hak5
/
openwrt
mirror of https://github.com/hak5/openwrt.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
23,810 Commits
5 Branches
29 Tags
202 MiB
Commit Graph

251 Commits (6d3c6e3053ac5b2fc3defcd93b5faa78ce861f67)

Author SHA1 Message Date
Jo-Philipp Wich 92062542e2 firewall: fix logging rule regression (#12999) 
SVN-Revision: 35745
 2013-02-22 13:45:20 +00:00
Jo-Philipp Wich 4fb2cd18c1 firewall3: add support for shell script and iptables-restore style includes 
SVN-Revision: 35744
 2013-02-22 12:45:38 +00:00
Steven Barth a7b262dc0a netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions. 
SVN-Revision: 35743
 2013-02-22 08:56:29 +00:00
Jo-Philipp Wich 7d7d88b580 firewall3: update to git head 
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
	- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
	- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
	- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')

SVN-Revision: 35738
 2013-02-21 22:33:44 +00:00
Florian Fainelli 280fa5a1a2 dante: fix broken configure script not using CFLAGS for conftest 
Spotted by doing an ARM hard float build.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 35685
 2013-02-19 17:22:55 +00:00
Steven Barth 3081c672fc 6relayd: Fix possible memory corruption issue 
SVN-Revision: 35673
 2013-02-19 12:04:41 +00:00
Steven Barth f5b63ffd33 6relayd: Workaround potential signal handling issue 
SVN-Revision: 35665
 2013-02-18 12:50:36 +00:00
Jo-Philipp Wich 02b0c62f33 firewall3 - a C implementation of the current firewall scripts 
SVN-Revision: 35643
 2013-02-17 19:26:52 +00:00
Felix Fietkau 1d6574b9c3 hostapd: fix the scan wait patch for multiple interfaces 
SVN-Revision: 35630
 2013-02-16 19:00:34 +00:00
Felix Fietkau 99782943d2 hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update 
SVN-Revision: 35619
 2013-02-16 14:26:03 +00:00
Jonas Gorski c98b12d911 samba36: fix segmentation fault when trying to add non-existent users 
Based on a patch from НКВД. Closes #12962.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 35610
 2013-02-16 11:39:42 +00:00
Steven Barth 99b69fd9c5 odhcp6c: allow setting a user-provided prefix as well 
SVN-Revision: 35570
 2013-02-12 08:23:54 +00:00
Jo-Philipp Wich eeaf2c0b5a iptables: fix bad PKG_RELEASE in previous commit 
SVN-Revision: 35569
 2013-02-11 22:14:38 +00:00
Jo-Philipp Wich 916902b1d2 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines 
SVN-Revision: 35568
 2013-02-11 21:58:42 +00:00
Felix Fietkau 1810b80ec0 mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default 
SVN-Revision: 35565
 2013-02-11 18:59:10 +00:00
Steven Barth b8c796fbd7 odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging 
SVN-Revision: 35553
 2013-02-11 12:30:16 +00:00
Felix Fietkau a9058439cf openvpn-easy-rsa: fix typo in version (#12958) 
SVN-Revision: 35508
 2013-02-06 22:17:11 +00:00
Felix Fietkau dc2ba40af3 openvpn: remove the stale PKG_REV variable 
SVN-Revision: 35499
 2013-02-05 10:40:19 +00:00
Felix Fietkau b8c903e6f8 openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball 
SVN-Revision: 35498
 2013-02-05 10:40:13 +00:00
Jo-Philipp Wich e106f25ee7 firewall: various enhancements 
- reduce mssfix related log spam (#10681)
	- separate src and dest terminal chains (#11453, #12945)
	- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

SVN-Revision: 35484
 2013-02-04 14:38:33 +00:00
Steven Barth 13544edce7 odhcp6c: Fix timing issues 
SVN-Revision: 35472
 2013-02-03 17:26:40 +00:00
Jo-Philipp Wich e893d4d9a8 libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend() 
SVN-Revision: 35471
 2013-02-03 12:03:24 +00:00
Steven Barth 6be5a5a73d odhcp6c: Fix RENEW and REBIND requests 
SVN-Revision: 35454
 2013-02-02 10:44:13 +00:00
Steven Barth e2193a69c8 odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested 
SVN-Revision: 35421
 2013-02-01 13:38:47 +00:00
Steven Barth 6a43437908 netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes 
SVN-Revision: 35420
 2013-02-01 12:28:43 +00:00
Steven Barth 9a62439c28 odhcp6c: switch to userspace RA-handling and offload address assignment to netifd 
SVN-Revision: 35419
 2013-02-01 12:28:39 +00:00
Steven Barth a3368da479 6relayd: Fix announced router flags and IPv6 procfs-configuration 
SVN-Revision: 35418
 2013-02-01 12:28:34 +00:00
Felix Fietkau 416ce374c0 openvpn: add from openvpn-devel from /packages, fix support for current polarssl 
SVN-Revision: 35412
 2013-01-30 20:07:15 +00:00
Steven Barth 4bd3f54143 6in4: fix typo in last commit 
SVN-Revision: 35409
 2013-01-30 09:07:23 +00:00
Steven Barth a0a91963af 6in4: work around hanging wget process 
SVN-Revision: 35408
 2013-01-30 09:05:53 +00:00
Felix Fietkau 65657fb585 netifd: update to latest version 
fixes DNS servers on reload (#12910)
fixes ubus object race on reload or down/up (#12612)

SVN-Revision: 35383
 2013-01-29 14:40:04 +00:00
Felix Fietkau c16879a385 samba36: update to 3.6.11 and refresh patches (based on patch from #12914) 
SVN-Revision: 35382
 2013-01-29 13:18:56 +00:00
Steven Barth 777f7b30ae netifd: implement IPv6 prefix deprecation according to RFC 6204 
SVN-Revision: 35377
 2013-01-29 11:05:22 +00:00
Steven Barth 78a6439784 6relayd: remove IPv6 forwarding-sysctl workaround 
SVN-Revision: 35371
 2013-01-29 10:13:49 +00:00
Steven Barth 1a0b207d61 odhcp6c: remove IPv6 forwarding-sysctl workaround 
SVN-Revision: 35370
 2013-01-29 10:13:44 +00:00
Steven Barth fac1ed35ac netifd: remove IPv6 forwarding-sysctl workaround 
SVN-Revision: 35369
 2013-01-29 10:13:39 +00:00
Felix Fietkau 6ea9abadeb netifd: update to latest version, fixes setting addresses/routes on alias interfaces 
SVN-Revision: 35362
 2013-01-28 20:35:55 +00:00
Jo-Philipp Wich e804a663e3 hostapd: don't configure wpa_supplicant with empty password="" if no password is specified (#12912) 
SVN-Revision: 35358
 2013-01-28 18:05:33 +00:00
Jo-Philipp Wich 839f3ab0e7 firewall: flush conntrack table after changing interface rules 
SVN-Revision: 35348
 2013-01-28 15:53:44 +00:00
Steven Barth ec41a6a08c netifd: IPv6 sysctl, restart IPv6 in static mode to send RS 
SVN-Revision: 35347
 2013-01-28 14:07:27 +00:00
Steven Barth 75b06607db netifd: add SLAAC ipv6 value for static-proto 
SVN-Revision: 35346
 2013-01-28 13:53:48 +00:00
Steven Barth e964fa5d8f odhcp6c: work-around for proto-script to avoid loosing the default route 
SVN-Revision: 35345
 2013-01-28 13:53:43 +00:00
Steven Barth a81c76617e ipv6-support: don't overwrite existing setting across reflashs 
SVN-Revision: 35302
 2013-01-23 08:15:09 +00:00
Felix Fietkau 55eab5ac44 netifd: update to latest version, adds another fix for interface aliases 
SVN-Revision: 35297
 2013-01-22 16:05:59 +00:00
Steven Barth 5859fc7a39 netifd: Fix a segfault when globals.ula_prefix is empty 
SVN-Revision: 35296
 2013-01-22 15:49:42 +00:00
Felix Fietkau a4c7a953e5 uhttpd: always turn on TLS support, include ustream-ssl as a build dependency 
SVN-Revision: 35295
 2013-01-22 15:05:04 +00:00
Felix Fietkau bab482b93f uhttpd: fix another small hang issue with the same symptoms 
SVN-Revision: 35291
 2013-01-22 09:38:00 +00:00
Felix Fietkau 166ea3832b uhttpd: fix connection hangs 
SVN-Revision: 35290
 2013-01-22 09:28:55 +00:00
Felix Fietkau bc1d72c7bf tcpdump: add SLL parsing support to tcpdump-mini, use -ffunction-sections, -fdata-sections and --gc-sections to reduce size 
SVN-Revision: 35288
 2013-01-22 07:51:15 +00:00
Felix Fietkau c725669079 uhttpd: fix unencrypted passwords in httpd.conf 
SVN-Revision: 35265
 2013-01-21 12:46:41 +00:00
Steven Barth 38080ae550 6relayd: fix shell library includes in init-script 
Thanks to Daniel Golle

SVN-Revision: 35262
 2013-01-21 11:27:03 +00:00
Steven Barth 8a97d823a4 6relayd: avoid a race-condition with looping RAs 
SVN-Revision: 35260
 2013-01-21 10:42:31 +00:00
Steven Barth f129c6786e netifd: Fix segfaults in IPv6 prefix handling 
SVN-Revision: 35259
 2013-01-21 09:21:30 +00:00
Steven Barth f1fd0f8278 odhcp6c: Fix address assignment with infinite validity 
SVN-Revision: 35258
 2013-01-21 07:58:58 +00:00
Felix Fietkau 4a86973285 uhttpd: fix selecting the right ustream implementation when openssl is to be used (#12857) 
SVN-Revision: 35257
 2013-01-20 21:15:43 +00:00
Felix Fietkau 5bc6555e08 netifd: update to latest version, fixes alias support 
SVN-Revision: 35251
 2013-01-20 15:47:09 +00:00
Felix Fietkau 18a7d0e945 network/iproute2: Bump version to 3.7.0 
Updated to latest stable version and added an upstream patch to handle
a link failure

Signed-off-by: Oliver Smith <olipro@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>
[dgolle@allnet.de: refreshed patches]
Signed-off-by: Daniel Golle <dgolle@allnet.de>

SVN-Revision: 35250
 2013-01-20 11:25:18 +00:00
Felix Fietkau e55ee0817f uhttpd: update to a newer version, fixes chunked transfer on some POST requests 
SVN-Revision: 35249
 2013-01-19 22:55:46 +00:00
Felix Fietkau 6f0ecf0541 uhttpd: switch to uhttpd2, it is now feature complete 
SVN-Revision: 35247
 2013-01-19 18:47:09 +00:00
Jo-Philipp Wich f2766239ea netifd: add a band-aid fix for the wifi setup vs. netifd init race by increasing the wait time to five seconds 
SVN-Revision: 35240
 2013-01-19 10:13:14 +00:00
Steven Barth 62e9957cc4 ipv6-support: adapt UCI defaults to new ordering 
SVN-Revision: 35219
 2013-01-18 12:52:51 +00:00
Steven Barth 5a122f7e5f odhcp6c: Fix parsing more than one DNS server 
SVN-Revision: 35215
 2013-01-18 08:21:35 +00:00
Steven Barth f517d0481a ipv6-support: Rename enable-ipv6 UCI defaults 
SVN-Revision: 35205
 2013-01-17 16:16:06 +00:00
Jo-Philipp Wich 7250e27869 xtables-addons: rework uid/gid compat patch to use KUIDT_INIT() and KGIDT_INIT() macros 
SVN-Revision: 35203
 2013-01-17 16:05:30 +00:00
Jo-Philipp Wich 3b798d819d xtables-addons: move to package/, add myself as maintainer 
SVN-Revision: 35193
 2013-01-17 12:29:26 +00:00
Steven Barth 66fa83d211 odhcp6c: Detect a different MAC if interface has none * Fixes DHCPv6 behaviour over PPP and similar 
SVN-Revision: 35189
 2013-01-17 08:29:01 +00:00
Steven Barth 73875c1215 ppp: don't automatically set IPv6 default route * Fixes "ndisc_router_discovery() failed to add default route" 
SVN-Revision: 35188
 2013-01-17 08:28:57 +00:00
Steven Barth 1ecc744583 netifd: @aliases use layer 3 devices instead of main devices Fixes dhcpv6 protocol alias 
SVN-Revision: 35187
 2013-01-17 08:28:51 +00:00
Steven Barth 3235d860a6 ipv6-support: Switch to native IPv6 support 
SVN-Revision: 35174
 2013-01-15 13:08:19 +00:00
Steven Barth 955a1e8e28 6rd: add support for native IPv6 prefix handling 
SVN-Revision: 35173
 2013-01-15 13:08:14 +00:00
Steven Barth 811cd2acf4 6to4: add support for native IPv6 prefix handling 
SVN-Revision: 35172
 2013-01-15 13:08:10 +00:00
Steven Barth 2a94f67029 6in4: add support for native IPv6 prefix handling 
SVN-Revision: 35171
 2013-01-15 13:08:05 +00:00
Steven Barth a1e92f6dd1 6relayd: add suitable default configuration 
SVN-Revision: 35170
 2013-01-15 13:08:00 +00:00
Steven Barth 859fd7f614 6distributed: Remove obsolete service (replaced by netifd) 
SVN-Revision: 35169
 2013-01-15 13:07:56 +00:00
Steven Barth 06890959d1 netifd: Introduce native IPv6 prefix-handling 
SVN-Revision: 35167
 2013-01-15 13:07:41 +00:00
Jo-Philipp Wich 03a50b9087 netfilter.mk: add addrtype match to iptables-mod-extra (kmod-ipt-extra) 
SVN-Revision: 35155
 2013-01-14 16:12:56 +00:00
Jo-Philipp Wich e5548b03e5 netifd: update to git head, adds 64bit counters 
SVN-Revision: 35140
 2013-01-13 19:48:52 +00:00
Steven Barth 0cd21ca785 odhcp6c: Send RS on start 
SVN-Revision: 35137
 2013-01-13 18:06:24 +00:00
Steven Barth f0df2006af odhcp6c: Add preliminary proto-handler 
SVN-Revision: 35135
 2013-01-13 17:35:09 +00:00
Steven Barth b58a13cb2c ipv6-support: don't use disable_ipv6 
SVN-Revision: 35134
 2013-01-13 17:25:43 +00:00
Steven Barth fde5b934fd 6relayd: Rewrite init-script logic 
SVN-Revision: 35133
 2013-01-13 17:25:38 +00:00
Steven Barth b077480a59 firewall: Add ULA site border for IPv6 traffic This prevents private traffic from leaking out to the internet 
SVN-Revision: 35012
 2013-01-04 15:59:28 +00:00
Jo-Philipp Wich 3b7882e775 iwinfo: don't use the txpower value from debugfs for now, it does not match the values reported via wext 
SVN-Revision: 35007
 2013-01-04 14:08:08 +00:00
John Crispin ff0c7a9ec9 don't depend on lua 
Delete +lua from libiwinfo-lua.

Signed-off-by: Stefan Hellermann <stefan@the2masters.de>

SVN-Revision: 35005
 2013-01-04 09:32:06 +00:00
Steven Barth 965afef317 ipv6-support: Update iteration * Add support for blocking forwarding while address assignments * Fix relay restarting function 
SVN-Revision: 34985
 2013-01-02 23:05:44 +00:00
Steven Barth c7d9d7c952 odhcp6c: Add support for SNTP and SIP options 
SVN-Revision: 34984
 2013-01-02 23:05:39 +00:00
Steven Barth 4a2e55f30f 6relayd: Announce RDNSS and DNSSL via RA 
SVN-Revision: 34983
 2013-01-02 23:05:35 +00:00
Jo-Philipp Wich 1683a146f4 iwinfo: replace more wext calls with nl80211 equivalents, attempt to infer nl80211 tx power from debugfs before querying wext 
SVN-Revision: 34982
 2013-01-02 19:10:29 +00:00
Jo-Philipp Wich 54c0b40427 dnsmasq: allow dhcp host entries without mac addresses (#11928) 
SVN-Revision: 34971
 2013-01-02 15:14:19 +00:00
Jo-Philipp Wich c8a8f8fd55 lldpd: various enhancements 
- introduce "list interface" options to specify the ifaces to listen on, takes uci- or network device name
	- set the default system description to distrib @ hostname, e.g. "OpenWrt Barrier Breaker r34744 @ vbox"
	- introduce "option lldp_description" to override the automatically generated description

SVN-Revision: 34970
 2013-01-02 14:35:43 +00:00
John Crispin a730e96569 Remove remaining etrax references 
SVN-Revision: 34968
 2013-01-02 11:28:11 +00:00
Steven Barth 7a25be66c3 6relayd: Detect changes of default routes for RAs 
SVN-Revision: 34958
 2013-01-01 21:41:37 +00:00
Steven Barth def80bbecf ipv6-support: Remove unnecessary code 
SVN-Revision: 34957
 2013-01-01 21:41:32 +00:00
Steven Barth 4c09d5dde3 ipv6-support: Fix typo in dhcpv6-script * thanks to KarlHegbloom for reporting 
SVN-Revision: 34940
 2012-12-31 09:38:59 +00:00
Steven Barth b7c1f24f9b ipv6-support: Use more consistent default values 
SVN-Revision: 34913
 2012-12-29 10:12:31 +00:00
Steven Barth e7719bb4aa ipv6-support: Updated functionality * Add site-border feature again * Add option to always announce a default router 
SVN-Revision: 34908
 2012-12-28 12:02:22 +00:00
Steven Barth ce41e59030 6distributed: Add null-route for delegated prefix * Fixes forwarding loops for unused subprefixes 
SVN-Revision: 34907
 2012-12-28 12:02:17 +00:00
Steven Barth d6c955e39a 6relayd: Announce DNS search domain via DHCPv6 
SVN-Revision: 34906
 2012-12-28 12:02:12 +00:00
Steven Barth 253d7345e1 ipv6-support: Remove site-border feature * was causing routing problems * will be reimplemented using firewall 
SVN-Revision: 34898
 2012-12-27 15:47:53 +00:00
Steven Barth 941f4ccd68 Remove site-border routing filter due to problems 
SVN-Revision: 34897
 2012-12-27 15:47:47 +00:00