9fb5bf176e
netifd: update to latest version, uses the new uci/blob code from libuci
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36909
2013-06-10 12:42:30 +00:00
5caa45d0b3
ppp: correctly handle address when reloading
...
SVN-Revision: 36904
2013-06-10 10:42:34 +00:00
491deaed2c
netifd: improve reloading behaviour
...
SVN-Revision: 36903
2013-06-10 10:42:15 +00:00
bc73ca5619
iwinfo: add phyname attribute, this is useful to group networks by radio phy
...
SVN-Revision: 36889
2013-06-09 14:39:14 +00:00
cb24c37858
libiwinfo: ignore log messages from wpa_supplicant while scanning
...
wpa_supplicant may send log and event messages intermixed with the
expected scan results. This makes "iwinfo wlan0 scan" and LuCI
"site survey" display nothing when many AP's are around.
Eliminate the CTRL-EVENT-BSS-ADDED events, interspersed log messages,
lines with unexpected format. Increase timeout to handle the max
number of channels (2.4, 3.6, 4.9, 5 GHz). Insure receive buffer is
null-terminated.
Signed-off-by: Jean-Pierre Tosoni <jp.tosoni@acksys.fr>
SVN-Revision: 36888
2013-06-09 14:39:09 +00:00
f995c90329
netifd: Improve IPv6 source-routing policies
...
SVN-Revision: 36884
2013-06-08 13:26:33 +00:00
b9de8ca7f5
netifd: bring wifi down before shutting down
...
works around wifiX references not being freed on network restart.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36883
2013-06-08 11:44:12 +00:00
e7b15446a8
firewall: udpate to git head ( #13652 , #13654 , #13658 )
...
- optimizes chain usage for ingress rules
- adds limit match support for redirect rules
- fixes automatic redirect dest detection on little endian systems
- leaves base chains in place on reload to allow user rules to target e.g. "reject"
SVN-Revision: 36871
2013-06-06 14:12:02 +00:00
5cf06bd17b
firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols
...
SVN-Revision: 36868
2013-06-06 14:02:29 +00:00
e94cf1c72b
iptables: install libext*.a into staging dir
...
SVN-Revision: 36867
2013-06-06 14:02:24 +00:00
ecc95dcba8
firewall: update to git head ( #13652 )
...
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
- uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones
SVN-Revision: 36854
2013-06-05 11:40:40 +00:00
0a74d9d5c3
firewall3: fix accidentally changed install directive
...
SVN-Revision: 36840
2013-06-04 12:30:50 +00:00
07a3110e88
firewall: fix git source url
...
SVN-Revision: 36839
2013-06-04 12:23:47 +00:00
b721c92221
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA
...
SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
0dd6753c09
Drop legacy firewall package
...
SVN-Revision: 36837
2013-06-04 12:21:44 +00:00
6f60308257
firewall3: update to git head ( #13641 )
...
* Fixes wrong chain used for zone forward policy
SVN-Revision: 36830
2013-06-04 10:26:49 +00:00
6eeca5176e
firewall3: update to git head
...
- Fixes problems with reusing matches or targets from loadable extensions
SVN-Revision: 36826
2013-06-03 16:38:29 +00:00
8c69057980
uhttpd: update to latest version, fixes CGI related crashes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36817
2013-06-01 21:43:06 +00:00
089d6612ce
6relayd: Work around Windows DHCPv6 quirks Announcing deprecated addresses breaks Windows clients
...
SVN-Revision: 36815
2013-06-01 17:51:02 +00:00
7ae506c7d4
odhcp6c: work around spurious false-positive address DECLINEs
...
SVN-Revision: 36809
2013-05-31 13:49:17 +00:00
3bb397c997
firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly
...
SVN-Revision: 36806
2013-05-31 13:23:23 +00:00
bf582fbb7b
odhcp6c: fix handling of multiple RAs in a row
...
SVN-Revision: 36804
2013-05-31 10:02:39 +00:00
cdc3caf533
6relayd: Better compatibility with misbheaving DHCPv6 clients * Make the "best" address / prefix the first one being announced * Only add the "best" address to the hosts-file
...
SVN-Revision: 36772
2013-05-30 15:42:30 +00:00
519f27cd33
netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes
...
SVN-Revision: 36771
2013-05-30 15:42:25 +00:00
02fe12c00d
uhttpd: update again to fix a ubus plugin crash bug
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36770
2013-05-30 13:16:38 +00:00
eeb7fdc13e
uhttpd: update to latest version, fixes script timeout for ubus requests
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36767
2013-05-30 10:44:20 +00:00
dc6625f977
6relayd: more verbosity in leases and logging
...
SVN-Revision: 36764
2013-05-30 07:56:55 +00:00
56a3396bf2
iptables: bump to 1.4.19.1
...
SVN-Revision: 36760
2013-05-29 14:58:04 +00:00
439fdd4d65
netifd: fix IPv6-addresses disappearing due to lifetime-overflows
...
SVN-Revision: 36748
2013-05-28 18:32:01 +00:00
23b3cebd56
odhcp6c: fix or debug disappearing IPv6 addresses
...
SVN-Revision: 36745
2013-05-28 16:28:14 +00:00
e6250644be
mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36743
2013-05-28 11:10:41 +00:00
61c0c6ab68
6relayd: RFC 6204 and naming improvements * Announce delegated prefixes using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default
...
SVN-Revision: 36738
2013-05-27 20:38:13 +00:00
63603ee478
firewall3: update to git head
...
- allows building without IPv6 support
- uses more robust rules to cope with missing libext.a
- uses better linking strategy to avoid symbol clashes with older iptables
- introduces source compatiblity layer for different libxtables versions
SVN-Revision: 36736
2013-05-27 15:13:19 +00:00
e4f8c38ed1
firewall3: update to git head
...
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
- automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
- properly support output rules with dest '*' to hook directly into delegate_output
- fixes crash when processing rules with unresolved targets
SVN-Revision: 36721
2013-05-26 15:48:04 +00:00
f63064a257
6relayd: Fix DHCPv6-server picking up addresses from master interface
...
SVN-Revision: 36718
2013-05-26 10:06:02 +00:00
90887b5fb3
firewall3: update to git head
...
- fixes linking issues with some toolchains
SVN-Revision: 36703
2013-05-24 12:49:06 +00:00
d8d7d7f4aa
6relayd: fix a lease-timing issue with stateful DHCPv6
...
SVN-Revision: 36702
2013-05-24 12:31:30 +00:00
c1ff8cd9bb
firewall3: update to git head
...
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
- Do not leak memory when processing rules with unknown targets or matches
SVN-Revision: 36698
2013-05-23 13:07:44 +00:00
75bb3138aa
uhttpd: update to latest version, fixes #13564 , #13560 , improves error handling as pointed out in #13537
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36696
2013-05-23 10:50:42 +00:00
32c6ffb5a1
firewall3: Remove abandonend include
...
SVN-Revision: 36692
2013-05-23 06:38:25 +00:00
b757ca2259
firewall3: update to git head
...
- fix build on Linux < 3.7
- limit zone names to 14 bytes
SVN-Revision: 36691
2013-05-22 14:15:53 +00:00
9c3ac668e0
6relayd: Let OpenWrt override default CFLAGS
...
SVN-Revision: 36690
2013-05-22 11:58:54 +00:00
c12189b379
firewall3: update to git head
...
- fixes reload when firewall is not running already
- fixes crash when ipsets are supported but undeclared
- fixes handling of per zone user chains on reload
SVN-Revision: 36689
2013-05-22 11:37:41 +00:00
9d115df749
6relayd: Fix a segfault when multiple downstream interfaces are present
...
SVN-Revision: 36687
2013-05-21 18:05:37 +00:00
dd83e87ab0
firewall3: update to git head
...
- fixes segfault in flush command if ipset support is not available
- fixes internal rule generation if custom chains are enabled
SVN-Revision: 36686
2013-05-21 14:49:37 +00:00
6eec8009ba
ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base
...
SVN-Revision: 36685
2013-05-21 13:00:28 +00:00
9b6c31d4cc
firewall3: move libext*.a copying to compile phase
...
SVN-Revision: 36684
2013-05-21 12:58:36 +00:00
8df6cd005c
netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
...
SVN-Revision: 36683
2013-05-21 12:58:15 +00:00
e8050c6c35
firewall3: update to git head
...
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
* make ipset integration more reliable
SVN-Revision: 36681
2013-05-21 10:15:14 +00:00
a9a9644efd
iptables: use -ffunction-sections, -fdata-sections and --gc-sections
...
SVN-Revision: 36680
2013-05-21 10:15:10 +00:00
24c39ddcf7
odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests
...
SVN-Revision: 36678
2013-05-21 09:13:48 +00:00
37baf2d6b2
6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better
...
SVN-Revision: 36677
2013-05-21 09:13:40 +00:00
c6f70381c9
odhcp6c: Fix address / prefix expiry logic
...
SVN-Revision: 36675
2013-05-20 14:54:20 +00:00
dd161ae62b
dnsmasq: add directory for external hosts-files
...
SVN-Revision: 36655
2013-05-17 14:44:12 +00:00
334c40da14
6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD
...
SVN-Revision: 36654
2013-05-17 14:44:07 +00:00
0f1be4425f
netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4
...
Based on a patch by Kristian Evensen. Thank You.
SVN-Revision: 36653
2013-05-17 14:44:02 +00:00
7365e647f6
uhttpd: update to latest version, fixes index page processing order
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36644
2013-05-16 11:38:19 +00:00
4fc8e64a40
iproute2: workaround compile issues with gcc 4.8.x
...
SVN-Revision: 36642
2013-05-16 00:04:48 +00:00
a62ca72309
odhcp6c: Fix handling of RAs when no DHCPv6-server is present
...
SVN-Revision: 36641
2013-05-15 11:07:01 +00:00
580481cd6d
iproute2: upgrade to 3.9.0
...
SVN-Revision: 36638
2013-05-14 23:49:34 +00:00
5be36cbe83
iproute2: print help in connmark
...
SVN-Revision: 36637
2013-05-14 23:49:31 +00:00
d090eea125
uhttpd: update to latest version, fixes a SSL connection memory leak
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36636
2013-05-14 17:43:00 +00:00
d481486aad
package: fold the IPv6 menu into Network
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36634
2013-05-14 15:02:31 +00:00
e8f3897389
6relayd: Always announce the current MAC-address
...
* Fixes #13516 thanks to berni for the detailed bugreport.
SVN-Revision: 36629
2013-05-13 17:54:36 +00:00
a1af842016
ds-lite: add ds-lite network protocol handler
...
SVN-Revision: 36628
2013-05-13 17:12:39 +00:00
5ce135ed87
netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements
...
SVN-Revision: 36627
2013-05-13 17:12:34 +00:00
ea71678b09
netifd: added support for setting up 6rd from DHCP
...
SVN-Revision: 36626
2013-05-13 17:12:30 +00:00
ad93a571c6
odhcp6c: added support for DS-Lite + various fixes
...
SVN-Revision: 36625
2013-05-13 17:12:25 +00:00
973dad61b0
firewall3: Remove obsoleted ULA-border
...
SVN-Revision: 36624
2013-05-13 17:12:20 +00:00
07d99b62b7
firewall3: add wan6 interface to wan-zone by default
...
SVN-Revision: 36623
2013-05-13 17:12:15 +00:00
4cb9d9715c
firewall: Remove obsoleted ULA-border rule
...
SVN-Revision: 36622
2013-05-13 17:12:10 +00:00
8560648082
6rd: increase metric of default route
...
This will prefer native IPv6 over 6rd if both are present.
SVN-Revision: 36605
2013-05-12 08:07:15 +00:00
d59f8cfa8e
iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode
...
SVN-Revision: 36604
2013-05-12 01:12:56 +00:00
29d4c36622
add uci support for "proxy-dnssec" in dnsmasq
...
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.
Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>
SVN-Revision: 36570
2013-05-07 07:19:51 +00:00
9d8e3e03df
iw: update to 3.10, sync with nl80211.h changes in compat-wireless
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36569
2013-05-06 22:35:50 +00:00
9c1ed6447b
odhcp6c: Make SLAAC-only work without reqprefix=no
...
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.
SVN-Revision: 36555
2013-05-06 10:20:43 +00:00
95e139d0b2
ipset-dns: support simultaneously populating IPv4 and IPv6 sets
...
SVN-Revision: 36554
2013-05-06 10:01:45 +00:00
3c17fd41a4
Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset
...
SVN-Revision: 36552
2013-05-06 08:44:54 +00:00
b85c442e81
hostapd: enable 802.11r for the -full variant ( #13250 )
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36533
2013-05-03 10:39:57 +00:00
4bba31b64c
firewall3: update to git head
...
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422 , #13386 )
- add support for fwmark matches and mark setting targets
SVN-Revision: 36521
2013-05-02 13:42:20 +00:00
a0b655b8f2
Fix install of iptables pkg-config files.
...
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146 ; which should make collectd
appear in snapshots again.
Signed-off-by: Danny Baumann <dannybaumann@web.de>
SVN-Revision: 36509
2013-05-02 08:10:55 +00:00
f1e214411d
iwinfo: fix iwinfo_hardware() return value if chip id is not found
...
SVN-Revision: 36471
2013-04-28 14:04:39 +00:00
f1497ccf4f
netifd: update to git head - disables multicast snooping by default on bridges
...
SVN-Revision: 36463
2013-04-27 09:28:40 +00:00
05c1424e87
iwinfo: add hw database file
...
SVN-Revision: 36450
2013-04-26 13:21:01 +00:00
e02d373f90
iwinfo: move builtin hardware database to /usr/share/libiwinfo/hardware.txt
...
SVN-Revision: 36449
2013-04-26 13:20:15 +00:00
5062838fa5
netifd: update to the latest version, fixes interface reload issues when removing the ifname option
...
SVN-Revision: 36424
2013-04-25 16:28:19 +00:00
49f97af481
6relayd: Fix generation of RA-messages
...
SVN-Revision: 36419
2013-04-24 18:22:08 +00:00
a040ead1c5
iwinfo: add SR71-15 radio info, fix nl80211 channel/frequency reporting on some architectures
...
SVN-Revision: 36417
2013-04-24 14:44:20 +00:00
2c78c1457b
firewall3: Make IPv6 ULA-Border generation dynamic
...
This fixes working behind another router which gives out ULAs.
SVN-Revision: 36416
2013-04-24 14:17:24 +00:00
2dbcd2ba7b
6relayd: update package description
...
SVN-Revision: 36413
2013-04-24 07:21:42 +00:00
e17ac4c257
dnsmasq: update to 2.66 Thanks to Christoph König for patches.
...
SVN-Revision: 36412
2013-04-24 05:55:39 +00:00
21e4e2a766
odhcp6c: Set default SOL_MAX_RT to 1h
...
SVN-Revision: 36411
2013-04-24 05:02:45 +00:00
d7908e02b5
hostapd: return the frequency to some ubus calls to make integration easier
...
SVN-Revision: 36410
2013-04-23 18:35:50 +00:00
61a6f45cdc
lldpd: upgrade to 0.7.1
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
SVN-Revision: 36401
2013-04-23 10:37:23 +00:00
17b8c0c7b8
netifd: Improve IPv6-ULA assignment handling
...
SVN-Revision: 36383
2013-04-22 19:40:06 +00:00
c96c05d549
odhcp6c: Several fixes and improvements * Add preliminary support for RFC 6603 prefix exclusion * Fix reconfigure-support and reconfigure authentication * Set maximum retransmission timeout for solicitations to 2h * Fix a segfault when parsing IA_PD in advertise messages
...
SVN-Revision: 36382
2013-04-22 19:40:01 +00:00
1e78c3e297
6relayd: Add DHCPv6-PD server support, fix relaying in stateful mode
...
SVN-Revision: 36381
2013-04-22 19:39:55 +00:00
62244d73ae
hostapd: update to 2013-04-05
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36376
2013-04-22 13:24:48 +00:00
96bb7c123b
build: consistently use 'depends on' instead of 'depends'
...
make the syntax more compatible with kernel menuconfig
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36351
2013-04-17 15:36:41 +00:00
e66a4af8c3
uhttpd: update to git head, fixes regression when parsing IPv6 listen arguments
...
SVN-Revision: 36348
2013-04-17 11:34:39 +00:00
25ffe0446c
iwinfo: print info of all existing wireless ifaces when cli is called without arguments
...
SVN-Revision: 36339
2013-04-15 15:00:16 +00:00
eb10581ce3
uhttpd: update to latest version, fixes compile error with latest libubox
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36338
2013-04-15 14:49:52 +00:00
099e3d8183
netifd: update to latest version, fixes some device handling crashes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36336
2013-04-15 14:21:45 +00:00
88c418bc75
qos-scripts: add queue length and quantum limit, suggested by dtaht
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36294
2013-04-09 14:59:10 +00:00
7ca7bc501e
iwinfo: fix frequency/channel and channel/frequency conversions to properly implement 802.11j
...
SVN-Revision: 36292
2013-04-09 14:37:55 +00:00
04dcd12c91
add portmap support to userland
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36284
2013-04-09 14:19:13 +00:00
f13ae9965c
add "swconfig list" support
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36282
2013-04-09 14:19:05 +00:00
f90f025f20
netifd: fix route / route6 regression ( #13303 )
...
SVN-Revision: 36281
2013-04-09 12:21:12 +00:00
3abc915522
Remove deprecated ip6slaac option * use proto=dhcpv6 with reqprefix=no instead
...
SVN-Revision: 36280
2013-04-09 12:12:30 +00:00
2c087dc785
Remove obsoleted ipv6-support meta-package
...
SVN-Revision: 36279
2013-04-09 09:45:51 +00:00
35d716fbbb
netifd: Bump to latest version * Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow)
...
SVN-Revision: 36196
2013-04-05 12:28:06 +00:00
0393e52623
netifd: Rewrite IPv6 prefix assignment * Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion
...
SVN-Revision: 36193
2013-04-03 17:08:21 +00:00
71e9171717
openvpn: enable password save support ( #13245 )
...
SVN-Revision: 36144
2013-04-01 10:02:43 +00:00
eedf9e72f9
odhcp6c: Fix a race-condition in RA-handling
...
Thanks to Markus Stenberg for investigating and providing a fix
SVN-Revision: 36132
2013-03-26 13:39:17 +00:00
5a9c2c77b4
iptables: don't use --enable-ipv6 if IPv6 is disabled
...
SVN-Revision: 36125
2013-03-25 11:22:12 +00:00
6529cf6cea
odhcp6c: minor bug fixes
...
SVN-Revision: 36123
2013-03-25 10:58:48 +00:00
6fa1b5346e
firewall3: update to git head
...
* fixes parsing of src/dest '*'
* fixes parsing of proto 'all'
SVN-Revision: 36111
2013-03-22 14:10:29 +00:00
76d1c0a067
firewall3: update to git head
...
* fixes port remapping rules (#13217 )
SVN-Revision: 36100
2013-03-21 14:25:17 +00:00
c9544f4af0
kernel: add some fixes for kernel 3.9
...
This patch fixes some compile problems with kernel 3.9 and adds some missing linux 3.9 handling into kernel packages.
SVN-Revision: 36098
2013-03-20 21:59:24 +00:00
261be7b8f3
netifd: Fix adding IPv6 DNS-servers to resolv.conf
...
In some cases IPv6 DNS-servers were not added correctly.
SVN-Revision: 36095
2013-03-20 13:49:39 +00:00
eeb88a1df3
odhcp6c: Fix metric for on-link prefix routes
...
SVN-Revision: 36094
2013-03-20 09:26:52 +00:00
6fbd824e9b
firewall3: update to git head
...
* fixes reload handling of zones and ipsets that are still running but already deleted from the config
SVN-Revision: 36092
2013-03-19 16:18:05 +00:00
03cb7986fc
firewall3: update to git head
...
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197 )
- do not allow src_mac option for SNAT rules
SVN-Revision: 36090
2013-03-19 13:54:34 +00:00
31876c193a
hostapd: fix build errors on supplicant-only builds
...
SVN-Revision: 36085
2013-03-18 16:11:32 +00:00
3ebdd3b330
odhcp6c: fix preference handling, custom client-ID * thanks to mbidewell for investigating
...
SVN-Revision: 36083
2013-03-18 07:24:49 +00:00
2167101c90
hostapd: initial prototype of an ubus binding
...
Supports listing, removing and banning clients, and hooking into
probe/assoc/auth requests via object subscribe.
SVN-Revision: 36081
2013-03-17 20:47:18 +00:00
84069f8534
uhttpd: update to latest version, fixes an occasional crash on CGI scripts
...
SVN-Revision: 36034
2013-03-15 13:43:55 +00:00
54f9f47a28
firewall3: update to git head
...
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
* Allow "network" and "device" commands while firewall is running (to make them usable in includes)
SVN-Revision: 36009
2013-03-14 15:29:43 +00:00
fce3deddff
use new button scheme
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36004
2013-03-13 18:11:25 +00:00
9faa312dbb
firewall3: update to git head
...
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
* Make NAT reflection direction configurable
* Map init script stop action to flush
* Map init script reload action to reload
* Respect init script disabled state in hotplug handler
SVN-Revision: 35998
2013-03-13 15:46:30 +00:00
9ddc45bc3f
hostapd: fix client reassociation after too many ACK failures
...
SVN-Revision: 35973
2013-03-12 00:19:25 +00:00
8c7ed1cb7b
firewall3: update to git head
...
* Fixes compilation against eglibc
* Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
* Fixes tracking logic for user chains by differentiating between reloads and restarts
* Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
* Supports legacy "tcpudp" protocol notation again
SVN-Revision: 35969
2013-03-11 20:52:20 +00:00
e259ecad7e
Revert "firewall3: update to git head"
...
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.
SVN-Revision: 35904
2013-03-08 19:52:18 +00:00
50213fc354
firewall3: update to git head
...
- introduce per-zone user chains
- support legacy "tcpudp" protocol notation
SVN-Revision: 35903
2013-03-08 15:27:33 +00:00
39a001dc69
odhcp6c: various bugfixes * Don't prematurely send RENEW / REBIND when T1 or T2 is > 1 day * Add "norelease" option to not send a RELEASE when stopping
...
SVN-Revision: 35902
2013-03-08 07:04:38 +00:00
62ea398cd8
iptables: Add missing IPv6 builtin modules
...
SVN-Revision: 35898
2013-03-07 08:48:41 +00:00
9779b0b88c
iptables: redo update to 1.4.18 with old linking-behaviour
...
SVN-Revision: 35896
2013-03-06 17:05:34 +00:00
bacd71648b
Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx
...
SVN-Revision: 35894
2013-03-06 12:55:48 +00:00
c3faa6be75
hostapd: include the madwifi headers in the package directory to avoid compile breakage if the madwifi build fails
...
SVN-Revision: 35893
2013-03-05 22:06:30 +00:00
d023a08753
iptables: update to 1.4.18
...
SVN-Revision: 35892
2013-03-05 20:51:57 +00:00
d75c632de6
firewall3: add default config and firewall.user
...
SVN-Revision: 35889
2013-03-05 13:45:09 +00:00
fa1749e668
hostapd: update to git version 2013-03-02
...
SVN-Revision: 35887
2013-03-04 17:16:38 +00:00
89be702bff
firewall3: update to git head, introduces support for "enabled" option
...
SVN-Revision: 35845
2013-03-02 17:09:33 +00:00
c81945e979
6relayd: Fix illegal memory accesses Spurious errors when receiving netlink-messages lead to unhandled errors which caused SIGBUS. Thanks to tdavis for debugging
...
SVN-Revision: 35836
2013-02-28 16:37:20 +00:00
50b7fa217a
6relayd: various fixes cap preferred and valid lifetimes at more reasonable limits decrease memory usage (remove unnecessary book-keeping)
...
SVN-Revision: 35835
2013-02-28 14:57:19 +00:00
886ce188bf
xtables-addons: fix packaging of iptaccount
...
SVN-Revision: 35831
2013-02-28 10:58:12 +00:00
557c047f71
firewall3: clear contnrack table on flush, set policies to drop during rule reload
...
SVN-Revision: 35820
2013-02-27 14:09:37 +00:00
a90b6f7d90
6relayd: Fix config behaviour for rewrite_dns_addr option
...
SVN-Revision: 35804
2013-02-26 12:50:52 +00:00
32ac53821f
6relayd: compatibility with broken IPv6 devices * Announce ULA as deprecated if other addresses are available * Allow the announced DNS-server to be overwritten
...
SVN-Revision: 35803
2013-02-26 12:42:53 +00:00
92062542e2
firewall: fix logging rule regression ( #12999 )
...
SVN-Revision: 35745
2013-02-22 13:45:20 +00:00
4fb2cd18c1
firewall3: add support for shell script and iptables-restore style includes
...
SVN-Revision: 35744
2013-02-22 12:45:38 +00:00
a7b262dc0a
netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions.
...
SVN-Revision: 35743
2013-02-22 08:56:29 +00:00
7d7d88b580
firewall3: update to git head
...
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')
SVN-Revision: 35738
2013-02-21 22:33:44 +00:00
280fa5a1a2
dante: fix broken configure script not using CFLAGS for conftest
...
Spotted by doing an ARM hard float build.
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 35685
2013-02-19 17:22:55 +00:00
3081c672fc
6relayd: Fix possible memory corruption issue
...
SVN-Revision: 35673
2013-02-19 12:04:41 +00:00
f5b63ffd33
6relayd: Workaround potential signal handling issue
...
SVN-Revision: 35665
2013-02-18 12:50:36 +00:00
02b0c62f33
firewall3 - a C implementation of the current firewall scripts
...
SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
1d6574b9c3
hostapd: fix the scan wait patch for multiple interfaces
...
SVN-Revision: 35630
2013-02-16 19:00:34 +00:00
99782943d2
hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update
...
SVN-Revision: 35619
2013-02-16 14:26:03 +00:00
c98b12d911
samba36: fix segmentation fault when trying to add non-existent users
...
Based on a patch from НКВД. Closes #12962 .
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 35610
2013-02-16 11:39:42 +00:00
99b69fd9c5
odhcp6c: allow setting a user-provided prefix as well
...
SVN-Revision: 35570
2013-02-12 08:23:54 +00:00
eeaf2c0b5a
iptables: fix bad PKG_RELEASE in previous commit
...
SVN-Revision: 35569
2013-02-11 22:14:38 +00:00
916902b1d2
iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
...
SVN-Revision: 35568
2013-02-11 21:58:42 +00:00
1810b80ec0
mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default
...
SVN-Revision: 35565
2013-02-11 18:59:10 +00:00
b8c796fbd7
odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging
...
SVN-Revision: 35553
2013-02-11 12:30:16 +00:00
a9058439cf
openvpn-easy-rsa: fix typo in version ( #12958 )
...
SVN-Revision: 35508
2013-02-06 22:17:11 +00:00
dc2ba40af3
openvpn: remove the stale PKG_REV variable
...
SVN-Revision: 35499
2013-02-05 10:40:19 +00:00
b8c903e6f8
openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball
...
SVN-Revision: 35498
2013-02-05 10:40:13 +00:00
e106f25ee7
firewall: various enhancements
...
- reduce mssfix related log spam (#10681 )
- separate src and dest terminal chains (#11453 , #12945 )
- disable per-zone custom chains by default, they're rarely used
Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.
SVN-Revision: 35484
2013-02-04 14:38:33 +00:00
13544edce7
odhcp6c: Fix timing issues
...
SVN-Revision: 35472
2013-02-03 17:26:40 +00:00
e893d4d9a8
libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend()
...
SVN-Revision: 35471
2013-02-03 12:03:24 +00:00
6be5a5a73d
odhcp6c: Fix RENEW and REBIND requests
...
SVN-Revision: 35454
2013-02-02 10:44:13 +00:00
e2193a69c8
odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested
...
SVN-Revision: 35421
2013-02-01 13:38:47 +00:00
6a43437908
netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
...
SVN-Revision: 35420
2013-02-01 12:28:43 +00:00
9a62439c28
odhcp6c: switch to userspace RA-handling and offload address assignment to netifd
...
SVN-Revision: 35419
2013-02-01 12:28:39 +00:00
a3368da479
6relayd: Fix announced router flags and IPv6 procfs-configuration
...
SVN-Revision: 35418
2013-02-01 12:28:34 +00:00
416ce374c0
openvpn: add from openvpn-devel from /packages, fix support for current polarssl
...
SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
4bd3f54143
6in4: fix typo in last commit
...
SVN-Revision: 35409
2013-01-30 09:07:23 +00:00
a0a91963af
6in4: work around hanging wget process
...
SVN-Revision: 35408
2013-01-30 09:05:53 +00:00
65657fb585
netifd: update to latest version
...
fixes DNS servers on reload (#12910 )
fixes ubus object race on reload or down/up (#12612 )
SVN-Revision: 35383
2013-01-29 14:40:04 +00:00
c16879a385
samba36: update to 3.6.11 and refresh patches (based on patch from #12914 )
...
SVN-Revision: 35382
2013-01-29 13:18:56 +00:00
777f7b30ae
netifd: implement IPv6 prefix deprecation according to RFC 6204
...
SVN-Revision: 35377
2013-01-29 11:05:22 +00:00
78a6439784
6relayd: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35371
2013-01-29 10:13:49 +00:00
1a0b207d61
odhcp6c: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35370
2013-01-29 10:13:44 +00:00
fac1ed35ac
netifd: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35369
2013-01-29 10:13:39 +00:00
6ea9abadeb
netifd: update to latest version, fixes setting addresses/routes on alias interfaces
...
SVN-Revision: 35362
2013-01-28 20:35:55 +00:00
e804a663e3
hostapd: don't configure wpa_supplicant with empty password="" if no password is specified ( #12912 )
...
SVN-Revision: 35358
2013-01-28 18:05:33 +00:00
839f3ab0e7
firewall: flush conntrack table after changing interface rules
...
SVN-Revision: 35348
2013-01-28 15:53:44 +00:00
ec41a6a08c
netifd: IPv6 sysctl, restart IPv6 in static mode to send RS
...
SVN-Revision: 35347
2013-01-28 14:07:27 +00:00
75b06607db
netifd: add SLAAC ipv6 value for static-proto
...
SVN-Revision: 35346
2013-01-28 13:53:48 +00:00
e964fa5d8f
odhcp6c: work-around for proto-script to avoid loosing the default route
...
SVN-Revision: 35345
2013-01-28 13:53:43 +00:00
a81c76617e
ipv6-support: don't overwrite existing setting across reflashs
...
SVN-Revision: 35302
2013-01-23 08:15:09 +00:00
55eab5ac44
netifd: update to latest version, adds another fix for interface aliases
...
SVN-Revision: 35297
2013-01-22 16:05:59 +00:00
5859fc7a39
netifd: Fix a segfault when globals.ula_prefix is empty
...
SVN-Revision: 35296
2013-01-22 15:49:42 +00:00
a4c7a953e5
uhttpd: always turn on TLS support, include ustream-ssl as a build dependency
...
SVN-Revision: 35295
2013-01-22 15:05:04 +00:00
bab482b93f
uhttpd: fix another small hang issue with the same symptoms
...
SVN-Revision: 35291
2013-01-22 09:38:00 +00:00
166ea3832b
uhttpd: fix connection hangs
...
SVN-Revision: 35290
2013-01-22 09:28:55 +00:00
bc1d72c7bf
tcpdump: add SLL parsing support to tcpdump-mini, use -ffunction-sections, -fdata-sections and --gc-sections to reduce size
...
SVN-Revision: 35288
2013-01-22 07:51:15 +00:00
c725669079
uhttpd: fix unencrypted passwords in httpd.conf
...
SVN-Revision: 35265
2013-01-21 12:46:41 +00:00
38080ae550
6relayd: fix shell library includes in init-script
...
Thanks to Daniel Golle
SVN-Revision: 35262
2013-01-21 11:27:03 +00:00
Felix Fietkau
Steven Barth
Jo-Philipp Wich
Jonas Gorski
Luka Perkov
John Crispin
Hauke Mehrtens
Florian Fainelli