Felix Fietkau
f2fdd8ebdb
dropbear: add options SSHKeepAlive and IdleTimeout.
...
Without timeout mechanism, if ssh client disconnected without sending
FIN or RST, forked dropbear servers would hang there for
KEX_RETRY_TIMEOUT seconds (8 hours).
TCP keepalive is not implemented in dropbear yet, thus the name
SSHKeepAlive.
300 seconds in this patch is selected from the default value of
ServerAliveInterval for Debian ssh client (See man ssh_config).
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
SVN-Revision: 40299
2014-03-29 17:05:35 +00:00
Felix Fietkau
dd5a12c5a1
dropbear: fix interface config setting
...
Patch from #15070
SVN-Revision: 40298
2014-03-29 16:59:33 +00:00
Felix Fietkau
ad52658be7
dropbear: update to 2014.63
...
Upstream changelog:
https://matt.ucc.asn.au/dropbear/CHANGES
This adds elliptic curve cryptography (ECC) support as an option, disabled
by default.
dropbear mips 34kc uClibc binary size:
before: 161,672 bytes
after, without ECC (default): 164,968
after, with ECC: 198,008
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>
SVN-Revision: 40297
2014-03-29 16:59:26 +00:00
Steven Barth
0555ebf66d
6rd / ds-lite: make the firewall-zones of nested-protocols configurable
...
SVN-Revision: 40020
2014-03-26 10:12:49 +00:00
Steven Barth
2a893c2057
dhcp: send 6rd-ORO when expecting 6rd-information
...
SVN-Revision: 40019
2014-03-26 09:48:20 +00:00
Felix Fietkau
abd13cd85b
uhttpd: update to latest version, improves cgi path handling
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40005
2014-03-22 19:38:48 +00:00
Felix Fietkau
9138e8015e
uhttpd: update to latest version, fixes HEAD requests to CGI scripts
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40003
2014-03-21 20:49:56 +00:00
Felix Fietkau
5c53e63836
netifd: update to the latest version, adds support for reloading proto handlers on toplogy changes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 40001
2014-03-21 15:55:27 +00:00
Felix Fietkau
c53c7a0fe0
hostapd: add pbc_in_m1 option
...
Option pbc_in_m1 is being used as a WPS capability discovery
workaround for PBC with Windows 7.
Add possibility to enable this workaround from UCI.
To enable it, turn on wps and set wps_pbc_in_m1 parameter to 1.
Signed-off-by: Pawel Kulakowski <pawel.kulakowski@tieto.com>
SVN-Revision: 39995
2014-03-21 15:55:03 +00:00
Felix Fietkau
5a6f00b846
ead: clean up
...
Remove unused variables
Correct some (non important) memory leaks
Remove fclose(NULL)
Correct possible out of bound access
spotted with cppcheck
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>
SVN-Revision: 39994
2014-03-21 15:54:59 +00:00
Felix Fietkau
7c029cc262
ead: set_nonblock() is doing nothing (typo)
...
spotted with cppcheck
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>
SVN-Revision: 39993
2014-03-21 15:54:56 +00:00
Felix Fietkau
0945555e14
ppp: remove ppp requirement from chat
...
This patch removes dependancy of PPP from chat application as chat application can be used for other serial communication as well that is not dependant on PPP and therefore one should be able to install chat without PPP. There also are no dependencies within chat application for PPP.
Signed-off-by: Oskari Rauta <oskari.rauta at gmail.com>
SVN-Revision: 39992
2014-03-21 15:54:52 +00:00
Felix Fietkau
3eb2d6d5d4
netifd: update to the latest version, fixes ubus handling of proto data items
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39970
2014-03-20 20:06:59 +00:00
Felix Fietkau
e926cfd9ac
netifd: update to latest version, fixes an autostart handling with link detection
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39967
2014-03-20 13:57:28 +00:00
Felix Fietkau
66393168d3
firewall: update to latest version, fixes a musl build error
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39965
2014-03-20 13:51:43 +00:00
Felix Fietkau
0ccec8179d
iptables: fix issues with the new musl version
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39964
2014-03-20 13:51:40 +00:00
Felix Fietkau
7fa3fe6741
pppd: fix build errors with musl
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39963
2014-03-20 13:51:36 +00:00
Steven Barth
f4ace532c8
odhcpd: fix more segfaults + ubus interaction
...
SVN-Revision: 39960
2014-03-20 12:25:17 +00:00
Steven Barth
b5cc199ec9
odhcpd: fix possible segfaults
...
SVN-Revision: 39958
2014-03-20 09:39:00 +00:00
Felix Fietkau
ad72198abb
netifd: update to latest version, adds support for specifying a config path
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39956
2014-03-19 14:26:51 +00:00
Felix Fietkau
b9825247c2
polarssl: update to version 1.3.4 and add openssl compat patch
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39930
2014-03-14 15:05:46 +00:00
Steven Barth
7ac0057c1f
odhcp6c: pass on delegate-flag on to ds-lite interface
...
SVN-Revision: 39910
2014-03-13 10:40:56 +00:00
Steven Barth
edd75e332c
netifd: pass on delegate flag from dhcp to 6rd
...
SVN-Revision: 39909
2014-03-13 10:33:26 +00:00
John Crispin
7baf4957cf
72ca3bfc401a4f1b695dcc86640dddee62716cea contained too many files
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39908
2014-03-13 07:42:59 +00:00
John Crispin
0dc9d8d6ff
fstools: add the new fstools package
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39895
2014-03-12 19:32:51 +00:00
Steven Barth
97ea9e3c2a
iptables/netfilter: add connlimit to conntrack-extra
...
SVN-Revision: 39878
2014-03-11 14:58:00 +00:00
Steven Barth
09fd40c28f
iptables: bump to 1.4.21
...
SVN-Revision: 39877
2014-03-11 14:57:55 +00:00
Felix Fietkau
75ac488f4d
openvpn: make size optimization configurable
...
Signed-off-by: Christoph Kottke <christoph.kottke@gmx.de>
SVN-Revision: 39872
2014-03-11 12:07:17 +00:00
Felix Fietkau
83f9fc12d6
netifd: update to latest version, includes interface handling fixes by Hans Dedecker
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39870
2014-03-11 09:28:28 +00:00
Steven Barth
cd695565fb
odhcpd/odhcp6c: fix HMAC-MD5 in DHCPv6-Reconfigure
...
SVN-Revision: 39868
2014-03-11 08:21:58 +00:00
Felix Fietkau
24dae38f43
iproute2: add ip-full variant to disable IP_CONFIG_TINY
...
This change creates a new ip-full variant for the ip package.
It disables IP_CONFIG_TINY to make some iproute2 features available like xfrm, gretap, ...
Signed-off-by: Thomas Wouters <thomaswouters@gmail.com>
SVN-Revision: 39854
2014-03-09 13:32:59 +00:00
Felix Fietkau
452d019d3e
netifd: update to latest version, adds a bridge reload fix and fixes #15157
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39791
2014-03-07 18:14:41 +00:00
Steven Barth
d3f39e89a3
odhcp6c: fix int-overflow after 50d (thx Hauke Mehrtens)
...
SVN-Revision: 39785
2014-03-07 09:35:17 +00:00
Steven Barth
f294f23c02
netifd: don't incorrectly announce up-status via ubus
...
Signed-off-by: Steven Barth <steven@midlink.org>
SVN-Revision: 39777
2014-03-05 17:36:14 +00:00
Steven Barth
0a3cb4cdff
odhcp6c: several fixes
...
* Reduce RA/DHCPv6 spam filter to 30s by default and make it configurable
* Don't set nd_ra_{reachable,retransmit] to 0 when received in RAs
SVN-Revision: 39775
2014-03-05 08:59:11 +00:00
Felix Fietkau
a9d4cd35fc
hostapd: fix deletion of wds sta interfaces in AP mode
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39765
2014-02-28 14:43:53 +00:00
Steven Barth
1b3a868309
netifd: Reintroduce link-layer sensing (thx Hans Decker, Karl Vogel)
...
SVN-Revision: 39757
2014-02-27 12:42:38 +00:00
Steven Barth
0bf9032145
netifd: don't always assume addrs & routes are applied
...
netifd didn't check the netlink return values and kept assuming
routes are in place even if they weren't
SVN-Revision: 39755
2014-02-26 13:27:32 +00:00
Felix Fietkau
c01d211259
hostapd: link against librt if eglibc is used
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39741
2014-02-24 15:03:06 +00:00
Steven Barth
8aa91b167f
odhcpd: avoid the unspecificed address being advertised as DNS
...
SVN-Revision: 39740
2014-02-24 13:37:11 +00:00
Steven Barth
e6044ef1c0
odhcpd: fix DNS-server and MSR-entries in RA
...
Similarly to the previously broken address pools, DNS-servers and some
MSRs could be advertised incorrectly as well. This is now fixed.
SVN-Revision: 39739
2014-02-24 13:33:45 +00:00
Felix Fietkau
a15524582c
netifd: depend on libubox directly to rebuild on ABI changes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39723
2014-02-23 17:32:15 +00:00
Felix Fietkau
6c8300df3d
netifd: update to latest version, fixes wireless device reload handling
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 39706
2014-02-23 08:13:28 +00:00
Steven Barth
980626aa32
odhcpd: fix wrong address pool being advertised
...
SVN-Revision: 39651
2014-02-21 18:02:25 +00:00
Jo-Philipp Wich
b22ad85bc6
firewall: fix validation constraints
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39649
2014-02-21 00:22:23 +00:00
Jo-Philipp Wich
354efde275
netifd: fix validation constraints
...
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39648
2014-02-21 00:17:04 +00:00
Jo-Philipp Wich
21f4cf1a73
firewall: fix several ipset integration issues ( #15016 )
...
- Do not consider bitmap storage for IPv6 family sets
- Move ipset family parameter before any additional option
- Only emit family parameter for hash sets
- Do not allow IPv6 iprange for IPv4 sets and vice versa
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
SVN-Revision: 39647
2014-02-20 23:20:10 +00:00
Steven Barth
12fa3eae23
6in4: add support for he.net updatekey
...
SVN-Revision: 39646
2014-02-20 21:36:15 +00:00
Steven Barth
97faa098a2
odhcp6c: readd userclass and vendorclass
...
SVN-Revision: 39628
2014-02-18 18:30:47 +00:00
John Crispin
0da7d381f0
odhcp6c: add validation rules to proto handler
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 39624
2014-02-18 13:34:16 +00:00