Commit Graph

218 Commits (9fa6d10215eba2f08977f3876539cb0a250628de)

Author SHA1 Message Date
Jo-Philipp Wich 1287a5a543 Revert "firewall3: update to git head"
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35904 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-08 19:52:18 +00:00
Jo-Philipp Wich 0a093289e6 firewall3: update to git head
- introduce per-zone user chains
	- support legacy "tcpudp" protocol notation

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35903 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-08 15:27:33 +00:00
Steven Barth 0bf76485e2 odhcp6c: various bugfixes
* Don't prematurely send RENEW / REBIND when T1 or T2 is > 1 day
* Add "norelease" option to not send a RELEASE when stopping

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35902 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-08 07:04:38 +00:00
Steven Barth b15a62570b iptables: Add missing IPv6 builtin modules
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35898 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-07 08:48:41 +00:00
Steven Barth bd1e6a2a71 iptables: redo update to 1.4.18 with old linking-behaviour
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35896 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-06 17:05:34 +00:00
Steven Barth bddbaf57c5 Revert "iptables: update to 1.4.18" due to toolchain-issue:
binaries cause segfaults when stripped on ar71xx

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35894 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-06 12:55:48 +00:00
Felix Fietkau 0b5d0905be hostapd: include the madwifi headers in the package directory to avoid compile breakage if the madwifi build fails
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35893 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-05 22:06:30 +00:00
Steven Barth 1942d2db25 iptables: update to 1.4.18
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35892 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-05 20:51:57 +00:00
Jo-Philipp Wich 58e4a0f346 firewall3: add default config and firewall.user
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35889 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-05 13:45:09 +00:00
Felix Fietkau bd0313c2fb hostapd: update to git version 2013-03-02
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35887 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-04 17:16:38 +00:00
Jo-Philipp Wich 4de2e16d3f firewall3: update to git head, introduces support for "enabled" option
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35845 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-02 17:09:33 +00:00
Steven Barth c3ba5abe93 6relayd: Fix illegal memory accesses
Spurious errors when receiving netlink-messages lead to unhandled errors
which caused SIGBUS. Thanks to tdavis for debugging

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35836 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-28 16:37:20 +00:00
Steven Barth 4ff987eec6 6relayd: various fixes
cap preferred and valid lifetimes at more reasonable limits
decrease memory usage (remove unnecessary book-keeping)

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35835 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-28 14:57:19 +00:00
Jo-Philipp Wich 48ff06196e xtables-addons: fix packaging of iptaccount
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35831 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-28 10:58:12 +00:00
Jo-Philipp Wich ffd425c151 firewall3: clear contnrack table on flush, set policies to drop during rule reload
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35820 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-27 14:09:37 +00:00
Steven Barth 13ada38511 6relayd: Fix config behaviour for rewrite_dns_addr option
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35804 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-26 12:50:52 +00:00
Steven Barth 579f6c4632 6relayd: compatibility with broken IPv6 devices
* Announce ULA as deprecated if other addresses are available
* Allow the announced DNS-server to be overwritten

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35803 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-26 12:42:53 +00:00
Jo-Philipp Wich e249d2a240 firewall: fix logging rule regression (#12999)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35745 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-22 13:45:20 +00:00
Jo-Philipp Wich 157ef93d0e firewall3: add support for shell script and iptables-restore style includes
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35744 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-22 12:45:38 +00:00
Steven Barth 660caa9c81 netifd: only update resolv.conf.auto if changed
This avoids logspam under certain conditions.

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35743 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-22 08:56:29 +00:00
Jo-Philipp Wich 7f0500f664 firewall3: update to git head
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
	- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
	- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
	- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35738 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-21 22:33:44 +00:00
Florian Fainelli f13200ffac dante: fix broken configure script not using CFLAGS for conftest
Spotted by doing an ARM hard float build.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35685 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-19 17:22:55 +00:00
Steven Barth 1fb35f7831 6relayd: Fix possible memory corruption issue
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35673 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-19 12:04:41 +00:00
Steven Barth a96a74fc06 6relayd: Workaround potential signal handling issue
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35665 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-18 12:50:36 +00:00
Jo-Philipp Wich bc882ab1f1 firewall3 - a C implementation of the current firewall scripts
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35643 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-17 19:26:52 +00:00
Felix Fietkau 452522c6de hostapd: fix the scan wait patch for multiple interfaces
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35630 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-16 19:00:34 +00:00
Felix Fietkau 8db109478c hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35619 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-16 14:26:03 +00:00
Jonas Gorski ea88007d4b samba36: fix segmentation fault when trying to add non-existent users
Based on a patch from НКВД. Closes #12962.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35610 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-16 11:39:42 +00:00
Steven Barth d0fe67f1df odhcp6c: allow setting a user-provided prefix as well
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35570 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-12 08:23:54 +00:00
Jo-Philipp Wich b0036a67c3 iptables: fix bad PKG_RELEASE in previous commit
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35569 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-11 22:14:38 +00:00
Jo-Philipp Wich 543e4fb934 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35568 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-11 21:58:42 +00:00
Felix Fietkau 2256cbf372 mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35565 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-11 18:59:10 +00:00
Steven Barth de9ca73143 odhcp6c: Various bugfixes
* Don't send undesired suggestions for preferred and valid lifetimes
* Be less verbose in logging

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35553 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-11 12:30:16 +00:00
Felix Fietkau 40228ded56 openvpn-easy-rsa: fix typo in version (#12958)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35508 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-06 22:17:11 +00:00
Felix Fietkau 711882cca5 openvpn: remove the stale PKG_REV variable
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35499 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-05 10:40:19 +00:00
Felix Fietkau e6106c9b0a openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35498 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-05 10:40:13 +00:00
Jo-Philipp Wich 292b4e42b3 firewall: various enhancements
- reduce mssfix related log spam (#10681)
	- separate src and dest terminal chains (#11453, #12945)
	- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35484 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-04 14:38:33 +00:00
Steven Barth f5b834c1bd odhcp6c: Fix timing issues
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35472 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-03 17:26:40 +00:00
Jo-Philipp Wich 4f1d9c7067 libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend()
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35471 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-03 12:03:24 +00:00
Steven Barth 15d5fae260 odhcp6c: Fix RENEW and REBIND requests
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35454 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-02 10:44:13 +00:00
Steven Barth deed0b0198 odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35421 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-01 13:38:47 +00:00
Steven Barth 109d4f04b0 netifd: Improved IPv6 featureset
* Fix reloading of ula-prefixes
* Added support for temporary addresses and routes
* Added support for offlink addresses
* Improved status-output for assigned prefixes

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35420 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-01 12:28:43 +00:00
Steven Barth 884f9354e3 odhcp6c: switch to userspace RA-handling and offload address assignment to netifd
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35419 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-01 12:28:39 +00:00
Steven Barth 977543229a 6relayd: Fix announced router flags and IPv6 procfs-configuration
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35418 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-01 12:28:34 +00:00
Felix Fietkau 81c98af4d4 openvpn: add from openvpn-devel from /packages, fix support for current polarssl
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35412 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-30 20:07:15 +00:00
Steven Barth 7bc0be4f38 6in4: fix typo in last commit
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35409 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-30 09:07:23 +00:00
Steven Barth 26312e0ff3 6in4: work around hanging wget process
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35408 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-30 09:05:53 +00:00
Felix Fietkau 6e020244db netifd: update to latest version
fixes DNS servers on reload (#12910)
fixes ubus object race on reload or down/up (#12612)

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35383 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-29 14:40:04 +00:00
Felix Fietkau 0c9de267ba samba36: update to 3.6.11 and refresh patches (based on patch from #12914)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35382 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-29 13:18:56 +00:00
Steven Barth 4693e5f404 netifd: implement IPv6 prefix deprecation according to RFC 6204
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35377 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-29 11:05:22 +00:00