92062542e2
firewall: fix logging rule regression ( #12999 )
...
SVN-Revision: 35745
2013-02-22 13:45:20 +00:00
4fb2cd18c1
firewall3: add support for shell script and iptables-restore style includes
...
SVN-Revision: 35744
2013-02-22 12:45:38 +00:00
a7b262dc0a
netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions.
...
SVN-Revision: 35743
2013-02-22 08:56:29 +00:00
7d7d88b580
firewall3: update to git head
...
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')
SVN-Revision: 35738
2013-02-21 22:33:44 +00:00
280fa5a1a2
dante: fix broken configure script not using CFLAGS for conftest
...
Spotted by doing an ARM hard float build.
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 35685
2013-02-19 17:22:55 +00:00
3081c672fc
6relayd: Fix possible memory corruption issue
...
SVN-Revision: 35673
2013-02-19 12:04:41 +00:00
f5b63ffd33
6relayd: Workaround potential signal handling issue
...
SVN-Revision: 35665
2013-02-18 12:50:36 +00:00
02b0c62f33
firewall3 - a C implementation of the current firewall scripts
...
SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
1d6574b9c3
hostapd: fix the scan wait patch for multiple interfaces
...
SVN-Revision: 35630
2013-02-16 19:00:34 +00:00
99782943d2
hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update
...
SVN-Revision: 35619
2013-02-16 14:26:03 +00:00
c98b12d911
samba36: fix segmentation fault when trying to add non-existent users
...
Based on a patch from НКВД. Closes #12962 .
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 35610
2013-02-16 11:39:42 +00:00
99b69fd9c5
odhcp6c: allow setting a user-provided prefix as well
...
SVN-Revision: 35570
2013-02-12 08:23:54 +00:00
eeaf2c0b5a
iptables: fix bad PKG_RELEASE in previous commit
...
SVN-Revision: 35569
2013-02-11 22:14:38 +00:00
916902b1d2
iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
...
SVN-Revision: 35568
2013-02-11 21:58:42 +00:00
1810b80ec0
mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default
...
SVN-Revision: 35565
2013-02-11 18:59:10 +00:00
b8c796fbd7
odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging
...
SVN-Revision: 35553
2013-02-11 12:30:16 +00:00
a9058439cf
openvpn-easy-rsa: fix typo in version ( #12958 )
...
SVN-Revision: 35508
2013-02-06 22:17:11 +00:00
dc2ba40af3
openvpn: remove the stale PKG_REV variable
...
SVN-Revision: 35499
2013-02-05 10:40:19 +00:00
b8c903e6f8
openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball
...
SVN-Revision: 35498
2013-02-05 10:40:13 +00:00
e106f25ee7
firewall: various enhancements
...
- reduce mssfix related log spam (#10681 )
- separate src and dest terminal chains (#11453 , #12945 )
- disable per-zone custom chains by default, they're rarely used
Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.
SVN-Revision: 35484
2013-02-04 14:38:33 +00:00
13544edce7
odhcp6c: Fix timing issues
...
SVN-Revision: 35472
2013-02-03 17:26:40 +00:00
e893d4d9a8
libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend()
...
SVN-Revision: 35471
2013-02-03 12:03:24 +00:00
6be5a5a73d
odhcp6c: Fix RENEW and REBIND requests
...
SVN-Revision: 35454
2013-02-02 10:44:13 +00:00
e2193a69c8
odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested
...
SVN-Revision: 35421
2013-02-01 13:38:47 +00:00
6a43437908
netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
...
SVN-Revision: 35420
2013-02-01 12:28:43 +00:00
9a62439c28
odhcp6c: switch to userspace RA-handling and offload address assignment to netifd
...
SVN-Revision: 35419
2013-02-01 12:28:39 +00:00
a3368da479
6relayd: Fix announced router flags and IPv6 procfs-configuration
...
SVN-Revision: 35418
2013-02-01 12:28:34 +00:00
416ce374c0
openvpn: add from openvpn-devel from /packages, fix support for current polarssl
...
SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
4bd3f54143
6in4: fix typo in last commit
...
SVN-Revision: 35409
2013-01-30 09:07:23 +00:00
a0a91963af
6in4: work around hanging wget process
...
SVN-Revision: 35408
2013-01-30 09:05:53 +00:00
65657fb585
netifd: update to latest version
...
fixes DNS servers on reload (#12910 )
fixes ubus object race on reload or down/up (#12612 )
SVN-Revision: 35383
2013-01-29 14:40:04 +00:00
c16879a385
samba36: update to 3.6.11 and refresh patches (based on patch from #12914 )
...
SVN-Revision: 35382
2013-01-29 13:18:56 +00:00
777f7b30ae
netifd: implement IPv6 prefix deprecation according to RFC 6204
...
SVN-Revision: 35377
2013-01-29 11:05:22 +00:00
78a6439784
6relayd: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35371
2013-01-29 10:13:49 +00:00
1a0b207d61
odhcp6c: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35370
2013-01-29 10:13:44 +00:00
fac1ed35ac
netifd: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35369
2013-01-29 10:13:39 +00:00
6ea9abadeb
netifd: update to latest version, fixes setting addresses/routes on alias interfaces
...
SVN-Revision: 35362
2013-01-28 20:35:55 +00:00
e804a663e3
hostapd: don't configure wpa_supplicant with empty password="" if no password is specified ( #12912 )
...
SVN-Revision: 35358
2013-01-28 18:05:33 +00:00
839f3ab0e7
firewall: flush conntrack table after changing interface rules
...
SVN-Revision: 35348
2013-01-28 15:53:44 +00:00
ec41a6a08c
netifd: IPv6 sysctl, restart IPv6 in static mode to send RS
...
SVN-Revision: 35347
2013-01-28 14:07:27 +00:00
75b06607db
netifd: add SLAAC ipv6 value for static-proto
...
SVN-Revision: 35346
2013-01-28 13:53:48 +00:00
e964fa5d8f
odhcp6c: work-around for proto-script to avoid loosing the default route
...
SVN-Revision: 35345
2013-01-28 13:53:43 +00:00
a81c76617e
ipv6-support: don't overwrite existing setting across reflashs
...
SVN-Revision: 35302
2013-01-23 08:15:09 +00:00
55eab5ac44
netifd: update to latest version, adds another fix for interface aliases
...
SVN-Revision: 35297
2013-01-22 16:05:59 +00:00
5859fc7a39
netifd: Fix a segfault when globals.ula_prefix is empty
...
SVN-Revision: 35296
2013-01-22 15:49:42 +00:00
a4c7a953e5
uhttpd: always turn on TLS support, include ustream-ssl as a build dependency
...
SVN-Revision: 35295
2013-01-22 15:05:04 +00:00
bab482b93f
uhttpd: fix another small hang issue with the same symptoms
...
SVN-Revision: 35291
2013-01-22 09:38:00 +00:00
166ea3832b
uhttpd: fix connection hangs
...
SVN-Revision: 35290
2013-01-22 09:28:55 +00:00
bc1d72c7bf
tcpdump: add SLL parsing support to tcpdump-mini, use -ffunction-sections, -fdata-sections and --gc-sections to reduce size
...
SVN-Revision: 35288
2013-01-22 07:51:15 +00:00
c725669079
uhttpd: fix unencrypted passwords in httpd.conf
...
SVN-Revision: 35265
2013-01-21 12:46:41 +00:00
38080ae550
6relayd: fix shell library includes in init-script
...
Thanks to Daniel Golle
SVN-Revision: 35262
2013-01-21 11:27:03 +00:00
8a97d823a4
6relayd: avoid a race-condition with looping RAs
...
SVN-Revision: 35260
2013-01-21 10:42:31 +00:00
f129c6786e
netifd: Fix segfaults in IPv6 prefix handling
...
SVN-Revision: 35259
2013-01-21 09:21:30 +00:00
f1fd0f8278
odhcp6c: Fix address assignment with infinite validity
...
SVN-Revision: 35258
2013-01-21 07:58:58 +00:00
4a86973285
uhttpd: fix selecting the right ustream implementation when openssl is to be used ( #12857 )
...
SVN-Revision: 35257
2013-01-20 21:15:43 +00:00
5bc6555e08
netifd: update to latest version, fixes alias support
...
SVN-Revision: 35251
2013-01-20 15:47:09 +00:00
18a7d0e945
network/iproute2: Bump version to 3.7.0
...
Updated to latest stable version and added an upstream patch to handle
a link failure
Signed-off-by: Oliver Smith <olipro@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>
[dgolle@allnet.de: refreshed patches]
Signed-off-by: Daniel Golle <dgolle@allnet.de>
SVN-Revision: 35250
2013-01-20 11:25:18 +00:00
e55ee0817f
uhttpd: update to a newer version, fixes chunked transfer on some POST requests
...
SVN-Revision: 35249
2013-01-19 22:55:46 +00:00
6f0ecf0541
uhttpd: switch to uhttpd2, it is now feature complete
...
SVN-Revision: 35247
2013-01-19 18:47:09 +00:00
f2766239ea
netifd: add a band-aid fix for the wifi setup vs. netifd init race by increasing the wait time to five seconds
...
SVN-Revision: 35240
2013-01-19 10:13:14 +00:00
62e9957cc4
ipv6-support: adapt UCI defaults to new ordering
...
SVN-Revision: 35219
2013-01-18 12:52:51 +00:00
5a122f7e5f
odhcp6c: Fix parsing more than one DNS server
...
SVN-Revision: 35215
2013-01-18 08:21:35 +00:00
f517d0481a
ipv6-support: Rename enable-ipv6 UCI defaults
...
SVN-Revision: 35205
2013-01-17 16:16:06 +00:00
7250e27869
xtables-addons: rework uid/gid compat patch to use KUIDT_INIT() and KGIDT_INIT() macros
...
SVN-Revision: 35203
2013-01-17 16:05:30 +00:00
3b798d819d
xtables-addons: move to package/, add myself as maintainer
...
SVN-Revision: 35193
2013-01-17 12:29:26 +00:00
66fa83d211
odhcp6c: Detect a different MAC if interface has none * Fixes DHCPv6 behaviour over PPP and similar
...
SVN-Revision: 35189
2013-01-17 08:29:01 +00:00
73875c1215
ppp: don't automatically set IPv6 default route * Fixes "ndisc_router_discovery() failed to add default route"
...
SVN-Revision: 35188
2013-01-17 08:28:57 +00:00
1ecc744583
netifd: @aliases use layer 3 devices instead of main devices Fixes dhcpv6 protocol alias
...
SVN-Revision: 35187
2013-01-17 08:28:51 +00:00
3235d860a6
ipv6-support: Switch to native IPv6 support
...
SVN-Revision: 35174
2013-01-15 13:08:19 +00:00
955a1e8e28
6rd: add support for native IPv6 prefix handling
...
SVN-Revision: 35173
2013-01-15 13:08:14 +00:00
811cd2acf4
6to4: add support for native IPv6 prefix handling
...
SVN-Revision: 35172
2013-01-15 13:08:10 +00:00
2a94f67029
6in4: add support for native IPv6 prefix handling
...
SVN-Revision: 35171
2013-01-15 13:08:05 +00:00
a1e92f6dd1
6relayd: add suitable default configuration
...
SVN-Revision: 35170
2013-01-15 13:08:00 +00:00
859fd7f614
6distributed: Remove obsolete service (replaced by netifd)
...
SVN-Revision: 35169
2013-01-15 13:07:56 +00:00
06890959d1
netifd: Introduce native IPv6 prefix-handling
...
SVN-Revision: 35167
2013-01-15 13:07:41 +00:00
03a50b9087
netfilter.mk: add addrtype match to iptables-mod-extra (kmod-ipt-extra)
...
SVN-Revision: 35155
2013-01-14 16:12:56 +00:00
e5548b03e5
netifd: update to git head, adds 64bit counters
...
SVN-Revision: 35140
2013-01-13 19:48:52 +00:00
0cd21ca785
odhcp6c: Send RS on start
...
SVN-Revision: 35137
2013-01-13 18:06:24 +00:00
f0df2006af
odhcp6c: Add preliminary proto-handler
...
SVN-Revision: 35135
2013-01-13 17:35:09 +00:00
b58a13cb2c
ipv6-support: don't use disable_ipv6
...
SVN-Revision: 35134
2013-01-13 17:25:43 +00:00
fde5b934fd
6relayd: Rewrite init-script logic
...
SVN-Revision: 35133
2013-01-13 17:25:38 +00:00
b077480a59
firewall: Add ULA site border for IPv6 traffic This prevents private traffic from leaking out to the internet
...
SVN-Revision: 35012
2013-01-04 15:59:28 +00:00
3b7882e775
iwinfo: don't use the txpower value from debugfs for now, it does not match the values reported via wext
...
SVN-Revision: 35007
2013-01-04 14:08:08 +00:00
ff0c7a9ec9
don't depend on lua
...
Delete +lua from libiwinfo-lua.
Signed-off-by: Stefan Hellermann <stefan@the2masters.de>
SVN-Revision: 35005
2013-01-04 09:32:06 +00:00
965afef317
ipv6-support: Update iteration * Add support for blocking forwarding while address assignments * Fix relay restarting function
...
SVN-Revision: 34985
2013-01-02 23:05:44 +00:00
c7d9d7c952
odhcp6c: Add support for SNTP and SIP options
...
SVN-Revision: 34984
2013-01-02 23:05:39 +00:00
4a2e55f30f
6relayd: Announce RDNSS and DNSSL via RA
...
SVN-Revision: 34983
2013-01-02 23:05:35 +00:00
1683a146f4
iwinfo: replace more wext calls with nl80211 equivalents, attempt to infer nl80211 tx power from debugfs before querying wext
...
SVN-Revision: 34982
2013-01-02 19:10:29 +00:00
54c0b40427
dnsmasq: allow dhcp host entries without mac addresses ( #11928 )
...
SVN-Revision: 34971
2013-01-02 15:14:19 +00:00
c8a8f8fd55
lldpd: various enhancements
...
- introduce "list interface" options to specify the ifaces to listen on, takes uci- or network device name
- set the default system description to distrib @ hostname, e.g. "OpenWrt Barrier Breaker r34744 @ vbox"
- introduce "option lldp_description" to override the automatically generated description
SVN-Revision: 34970
2013-01-02 14:35:43 +00:00
a730e96569
Remove remaining etrax references
...
SVN-Revision: 34968
2013-01-02 11:28:11 +00:00
7a25be66c3
6relayd: Detect changes of default routes for RAs
...
SVN-Revision: 34958
2013-01-01 21:41:37 +00:00
def80bbecf
ipv6-support: Remove unnecessary code
...
SVN-Revision: 34957
2013-01-01 21:41:32 +00:00
4c09d5dde3
ipv6-support: Fix typo in dhcpv6-script * thanks to KarlHegbloom for reporting
...
SVN-Revision: 34940
2012-12-31 09:38:59 +00:00
b7c1f24f9b
ipv6-support: Use more consistent default values
...
SVN-Revision: 34913
2012-12-29 10:12:31 +00:00
e7719bb4aa
ipv6-support: Updated functionality * Add site-border feature again * Add option to always announce a default router
...
SVN-Revision: 34908
2012-12-28 12:02:22 +00:00
ce41e59030
6distributed: Add null-route for delegated prefix * Fixes forwarding loops for unused subprefixes
...
SVN-Revision: 34907
2012-12-28 12:02:17 +00:00
d6c955e39a
6relayd: Announce DNS search domain via DHCPv6
...
SVN-Revision: 34906
2012-12-28 12:02:12 +00:00
253d7345e1
ipv6-support: Remove site-border feature * was causing routing problems * will be reimplemented using firewall
...
SVN-Revision: 34898
2012-12-27 15:47:53 +00:00
941f4ccd68
Remove site-border routing filter due to problems
...
SVN-Revision: 34897
2012-12-27 15:47:47 +00:00
01059c8914
ipv6-support: * Automatically detect and propagate MTU from upstream interfaces * Add site-border feature (RFC 6204, ULA-4) * Fix a typo
...
SVN-Revision: 34896
2012-12-27 14:10:17 +00:00
50a9fed238
6distributed: feature update * Add feature to decrease IPv6-specific MTU on-demand * Add commands to enable / disable a site-border
...
SVN-Revision: 34895
2012-12-27 14:10:12 +00:00
4bab347e98
6relayd: Advertise IPv6-specific MTU instead of generic * Fixes announced MTU when using tunnels
...
SVN-Revision: 34894
2012-12-27 14:10:07 +00:00
970adc9eb9
ipv6-support: Fix default RA settings for dnsmasq
...
SVN-Revision: 34873
2012-12-23 18:22:48 +00:00
7ed89e8542
dropbear: convert init script to procd
...
SVN-Revision: 34867
2012-12-22 18:56:13 +00:00
82bd58c793
dropbear: use network_get_device instead of scan_interfaces to get the device name
...
SVN-Revision: 34863
2012-12-22 18:55:57 +00:00
a4e656ef24
ipv6-support: Preliminary support for dnsmasq >=2.66
...
SVN-Revision: 34858
2012-12-22 13:00:53 +00:00
2dbfffef68
6relayd: Fix detection of prefix changes
...
SVN-Revision: 34857
2012-12-22 13:00:49 +00:00
f36c3067c6
odhcp6c: Fix build on arch where char is unsigned
...
SVN-Revision: 34856
2012-12-22 13:00:45 +00:00
970c5d97fe
6distributed: Improve prefix deprecation algorithm
...
SVN-Revision: 34855
2012-12-22 13:00:40 +00:00
149b1c46c7
ipset: update to 6.16.1 to fix build with kernel 3.7
...
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
SVN-Revision: 34752
2012-12-18 14:50:44 +00:00
bf34eeaea4
netifd: update to latest version, fixes interface error reporting for shell proto handlers
...
SVN-Revision: 34741
2012-12-17 22:24:31 +00:00
14281559e1
netifd: update to latest version, no longer needs the removed jshn_append() shell function
...
SVN-Revision: 34734
2012-12-17 14:57:15 +00:00
056d75049d
wpa_supplicant.sh: always use parameters from the current section
...
Using variables from the outer scope unnecessarily complicates the code and
leads to issues.
This patch fixes the bug when having an "adhoc" wifi-iface section before a
"sta" section prevents wpa_supplicant from using the key specified in the
corresponding section as it tries to use the "adhoc" key instead (1 by
default).
Signed-off-by: Paul Fertser <fercerpav@gmail.com>
SVN-Revision: 34716
2012-12-16 13:23:37 +00:00
e9c0b95829
fixes uapi helper define
...
SVN-Revision: 34715
2012-12-16 11:04:27 +00:00
860c2e8116
netifd: call /etc/udhcp.user from the netifd dhcp.script
...
This was done previously when dhcp was handled by the network scripts.
So netifd should behave the same.
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
SVN-Revision: 34704
2012-12-15 17:19:24 +00:00
06c9170a7c
move ltq-adsl-tool
...
SVN-Revision: 34694
2012-12-15 02:00:39 +00:00
4583469413
make use of uapi directory wrapper
...
SVN-Revision: 34684
2012-12-15 01:59:19 +00:00
86cd825c1f
package/swconfig: don't use kernel headers
...
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
SVN-Revision: 34679
2012-12-14 12:11:50 +00:00
b85c8a6361
netifd: update to latest version, fixes purging old resolv.conf entries after ifdown
...
SVN-Revision: 34664
2012-12-13 16:14:41 +00:00
8d9564af1b
ipv6-support: Make ULA addresses secondary * Deprecates ULA prefixes when there are other public prefixes * Fixes issues with clients using incorrect source addresses
...
SVN-Revision: 34630
2012-12-11 16:56:37 +00:00
8546f8a401
6distributed: Add support for secondary addresses
...
SVN-Revision: 34629
2012-12-11 16:56:32 +00:00
14273e1120
6relayd: Fix announcement of deprecated prefixes
...
SVN-Revision: 34628
2012-12-11 16:56:27 +00:00
faba477274
ipv6-support: Add support for NPT status tracking
...
SVN-Revision: 34609
2012-12-10 16:46:59 +00:00
cd76023e97
6distributed: add status-call for luci-integration
...
SVN-Revision: 34608
2012-12-10 16:46:54 +00:00
01513b7c8b
iw: sync with nl80211.h to fix setting antenna gain
...
SVN-Revision: 34593
2012-12-10 13:51:06 +00:00
a07ddb955f
ipv6-support: Next iteration * Make ula_prefix a global option * Add preliminary support for NAT (Linux >= 3.7, ip6tables >= 1.4.17) * Minor fixes for prefix fallback
...
SVN-Revision: 34586
2012-12-09 13:54:22 +00:00
57d853ffc4
6distributed: Correctly handle duplicate prefixes
...
SVN-Revision: 34585
2012-12-09 13:32:30 +00:00
eeeb59e451
6relayd: Always send NA with hop-limit 255 * thanks risa2000 for investigating
...
SVN-Revision: 34584
2012-12-09 12:33:28 +00:00
16d0957a4e
firewall: fix typo in reflection hotplug script
...
SVN-Revision: 34569
2012-12-07 13:08:28 +00:00
63135142d8
6to4: Remove static radvd-integration * Please use the new ipv6-support package
...
SVN-Revision: 34567
2012-12-07 08:53:53 +00:00
82576f0ca3
ipv6-support: next iteration * Introduce mode 6rd * Introduce mode 6to4 * Fix announcement of DNS-Servers received from DHCPv6 * Fix some corner-cases in relaying behaviour
...
SVN-Revision: 34542
2012-12-06 20:52:40 +00:00
61e8c6b83b
6relayd: More RFC-compatibility and size reduction
...
SVN-Revision: 34541
2012-12-06 20:52:35 +00:00
f14e1f1b1d
6distributed: Add compatibility with 6rd and 6to4
...
SVN-Revision: 34540
2012-12-06 20:52:30 +00:00
d221222907
ppp: unconditionally start pppd with nodefaultroute and usepeerdns ( #12580 )
...
Since the switch to netifd, proto handlers may always set the defaultroute
and provide dns server addresses, netifd will decide in the generic code
path whether the announced values are masked or not.
Additionally protocol handlers should not modify the routing tables themselves
and prevent any launched services from doing so.
Remove the additional defaultroute and peerdns option handling from the ppp.sh
protocol handler and rely on netifd to mask or not mask the values.
SVN-Revision: 34536
2012-12-06 18:17:21 +00:00
838d6e3b8d
netifd: update to latest version, fixes resolv.conf writes on interface setting changes
...
SVN-Revision: 34500
2012-12-05 13:28:56 +00:00
9e355444a6
dropbear: update to 2012.55 and refresh patches
...
Upstream has a few code cleanups, more eagerly burns sensitive memory and
includes the fix for CVE-2012-0920. Full changelog:
https://matt.ucc.asn.au/dropbear/CHANGES
Local changes:
- Removed PKG_MULTI which is no longer in options.h (even before 2011.54)
- Merged DO_HOST_LOOKUP into 120-openwrt_options.patch
- Removed LD from make opts (now included in TARGET_CONFIGURE_OPTS)
- Removed 400-CVE-2012-0920.patch which is included in 2012.55
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34496
2012-12-04 16:40:17 +00:00
6504b268b3
firewall: extend nat reflection support
...
- use comment match to keep track of per-network rules
- setup reflection for any interface which is part of a masqueraded zone, not just "wan"
- delete per-network reflection rules if network is brought down
SVN-Revision: 34472
2012-12-04 15:24:21 +00:00
8516ddb133
mac80211, hostapd: Fix macfilter for multi bssid setups
...
Previously only the first macfilter configuration would have been used
on all interfaces. However, the configuration was always done per vif
already. Hence, move the macfilter setup into hostapd.sh where and
create one mac list file per vif.
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>
SVN-Revision: 34470
2012-12-04 12:06:40 +00:00
4c30952394
Make ltq-dsl-app compile with an eglibc-based toolchain
...
Signed-Off-By: Frank Meerkötter <frank@meerkoetter.org>
SVN-Revision: 34468
2012-12-03 12:46:57 +00:00
4bda16cf27
ipv6-support: Second Iteration * mode 'downstream' renamed to 'router' * mode 'upstream' renamed to 'dhcpv6' * mode 'relay' added * cleanups and minor bugfixes in state handling
...
SVN-Revision: 34466
2012-12-03 09:18:53 +00:00
71ed7ae842
netifd: empty hotplug handler removed
...
SVN-Revision: 34465
2012-12-03 07:20:44 +00:00
c6b0c63cad
6distributed: Poll for ubus to come up (fix race)
...
SVN-Revision: 34462
2012-12-02 19:06:48 +00:00
5d8a7a0ce5
Make teql hotplug script run sooner
...
In particular, it wants to run before the ntpclient script. Which may
block for a long time attempting to do DNS lookups for NTP servers. In
my case, that would have *worked* if the new device had been added to
teql first, rather than timing out.
This was effectively causing a huge delay between an interface coming
up, and routing actually starting to work.
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>
SVN-Revision: 34442
2012-12-02 13:04:03 +00:00
a0f0c23109
ipv6-support: Add conffiles section
...
SVN-Revision: 34423
2012-11-29 20:33:17 +00:00
a4edea5ef3
ipv6-support: Add new IPv6-support meta-package
...
SVN-Revision: 34422
2012-11-29 20:14:28 +00:00
e6e6e0d152
odhcp6c: Add new embedded DHCPv6 client
...
SVN-Revision: 34421
2012-11-29 20:14:23 +00:00
25d943e872
6distributed: add local IPv6 prefix distributor
...
SVN-Revision: 34420
2012-11-29 20:14:18 +00:00
7d3495b431
6relayd: Fix some RFC 6204 compatibility issues
...
SVN-Revision: 34419
2012-11-29 20:14:14 +00:00
dffa972af1
Remove old IPv6 sysctl-config (deprecated)
...
SVN-Revision: 34418
2012-11-29 20:14:09 +00:00
062d3c1e67
iptables: fix typo in iptables musl patch after r34313
...
Thanks to Frank Meerkötter and Szabolcs Nagy for spotting the issue.
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34326
2012-11-25 11:40:59 +00:00
14ed3f0f22
iptables: add some musl portability fixes
...
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34313
2012-11-23 20:02:23 +00:00
94bdc366d4
netfid: fix build on musl
...
AF_INET* is provided by sys/socket.h
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34310
2012-11-23 20:02:10 +00:00
f1498531c7
hostapd: include sys/stat.h for a struct stat definition
...
Some libcs need this header to be explicitely included (e.g: musl)
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 34295
2012-11-21 20:27:06 +00:00
417af03ba5
6relayd: add conffiles section, thanks swalker
...
SVN-Revision: 34222
2012-11-17 09:44:41 +00:00
45137b0896
6relayd: various updates & fixes - Add RD- and DHCPv6-server functionality - Rework configuration and add example UCI file - Fix various bugs and be more RFC compliant
...
SVN-Revision: 34204
2012-11-16 09:27:56 +00:00
db207e2a87
ppp: - fix multilink ppp with custom ifnames, patch by George Kashperko <george@znau.edu.ua> - refresh patches
...
SVN-Revision: 34171
2012-11-12 19:13:45 +00:00
3a81f75d72
resolveip: fix endless getopt() loop when compiled for arm ( #12290 )
...
SVN-Revision: 34116
2012-11-08 10:48:08 +00:00
611b2e8bb3
netifd: don't send a default client identifier in DHCP requests if no clientid uci option is given ( #12426 )
...
SVN-Revision: 34089
2012-11-05 19:28:24 +00:00
c1aae78816
ppp: add more pppol2tpv3 related structs from the kernel headers to fix compile issues with linux 3.6
...
SVN-Revision: 34070
2012-11-04 17:01:27 +00:00
16c72b09cc
iptables: remove support for libipq, it has been obsolete for years and is unsupported in newer kernels
...
SVN-Revision: 34069
2012-11-04 17:01:23 +00:00
9aba83eced
6relayd: auto-configure local interfaces as well
...
SVN-Revision: 34027
2012-10-31 12:48:54 +00:00
73c75e0dd8
uhttpd: update to latest git head, improves handling of invalid requests
...
SVN-Revision: 34010
2012-10-30 13:13:21 +00:00
c3d04d4630
6relayd: update to work around a raw-socket bug
...
SVN-Revision: 34009
2012-10-30 07:43:07 +00:00
1fe7efbddb
ipv6: add 6relayd (RD-, DHCPv6- & NDP-Proxy)
...
6relayd is an IPv6-tool that relays IPv6-management protocols like router
discovery, neighbor discovery and DHCPv6 so that clients on routed
(non-bridged) interfaces can use the public address prefix, DHCPv6 and
DNS-service of a master interface. This is useful to avoid NAT in chained
IPv6-routers.
SVN-Revision: 34008
2012-10-30 07:14:07 +00:00
fc3939a996
netifd: update to latest version, fixes adding an alias during config reload for an interface that is already up
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 34006
2012-10-30 00:24:31 +00:00
0e3de8eff7
iwinfo: properly initialize memory of global nl80211_state, fixes random libnl-tiny assertions when using nl80211_probe() on not supported devices
...
SVN-Revision: 34003
2012-10-29 22:11:57 +00:00
f911fb32fe
hostapd: merge some pending fixes (fixes assoc errors when moving between vaps of the same wifi device)
...
SVN-Revision: 33919
2012-10-25 14:31:17 +00:00
1895d55e9d
ltq-dsl-app: fix offline postinstall for dsl_control
...
SVN-Revision: 33901
2012-10-23 19:57:47 +00:00
81a3d9ba31
licensing: Add licensing metadata to many packages Two new variables are introduces to many packages, namely PKG_LICENSE and PKG_LICENSE_FILES - there may be more than one license applied to packages, and these are listed in the PKG_LICENSE variable and separated by spaces. All relevant license files are also added to the PKG_LICENSE_FILES variable, also space separated.
...
The licensing metadata is put into the bin/<platform>/packages/Packages file
for later parsing. A script for that is on it's way!
SVN-Revision: 33861
2012-10-19 15:34:28 +00:00
5fb6cf9a11
uhttpd: fix compilation with eglibc
...
SVN-Revision: 33860
2012-10-19 13:54:29 +00:00
825592b54b
netifd: update to latest version, fixes device cleanup and config reload issues when assigning a device to a different bridge
...
SVN-Revision: 33858
2012-10-19 13:51:48 +00:00
88f3c59fb9
netifd: enable parallel build
...
SVN-Revision: 33832
2012-10-18 00:09:45 +00:00
a34499e095
move lots of kernel related packages to the new system/ folder
...
SVN-Revision: 33830
2012-10-17 22:45:58 +00:00
965710d3e1
samba36: enable parallel build
...
SVN-Revision: 33829
2012-10-17 22:18:30 +00:00
c2b8d1a619
Fix broadcast DHCP client startup option in dhcp.sh
...
Signed-off-by: Hans Dedecker (hans.dedecker at technicolor.com)
Fixes the DHCP request broadcasts replies option parsing
SVN-Revision: 33826
2012-10-17 21:53:46 +00:00
26944502e3
hostapd: merge a security fix for a TLS message buffer overflow (CVE-2012-4445)
...
SVN-Revision: 33815
2012-10-17 18:16:56 +00:00
8fc2b30281
iftop: update iftop to 1.0pre2
...
Most significantly, includes IPv6 support. This version forces
libncurses, by patching the configure script, instead of allowing
libncursesw, saving (~65k) image space.
Signed-off-by: Russell Senior <russell@personaltelco.net>
SVN-Revision: 33782
2012-10-16 15:49:49 +00:00
160c2ef011
uhttpd: update to latest git head - introduces support for multiple index files - fixes build with only the TLS module selected
...
SVN-Revision: 33778
2012-10-15 18:19:57 +00:00
14e14faa0b
uhttpd: switch to external git repo + cmake build system
...
SVN-Revision: 33775
2012-10-15 12:31:33 +00:00
19f91b26f5
rssileds: improve performance
...
LEDs brightness is now only updated if the value actually changed, thus reducing
the number of fwrite syscalls significantly.
Signed-off-by: Daniel Golle <dgolle@allnet.de>
SVN-Revision: 33766
2012-10-14 16:22:04 +00:00
a00110a063
6in4: make local ip6addr optional
...
SVN-Revision: 33761
2012-10-14 09:17:14 +00:00
1eded4f376
ipset: update to v6.14, drop obsolete patches
...
SVN-Revision: 33735
2012-10-12 12:19:46 +00:00
9e9efd8e49
lldpd: fix minor whitespace quirk in init script
...
SVN-Revision: 33730
2012-10-12 12:02:56 +00:00
0019b39001
lldpd: bump to v0.6.1, enable privilege separation and chrooting
...
SVN-Revision: 33729
2012-10-12 11:58:19 +00:00
f248332d52
thc-ipv6: update to v2.0, package all available utilities
...
SVN-Revision: 33728
2012-10-11 21:57:56 +00:00
f5d12a126d
thc-ipv6: move to trunk and add myself as maintainer
...
SVN-Revision: 33727
2012-10-11 21:17:08 +00:00
936c1b9424
iputils: move to trunk and add myself as maintainer
...
SVN-Revision: 33704
2012-10-10 13:22:18 +00:00
c748c36d2c
iftop: move to trunk and add myself as maintainer
...
SVN-Revision: 33702
2012-10-10 13:21:30 +00:00
711fdc3b09
conntrack-tools: move to trunk and add myself as maintainer
...
SVN-Revision: 33701
2012-10-10 13:19:43 +00:00
47ea3c7fee
lldpd: move to trunk and add myself as maintainer
...
SVN-Revision: 33700
2012-10-10 13:17:14 +00:00
11549e1b73
dante: move to trunk and add myself as maintainer
...
SVN-Revision: 33699
2012-10-10 13:14:39 +00:00
b5ab35e816
ipset: move to trunk and add myself as maintainer
...
SVN-Revision: 33698
2012-10-10 13:13:17 +00:00
05c2442957
package/network/utils/rssileds: claim maintainership
...
SVN-Revision: 33697
2012-10-10 13:07:29 +00:00
d1d1ae994b
claim maintainership for resolveip and lua
...
SVN-Revision: 33694
2012-10-10 12:57:20 +00:00
e51eb6046d
add myself as a maintainer for a few more packages
...
SVN-Revision: 33693
2012-10-10 12:49:37 +00:00
2fb3792fa9
hostapd: remove redundant MAINTAINER lines
...
SVN-Revision: 33692
2012-10-10 12:36:44 +00:00
ed33bd8c7c
iperf: move to trunk and add myself as maintainer
...
SVN-Revision: 33691
2012-10-10 12:35:43 +00:00
5806525653
tcpdump: move to trunk and add myself as maintainer
...
SVN-Revision: 33690
2012-10-10 12:35:26 +00:00
445936955e
samba36: move to trunk and add myself as a maintainer
...
SVN-Revision: 33689
2012-10-10 12:34:29 +00:00
Jo-Philipp Wich
Steven Barth
Florian Fainelli
Felix Fietkau
Jonas Gorski
John Crispin
Gabor Juhos
Mirko Vogt
Hamish Guthrie