54f9f47a28
firewall3: update to git head
...
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
* Allow "network" and "device" commands while firewall is running (to make them usable in includes)
SVN-Revision: 36009
2013-03-14 15:29:43 +00:00
9faa312dbb
firewall3: update to git head
...
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
* Make NAT reflection direction configurable
* Map init script stop action to flush
* Map init script reload action to reload
* Respect init script disabled state in hotplug handler
SVN-Revision: 35998
2013-03-13 15:46:30 +00:00
8c7ed1cb7b
firewall3: update to git head
...
* Fixes compilation against eglibc
* Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
* Fixes tracking logic for user chains by differentiating between reloads and restarts
* Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
* Supports legacy "tcpudp" protocol notation again
SVN-Revision: 35969
2013-03-11 20:52:20 +00:00
e259ecad7e
Revert "firewall3: update to git head"
...
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.
SVN-Revision: 35904
2013-03-08 19:52:18 +00:00
50213fc354
firewall3: update to git head
...
- introduce per-zone user chains
- support legacy "tcpudp" protocol notation
SVN-Revision: 35903
2013-03-08 15:27:33 +00:00
d75c632de6
firewall3: add default config and firewall.user
...
SVN-Revision: 35889
2013-03-05 13:45:09 +00:00
89be702bff
firewall3: update to git head, introduces support for "enabled" option
...
SVN-Revision: 35845
2013-03-02 17:09:33 +00:00
557c047f71
firewall3: clear contnrack table on flush, set policies to drop during rule reload
...
SVN-Revision: 35820
2013-02-27 14:09:37 +00:00
92062542e2
firewall: fix logging rule regression ( #12999 )
...
SVN-Revision: 35745
2013-02-22 13:45:20 +00:00
4fb2cd18c1
firewall3: add support for shell script and iptables-restore style includes
...
SVN-Revision: 35744
2013-02-22 12:45:38 +00:00
a7b262dc0a
netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions.
...
SVN-Revision: 35743
2013-02-22 08:56:29 +00:00
7d7d88b580
firewall3: update to git head
...
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')
SVN-Revision: 35738
2013-02-21 22:33:44 +00:00
02b0c62f33
firewall3 - a C implementation of the current firewall scripts
...
SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
e106f25ee7
firewall: various enhancements
...
- reduce mssfix related log spam (#10681 )
- separate src and dest terminal chains (#11453 , #12945 )
- disable per-zone custom chains by default, they're rarely used
Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.
SVN-Revision: 35484
2013-02-04 14:38:33 +00:00
6a43437908
netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
...
SVN-Revision: 35420
2013-02-01 12:28:43 +00:00
65657fb585
netifd: update to latest version
...
fixes DNS servers on reload (#12910 )
fixes ubus object race on reload or down/up (#12612 )
SVN-Revision: 35383
2013-01-29 14:40:04 +00:00
777f7b30ae
netifd: implement IPv6 prefix deprecation according to RFC 6204
...
SVN-Revision: 35377
2013-01-29 11:05:22 +00:00
fac1ed35ac
netifd: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35369
2013-01-29 10:13:39 +00:00
6ea9abadeb
netifd: update to latest version, fixes setting addresses/routes on alias interfaces
...
SVN-Revision: 35362
2013-01-28 20:35:55 +00:00
839f3ab0e7
firewall: flush conntrack table after changing interface rules
...
SVN-Revision: 35348
2013-01-28 15:53:44 +00:00
ec41a6a08c
netifd: IPv6 sysctl, restart IPv6 in static mode to send RS
...
SVN-Revision: 35347
2013-01-28 14:07:27 +00:00
75b06607db
netifd: add SLAAC ipv6 value for static-proto
...
SVN-Revision: 35346
2013-01-28 13:53:48 +00:00
55eab5ac44
netifd: update to latest version, adds another fix for interface aliases
...
SVN-Revision: 35297
2013-01-22 16:05:59 +00:00
5859fc7a39
netifd: Fix a segfault when globals.ula_prefix is empty
...
SVN-Revision: 35296
2013-01-22 15:49:42 +00:00
f129c6786e
netifd: Fix segfaults in IPv6 prefix handling
...
SVN-Revision: 35259
2013-01-21 09:21:30 +00:00
5bc6555e08
netifd: update to latest version, fixes alias support
...
SVN-Revision: 35251
2013-01-20 15:47:09 +00:00
f2766239ea
netifd: add a band-aid fix for the wifi setup vs. netifd init race by increasing the wait time to five seconds
...
SVN-Revision: 35240
2013-01-19 10:13:14 +00:00
1ecc744583
netifd: @aliases use layer 3 devices instead of main devices Fixes dhcpv6 protocol alias
...
SVN-Revision: 35187
2013-01-17 08:28:51 +00:00
06890959d1
netifd: Introduce native IPv6 prefix-handling
...
SVN-Revision: 35167
2013-01-15 13:07:41 +00:00
e5548b03e5
netifd: update to git head, adds 64bit counters
...
SVN-Revision: 35140
2013-01-13 19:48:52 +00:00
b077480a59
firewall: Add ULA site border for IPv6 traffic This prevents private traffic from leaking out to the internet
...
SVN-Revision: 35012
2013-01-04 15:59:28 +00:00
bf34eeaea4
netifd: update to latest version, fixes interface error reporting for shell proto handlers
...
SVN-Revision: 34741
2012-12-17 22:24:31 +00:00
14281559e1
netifd: update to latest version, no longer needs the removed jshn_append() shell function
...
SVN-Revision: 34734
2012-12-17 14:57:15 +00:00
860c2e8116
netifd: call /etc/udhcp.user from the netifd dhcp.script
...
This was done previously when dhcp was handled by the network scripts.
So netifd should behave the same.
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
SVN-Revision: 34704
2012-12-15 17:19:24 +00:00
06c9170a7c
move ltq-adsl-tool
...
SVN-Revision: 34694
2012-12-15 02:00:39 +00:00
86cd825c1f
package/swconfig: don't use kernel headers
...
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
SVN-Revision: 34679
2012-12-14 12:11:50 +00:00
b85c8a6361
netifd: update to latest version, fixes purging old resolv.conf entries after ifdown
...
SVN-Revision: 34664
2012-12-13 16:14:41 +00:00
16d0957a4e
firewall: fix typo in reflection hotplug script
...
SVN-Revision: 34569
2012-12-07 13:08:28 +00:00
838d6e3b8d
netifd: update to latest version, fixes resolv.conf writes on interface setting changes
...
SVN-Revision: 34500
2012-12-05 13:28:56 +00:00
6504b268b3
firewall: extend nat reflection support
...
- use comment match to keep track of per-network rules
- setup reflection for any interface which is part of a masqueraded zone, not just "wan"
- delete per-network reflection rules if network is brought down
SVN-Revision: 34472
2012-12-04 15:24:21 +00:00
4c30952394
Make ltq-dsl-app compile with an eglibc-based toolchain
...
Signed-Off-By: Frank Meerkötter <frank@meerkoetter.org>
SVN-Revision: 34468
2012-12-03 12:46:57 +00:00
71ed7ae842
netifd: empty hotplug handler removed
...
SVN-Revision: 34465
2012-12-03 07:20:44 +00:00
dffa972af1
Remove old IPv6 sysctl-config (deprecated)
...
SVN-Revision: 34418
2012-11-29 20:14:09 +00:00
94bdc366d4
netfid: fix build on musl
...
AF_INET* is provided by sys/socket.h
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34310
2012-11-23 20:02:10 +00:00
611b2e8bb3
netifd: don't send a default client identifier in DHCP requests if no clientid uci option is given ( #12426 )
...
SVN-Revision: 34089
2012-11-05 19:28:24 +00:00
fc3939a996
netifd: update to latest version, fixes adding an alias during config reload for an interface that is already up
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 34006
2012-10-30 00:24:31 +00:00
1895d55e9d
ltq-dsl-app: fix offline postinstall for dsl_control
...
SVN-Revision: 33901
2012-10-23 19:57:47 +00:00
81a3d9ba31
licensing: Add licensing metadata to many packages Two new variables are introduces to many packages, namely PKG_LICENSE and PKG_LICENSE_FILES - there may be more than one license applied to packages, and these are listed in the PKG_LICENSE variable and separated by spaces. All relevant license files are also added to the PKG_LICENSE_FILES variable, also space separated.
...
The licensing metadata is put into the bin/<platform>/packages/Packages file
for later parsing. A script for that is on it's way!
SVN-Revision: 33861
2012-10-19 15:34:28 +00:00
825592b54b
netifd: update to latest version, fixes device cleanup and config reload issues when assigning a device to a different bridge
...
SVN-Revision: 33858
2012-10-19 13:51:48 +00:00
88f3c59fb9
netifd: enable parallel build
...
SVN-Revision: 33832
2012-10-18 00:09:45 +00:00
Jo-Philipp Wich
Steven Barth
Felix Fietkau
John Crispin
Gabor Juhos
Mirko Vogt
Florian Fainelli
Hamish Guthrie