f995c90329
netifd: Improve IPv6 source-routing policies
...
SVN-Revision: 36884
2013-06-08 13:26:33 +00:00
b9de8ca7f5
netifd: bring wifi down before shutting down
...
works around wifiX references not being freed on network restart.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36883
2013-06-08 11:44:12 +00:00
e7b15446a8
firewall: udpate to git head ( #13652 , #13654 , #13658 )
...
- optimizes chain usage for ingress rules
- adds limit match support for redirect rules
- fixes automatic redirect dest detection on little endian systems
- leaves base chains in place on reload to allow user rules to target e.g. "reject"
SVN-Revision: 36871
2013-06-06 14:12:02 +00:00
5cf06bd17b
firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols
...
SVN-Revision: 36868
2013-06-06 14:02:29 +00:00
e94cf1c72b
iptables: install libext*.a into staging dir
...
SVN-Revision: 36867
2013-06-06 14:02:24 +00:00
ecc95dcba8
firewall: update to git head ( #13652 )
...
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
- uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones
SVN-Revision: 36854
2013-06-05 11:40:40 +00:00
0a74d9d5c3
firewall3: fix accidentally changed install directive
...
SVN-Revision: 36840
2013-06-04 12:30:50 +00:00
07a3110e88
firewall: fix git source url
...
SVN-Revision: 36839
2013-06-04 12:23:47 +00:00
b721c92221
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA
...
SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
0dd6753c09
Drop legacy firewall package
...
SVN-Revision: 36837
2013-06-04 12:21:44 +00:00
6f60308257
firewall3: update to git head ( #13641 )
...
* Fixes wrong chain used for zone forward policy
SVN-Revision: 36830
2013-06-04 10:26:49 +00:00
6eeca5176e
firewall3: update to git head
...
- Fixes problems with reusing matches or targets from loadable extensions
SVN-Revision: 36826
2013-06-03 16:38:29 +00:00
8c69057980
uhttpd: update to latest version, fixes CGI related crashes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36817
2013-06-01 21:43:06 +00:00
089d6612ce
6relayd: Work around Windows DHCPv6 quirks Announcing deprecated addresses breaks Windows clients
...
SVN-Revision: 36815
2013-06-01 17:51:02 +00:00
7ae506c7d4
odhcp6c: work around spurious false-positive address DECLINEs
...
SVN-Revision: 36809
2013-05-31 13:49:17 +00:00
3bb397c997
firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly
...
SVN-Revision: 36806
2013-05-31 13:23:23 +00:00
bf582fbb7b
odhcp6c: fix handling of multiple RAs in a row
...
SVN-Revision: 36804
2013-05-31 10:02:39 +00:00
cdc3caf533
6relayd: Better compatibility with misbheaving DHCPv6 clients * Make the "best" address / prefix the first one being announced * Only add the "best" address to the hosts-file
...
SVN-Revision: 36772
2013-05-30 15:42:30 +00:00
519f27cd33
netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes
...
SVN-Revision: 36771
2013-05-30 15:42:25 +00:00
02fe12c00d
uhttpd: update again to fix a ubus plugin crash bug
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36770
2013-05-30 13:16:38 +00:00
eeb7fdc13e
uhttpd: update to latest version, fixes script timeout for ubus requests
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36767
2013-05-30 10:44:20 +00:00
dc6625f977
6relayd: more verbosity in leases and logging
...
SVN-Revision: 36764
2013-05-30 07:56:55 +00:00
56a3396bf2
iptables: bump to 1.4.19.1
...
SVN-Revision: 36760
2013-05-29 14:58:04 +00:00
439fdd4d65
netifd: fix IPv6-addresses disappearing due to lifetime-overflows
...
SVN-Revision: 36748
2013-05-28 18:32:01 +00:00
23b3cebd56
odhcp6c: fix or debug disappearing IPv6 addresses
...
SVN-Revision: 36745
2013-05-28 16:28:14 +00:00
e6250644be
mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36743
2013-05-28 11:10:41 +00:00
61c0c6ab68
6relayd: RFC 6204 and naming improvements * Announce delegated prefixes using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default
...
SVN-Revision: 36738
2013-05-27 20:38:13 +00:00
63603ee478
firewall3: update to git head
...
- allows building without IPv6 support
- uses more robust rules to cope with missing libext.a
- uses better linking strategy to avoid symbol clashes with older iptables
- introduces source compatiblity layer for different libxtables versions
SVN-Revision: 36736
2013-05-27 15:13:19 +00:00
e4f8c38ed1
firewall3: update to git head
...
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
- automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
- properly support output rules with dest '*' to hook directly into delegate_output
- fixes crash when processing rules with unresolved targets
SVN-Revision: 36721
2013-05-26 15:48:04 +00:00
f63064a257
6relayd: Fix DHCPv6-server picking up addresses from master interface
...
SVN-Revision: 36718
2013-05-26 10:06:02 +00:00
90887b5fb3
firewall3: update to git head
...
- fixes linking issues with some toolchains
SVN-Revision: 36703
2013-05-24 12:49:06 +00:00
d8d7d7f4aa
6relayd: fix a lease-timing issue with stateful DHCPv6
...
SVN-Revision: 36702
2013-05-24 12:31:30 +00:00
c1ff8cd9bb
firewall3: update to git head
...
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
- Do not leak memory when processing rules with unknown targets or matches
SVN-Revision: 36698
2013-05-23 13:07:44 +00:00
75bb3138aa
uhttpd: update to latest version, fixes #13564 , #13560 , improves error handling as pointed out in #13537
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36696
2013-05-23 10:50:42 +00:00
32c6ffb5a1
firewall3: Remove abandonend include
...
SVN-Revision: 36692
2013-05-23 06:38:25 +00:00
b757ca2259
firewall3: update to git head
...
- fix build on Linux < 3.7
- limit zone names to 14 bytes
SVN-Revision: 36691
2013-05-22 14:15:53 +00:00
9c3ac668e0
6relayd: Let OpenWrt override default CFLAGS
...
SVN-Revision: 36690
2013-05-22 11:58:54 +00:00
c12189b379
firewall3: update to git head
...
- fixes reload when firewall is not running already
- fixes crash when ipsets are supported but undeclared
- fixes handling of per zone user chains on reload
SVN-Revision: 36689
2013-05-22 11:37:41 +00:00
9d115df749
6relayd: Fix a segfault when multiple downstream interfaces are present
...
SVN-Revision: 36687
2013-05-21 18:05:37 +00:00
dd83e87ab0
firewall3: update to git head
...
- fixes segfault in flush command if ipset support is not available
- fixes internal rule generation if custom chains are enabled
SVN-Revision: 36686
2013-05-21 14:49:37 +00:00
6eec8009ba
ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base
...
SVN-Revision: 36685
2013-05-21 13:00:28 +00:00
9b6c31d4cc
firewall3: move libext*.a copying to compile phase
...
SVN-Revision: 36684
2013-05-21 12:58:36 +00:00
8df6cd005c
netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
...
SVN-Revision: 36683
2013-05-21 12:58:15 +00:00
e8050c6c35
firewall3: update to git head
...
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
* make ipset integration more reliable
SVN-Revision: 36681
2013-05-21 10:15:14 +00:00
a9a9644efd
iptables: use -ffunction-sections, -fdata-sections and --gc-sections
...
SVN-Revision: 36680
2013-05-21 10:15:10 +00:00
24c39ddcf7
odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests
...
SVN-Revision: 36678
2013-05-21 09:13:48 +00:00
37baf2d6b2
6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better
...
SVN-Revision: 36677
2013-05-21 09:13:40 +00:00
c6f70381c9
odhcp6c: Fix address / prefix expiry logic
...
SVN-Revision: 36675
2013-05-20 14:54:20 +00:00
dd161ae62b
dnsmasq: add directory for external hosts-files
...
SVN-Revision: 36655
2013-05-17 14:44:12 +00:00
334c40da14
6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD
...
SVN-Revision: 36654
2013-05-17 14:44:07 +00:00
0f1be4425f
netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4
...
Based on a patch by Kristian Evensen. Thank You.
SVN-Revision: 36653
2013-05-17 14:44:02 +00:00
7365e647f6
uhttpd: update to latest version, fixes index page processing order
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36644
2013-05-16 11:38:19 +00:00
4fc8e64a40
iproute2: workaround compile issues with gcc 4.8.x
...
SVN-Revision: 36642
2013-05-16 00:04:48 +00:00
a62ca72309
odhcp6c: Fix handling of RAs when no DHCPv6-server is present
...
SVN-Revision: 36641
2013-05-15 11:07:01 +00:00
580481cd6d
iproute2: upgrade to 3.9.0
...
SVN-Revision: 36638
2013-05-14 23:49:34 +00:00
5be36cbe83
iproute2: print help in connmark
...
SVN-Revision: 36637
2013-05-14 23:49:31 +00:00
d090eea125
uhttpd: update to latest version, fixes a SSL connection memory leak
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36636
2013-05-14 17:43:00 +00:00
d481486aad
package: fold the IPv6 menu into Network
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36634
2013-05-14 15:02:31 +00:00
e8f3897389
6relayd: Always announce the current MAC-address
...
* Fixes #13516 thanks to berni for the detailed bugreport.
SVN-Revision: 36629
2013-05-13 17:54:36 +00:00
a1af842016
ds-lite: add ds-lite network protocol handler
...
SVN-Revision: 36628
2013-05-13 17:12:39 +00:00
5ce135ed87
netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements
...
SVN-Revision: 36627
2013-05-13 17:12:34 +00:00
ea71678b09
netifd: added support for setting up 6rd from DHCP
...
SVN-Revision: 36626
2013-05-13 17:12:30 +00:00
ad93a571c6
odhcp6c: added support for DS-Lite + various fixes
...
SVN-Revision: 36625
2013-05-13 17:12:25 +00:00
973dad61b0
firewall3: Remove obsoleted ULA-border
...
SVN-Revision: 36624
2013-05-13 17:12:20 +00:00
07d99b62b7
firewall3: add wan6 interface to wan-zone by default
...
SVN-Revision: 36623
2013-05-13 17:12:15 +00:00
4cb9d9715c
firewall: Remove obsoleted ULA-border rule
...
SVN-Revision: 36622
2013-05-13 17:12:10 +00:00
8560648082
6rd: increase metric of default route
...
This will prefer native IPv6 over 6rd if both are present.
SVN-Revision: 36605
2013-05-12 08:07:15 +00:00
d59f8cfa8e
iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode
...
SVN-Revision: 36604
2013-05-12 01:12:56 +00:00
29d4c36622
add uci support for "proxy-dnssec" in dnsmasq
...
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.
Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>
SVN-Revision: 36570
2013-05-07 07:19:51 +00:00
9d8e3e03df
iw: update to 3.10, sync with nl80211.h changes in compat-wireless
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36569
2013-05-06 22:35:50 +00:00
9c1ed6447b
odhcp6c: Make SLAAC-only work without reqprefix=no
...
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.
SVN-Revision: 36555
2013-05-06 10:20:43 +00:00
95e139d0b2
ipset-dns: support simultaneously populating IPv4 and IPv6 sets
...
SVN-Revision: 36554
2013-05-06 10:01:45 +00:00
3c17fd41a4
Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset
...
SVN-Revision: 36552
2013-05-06 08:44:54 +00:00
b85c442e81
hostapd: enable 802.11r for the -full variant ( #13250 )
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36533
2013-05-03 10:39:57 +00:00
4bba31b64c
firewall3: update to git head
...
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422 , #13386 )
- add support for fwmark matches and mark setting targets
SVN-Revision: 36521
2013-05-02 13:42:20 +00:00
a0b655b8f2
Fix install of iptables pkg-config files.
...
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146 ; which should make collectd
appear in snapshots again.
Signed-off-by: Danny Baumann <dannybaumann@web.de>
SVN-Revision: 36509
2013-05-02 08:10:55 +00:00
f1e214411d
iwinfo: fix iwinfo_hardware() return value if chip id is not found
...
SVN-Revision: 36471
2013-04-28 14:04:39 +00:00
f1497ccf4f
netifd: update to git head - disables multicast snooping by default on bridges
...
SVN-Revision: 36463
2013-04-27 09:28:40 +00:00
05c1424e87
iwinfo: add hw database file
...
SVN-Revision: 36450
2013-04-26 13:21:01 +00:00
e02d373f90
iwinfo: move builtin hardware database to /usr/share/libiwinfo/hardware.txt
...
SVN-Revision: 36449
2013-04-26 13:20:15 +00:00
5062838fa5
netifd: update to the latest version, fixes interface reload issues when removing the ifname option
...
SVN-Revision: 36424
2013-04-25 16:28:19 +00:00
49f97af481
6relayd: Fix generation of RA-messages
...
SVN-Revision: 36419
2013-04-24 18:22:08 +00:00
a040ead1c5
iwinfo: add SR71-15 radio info, fix nl80211 channel/frequency reporting on some architectures
...
SVN-Revision: 36417
2013-04-24 14:44:20 +00:00
2c78c1457b
firewall3: Make IPv6 ULA-Border generation dynamic
...
This fixes working behind another router which gives out ULAs.
SVN-Revision: 36416
2013-04-24 14:17:24 +00:00
2dbcd2ba7b
6relayd: update package description
...
SVN-Revision: 36413
2013-04-24 07:21:42 +00:00
e17ac4c257
dnsmasq: update to 2.66 Thanks to Christoph König for patches.
...
SVN-Revision: 36412
2013-04-24 05:55:39 +00:00
21e4e2a766
odhcp6c: Set default SOL_MAX_RT to 1h
...
SVN-Revision: 36411
2013-04-24 05:02:45 +00:00
d7908e02b5
hostapd: return the frequency to some ubus calls to make integration easier
...
SVN-Revision: 36410
2013-04-23 18:35:50 +00:00
61a6f45cdc
lldpd: upgrade to 0.7.1
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
SVN-Revision: 36401
2013-04-23 10:37:23 +00:00
17b8c0c7b8
netifd: Improve IPv6-ULA assignment handling
...
SVN-Revision: 36383
2013-04-22 19:40:06 +00:00
c96c05d549
odhcp6c: Several fixes and improvements * Add preliminary support for RFC 6603 prefix exclusion * Fix reconfigure-support and reconfigure authentication * Set maximum retransmission timeout for solicitations to 2h * Fix a segfault when parsing IA_PD in advertise messages
...
SVN-Revision: 36382
2013-04-22 19:40:01 +00:00
1e78c3e297
6relayd: Add DHCPv6-PD server support, fix relaying in stateful mode
...
SVN-Revision: 36381
2013-04-22 19:39:55 +00:00
62244d73ae
hostapd: update to 2013-04-05
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36376
2013-04-22 13:24:48 +00:00
96bb7c123b
build: consistently use 'depends on' instead of 'depends'
...
make the syntax more compatible with kernel menuconfig
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36351
2013-04-17 15:36:41 +00:00
e66a4af8c3
uhttpd: update to git head, fixes regression when parsing IPv6 listen arguments
...
SVN-Revision: 36348
2013-04-17 11:34:39 +00:00
25ffe0446c
iwinfo: print info of all existing wireless ifaces when cli is called without arguments
...
SVN-Revision: 36339
2013-04-15 15:00:16 +00:00
eb10581ce3
uhttpd: update to latest version, fixes compile error with latest libubox
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36338
2013-04-15 14:49:52 +00:00
099e3d8183
netifd: update to latest version, fixes some device handling crashes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36336
2013-04-15 14:21:45 +00:00
88c418bc75
qos-scripts: add queue length and quantum limit, suggested by dtaht
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36294
2013-04-09 14:59:10 +00:00
7ca7bc501e
iwinfo: fix frequency/channel and channel/frequency conversions to properly implement 802.11j
...
SVN-Revision: 36292
2013-04-09 14:37:55 +00:00
04dcd12c91
add portmap support to userland
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36284
2013-04-09 14:19:13 +00:00
f13ae9965c
add "swconfig list" support
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36282
2013-04-09 14:19:05 +00:00
f90f025f20
netifd: fix route / route6 regression ( #13303 )
...
SVN-Revision: 36281
2013-04-09 12:21:12 +00:00
3abc915522
Remove deprecated ip6slaac option * use proto=dhcpv6 with reqprefix=no instead
...
SVN-Revision: 36280
2013-04-09 12:12:30 +00:00
2c087dc785
Remove obsoleted ipv6-support meta-package
...
SVN-Revision: 36279
2013-04-09 09:45:51 +00:00
35d716fbbb
netifd: Bump to latest version * Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow)
...
SVN-Revision: 36196
2013-04-05 12:28:06 +00:00
0393e52623
netifd: Rewrite IPv6 prefix assignment * Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion
...
SVN-Revision: 36193
2013-04-03 17:08:21 +00:00
71e9171717
openvpn: enable password save support ( #13245 )
...
SVN-Revision: 36144
2013-04-01 10:02:43 +00:00
eedf9e72f9
odhcp6c: Fix a race-condition in RA-handling
...
Thanks to Markus Stenberg for investigating and providing a fix
SVN-Revision: 36132
2013-03-26 13:39:17 +00:00
5a9c2c77b4
iptables: don't use --enable-ipv6 if IPv6 is disabled
...
SVN-Revision: 36125
2013-03-25 11:22:12 +00:00
6529cf6cea
odhcp6c: minor bug fixes
...
SVN-Revision: 36123
2013-03-25 10:58:48 +00:00
6fa1b5346e
firewall3: update to git head
...
* fixes parsing of src/dest '*'
* fixes parsing of proto 'all'
SVN-Revision: 36111
2013-03-22 14:10:29 +00:00
76d1c0a067
firewall3: update to git head
...
* fixes port remapping rules (#13217 )
SVN-Revision: 36100
2013-03-21 14:25:17 +00:00
c9544f4af0
kernel: add some fixes for kernel 3.9
...
This patch fixes some compile problems with kernel 3.9 and adds some missing linux 3.9 handling into kernel packages.
SVN-Revision: 36098
2013-03-20 21:59:24 +00:00
261be7b8f3
netifd: Fix adding IPv6 DNS-servers to resolv.conf
...
In some cases IPv6 DNS-servers were not added correctly.
SVN-Revision: 36095
2013-03-20 13:49:39 +00:00
eeb88a1df3
odhcp6c: Fix metric for on-link prefix routes
...
SVN-Revision: 36094
2013-03-20 09:26:52 +00:00
6fbd824e9b
firewall3: update to git head
...
* fixes reload handling of zones and ipsets that are still running but already deleted from the config
SVN-Revision: 36092
2013-03-19 16:18:05 +00:00
03cb7986fc
firewall3: update to git head
...
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197 )
- do not allow src_mac option for SNAT rules
SVN-Revision: 36090
2013-03-19 13:54:34 +00:00
31876c193a
hostapd: fix build errors on supplicant-only builds
...
SVN-Revision: 36085
2013-03-18 16:11:32 +00:00
3ebdd3b330
odhcp6c: fix preference handling, custom client-ID * thanks to mbidewell for investigating
...
SVN-Revision: 36083
2013-03-18 07:24:49 +00:00
2167101c90
hostapd: initial prototype of an ubus binding
...
Supports listing, removing and banning clients, and hooking into
probe/assoc/auth requests via object subscribe.
SVN-Revision: 36081
2013-03-17 20:47:18 +00:00
84069f8534
uhttpd: update to latest version, fixes an occasional crash on CGI scripts
...
SVN-Revision: 36034
2013-03-15 13:43:55 +00:00
54f9f47a28
firewall3: update to git head
...
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
* Allow "network" and "device" commands while firewall is running (to make them usable in includes)
SVN-Revision: 36009
2013-03-14 15:29:43 +00:00
fce3deddff
use new button scheme
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36004
2013-03-13 18:11:25 +00:00
9faa312dbb
firewall3: update to git head
...
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
* Make NAT reflection direction configurable
* Map init script stop action to flush
* Map init script reload action to reload
* Respect init script disabled state in hotplug handler
SVN-Revision: 35998
2013-03-13 15:46:30 +00:00
9ddc45bc3f
hostapd: fix client reassociation after too many ACK failures
...
SVN-Revision: 35973
2013-03-12 00:19:25 +00:00
8c7ed1cb7b
firewall3: update to git head
...
* Fixes compilation against eglibc
* Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
* Fixes tracking logic for user chains by differentiating between reloads and restarts
* Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
* Supports legacy "tcpudp" protocol notation again
SVN-Revision: 35969
2013-03-11 20:52:20 +00:00
e259ecad7e
Revert "firewall3: update to git head"
...
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.
SVN-Revision: 35904
2013-03-08 19:52:18 +00:00
50213fc354
firewall3: update to git head
...
- introduce per-zone user chains
- support legacy "tcpudp" protocol notation
SVN-Revision: 35903
2013-03-08 15:27:33 +00:00
39a001dc69
odhcp6c: various bugfixes * Don't prematurely send RENEW / REBIND when T1 or T2 is > 1 day * Add "norelease" option to not send a RELEASE when stopping
...
SVN-Revision: 35902
2013-03-08 07:04:38 +00:00
62ea398cd8
iptables: Add missing IPv6 builtin modules
...
SVN-Revision: 35898
2013-03-07 08:48:41 +00:00
9779b0b88c
iptables: redo update to 1.4.18 with old linking-behaviour
...
SVN-Revision: 35896
2013-03-06 17:05:34 +00:00
bacd71648b
Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx
...
SVN-Revision: 35894
2013-03-06 12:55:48 +00:00
c3faa6be75
hostapd: include the madwifi headers in the package directory to avoid compile breakage if the madwifi build fails
...
SVN-Revision: 35893
2013-03-05 22:06:30 +00:00
d023a08753
iptables: update to 1.4.18
...
SVN-Revision: 35892
2013-03-05 20:51:57 +00:00
d75c632de6
firewall3: add default config and firewall.user
...
SVN-Revision: 35889
2013-03-05 13:45:09 +00:00
fa1749e668
hostapd: update to git version 2013-03-02
...
SVN-Revision: 35887
2013-03-04 17:16:38 +00:00
89be702bff
firewall3: update to git head, introduces support for "enabled" option
...
SVN-Revision: 35845
2013-03-02 17:09:33 +00:00
c81945e979
6relayd: Fix illegal memory accesses Spurious errors when receiving netlink-messages lead to unhandled errors which caused SIGBUS. Thanks to tdavis for debugging
...
SVN-Revision: 35836
2013-02-28 16:37:20 +00:00
50b7fa217a
6relayd: various fixes cap preferred and valid lifetimes at more reasonable limits decrease memory usage (remove unnecessary book-keeping)
...
SVN-Revision: 35835
2013-02-28 14:57:19 +00:00
886ce188bf
xtables-addons: fix packaging of iptaccount
...
SVN-Revision: 35831
2013-02-28 10:58:12 +00:00
557c047f71
firewall3: clear contnrack table on flush, set policies to drop during rule reload
...
SVN-Revision: 35820
2013-02-27 14:09:37 +00:00
a90b6f7d90
6relayd: Fix config behaviour for rewrite_dns_addr option
...
SVN-Revision: 35804
2013-02-26 12:50:52 +00:00
32ac53821f
6relayd: compatibility with broken IPv6 devices * Announce ULA as deprecated if other addresses are available * Allow the announced DNS-server to be overwritten
...
SVN-Revision: 35803
2013-02-26 12:42:53 +00:00
92062542e2
firewall: fix logging rule regression ( #12999 )
...
SVN-Revision: 35745
2013-02-22 13:45:20 +00:00
4fb2cd18c1
firewall3: add support for shell script and iptables-restore style includes
...
SVN-Revision: 35744
2013-02-22 12:45:38 +00:00
a7b262dc0a
netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions.
...
SVN-Revision: 35743
2013-02-22 08:56:29 +00:00
7d7d88b580
firewall3: update to git head
...
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')
SVN-Revision: 35738
2013-02-21 22:33:44 +00:00
280fa5a1a2
dante: fix broken configure script not using CFLAGS for conftest
...
Spotted by doing an ARM hard float build.
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 35685
2013-02-19 17:22:55 +00:00
3081c672fc
6relayd: Fix possible memory corruption issue
...
SVN-Revision: 35673
2013-02-19 12:04:41 +00:00
f5b63ffd33
6relayd: Workaround potential signal handling issue
...
SVN-Revision: 35665
2013-02-18 12:50:36 +00:00
02b0c62f33
firewall3 - a C implementation of the current firewall scripts
...
SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
1d6574b9c3
hostapd: fix the scan wait patch for multiple interfaces
...
SVN-Revision: 35630
2013-02-16 19:00:34 +00:00
99782943d2
hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update
...
SVN-Revision: 35619
2013-02-16 14:26:03 +00:00
c98b12d911
samba36: fix segmentation fault when trying to add non-existent users
...
Based on a patch from НКВД. Closes #12962 .
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 35610
2013-02-16 11:39:42 +00:00
99b69fd9c5
odhcp6c: allow setting a user-provided prefix as well
...
SVN-Revision: 35570
2013-02-12 08:23:54 +00:00
eeaf2c0b5a
iptables: fix bad PKG_RELEASE in previous commit
...
SVN-Revision: 35569
2013-02-11 22:14:38 +00:00
916902b1d2
iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
...
SVN-Revision: 35568
2013-02-11 21:58:42 +00:00
1810b80ec0
mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default
...
SVN-Revision: 35565
2013-02-11 18:59:10 +00:00
b8c796fbd7
odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging
...
SVN-Revision: 35553
2013-02-11 12:30:16 +00:00
a9058439cf
openvpn-easy-rsa: fix typo in version ( #12958 )
...
SVN-Revision: 35508
2013-02-06 22:17:11 +00:00
dc2ba40af3
openvpn: remove the stale PKG_REV variable
...
SVN-Revision: 35499
2013-02-05 10:40:19 +00:00
b8c903e6f8
openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball
...
SVN-Revision: 35498
2013-02-05 10:40:13 +00:00
e106f25ee7
firewall: various enhancements
...
- reduce mssfix related log spam (#10681 )
- separate src and dest terminal chains (#11453 , #12945 )
- disable per-zone custom chains by default, they're rarely used
Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.
SVN-Revision: 35484
2013-02-04 14:38:33 +00:00
13544edce7
odhcp6c: Fix timing issues
...
SVN-Revision: 35472
2013-02-03 17:26:40 +00:00
e893d4d9a8
libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend()
...
SVN-Revision: 35471
2013-02-03 12:03:24 +00:00
6be5a5a73d
odhcp6c: Fix RENEW and REBIND requests
...
SVN-Revision: 35454
2013-02-02 10:44:13 +00:00
e2193a69c8
odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested
...
SVN-Revision: 35421
2013-02-01 13:38:47 +00:00
6a43437908
netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
...
SVN-Revision: 35420
2013-02-01 12:28:43 +00:00
9a62439c28
odhcp6c: switch to userspace RA-handling and offload address assignment to netifd
...
SVN-Revision: 35419
2013-02-01 12:28:39 +00:00
a3368da479
6relayd: Fix announced router flags and IPv6 procfs-configuration
...
SVN-Revision: 35418
2013-02-01 12:28:34 +00:00
416ce374c0
openvpn: add from openvpn-devel from /packages, fix support for current polarssl
...
SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
4bd3f54143
6in4: fix typo in last commit
...
SVN-Revision: 35409
2013-01-30 09:07:23 +00:00
a0a91963af
6in4: work around hanging wget process
...
SVN-Revision: 35408
2013-01-30 09:05:53 +00:00
65657fb585
netifd: update to latest version
...
fixes DNS servers on reload (#12910 )
fixes ubus object race on reload or down/up (#12612 )
SVN-Revision: 35383
2013-01-29 14:40:04 +00:00
c16879a385
samba36: update to 3.6.11 and refresh patches (based on patch from #12914 )
...
SVN-Revision: 35382
2013-01-29 13:18:56 +00:00
777f7b30ae
netifd: implement IPv6 prefix deprecation according to RFC 6204
...
SVN-Revision: 35377
2013-01-29 11:05:22 +00:00
78a6439784
6relayd: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35371
2013-01-29 10:13:49 +00:00
1a0b207d61
odhcp6c: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35370
2013-01-29 10:13:44 +00:00
fac1ed35ac
netifd: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35369
2013-01-29 10:13:39 +00:00
6ea9abadeb
netifd: update to latest version, fixes setting addresses/routes on alias interfaces
...
SVN-Revision: 35362
2013-01-28 20:35:55 +00:00
e804a663e3
hostapd: don't configure wpa_supplicant with empty password="" if no password is specified ( #12912 )
...
SVN-Revision: 35358
2013-01-28 18:05:33 +00:00
839f3ab0e7
firewall: flush conntrack table after changing interface rules
...
SVN-Revision: 35348
2013-01-28 15:53:44 +00:00
ec41a6a08c
netifd: IPv6 sysctl, restart IPv6 in static mode to send RS
...
SVN-Revision: 35347
2013-01-28 14:07:27 +00:00
75b06607db
netifd: add SLAAC ipv6 value for static-proto
...
SVN-Revision: 35346
2013-01-28 13:53:48 +00:00
e964fa5d8f
odhcp6c: work-around for proto-script to avoid loosing the default route
...
SVN-Revision: 35345
2013-01-28 13:53:43 +00:00
a81c76617e
ipv6-support: don't overwrite existing setting across reflashs
...
SVN-Revision: 35302
2013-01-23 08:15:09 +00:00
55eab5ac44
netifd: update to latest version, adds another fix for interface aliases
...
SVN-Revision: 35297
2013-01-22 16:05:59 +00:00
5859fc7a39
netifd: Fix a segfault when globals.ula_prefix is empty
...
SVN-Revision: 35296
2013-01-22 15:49:42 +00:00
a4c7a953e5
uhttpd: always turn on TLS support, include ustream-ssl as a build dependency
...
SVN-Revision: 35295
2013-01-22 15:05:04 +00:00
bab482b93f
uhttpd: fix another small hang issue with the same symptoms
...
SVN-Revision: 35291
2013-01-22 09:38:00 +00:00
166ea3832b
uhttpd: fix connection hangs
...
SVN-Revision: 35290
2013-01-22 09:28:55 +00:00
bc1d72c7bf
tcpdump: add SLL parsing support to tcpdump-mini, use -ffunction-sections, -fdata-sections and --gc-sections to reduce size
...
SVN-Revision: 35288
2013-01-22 07:51:15 +00:00
c725669079
uhttpd: fix unencrypted passwords in httpd.conf
...
SVN-Revision: 35265
2013-01-21 12:46:41 +00:00
38080ae550
6relayd: fix shell library includes in init-script
...
Thanks to Daniel Golle
SVN-Revision: 35262
2013-01-21 11:27:03 +00:00
8a97d823a4
6relayd: avoid a race-condition with looping RAs
...
SVN-Revision: 35260
2013-01-21 10:42:31 +00:00
f129c6786e
netifd: Fix segfaults in IPv6 prefix handling
...
SVN-Revision: 35259
2013-01-21 09:21:30 +00:00
f1fd0f8278
odhcp6c: Fix address assignment with infinite validity
...
SVN-Revision: 35258
2013-01-21 07:58:58 +00:00
4a86973285
uhttpd: fix selecting the right ustream implementation when openssl is to be used ( #12857 )
...
SVN-Revision: 35257
2013-01-20 21:15:43 +00:00
5bc6555e08
netifd: update to latest version, fixes alias support
...
SVN-Revision: 35251
2013-01-20 15:47:09 +00:00
Steven Barth
Jonas Gorski
Jo-Philipp Wich
Felix Fietkau
Luka Perkov
John Crispin
Hauke Mehrtens
Florian Fainelli