:49:23 +00:00
Steven Barth 4894800bdd odhcp6c: handle NoAddrsAvail IA-status 
SVN-Revision: 38092
 2013-09-21 10:54:13 +00:00
Steven Barth 808a1c7808 odhcp6c: Restart when server returns IAID error 
SVN-Revision: 38032
 2013-09-18 10:27:15 +00:00
John Crispin f874094402 procd: convert various packages to procd style init.d scripts 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38023
 2013-09-17 21:45:30 +00:00
John Crispin f12f4074af kernel: make most modules use AutoProbe 
now that we have modprobe we can set more than half of the modules to AutoProbe

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38021
 2013-09-17 21:45:17 +00:00
Felix Fietkau b2447d1fca hostapd: adjust the md5sum for the uploaded source tarball (fixes #14155) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37990
 2013-09-14 20:07:35 +00:00
Felix Fietkau 28eceb0343 iwinfo: when using nl80211, parse interface combinations instead of creating/deleting interfaces 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37983
 2013-09-14 14:46:51 +00:00
Jo-Philipp Wich c3cc912ed9 uhttpd: udpat to git head 
- fixes buffer corruption with JSON-RPC list calls
	- change JSON-RPC protocol to include the session ID into the call
	  attributes instead of passing it via the URL
	- forcibly pass effective session ID as "ubus_rpc_session" attribute
	  to called procedures
	- change ubus acl checking to conform with new ubus session namespace

SVN-Revision: 37962
 2013-09-13 13:24:45 +00:00
Steven Barth eba3ab9ade odhcp6c: Timing workaround for buggy servers 
SVN-Revision: 37951
 2013-09-12 12:57:42 +00:00
Steven Barth b2a71fedd9 odhcp6c: more compatibility fixes 
SVN-Revision: 37907
 2013-09-05 21:13:51 +00:00
Steven Barth 0a85c59040 netfilter: Add IPv6-NAT support for kernel and ipt Thanks to Berni, Adam Novak and Sedat Dilek for patches and inspiration 
SVN-Revision: 37866
 2013-09-01 17:59:48 +00:00
Steven Barth 3e647ac9b6 iptables: Update to 1.4.20 
SVN-Revision: 37865
 2013-09-01 13:46:10 +00:00
Felix Fietkau 7fc90889d5 netifd: update to the latest version, fixes a bridge handling corner case on config reload 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37856
 2013-08-29 22:20:36 +00:00
Vasilis Tsiligiannis 03b1d4289b lldpd: Add libbsd dependency when using eglibc 
Signed-off-by: Vasilis Tsiligiannis <acinonyx@openwrt.gr>

SVN-Revision: 37837
 2013-08-25 18:47:08 +00:00
Jo-Philipp Wich 2864fb107f firewall: update to git head 
- uses "-j CT --notrack" instead of deprecated "-j NOTRACK"
	- fixes support for rule sections with target "NOTRACK"

SVN-Revision: 37777
 2013-08-14 15:40:38 +00:00
Felix Fietkau 4cda88a879 hostapd: fix typo in version number 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37742
 2013-08-08 20:45:15 +00:00
Felix Fietkau 9df75e7f34 hostapd: fix ubus reconnect handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37741
 2013-08-08 20:45:12 +00:00
Felix Fietkau 750197b3af hostapd: add a build variant for wpa_supplicant with p2p (aka Wi-Fi Direct) support 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37739
 2013-08-08 16:24:50 +00:00
Felix Fietkau f53b96813e hostapd: update to latest version (20130707) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37738
 2013-08-08 16:04:19 +00:00
Felix Fietkau 9a22315ca4 hostapd: Settings for DAE/CoA server 
hostapd supports "Dynamic Authorization Extensions", making it possible
to forcibly disconnect a user by sending it a RADIUS "Disconnect-Request"
packet.

I've added three new variables to enable setting of the
"radius_das_client" and "radius_das_port" variables in the hostapd
configuration, which enable these extensions.

* dae_client - IP of the client that can send disconnect requests
* dae_secret - shared secret for DAE packets

These are combined into the "radius_das_client" option in hostapd.conf
To enable the server, both dae_client and dae_secret must be set.

* dae_port - optional, default value is 3799 as specified in RFC 5176

Signed-off-by: Martijn van de Streek <martijn@vandestreek.net>

SVN-Revision: 37734
 2013-08-06 18:55:30 +00:00
Felix Fietkau 91f0b411f4 hostapd: Fix WDS/WEP usage 
WEP in WDS is currently broken in hostapd. Add a patch
to fix the issue.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37733
 2013-08-06 17:59:12 +00:00
Felix Fietkau 76ca564e79 hostapd: Refresh patches 
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37731
 2013-08-06 17:59:05 +00:00
Felix Fietkau 22e012bad8 hostapd: Add an option to disable beaconing 
Add a patch for hostapd that introduces a config option
"start_disabled" which can be used to bring up an AP
interface with beaconing disabled. This is useful in
a Repeater-AP setup where the Repeater AP has to start
beaconing only after the WDS link has been established.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37730
 2013-08-06 17:59:02 +00:00
Felix Fietkau 719adb6471 uhttpd: update to the latest version, fixes a crash on early cgi/lua process termination 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37628
 2013-07-31 22:07:09 +00:00
Luka Perkov 1646bd096c iproute2: update to 3.10.0 
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37590
 2013-07-28 23:27:35 +00:00
Felix Fietkau aff8c18ad0 openvpn: update to 2.3.2 
this patches updates openvpn to v2.3.2
and adds a PKG_MD5SUM to the Makefile

This release fixes a memory access violation when cipher none is used
on ar71xx - at least with my config

Signed-off-by: Peter Wagner <tripolar@gmx.at>

SVN-Revision: 37560
 2013-07-26 12:35:22 +00:00
Steven Barth 4d37ae33b6 6relayd: Overridden DNS should affect DHCPv6 
SVN-Revision: 37558
 2013-07-26 11:59:25 +00:00
Felix Fietkau 8faa8a6420 uhttpd: update to latest version, fixes issues with POST and keep-alive (#13940) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37556
 2013-07-26 10:03:07 +00:00
Felix Fietkau 3d2ace5d71 authsae: add myself as a maintainer 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37555
 2013-07-26 10:03:03 +00:00
Felix Fietkau 4478c69b86 authsae: adapt uci scripts to use authsae 
This patch modifies the uci scripts to be able to
start meshd-nl80211 for encrypted mesh networks,
therefor a new script (authsae.sh) is inserted.

Signed-off-by: Emanuel Taube <emanuel.taube@gmail.com>
[etienne.champetier@free.fr: just update mac80211.sh path]
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37554
 2013-07-26 10:02:59 +00:00
Felix Fietkau 6dbea6416b authsae 80211s authentication daemon 
This patch adds authsae open80211s authentication daemon (http://open80211s.org)
It's a rework of Peter Naulls patch (http://patchwork.openwrt.org/patch/1350/)
I've excluded the sample conf file as it's useless when used with mac80211.sh (Emanuel Taube patch)
It now link against libnl-tiny instead of libnl (patch merged in authsae git)
Authsae is 58 Ko (OPENSSL_WITH_EC option adds 35Ko to libopenssl)

Signed-off-by: Peter Naulls <peter@chocky.org>
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37553
 2013-07-26 10:02:55 +00:00
Felix Fietkau 85e585ddce ead: fix compile errors with recent kernels 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37482
 2013-07-20 12:56:07 +00:00
Hauke Mehrtens 96f1953fb1 kernel: fix xtables-addons dependencies with kernel 3.3 
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 37461
 2013-07-19 22:36:47 +00:00
Jo-Philipp Wich 7bbe1656cb xtables-addons: use a select of kmod-ipt-core instead of depending on it 
SVN-Revision: 37425
 2013-07-19 09:58:17 +00:00
Jo-Philipp Wich d474a77edf xtables-addons: add missing kmod dependencies 
SVN-Revision: 37424
 2013-07-19 09:58:11 +00:00
Jo-Philipp Wich d6e8047f83 firewall: update to git head 
- handles redirects as port relocations if the dest_ip points to the router itself

SVN-Revision: 37374
 2013-07-16 14:04:59 +00:00
Steven Barth 54ae5ce507 netifd: Fix IPv6-prefix assignment with continuous hints 
SVN-Revision: 37371
 2013-07-16 12:07:11 +00:00
Steven Barth 6a034ce5b1 6relayd: Fix DHCPv6-PD with continuous hints 
SVN-Revision: 37370
 2013-07-16 12:07:06 +00:00
Steven Barth 0444e32acd Bump iptables version 
SVN-Revision: 37329
 2013-07-15 06:12:07 +00:00
Steven Barth ea6a5d0c22 iptables: restore reap functionality to recent module 
The reap functionality appears to have been accidentally disabled by
commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see:

  git://git.netfilter.org/iptables.git

and subsequently in iptables 1.4.15 and later.  This adds a patch to
restore reap functionality for recent_opts_v1.

Signed-off-by: Russell Senior <russell@personaltelco.net>

SVN-Revision: 37328
 2013-07-15 06:12:03 +00:00
Luka Perkov 1a963355b0 netifd: update to latest version, add bridge_empty option 
with this option enabled it's possible to create empty bridges

Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37318
 2013-07-14 18:50:04 +00:00
John Crispin 7d7c2ff5f9 swconfig: fix dependency bug introduced by [37304] 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37316
 2013-07-14 18:16:42 +00:00
Hauke Mehrtens f8d55e7541 brcm47xx: use b53 phy driver for the switch in kernel 3.10 
This makes it possible to use swconfig to controll the switch.

This was tested with devices using b43 and bgmac.
This was not tested on devices using tg3.
This does not support the adm switch used in some very old devices.

SVN-Revision: 37304
 2013-07-14 14:11:17 +00:00
John Crispin 8d546699c5 dropbear: register a config.change trigger 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37245
 2013-07-11 17:00:40 +00:00
Felix Fietkau 4e042e4a84 ipset: force the shell to bash to fix build issues on mac os x 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37227
 2013-07-10 14:59:00 +00:00
Felix Fietkau 4a0c312dc3 xtables-addons: update to version 2.3, adds linux 3.10 compatibility 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37226
 2013-07-10 14:51:13 +00:00
Felix Fietkau f98f69adc9 firewall: add missing dependencies 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37224
 2013-07-10 11:33:48 +00:00
John Crispin fc40051569 lantiq: move dsl tools to package/network/config 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37198
 2013-07-08 09:01:38 +00:00
Luka Perkov 4a7439401b linux-atm: fix dependencies 
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37189
 2013-07-08 00:37:49 +00:00
Jo-Philipp Wich 4aa82d07a6 firewall: allow routed lan<->lan traffic by default 
SVN-Revision: 37171
 2013-07-04 18:10:36 +00:00
Jo-Philipp Wich 2561bce232 lldpd: upgrade to 0.7.5 
lldpd 0.7.1 has several alignment issues that trip a system configured
to fault on misaligned accesses.  Version 0.7.5 fixes that along with a
few other minor issues.

Signed-off-by: John Szakmeister <john@szakmeister.net>

SVN-Revision: 37168
 2013-07-04 16:57:03 +00:00
Steven Barth e3a369e597 odhcp6c: avoid integer overflows in resend logic 
SVN-Revision: 37150
 2013-07-03 16:14:24 +00:00
Steven Barth b9aa47d5b6 odhcp6c: add missing config parameter 
SVN-Revision: 37148
 2013-07-03 13:50:06 +00:00
Jo-Philipp Wich 7c197d9f0e hostapd: truncate default mac file before adding entries to it (#13797) 
SVN-Revision: 37114
 2013-07-01 10:52:35 +00:00
Felix Fietkau ee68734929 hostapd: fix multi-ssid and AP+STA, clean up code 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37111
 2013-06-30 21:01:13 +00:00
Felix Fietkau 60b040bbaf hostapd: update to latest git version 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37110
 2013-06-30 20:27:38 +00:00
Felix Fietkau 12c033dfd9 mac80211: update to wireless-testing 2013-06-27, fix ATH_USER_REGD handling 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37097
 2013-06-30 10:44:19 +00:00
Jo-Philipp Wich 2d506f46fb firewall: update to git head 
- uses custom formatting for mac addresses to ensure leading zeroes, required for older iptables mac match parser

SVN-Revision: 37082
 2013-06-29 13:28:27 +00:00
Steven Barth d8051a8814 netifd: fix typo in dhcp script 
SVN-Revision: 37051
 2013-06-28 04:19:21 +00:00
Florian Fainelli fe7c236a06 6relayd: prevent build on AVR32 
AVR32 misses a bunch of updated syscalls, including timerfd_create()
which is used by 6relayd. Since that requires Linux/libc changes, just
prevent building it for now.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 37040
 2013-06-27 15:33:05 +00:00
Steven Barth cb66ed972b odhcp6c: Add missing config option "ifaceid" 
SVN-Revision: 37033
 2013-06-25 05:18:20 +00:00
John Crispin e7dbdad43b hostapd: fix superflous coma 
this cause the wps trigegr to be copied to the wrong place

https://dev.openwrt.org/ticket/13753

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37031
 2013-06-24 16:44:18 +00:00
Steven Barth eecce5abad arptables: Bump to 0.0.4 
SVN-Revision: 37020
 2013-06-24 05:48:12 +00:00
Steven Barth 69cd09ebbf 6relayd: don't accidentally remove regular prefix routes 
SVN-Revision: 37018
 2013-06-23 16:26:09 +00:00
Steven Barth f47c4c80d4 6relayd: fix lease-update behaviour for clients without reconfigure 
SVN-Revision: 37011
 2013-06-22 08:31:28 +00:00
Steven Barth d0d5f109d8 6relayd: Keep PD-downstream across RENEW/REBIND 
SVN-Revision: 37009
 2013-06-22 08:19:25 +00:00
John Crispin 4ebf19b48f packages: clean up the package folder 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37007
 2013-06-21 16:54:37 +00:00
John Crispin 4999ae4236 hostapd: remove old button hotplug script 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36991
 2013-06-21 16:53:07 +00:00
Steven Barth 5108318edb 6relayd: Fix DHCPv6-PD assignment logic 
SVN-Revision: 36980
 2013-06-21 06:15:09 +00:00
Steven Barth de2a7547b7 6relayd: correctly set downstream routes for DHCPv6-PD 
SVN-Revision: 36969
 2013-06-19 13:08:33 +00:00
Felix Fietkau b4babf9f81 netifd: update to latest version, fixes a NULL pointer deref bug 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36965
 2013-06-18 16:24:48 +00:00
Jo-Philipp Wich 65f82e2311 firewall: update to git head 
- fixes misprocessing of unknown symbolic protocol names

SVN-Revision: 36963
 2013-06-18 14:30:51 +00:00
Jo-Philipp Wich 37ae268729 firewall: update to git head 
- fixes calculation of IPv4 netmasks derived from 0.0.0.0/0 CIDRs

SVN-Revision: 36960
 2013-06-18 14:14:35 +00:00
Steven Barth 5219d38da2 odhcp6c: Add option to override interface identifier in RA-client 
SVN-Revision: 36959
 2013-06-18 12:51:14 +00:00
Steven Barth 9f1899242c netifd: IPv6: Fix sorting order in last commit. 
SVN-Revision: 36952
 2013-06-17 21:29:14 +00:00
Steven Barth 213269a8f7 netifd: Satisfy IPv6 assignments ordered by prefix length 
SVN-Revision: 36950
 2013-06-17 21:16:22 +00:00
Jo-Philipp Wich 541fbfbb9e hostapd: correctly handle macfile uci option 
Make hostapd.sh correctly handle the macfile uci option.

Such option specifies the macfile name to pass into the
hostapd configuration file. Moreover, if a maclist option
has been specified, copy the macfile before appending new
entries.

Signed-off-by: Antonio Quartulli <antonio@open-mesh.com>

SVN-Revision: 36944
 2013-06-17 11:59:29 +00:00
Jo-Philipp Wich dfea3bae11 dnsmasq: use host-record instead of address 
Using "--address" for individual host A records is broken, use "--host-record" instead.
The following patch changes dnsmasq.init to build individual host records using "--host-record" instead of "--address".

Signed-off-by: Adam Gensler <openwrt at gnslr.us>

[jow: shorter description, simplified shell script code]

SVN-Revision: 36943
 2013-06-17 11:55:30 +00:00
Jo-Philipp Wich 36d3fafd77 firewall: update to git head 
- properly process intermediate "!" options in argument list (fixes negated ipsets)

SVN-Revision: 36935
 2013-06-13 18:54:49 +00:00
Jo-Philipp Wich 0db38adf1c firewall: update to git head 
- fixes handling of reject target for rule sections with specific destination zone

SVN-Revision: 36933
 2013-06-13 12:49:00 +00:00
Jo-Philipp Wich 1150e299bb uhttpd: expose missing options to uci 
SVN-Revision: 36932
 2013-06-13 11:55:12 +00:00
Steven Barth 302cf427cb odhcp6c: add sanity checks for NDP and MTU parameters from RAs 
SVN-Revision: 36930
 2013-06-13 06:38:48 +00:00
Steven Barth 4f0a0defa6 6relayd: make route preference and prefix on-link flag configurable 
SVN-Revision: 36922
 2013-06-11 20:52:27 +00:00
Steven Barth f6dd266c97 iproute2: add drop-failed rule action (patch by Jonas Gorski) 
SVN-Revision: 36910
 2013-06-11 09:27:46 +00:00
Felix Fietkau 9fb5bf176e netifd: update to latest version, uses the new uci/blob code from libuci 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36909
 2013-06-10 12:42:30 +00:00
Steven Barth 5caa45d0b3 ppp: correctly handle address when reloading 
SVN-Revision: 36904
 2013-06-10 10:42:34 +00:00
Steven Barth 491deaed2c netifd: improve reloading behaviour 
SVN-Revision: 36903
 2013-06-10 10:42:15 +00:00
Jo-Philipp Wich bc73ca5619 iwinfo: add phyname attribute, this is useful to group networks by radio phy 
SVN-Revision: 36889
 2013-06-09 14:39:14 +00:00
Jo-Philipp Wich cb24c37858 libiwinfo: ignore log messages from wpa_supplicant while scanning 
wpa_supplicant may send log and event messages intermixed with the
expected scan results.  This makes "iwinfo wlan0 scan" and LuCI
"site survey" display nothing when many AP's are around.

Eliminate the CTRL-EVENT-BSS-ADDED events, interspersed log messages,
lines with unexpected format.  Increase timeout to handle the max
number of channels (2.4, 3.6, 4.9, 5 GHz).  Insure receive buffer is
null-terminated.

Signed-off-by: Jean-Pierre Tosoni <jp.tosoni@acksys.fr>

SVN-Revision: 36888
 2013-06-09 14:39:09 +00:00
Steven Barth f995c90329 netifd: Improve IPv6 source-routing policies 
SVN-Revision: 36884
 2013-06-08 13:26:33 +00:00
Jonas Gorski b9de8ca7f5 netifd: bring wifi down before shutting down 
works around wifiX references not being freed on network restart.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 36883
 2013-06-08 11:44:12 +00:00
Jo-Philipp Wich e7b15446a8 firewall: udpate to git head (#13652, #13654, #13658) 
- optimizes chain usage for ingress rules
  - adds limit match support for redirect rules
  - fixes automatic redirect dest detection on little endian systems
  - leaves base chains in place on reload to allow user rules to target e.g. "reject"

SVN-Revision: 36871
 2013-06-06 14:12:02 +00:00
Jo-Philipp Wich 5cf06bd17b firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols 
SVN-Revision: 36868
 2013-06-06 14:02:29 +00:00
Jo-Philipp Wich e94cf1c72b iptables: install libext*.a into staging dir 
SVN-Revision: 36867
 2013-06-06 14:02:24 +00:00
Jo-Philipp Wich ecc95dcba8 firewall: update to git head (#13652) 
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
  - uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones

SVN-Revision: 36854
 2013-06-05 11:40:40 +00:00
Jo-Philipp Wich 0a74d9d5c3 firewall3: fix accidentally changed install directive 
SVN-Revision: 36840
 2013-06-04 12:30:50 +00:00
Jo-Philipp Wich 07a3110e88 firewall: fix git source url 
SVN-Revision: 36839
 2013-06-04 12:23:47 +00:00
Jo-Philipp Wich b721c92221 firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA 
SVN-Revision: 36838
 2013-06-04 12:21:52 +00:00
Jo-Philipp Wich 0dd6753c09 Drop legacy firewall package 
SVN-Revision: 36837
 2013-06-04 12:21:44 +00:00
Jo-Philipp Wich 6f60308257 firewall3: update to git head (#13641) 
* Fixes wrong chain used for zone forward policy

SVN-Revision: 36830
 2013-06-04 10:26:49 +00:00
Jo-Philipp Wich 6eeca5176e firewall3: update to git head 
- Fixes problems with reusing matches or targets from loadable extensions

SVN-Revision: 36826
 2013-06-03 16:38:29 +00:00
Felix Fietkau 8c69057980 uhttpd: update to latest version, fixes CGI related crashes 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36817
 2013-06-01 21:43:06 +00:00
Steven Barth 089d6612ce 6relayd: Work around Windows DHCPv6 quirks Announcing deprecated addresses breaks Windows clients 
SVN-Revision: 36815
 2013-06-01 17:51:02 +00:00
Steven Barth 7ae506c7d4 odhcp6c: work around spurious false-positive address DECLINEs 
SVN-Revision: 36809
 2013-05-31 13:49:17 +00:00
Jo-Philipp Wich 3bb397c997 firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly 
SVN-Revision: 36806
 2013-05-31 13:23:23 +00:00
Steven Barth bf582fbb7b odhcp6c: fix handling of multiple RAs in a row 
SVN-Revision: 36804
 2013-05-31 10:02:39 +00:00
Steven Barth cdc3caf533 6relayd: Better compatibility with misbheaving DHCPv6 clients * Make the "best" address / prefix the first one being announced * Only add the "best" address to the hosts-file 
SVN-Revision: 36772
 2013-05-30 15:42:30 +00:00
Steven Barth 519f27cd33 netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes 
SVN-Revision: 36771
 2013-05-30 15:42:25 +00:00
Felix Fietkau 02fe12c00d uhttpd: update again to fix a ubus plugin crash bug 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36770
 2013-05-30 13:16:38 +00:00
Felix Fietkau eeb7fdc13e uhttpd: update to latest version, fixes script timeout for ubus requests 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36767
 2013-05-30 10:44:20 +00:00
Steven Barth dc6625f977 6relayd: more verbosity in leases and logging 
SVN-Revision: 36764
 2013-05-30 07:56:55 +00:00
Steven Barth 56a3396bf2 iptables: bump to 1.4.19.1 
SVN-Revision: 36760
 2013-05-29 14:58:04 +00:00
Steven Barth 439fdd4d65 netifd: fix IPv6-addresses disappearing due to lifetime-overflows 
SVN-Revision: 36748
 2013-05-28 18:32:01 +00:00
Steven Barth 23b3cebd56 odhcp6c: fix or debug disappearing IPv6 addresses 
SVN-Revision: 36745
 2013-05-28 16:28:14 +00:00
Felix Fietkau e6250644be mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36743
 2013-05-28 11:10:41 +00:00
Steven Barth 61c0c6ab68 6relayd: RFC 6204 and naming improvements * Announce delegated prefixes using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default 
SVN-Revision: 36738
 2013-05-27 20:38:13 +00:00
Jo-Philipp Wich 63603ee478 firewall3: update to git head 
- allows building without IPv6 support
	- uses more robust rules to cope with missing libext.a
	- uses better linking strategy to avoid symbol clashes with older iptables
	- introduces source compatiblity layer for different libxtables versions

SVN-Revision: 36736
 2013-05-27 15:13:19 +00:00
Jo-Philipp Wich e4f8c38ed1 firewall3: update to git head 
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
  - automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
  - properly support output rules with dest '*' to hook directly into delegate_output
  - fixes crash when processing rules with unresolved targets

SVN-Revision: 36721
 2013-05-26 15:48:04 +00:00
Steven Barth f63064a257 6relayd: Fix DHCPv6-server picking up addresses from master interface 
SVN-Revision: 36718
 2013-05-26 10:06:02 +00:00
Jo-Philipp Wich 90887b5fb3 firewall3: update to git head 
- fixes linking issues with some toolchains

SVN-Revision: 36703
 2013-05-24 12:49:06 +00:00
Steven Barth d8d7d7f4aa 6relayd: fix a lease-timing issue with stateful DHCPv6 
SVN-Revision: 36702
 2013-05-24 12:31:30 +00:00
Jo-Philipp Wich c1ff8cd9bb firewall3: update to git head 
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
  - Do not leak memory when processing rules with unknown targets or matches

SVN-Revision: 36698
 2013-05-23 13:07:44 +00:00
Felix Fietkau 75bb3138aa uhttpd: update to latest version, fixes #13564, #13560, improves error handling as pointed out in #13537 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36696
 2013-05-23 10:50:42 +00:00
Steven Barth 32c6ffb5a1 firewall3: Remove abandonend include 
SVN-Revision: 36692
 2013-05-23 06:38:25 +00:00
Jo-Philipp Wich b757ca2259 firewall3: update to git head 
- fix build on Linux < 3.7
  - limit zone names to 14 bytes

SVN-Revision: 36691
 2013-05-22 14:15:53 +00:00
Steven Barth 9c3ac668e0 6relayd: Let OpenWrt override default CFLAGS 
SVN-Revision: 36690
 2013-05-22 11:58:54 +00:00
Jo-Philipp Wich c12189b379 firewall3: update to git head 
- fixes reload when firewall is not running already
  - fixes crash when ipsets are supported but undeclared
  - fixes handling of per zone user chains on reload

SVN-Revision: 36689
 2013-05-22 11:37:41 +00:00
Steven Barth 9d115df749 6relayd: Fix a segfault when multiple downstream interfaces are present 
SVN-Revision: 36687
 2013-05-21 18:05:37 +00:00
Jo-Philipp Wich dd83e87ab0 firewall3: update to git head 
- fixes segfault in flush command if ipset support is not available
  - fixes internal rule generation if custom chains are enabled

SVN-Revision: 36686
 2013-05-21 14:49:37 +00:00
Jo-Philipp Wich 6eec8009ba ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base 
SVN-Revision: 36685
 2013-05-21 13:00:28 +00:00
Jo-Philipp Wich 9b6c31d4cc firewall3: move libext*.a copying to compile phase 
SVN-Revision: 36684
 2013-05-21 12:58:36 +00:00
Jo-Philipp Wich 8df6cd005c netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset 
SVN-Revision: 36683
 2013-05-21 12:58:15 +00:00
Jo-Philipp Wich e8050c6c35 firewall3: update to git head 
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
 * make ipset integration more reliable

SVN-Revision: 36681
 2013-05-21 10:15:14 +00:00
Jo-Philipp Wich a9a9644efd iptables: use -ffunction-sections, -fdata-sections and --gc-sections 
SVN-Revision: 36680
 2013-05-21 10:15:10 +00:00
Steven Barth 24c39ddcf7 odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests 
SVN-Revision: 36678
 2013-05-21 09:13:48 +00:00
Steven Barth 37baf2d6b2 6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better 
SVN-Revision: 36677
 2013-05-21 09:13:40 +00:00
Steven Barth c6f70381c9 odhcp6c: Fix address / prefix expiry logic 
SVN-Revision: 36675
 2013-05-20 14:54:20 +00:00
Steven Barth dd161ae62b dnsmasq: add directory for external hosts-files 
SVN-Revision: 36655
 2013-05-17 14:44:12 +00:00
Steven Barth 334c40da14 6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD 
SVN-Revision: 36654
 2013-05-17 14:44:07 +00:00
Steven Barth 0f1be4425f netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4 
Based on a patch by Kristian Evensen. Thank You.

SVN-Revision: 36653
 2013-05-17 14:44:02 +00:00
Felix Fietkau 7365e647f6 uhttpd: update to latest version, fixes index page processing order 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36644
 2013-05-16 11:38:19 +00:00
Luka Perkov 4fc8e64a40 iproute2: workaround compile issues with gcc 4.8.x 
SVN-Revision: 36642
 2013-05-16 00:04:48 +00:00
Steven Barth a62ca72309 odhcp6c: Fix handling of RAs when no DHCPv6-server is present 
SVN-Revision: 36641
 2013-05-15 11:07:01 +00:00
Luka Perkov 580481cd6d iproute2: upgrade to 3.9.0 
SVN-Revision: 36638
 2013-05-14 23:49:34 +00:00
Luka Perkov 5be36cbe83 iproute2: print help in connmark 
SVN-Revision: 36637
 2013-05-14 23:49:31 +00:00
Felix Fietkau d090eea125 uhttpd: update to latest version, fixes a SSL connection memory leak 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36636
 2013-05-14 17:43:00 +00:00
Felix Fietkau d481486aad package: fold the IPv6 menu into Network 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36634
 2013-05-14 15:02:31 +00:00
Steven Barth e8f3897389 6relayd: Always announce the current MAC-address 
* Fixes #13516 thanks to berni for the detailed bugreport.

SVN-Revision: 36629
 2013-05-13 17:54:36 +00:00
Steven Barth a1af842016 ds-lite: add ds-lite network protocol handler 
SVN-Revision: 36628
 2013-05-13 17:12:39 +00:00
Steven Barth 5ce135ed87 netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements 
SVN-Revision: 36627
 2013-05-13 17:12:34 +00:00
Steven Barth ea71678b09 netifd: added support for setting up 6rd from DHCP 
SVN-Revision: 36626
 2013-05-13 17:12:30 +00:00
Steven Barth ad93a571c6 odhcp6c: added support for DS-Lite + various fixes 
SVN-Revision: 36625
 2013-05-13 17:12:25 +00:00
Steven Barth 973dad61b0 firewall3: Remove obsoleted ULA-border 
SVN-Revision: 36624
 2013-05-13 17:12:20 +00:00
Steven Barth 07d99b62b7 firewall3: add wan6 interface to wan-zone by default 
SVN-Revision: 36623
 2013-05-13 17:12:15 +00:00
Steven Barth 4cb9d9715c firewall: Remove obsoleted ULA-border rule 
SVN-Revision: 36622
 2013-05-13 17:12:10 +00:00
Steven Barth 8560648082 6rd: increase metric of default route 
This will prefer native IPv6 over 6rd if both are present.

SVN-Revision: 36605
 2013-05-12 08:07:15 +00:00
Jo-Philipp Wich d59f8cfa8e iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode 
SVN-Revision: 36604
 2013-05-12 01:12:56 +00:00
Steven Barth 29d4c36622 add uci support for "proxy-dnssec" in dnsmasq 
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.

Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>

SVN-Revision: 36570
 2013-05-07 07:19:51 +00:00
Felix Fietkau 9d8e3e03df iw: update to 3.10, sync with nl80211.h changes in compat-wireless 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36569
 2013-05-06 22:35:50 +00:00
Steven Barth 9c1ed6447b odhcp6c: Make SLAAC-only work without reqprefix=no 
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.

SVN-Revision: 36555
 2013-05-06 10:20:43 +00:00
Jo-Philipp Wich 95e139d0b2 ipset-dns: support simultaneously populating IPv4 and IPv6 sets 
SVN-Revision: 36554
 2013-05-06 10:01:45 +00:00
Jo-Philipp Wich 3c17fd41a4 Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset 
SVN-Revision: 36552
 2013-05-06 08:44:54 +00:00
Felix Fietkau b85c442e81 hostapd: enable 802.11r for the -full variant (#13250) 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36533
 2013-05-03 10:39:57 +00:00
Jo-Philipp Wich 4bba31b64c firewall3: update to git head 
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422, #13386)
	- add support for fwmark matches and mark setting targets

SVN-Revision: 36521
 2013-05-02 13:42:20 +00:00
Jo-Philipp Wich a0b655b8f2 Fix install of iptables pkg-config files. 
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146; which should make collectd
appear in snapshots again.

Signed-off-by: Danny Baumann <dannybaumann@web.de>

SVN-Revision: 36509
 2013-05-02 08:10:55 +00:00
Jo-Philipp Wich f1e214411d iwinfo: fix iwinfo_hardware() return value if chip id is not found 
SVN-Revision: 36471
 2013-04-28 14:04:39 +00:00
Jo-Philipp Wich f1497ccf4f netifd: update to git head - disables multicast snooping by default on bridges 
SVN-Revision: 36463
 2013-04-27 09:28:40 +00:00
Jo-Philipp Wich 05c1424e87 iwinfo: add hw database file 
SVN-Revision: 36450
 2013-04-26 13:21:01 +00:00
Jo-Philipp Wich e02d373f90 iwinfo: move builtin hardware database to /usr/share/libiwinfo/hardware.txt 
SVN-Revision: 36449
 2013-04-26 13:20:15 +00:00
Felix Fietkau 5062838fa5 netifd: update to the latest version, fixes interface reload issues when removing the ifname option 
SVN-Revision: 36424
 2013-04-25 16:28:19 +00:00
Steven Barth 49f97af481 6relayd: Fix generation of RA-messages 
SVN-Revision: 36419
 2013-04-24 18:22:08 +00:00
Jo-Philipp Wich a040ead1c5 iwinfo: add SR71-15 radio info, fix nl80211 channel/frequency reporting on some architectures 
SVN-Revision: 36417
 2013-04-24 14:44:20 +00:00
Steven Barth 2c78c1457b firewall3: Make IPv6 ULA-Border generation dynamic 
This fixes working behind another router which gives out ULAs.

SVN-Revision: 36416
 2013-04-24 14:17:24 +00:00
Steven Barth 2dbcd2ba7b 6relayd: update package description 
SVN-Revision: 36413
 2013-04-24 07:21:42 +00:00
Steven Barth e17ac4c257 dnsmasq: update to 2.66 Thanks to Christoph König for patches. 
SVN-Revision: 36412
 2013-04-24 05:55:39 +00:00
Steven Barth 21e4e2a766 odhcp6c: Set default SOL_MAX_RT to 1h 
SVN-Revision: 36411
 2013-04-24 05:02:45 +00:00
Felix Fietkau d7908e02b5 hostapd: return the frequency to some ubus calls to make integration easier 
SVN-Revision: 36410
 2013-04-23 18:35:50 +00:00
Jo-Philipp Wich 61a6f45cdc lldpd: upgrade to 0.7.1 
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

SVN-Revision: 36401
 2013-04-23 10:37:23 +00:00
Steven Barth 17b8c0c7b8 netifd: Improve IPv6-ULA assignment handling 
SVN-Revision: 36383
 2013-04-22 19:40:06 +00:00
Steven Barth c96c05d549 odhcp6c: Several fixes and improvements * Add preliminary support for RFC 6603 prefix exclusion * Fix reconfigure-support and reconfigure authentication * Set maximum retransmission timeout for solicitations to 2h * Fix a segfault when parsing IA_PD in advertise messages 
SVN-Revision: 36382
 2013-04-22 19:40:01 +00:00
Steven Barth 1e78c3e297 6relayd: Add DHCPv6-PD server support, fix relaying in stateful mode 
SVN-Revision: 36381
 2013-04-22 19:39:55 +00:00
Felix Fietkau 62244d73ae hostapd: update to 2013-04-05 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36376
 2013-04-22 13:24:48 +00:00
Felix Fietkau 96bb7c123b build: consistently use 'depends on' instead of 'depends' 
make the syntax more compatible with kernel menuconfig

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36351
 2013-04-17 15:36:41 +00:00
Jo-Philipp Wich e66a4af8c3 uhttpd: update to git head, fixes regression when parsing IPv6 listen arguments 
SVN-Revision: 36348
 2013-04-17 11:34:39 +00:00
Jo-Philipp Wich 25ffe0446c iwinfo: print info of all existing wireless ifaces when cli is called without arguments 
SVN-Revision: 36339
 2013-04-15 15:00:16 +00:00
Felix Fietkau eb10581ce3 uhttpd: update to latest version, fixes compile error with latest libubox 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36338
 2013-04-15 14:49:52 +00:00
Felix Fietkau 099e3d8183 netifd: update to latest version, fixes some device handling crashes 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36336
 2013-04-15 14:21:45 +00:00
Felix Fietkau 88c418bc75 qos-scripts: add queue length and quantum limit, suggested by dtaht 
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36294
 2013-04-09 14:59:10 +00:00
Jo-Philipp Wich 7ca7bc501e iwinfo: fix frequency/channel and channel/frequency conversions to properly implement 802.11j 
SVN-Revision: 36292
 2013-04-09 14:37:55 +00:00
John Crispin 04dcd12c91 add portmap support to userland 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36284
 2013-04-09 14:19:13 +00:00
John Crispin f13ae9965c add "swconfig list" support 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36282
 2013-04-09 14:19:05 +00:00
Jo-Philipp Wich f90f025f20 netifd: fix route / route6 regression (#13303) 
SVN-Revision: 36281
 2013-04-09 12:21:12 +00:00
Steven Barth 3abc915522 Remove deprecated ip6slaac option * use proto=dhcpv6 with reqprefix=no instead 
SVN-Revision: 36280
 2013-04-09 12:12:30 +00:00
Steven Barth 2c087dc785 Remove obsoleted ipv6-support meta-package 
SVN-Revision: 36279
 2013-04-09 09:45:51 +00:00
Steven Barth 35d716fbbb netifd: Bump to latest version * Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow) 
SVN-Revision: 36196
 2013-04-05 12:28:06 +00:00
Steven Barth 0393e52623 netifd: Rewrite IPv6 prefix assignment * Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion 
SVN-Revision: 36193
 2013-04-03 17:08:21 +00:00
Felix Fietkau 71e9171717 openvpn: enable password save support (#13245) 
SVN-Revision: 36144
 2013-04-01 10:02:43 +00:00
Steven Barth eedf9e72f9 odhcp6c: Fix a race-condition in RA-handling 
Thanks to Markus Stenberg for investigating and providing a fix

SVN-Revision: 36132
 2013-03-26 13:39:17 +00:00
Steven Barth 5a9c2c77b4 iptables: don't use --enable-ipv6 if IPv6 is disabled 
SVN-Revision: 36125
 2013-03-25 11:22:12 +00:00
Steven Barth 6529cf6cea odhcp6c: minor bug fixes 
SVN-Revision: 36123
 2013-03-25 10:58:48 +00:00
Jo-Philipp Wich 6fa1b5346e firewall3: update to git head 
* fixes parsing of src/dest '*'
	* fixes parsing of proto 'all'

SVN-Revision: 36111
 2013-03-22 14:10:29 +00:00
Jo-Philipp Wich 76d1c0a067 firewall3: update to git head 
* fixes port remapping rules (#13217)

SVN-Revision: 36100
 2013-03-21 14:25:17 +00:00
Hauke Mehrtens c9544f4af0 kernel: add some fixes for kernel 3.9 
This patch fixes some compile problems with kernel 3.9 and adds some missing linux 3.9 handling into kernel packages.

SVN-Revision: 36098
 2013-03-20 21:59:24 +00:00
Steven Barth 261be7b8f3 netifd: Fix adding IPv6 DNS-servers to resolv.conf 
In some cases IPv6 DNS-servers were not added correctly.

SVN-Revision: 36095
 2013-03-20 13:49:39 +00:00
Steven Barth eeb88a1df3 odhcp6c: Fix metric for on-link prefix routes 
SVN-Revision: 36094
 2013-03-20 09:26:52 +00:00
Jo-Philipp Wich 6fbd824e9b firewall3: update to git head 
* fixes reload handling of zones and ipsets that are still running but already deleted from the config

SVN-Revision: 36092
 2013-03-19 16:18:05 +00:00
Jo-Philipp Wich 03cb7986fc firewall3: update to git head 
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197)
	- do not allow src_mac option for SNAT rules

SVN-Revision: 36090
 2013-03-19 13:54:34 +00:00
Felix Fietkau 31876c193a hostapd: fix build errors on supplicant-only builds 
SVN-Revision: 36085
 2013-03-18 16:11:32 +00:00
Steven Barth 3ebdd3b330 odhcp6c: fix preference handling, custom client-ID * thanks to mbidewell for investigating 
SVN-Revision: 36083
 2013-03-18 07:24:49 +00:00
Felix Fietkau 2167101c90 hostapd: initial prototype of an ubus binding 
Supports listing, removing and banning clients, and hooking into
probe/assoc/auth requests via object subscribe.

SVN-Revision: 36081
 2013-03-17 20:47:18 +00:00
Felix Fietkau 84069f8534 uhttpd: update to latest version, fixes an occasional crash on CGI scripts 
SVN-Revision: 36034
 2013-03-15 13:43:55 +00:00
Jo-Philipp Wich 54f9f47a28 firewall3: update to git head 
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
 * Allow "network" and "device" commands while firewall is running (to make them usable in includes)

SVN-Revision: 36009
 2013-03-14 15:29:43 +00:00
John Crispin fce3deddff use new button scheme 
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36004
 2013-03-13 18:11:25 +00:00
Jo-Philipp Wich 9faa312dbb firewall3: update to git head 
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
 * Make NAT reflection direction configurable
 * Map init script stop action to flush
 * Map init script reload action to reload
 * Respect init script disabled state in hotplug handler

SVN-Revision: 35998
 2013-03-13 15:46:30 +00:00
Felix Fietkau 9ddc45bc3f hostapd: fix client reassociation after too many ACK failures 
SVN-Revision: 35973
 2013-03-12 00:19:25 +00:00
Jo-Philipp Wich 8c7ed1cb7b firewall3: update to git head 
* Fixes compilation against eglibc
 * Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
 * Fixes tracking logic for user chains by differentiating between reloads and restarts
 * Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
 * Supports legacy "tcpudp" protocol notation again

SVN-Revision: 35969
 2013-03-11 20:52:20 +00:00
Jo-Philipp Wich e259ecad7e Revert "firewall3: update to git head" 
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.

SVN-Revision: 35904
 2013-03-08 19:52:18 +00:00
Jo-Philipp Wich 50213fc354 firewall3: update to git head 
- introduce per-zone user chains
	- support legacy "tcpudp" protocol notation

SVN-Revision: 35903
 2013-03-08 15:27:33 +00:00
Steven Barth 39a001dc69 odhcp6c: various bugfixes * Don't prematurely send RENEW / REBIND when T1 or T2 is > 1 day * Add "norelease" option to not send a RELEASE when stopping 
SVN-Revision: 35902
 2013-03-08 07:04:38 +00:00
Steven Barth 62ea398cd8 iptables: Add missing IPv6 builtin modules 
SVN-Revision: 35898
 2013-03-07 08:48:41 +00:00
Steven Barth 9779b0b88c iptables: redo update to 1.4.18 with old linking-behaviour 
SVN-Revision: 35896
 2013-03-06 17:05:34 +00:00
Steven Barth bacd71648b Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx 
SVN-Revision: 35894
 2013-03-06 12:55:48 +00:00
Felix Fietkau c3faa6be75 hostapd: include the madwifi headers in the package directory to avoid compile breakage if the madwifi build fails 
SVN-Revision: 35893
 2013-03-05 22:06:30 +00:00
Steven Barth d023a08753 iptables: update to 1.4.18 
SVN-Revision: 35892
 2013-03-05 20:51:57 +00:00
Jo-Philipp Wich d75c632de6 firewall3: add default config and firewall.user 
SVN-Revision: 35889
 2013-03-05 13:45:09 +00:00
Felix Fietkau fa1749e668 hostapd: update to git version 2013-03-02 
SVN-Revision: 35887
 2013-03-04 17:16:38 +00:00
Jo-Philipp Wich 89be702bff firewall3: update to git head, introduces support for "enabled" option 
SVN-Revision: 35845
 2013-03-02 17:09:33 +00:00
Steven Barth c81945e979 6relayd: Fix illegal memory accesses Spurious errors when receiving netlink-messages lead to unhandled errors which caused SIGBUS. Thanks to tdavis for debugging 
SVN-Revision: 35836
 2013-02-28 16:37:20 +00:00
Steven Barth 50b7fa217a 6relayd: various fixes cap preferred and valid lifetimes at more reasonable limits decrease memory usage (remove unnecessary book-keeping) 
SVN-Revision: 35835
 2013-02-28 14:57:19 +00:00
Jo-Philipp Wich 886ce188bf xtables-addons: fix packaging of iptaccount 
SVN-Revision: 35831
 2013-02-28 10:58:12 +00:00
Jo-Philipp Wich 557c047f71 firewall3: clear contnrack table on flush, set policies to drop during rule reload 
SVN-Revision: 35820
 2013-02-27 14:09:37 +00:00
Steven Barth a90b6f7d90 6relayd: Fix config behaviour for rewrite_dns_addr option 
SVN-Revision: 35804
 2013-02-26 12:50:52 +00:00
Steven Barth 32ac53821f 6relayd: compatibility with broken IPv6 devices * Announce ULA as deprecated if other addresses are available * Allow the announced DNS-server to be overwritten 
SVN-Revision: 35803
 2013-02-26 12:42:53 +00:00
Jo-Philipp Wich 92062542e2 firewall: fix logging rule regression (#12999) 
SVN-Revision: 35745
 2013-02-22 13:45:20 +00:00
Jo-Philipp Wich 4fb2cd18c1 firewall3: add support for shell script and iptables-restore style includes 
SVN-Revision: 35744
 2013-02-22 12:45:38 +00:00
Steven Barth a7b262dc0a netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions. 
SVN-Revision: 35743
 2013-02-22 08:56:29 +00:00
Jo-Philipp Wich 7d7d88b580 firewall3: update to git head 
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
	- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
	- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
	- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')

SVN-Revision: 35738
 2013-02-21 22:33:44 +00:00
Florian Fainelli 280fa5a1a2 dante: fix broken configure script not using CFLAGS for conftest 
Spotted by doing an ARM hard float build.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 35685
 2013-02-19 17:22:55 +00:00
Steven Barth 3081c672fc 6relayd: Fix possible memory corruption issue 
SVN-Revision: 35673
 2013-02-19 12:04:41 +00:00
Steven Barth f5b63ffd33 6relayd: Workaround potential signal handling issue 
SVN-Revision: 35665
 2013-02-18 12:50:36 +00:00
Jo-Philipp Wich 02b0c62f33 firewall3 - a C implementation of the current firewall scripts 
SVN-Revision: 35643
 2013-02-17 19:26:52 +00:00
Felix Fietkau 1d6574b9c3 hostapd: fix the scan wait patch for multiple interfaces 
SVN-Revision: 35630
 2013-02-16 19:00:34 +00:00
Felix Fietkau 99782943d2 hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update 
SVN-Revision: 35619
 2013-02-16 14:26:03 +00:00
Jonas Gorski c98b12d911 samba36: fix segmentation fault when trying to add non-existent users 
Based on a patch from НКВД. Closes #12962.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 35610
 2013-02-16 11:39:42 +00:00
Steven Barth 99b69fd9c5 odhcp6c: allow setting a user-provided prefix as well 
SVN-Revision: 35570
 2013-02-12 08:23:54 +00:00
Jo-Philipp Wich eeaf2c0b5a iptables: fix bad PKG_RELEASE in previous commit 
SVN-Revision: 35569
 2013-02-11 22:14:38 +00:00
Jo-Philipp Wich 916902b1d2 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines 
SVN-Revision: 35568
 2013-02-11 21:58:42 +00:00
Felix Fietkau 1810b80ec0 mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default 
SVN-Revision: 35565
 2013-02-11 18:59:10 +00:00
Steven Barth b8c796fbd7 odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging 
SVN-Revision: 35553
 2013-02-11 12:30:16 +00:00
Felix Fietkau a9058439cf openvpn-easy-rsa: fix typo in version (#12958) 
SVN-Revision: 35508
 2013-02-06 22:17:11 +00:00
Felix Fietkau dc2ba40af3 openvpn: remove the stale PKG_REV variable 
SVN-Revision: 35499
 2013-02-05 10:40:19 +00:00
Felix Fietkau b8c903e6f8 openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball 
SVN-Revision: 35498
 2013-02-05 10:40:13 +00:00
Jo-Philipp Wich e106f25ee7 firewall: various enhancements 
- reduce mssfix related log spam (#10681)
	- separate src and dest terminal chains (#11453, #12945)
	- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

SVN-Revision: 35484
 2013-02-04 14:38:33 +00:00
Steven Barth 13544edce7 odhcp6c: Fix timing issues 
SVN-Revision: 35472
 2013-02-03 17:26:40 +00:00
Jo-Philipp Wich e893d4d9a8 libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend() 
SVN-Revision: 35471
 2013-02-03 12:03:24 +00:00
Steven Barth 6be5a5a73d odhcp6c: Fix RENEW and REBIND requests 
SVN-Revision: 35454
 2013-02-02 10:44:13 +00:00
Steven Barth e2193a69c8 odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested 
SVN-Revision: 35421
 2013-02-01 13:38:47 +00:00
Steven Barth 6a43437908 netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes 
SVN-Revision: 35420
 2013-02-01 12:28:43 +00:00
Steven Barth 9a62439c28 odhcp6c: switch to userspace RA-handling and offload address assignment to netifd 
SVN-Revision: 35419
 2013-02-01 12:28:39 +00:00
Steven Barth a3368da479 6relayd: Fix announced router flags and IPv6 procfs-configuration 
SVN-Revision: 35418
 2013-02-01 12:28:34 +00:00
Felix Fietkau 416ce374c0 openvpn: add from openvpn-devel from /packages, fix support for current polarssl 
SVN-Revision: 35412
 2013-01-30 20:07:15 +00:00
Steven Barth 4bd3f54143 6in4: fix typo in last commit 
SVN-Revision: 35409
 2013-01-30 09:07:23 +00:00
Steven Barth a0a91963af 6in4: work around hanging wget process 
SVN-Revision: 35408
 2013-01-30 09:05:53 +00:00
Felix Fietkau 65657fb585 netifd: update to latest version 
fixes DNS servers on reload (#12910)
fixes ubus object race on reload or down/up (#12612)

SVN-Revision: 35383
 2013-01-29 14:40:04 +00:00
Felix Fietkau c16879a385 samba36: update to 3.6.11 and refresh patches (based on patch from #12914) 
SVN-Revision: 35382
 2013-01-29 13:18:56 +00:00
Steven Barth 777f7b30ae netifd: implement IPv6 prefix deprecation according to RFC 6204 
SVN-Revision: 35377
 2013-01-29 11:05:22 +00:00
Steven Barth 78a6439784 6relayd: remove IPv6 forwarding-sysctl workaround 
SVN-Revision: 35371
 2013-01-29 10:13:49 +00:00
Steven Barth 1a0b207d61 odhcp6c: remove IPv6 forwarding-sysctl workaround 
SVN-Revision: 35370
 2013-01-29 10:13:44 +00:00
Steven Barth fac1ed35ac netifd: remove IPv6 forwarding-sysctl workaround 
SVN-Revision: 35369
 2013-01-29 10:13:39 +00:00
Felix Fietkau 6ea9abadeb netifd: update to latest version, fixes setting addresses/routes on alias interfaces 
SVN-Revision: 35362
 2013-01-28 20:35:55 +00:00
Jo-Philipp Wich e804a663e3 hostapd: don't configure wpa_supplicant with empty password="" if no password is specified (#12912) 
SVN-Revision: 35358
 2013-01-28 18:05:33 +00:00
Jo-Philipp Wich 839f3ab0e7 firewall: flush conntrack table after changing interface rules 
SVN-Revision: 35348
 2013-01-28 15:53:44 +00:00
Steven Barth ec41a6a08c netifd: IPv6 sysctl, restart IPv6 in static mode to send RS 
SVN-Revision: 35347
 2013-01-28 14:07:27 +00:00
Steven Barth 75b06607db netifd: add SLAAC ipv6 value for static-proto 
SVN-Revision: 35346
 2013-01-28 13:53:48 +00:00
Steven Barth e964fa5d8f odhcp6c: work-around for proto-script to avoid loosing the default route 
SVN-Revision: 35345
 2013-01-28 13:53:43 +00:00
Steven Barth a81c76617e ipv6-support: don't overwrite existing setting across reflashs 
SVN-Revision: 35302
 2013-01-23 08:15:09 +00:00
Felix Fietkau 55eab5ac44 netifd: update to latest version, adds another fix for interface aliases 
SVN-Revision: 35297
 2013-01-22 16:05:59 +00:00
Steven Barth 5859fc7a39 netifd: Fix a segfault when globals.ula_prefix is empty 
SVN-Revision: 35296
 2013-01-22 15:49:42 +00:00
Felix Fietkau a4c7a953e5 uhttpd: always turn on TLS support, include ustream-ssl as a build dependency 
SVN-Revision: 35295
 2013-01-22 15:05:04 +00:00
Felix Fietkau bab482b93f uhttpd: fix another small hang issue with the same symptoms 
SVN-Revision: 35291
 2013-01-22 09:38:00 +00:00
Felix Fietkau 166ea3832b uhttpd: fix connection hangs 
SVN-Revision: 35290
 2013-01-22 09:28:55 +00:00
Felix Fietkau bc1d72c7bf tcpdump: add SLL parsing support to tcpdump-mini, use -ffunction-sections, -fdata-sections and --gc-sections to reduce size 
SVN-Revision: 35288
 2013-01-22 07:51:15 +00:00
Felix Fietkau c725669079 uhttpd: fix unencrypted passwords in httpd.conf 
SVN-Revision: 35265
 2013-01-21 12:46:41 +00:00
Steven Barth 38080ae550 6relayd: fix shell library includes in init-script 
Thanks to Daniel Golle

SVN-Revision: 35262
 2013-01-21 11:27:03 +00:00
Steven Barth 8a97d823a4 6relayd: avoid a race-condition with looping RAs 
SVN-Revision: 35260
 2013-01-21 10:42:31 +00:00
Steven Barth f129c6786e netifd: Fix segfaults in IPv6 prefix handling 
SVN-Revision: 35259
 2013-01-21 09:21:30 +00:00
Steven Barth f1fd0f8278 odhcp6c: Fix address assignment with infinite validity 
SVN-Revision: 35258
 2013-01-21 07:58:58 +00:00
Felix Fietkau 4a86973285 uhttpd: fix selecting the right ustream implementation when openssl is to be used (#12857) 
SVN-Revision: 35257
 2013-01-20 21:15:43 +00:00
Felix Fietkau 5bc6555e08 netifd: update to latest version, fixes alias support 
SVN-Revision: 35251
 2013-01-20 15:47:09 +00:00
Felix Fietkau 18a7d0e945 network/iproute2: Bump version to 3.7.0 
Updated to latest stable version and added an upstream patch to handle
a link failure

Signed-off-by: Oliver Smith <olipro@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>
[dgolle@allnet.de: refreshed patches]
Signed-off-by: Daniel Golle <dgolle@allnet.de>

SVN-Revision: 35250
 2013-01-20 11:25:18 +00:00
Felix Fietkau e55ee0817f uhttpd: update to a newer version, fixes chunked transfer on some POST requests 
SVN-Revision: 35249
 2013-01-19 22:55:46 +00:00
Felix Fietkau 6f0ecf0541 uhttpd: switch to uhttpd2, it is now feature complete 
SVN-Revision: 35247
 2013-01-19 18:47:09 +00:00
Jo-Philipp Wich f2766239ea netifd: add a band-aid fix for the wifi setup vs. netifd init race by increasing the wait time to five seconds 
SVN-Revision: 35240
 2013-01-19 10:13:14 +00:00
Steven Barth 62e9957cc4 ipv6-support: adapt UCI defaults to new ordering 
SVN-Revision: 35219
 2013-01-18 12:52:51 +00:00