Commit Graph

2289 Commits

Author SHA1 Message Date
Felix Fietkau
770ec0082b netifd: update to the latest version, fixes some corner cases related to hotplug device handling
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40660
2014-05-02 18:12:28 +00:00
Hauke Mehrtens
1c227e7d23 samaba36: do not build libtevent
This fixes a build error on some mips systems.

This closes #15769.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 40652
2014-05-01 21:17:56 +00:00
Hauke Mehrtens
14d0375301 samba: update to version 3.6.23
This updates samba to the most recent minor version.
This patch is based on a patch by Anton van Bohemen <avbohemen@ziggo.nl>

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 40618
2014-05-01 12:17:52 +00:00
Hauke Mehrtens
2cc83fe501 xtables-addons: #15516 Fix compile under linux 3.14
Add compatibility inline function.

Signed-off-by: Jan Kardell <jan.kardell@telliq.com>

SVN-Revision: 40613
2014-04-30 22:15:40 +00:00
Steven Barth
ef9f0fa232 odhcp6c: add preliminary support for MAP provisioning
SVN-Revision: 40604
2014-04-30 15:52:30 +00:00
Felix Fietkau
d33c6f7b80 netifd: update to the latest version, fixes a use-after-free bug on wireless config reload
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40589
2014-04-29 13:18:59 +00:00
Hauke Mehrtens
513b796698 authsae: Update to latest version
Ping tested, add a cool fix
295164a837

Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 40579
2014-04-27 20:49:14 +00:00
Felix Fietkau
e795250a1e hostapd: fix eglibc 2.15 support
This patch fixes compilation failure for hostapd when using eglibc 2.15.

Signed-off-by: Zachery Stoddard <zacherystoddard@gmail.com>

SVN-Revision: 40575
2014-04-27 18:30:50 +00:00
Felix Fietkau
b4532ad21e netifd: update to the latest version, fixes some route table and dynamic interface issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40572
2014-04-26 19:48:11 +00:00
Felix Fietkau
8a831de514 hostapd: update to version 2014-04-24, fixes some dfs related issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40571
2014-04-26 19:48:06 +00:00
Steven Barth
e1bd4e9aa4 odhcpd: better dhcpv6 client-compatibility (thanks Hans Dedecker)
SVN-Revision: 40567
2014-04-24 09:36:01 +00:00
Steven Barth
c4e09ccb05 6rd: Select first IPv4 address from configured tunlink interface as local tunnel address
Gives the user the control to select the correct WAN IPv4 address to be used by the 6rd tunnel when mutiple WAN interfaces are configured

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>

SVN-Revision: 40566
2014-04-24 09:11:44 +00:00
Felix Fietkau
b079019bd9 netifd: update to latest version, adds support for disabling interfaces
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40555
2014-04-22 17:28:14 +00:00
Felix Fietkau
3c95232ab7 netifd: update to the latest version, fixes some more issues related to l3_dev handling
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40529
2014-04-19 09:58:40 +00:00
Steven Barth
ba6689b064 ds-lite: disable NAT according to RFC 7084
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 40511
2014-04-14 10:11:54 +00:00
Steven Barth
daf69ee1da firewall: add support for nat-rules and netifd-proto-originating rules
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 40510
2014-04-14 10:11:34 +00:00
Felix Fietkau
4d0f5b36c4 iw: sync nl80211.h (fixes settting antenna_gain)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40503
2014-04-13 09:53:51 +00:00
John Crispin
3bc77db5f5 802.11s: fix authsae support in netifd
This patch implements support for 802.11s protected mesh wireless networks (using authsae) in the netifd framework.

Until meshd-nl80211 implements a proper -P option for the PID file, this uses shell backgrounding in order to be able to get the PID for the process.

Signed-off-by: Vittorio Gambaletta <openwrt@vittgam.net>

SVN-Revision: 40497
2014-04-12 21:22:17 +00:00
Felix Fietkau
0d7e8ba3a9 hostapd: fix "bad number" error due to missing wps_pbc_in_m1 option (since r39995)
r39995 introduced a new parameter wps_pbc_in_m1 to wifi wps config, but
apparently did not provide a default value 0.

When that option's non-existing value is later evaluated in
/lib/netifd/hostapd.sh, it causes the "bad number" error to be logged in
syslog if user has not set the wps_pbc_in_m1 option. The error materialises
only if user has enabled wps.
    Sat Apr 12 13:25:01 2014 daemon.notice netifd: radio1 (1254): sh: bad number
    Sat Apr 12 13:25:01 2014 daemon.notice netifd: radio0 (1253): sh: bad number

Discussion in bug 15508: https://dev.openwrt.org/ticket/15508#comment:3

Error is caused by line 282:
https://dev.openwrt.org/browser/trunk/package/network/services/hostapd/files/netifd.sh#L282

My patch sets the parameter's default value to 0, which does nothing. The
default might also be set a bit later in the function, but this felt like the
most clear place to do that.

Signed-off-by hnyman <hannu.nyman@iki.fi>

SVN-Revision: 40469
2014-04-12 14:28:34 +00:00
John Crispin
390e856cb2 lantiq: more vdsl related cleanups
* atm module needs to be loaded before linux-atm
* use absolute firmware paths
* extended validation
* add a script for mounting an optional firmware partition

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 40460
2014-04-11 20:40:24 +00:00
Felix Fietkau
7b960069a2 netifd: switch to using git.openwrt.org
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40459
2014-04-11 20:28:55 +00:00
Jo-Philipp Wich
e0a3e3d1b6 uhttpd: do not attempt to configure Lua handler if referenced file does not exist
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 40457
2014-04-11 16:13:27 +00:00
Felix Fietkau
92ab194d63 netifd: update to latest version, adds a force_link parameter to bring up an interface without active device carrier
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40456
2014-04-11 13:48:41 +00:00
Felix Fietkau
a28b8ecc47 netifd: update to the latest version, fixes some reload issues with proto=static
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40449
2014-04-10 15:21:13 +00:00
Felix Fietkau
8a7a02bd2e netifd: fix a regression related to ppp + multiple updates (ipv4 + ipv6)
Fixes #15504

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40443
2014-04-10 11:31:21 +00:00
John Crispin
eebc673f1e lantiq: move the dsl-modem config to network.@dsl-modem[-1]
make sure uci_defaults generates a proper uci config for the v/adsl modem

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 40439
2014-04-10 08:14:33 +00:00
John Crispin
8bfe9acecf lantiq: vdsl init.d script should auto start
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 40438
2014-04-09 16:36:28 +00:00
John Crispin
76e873a289 lantiq: cleanup vdsl driver bringup
config interface 'wan'
	# a, b, j
	option annex b
	# a, b, av, bv
	option tone b
	# vdsl.bin
	option firmware
	# atm, ptm
	option xfer_mode atm

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 40437
2014-04-09 16:31:24 +00:00
Steven Barth
9efa78ebeb odhcpd: use correct defaults for interfaces not in UCI
SVN-Revision: 40435
2014-04-09 12:29:43 +00:00
Steven Barth
d2d8970828 odhcp6c: fix recovering from status where all addresses have been lost
SVN-Revision: 40432
2014-04-09 06:57:04 +00:00
Steven Barth
4abcae7a1c ds-lite: compatibility with ISPs that only offer public PDs
SVN-Revision: 40422
2014-04-08 06:19:37 +00:00
Felix Fietkau
255546bbfd netifd: update to the latest version, fixes a l3_dev handling regression leading to a crash
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40414
2014-04-07 11:12:06 +00:00
Steven Barth
057900bfd1 odhcpd: improve managed PD
SVN-Revision: 40395
2014-04-06 14:34:45 +00:00
Felix Fietkau
8994b4b191 hostapd: update to version 2014-04-04
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40394
2014-04-06 12:13:55 +00:00
Felix Fietkau
6d3672b13b odhcp6c: Add renew handler for proto dhcpv6
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 40386
2014-04-05 18:17:25 +00:00
Felix Fietkau
dca014db76 netifd: Add renew handler for proto dhcp
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 40385
2014-04-05 18:17:22 +00:00
Felix Fietkau
0dd2d18400 netifd: update to latest version, fixes issues when l3 interface changes on reload (e.g. ppp -> dhcp/static)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40384
2014-04-05 18:17:18 +00:00
John Crispin
f464b7d176 lantiq: cleanup the dsl control scripts
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 40381
2014-04-05 16:34:20 +00:00
Steven Barth
e544c1607a odhcpd: add preliminary support for managed DHCPv6-PD and CER-ID
SVN-Revision: 40355
2014-04-01 18:52:09 +00:00
Steven Barth
a22190340a odhcp6c: add preliminary CER-ID support
SVN-Revision: 40351
2014-03-31 06:43:50 +00:00
John Crispin
c78af071de samba36: revert r40341
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 40343
2014-03-30 19:05:25 +00:00
John Crispin
ca1a527187 samba: update to 3.6.23 Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 40341
2014-03-30 19:03:12 +00:00
John Crispin
c7168b64ef dhcp: Fix broadcast parameter validation support, remove unused netmask parameter
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>

SVN-Revision: 40332
2014-03-30 13:07:52 +00:00
John Crispin
1335853ae5 ltq-vdsl: add led status reporting
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 40322
2014-03-30 09:16:27 +00:00
Felix Fietkau
3ecffab050 dropbear: move options.h editing to Build/Configure
fixes incremental build with change to CONFIG_DROPBEAR_ECC
drop --with-shared which is unknown to configure

Patch by Catalin Patulea <cat@vv.carleton.ca>

SVN-Revision: 40300
2014-03-29 17:10:52 +00:00
Felix Fietkau
f2fdd8ebdb dropbear: add options SSHKeepAlive and IdleTimeout.
Without timeout mechanism, if ssh client disconnected without sending
FIN or RST, forked dropbear servers would hang there for
KEX_RETRY_TIMEOUT seconds (8 hours).

TCP keepalive is not implemented in dropbear yet, thus the name
SSHKeepAlive.

300 seconds in this patch is selected from the default value of
ServerAliveInterval for Debian ssh client (See man ssh_config).

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

SVN-Revision: 40299
2014-03-29 17:05:35 +00:00
Felix Fietkau
dd5a12c5a1 dropbear: fix interface config setting
Patch from #15070

SVN-Revision: 40298
2014-03-29 16:59:33 +00:00
Felix Fietkau
ad52658be7 dropbear: update to 2014.63
Upstream changelog:
https://matt.ucc.asn.au/dropbear/CHANGES

This adds elliptic curve cryptography (ECC) support as an option, disabled
by default.

dropbear mips 34kc uClibc binary size:
before: 161,672 bytes
after, without ECC (default): 164,968
after, with ECC: 198,008

Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>

SVN-Revision: 40297
2014-03-29 16:59:26 +00:00
Steven Barth
0555ebf66d 6rd / ds-lite: make the firewall-zones of nested-protocols configurable
SVN-Revision: 40020
2014-03-26 10:12:49 +00:00
Steven Barth
2a893c2057 dhcp: send 6rd-ORO when expecting 6rd-information
SVN-Revision: 40019
2014-03-26 09:48:20 +00:00
Felix Fietkau
abd13cd85b uhttpd: update to latest version, improves cgi path handling
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40005
2014-03-22 19:38:48 +00:00
Felix Fietkau
9138e8015e uhttpd: update to latest version, fixes HEAD requests to CGI scripts
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40003
2014-03-21 20:49:56 +00:00
Felix Fietkau
5c53e63836 netifd: update to the latest version, adds support for reloading proto handlers on toplogy changes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 40001
2014-03-21 15:55:27 +00:00
Felix Fietkau
c53c7a0fe0 hostapd: add pbc_in_m1 option
Option pbc_in_m1 is being used as a WPS capability discovery
workaround for PBC with Windows 7.
Add possibility to enable this workaround from UCI.

To enable it, turn on wps and set wps_pbc_in_m1 parameter to 1.

Signed-off-by: Pawel Kulakowski <pawel.kulakowski@tieto.com>

SVN-Revision: 39995
2014-03-21 15:55:03 +00:00
Felix Fietkau
5a6f00b846 ead: clean up
Remove unused variables
Correct some (non important) memory leaks
Remove fclose(NULL)
Correct possible out of bound access

spotted with cppcheck

Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 39994
2014-03-21 15:54:59 +00:00
Felix Fietkau
7c029cc262 ead: set_nonblock() is doing nothing (typo)
spotted with cppcheck

Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 39993
2014-03-21 15:54:56 +00:00
Felix Fietkau
0945555e14 ppp: remove ppp requirement from chat
This patch removes dependancy of PPP from chat application as chat application can be used for other serial communication as well that is not dependant on PPP and therefore one should be able to install chat without PPP. There also are no dependencies within chat application for PPP.

Signed-off-by: Oskari Rauta <oskari.rauta at gmail.com>

SVN-Revision: 39992
2014-03-21 15:54:52 +00:00
Felix Fietkau
3eb2d6d5d4 netifd: update to the latest version, fixes ubus handling of proto data items
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39970
2014-03-20 20:06:59 +00:00
Felix Fietkau
e926cfd9ac netifd: update to latest version, fixes an autostart handling with link detection
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39967
2014-03-20 13:57:28 +00:00
Felix Fietkau
66393168d3 firewall: update to latest version, fixes a musl build error
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39965
2014-03-20 13:51:43 +00:00
Felix Fietkau
0ccec8179d iptables: fix issues with the new musl version
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39964
2014-03-20 13:51:40 +00:00
Felix Fietkau
7fa3fe6741 pppd: fix build errors with musl
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39963
2014-03-20 13:51:36 +00:00
Steven Barth
f4ace532c8 odhcpd: fix more segfaults + ubus interaction
SVN-Revision: 39960
2014-03-20 12:25:17 +00:00
Steven Barth
b5cc199ec9 odhcpd: fix possible segfaults
SVN-Revision: 39958
2014-03-20 09:39:00 +00:00
Felix Fietkau
ad72198abb netifd: update to latest version, adds support for specifying a config path
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39956
2014-03-19 14:26:51 +00:00
Felix Fietkau
b9825247c2 polarssl: update to version 1.3.4 and add openssl compat patch
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39930
2014-03-14 15:05:46 +00:00
Steven Barth
7ac0057c1f odhcp6c: pass on delegate-flag on to ds-lite interface
SVN-Revision: 39910
2014-03-13 10:40:56 +00:00
Steven Barth
edd75e332c netifd: pass on delegate flag from dhcp to 6rd
SVN-Revision: 39909
2014-03-13 10:33:26 +00:00
John Crispin
7baf4957cf 72ca3bfc401a4f1b695dcc86640dddee62716cea contained too many files
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39908
2014-03-13 07:42:59 +00:00
John Crispin
0dc9d8d6ff fstools: add the new fstools package
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39895
2014-03-12 19:32:51 +00:00
Steven Barth
97ea9e3c2a iptables/netfilter: add connlimit to conntrack-extra
SVN-Revision: 39878
2014-03-11 14:58:00 +00:00
Steven Barth
09fd40c28f iptables: bump to 1.4.21
SVN-Revision: 39877
2014-03-11 14:57:55 +00:00
Felix Fietkau
75ac488f4d openvpn: make size optimization configurable
Signed-off-by: Christoph Kottke <christoph.kottke@gmx.de>

SVN-Revision: 39872
2014-03-11 12:07:17 +00:00
Felix Fietkau
83f9fc12d6 netifd: update to latest version, includes interface handling fixes by Hans Dedecker
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39870
2014-03-11 09:28:28 +00:00
Steven Barth
cd695565fb odhcpd/odhcp6c: fix HMAC-MD5 in DHCPv6-Reconfigure
SVN-Revision: 39868
2014-03-11 08:21:58 +00:00
Felix Fietkau
24dae38f43 iproute2: add ip-full variant to disable IP_CONFIG_TINY
This change creates a new ip-full variant for the ip package.
It disables IP_CONFIG_TINY to make some iproute2 features available like xfrm, gretap, ...

Signed-off-by: Thomas Wouters <thomaswouters@gmail.com>

SVN-Revision: 39854
2014-03-09 13:32:59 +00:00
Felix Fietkau
452d019d3e netifd: update to latest version, adds a bridge reload fix and fixes #15157
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39791
2014-03-07 18:14:41 +00:00
Steven Barth
d3f39e89a3 odhcp6c: fix int-overflow after 50d (thx Hauke Mehrtens)
SVN-Revision: 39785
2014-03-07 09:35:17 +00:00
Steven Barth
f294f23c02 netifd: don't incorrectly announce up-status via ubus
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 39777
2014-03-05 17:36:14 +00:00
Steven Barth
0a3cb4cdff odhcp6c: several fixes
* Reduce RA/DHCPv6 spam filter to 30s by default and make it configurable
* Don't set nd_ra_{reachable,retransmit] to 0 when received in RAs

SVN-Revision: 39775
2014-03-05 08:59:11 +00:00
Felix Fietkau
a9d4cd35fc hostapd: fix deletion of wds sta interfaces in AP mode
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39765
2014-02-28 14:43:53 +00:00
Steven Barth
1b3a868309 netifd: Reintroduce link-layer sensing (thx Hans Decker, Karl Vogel)
SVN-Revision: 39757
2014-02-27 12:42:38 +00:00
Steven Barth
0bf9032145 netifd: don't always assume addrs & routes are applied
netifd didn't check the netlink return values and kept assuming
routes are in place even if they weren't

SVN-Revision: 39755
2014-02-26 13:27:32 +00:00
Felix Fietkau
c01d211259 hostapd: link against librt if eglibc is used
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39741
2014-02-24 15:03:06 +00:00
Steven Barth
8aa91b167f odhcpd: avoid the unspecificed address being advertised as DNS
SVN-Revision: 39740
2014-02-24 13:37:11 +00:00
Steven Barth
e6044ef1c0 odhcpd: fix DNS-server and MSR-entries in RA
Similarly to the previously broken address pools, DNS-servers and some
MSRs could be advertised incorrectly as well. This is now fixed.

SVN-Revision: 39739
2014-02-24 13:33:45 +00:00
Felix Fietkau
a15524582c netifd: depend on libubox directly to rebuild on ABI changes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39723
2014-02-23 17:32:15 +00:00
Felix Fietkau
6c8300df3d netifd: update to latest version, fixes wireless device reload handling
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39706
2014-02-23 08:13:28 +00:00
Steven Barth
980626aa32 odhcpd: fix wrong address pool being advertised
SVN-Revision: 39651
2014-02-21 18:02:25 +00:00
Jo-Philipp Wich
b22ad85bc6 firewall: fix validation constraints
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 39649
2014-02-21 00:22:23 +00:00
Jo-Philipp Wich
354efde275 netifd: fix validation constraints
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 39648
2014-02-21 00:17:04 +00:00
Jo-Philipp Wich
21f4cf1a73 firewall: fix several ipset integration issues (#15016)
- Do not consider bitmap storage for IPv6 family sets
	- Move ipset family parameter before any additional option
	- Only emit family parameter for hash sets
	- Do not allow IPv6 iprange for IPv4 sets and vice versa

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 39647
2014-02-20 23:20:10 +00:00
Steven Barth
12fa3eae23 6in4: add support for he.net updatekey
SVN-Revision: 39646
2014-02-20 21:36:15 +00:00
Steven Barth
97faa098a2 odhcp6c: readd userclass and vendorclass
SVN-Revision: 39628
2014-02-18 18:30:47 +00:00
John Crispin
0da7d381f0 odhcp6c: add validation rules to proto handler
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39624
2014-02-18 13:34:16 +00:00
John Crispin
159ee2bbd3 relayd: add uci validation
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39623
2014-02-18 13:34:12 +00:00
John Crispin
8fb44e0d1e netifd: add validation support
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39621
2014-02-18 13:34:04 +00:00
John Crispin
26e850dafa hostapd: add validation rules to wireless handler
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39620
2014-02-18 13:33:59 +00:00
John Crispin
ee5cb76c66 ppp: add validation rules to proto handler
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39619
2014-02-18 13:33:56 +00:00
John Crispin
ed72f7102c comgt: add validation rules to proto handler
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39618
2014-02-18 13:33:52 +00:00
John Crispin
15ebcfc04e firewall3: update init.d script to make use of procd
add validation data

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39617
2014-02-18 13:33:47 +00:00
John Crispin
204e859542 netifd: update to latest git head
this adds support for proto and wireless handler adding uci validation rules

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39614
2014-02-18 13:33:36 +00:00
John Crispin
9bf6569f68 authsae: update to latest version
Signed-off-by: Stefan May <smay@4finger.net>

SVN-Revision: 39608
2014-02-18 13:33:13 +00:00
Steven Barth
f906a7f565 odhcp6c: send reconfigure-accept again to be compliant
SVN-Revision: 39605
2014-02-17 20:31:21 +00:00
Steven Barth
2f2a73f862 odhcpd: Fix RA interval + add support for prefixes > 64 and < 97
SVN-Revision: 39604
2014-02-17 20:30:29 +00:00
Steven Barth
41acaaf893 netifd: work around dangling prefix kernel-routes (fixes #14963)
SVN-Revision: 39597
2014-02-16 11:20:22 +00:00
Steven Barth
af8f06beca netifd: fix source-routing breaking 6in4 + others
6in4 historically allowed an ip6addr without a mask however the newly
introduced source-routing segfaulted in this scenario (#14958 + #14858).

Fixes include: "Fix ubus route src mask printing" and
"Disable netlink auto ack" (thanks to Hans Dedecker)

SVN-Revision: 39586
2014-02-14 21:21:44 +00:00
Steven Barth
3194834c55 odhcp6c: remove source-restriction from local routes again (broke relaying)
SVN-Revision: 39575
2014-02-12 08:54:43 +00:00
Hauke Mehrtens
6d1fdf875a authsae: Update authsae to latest version
Only compile tested but the changes are minimal
f5693a3...1d1a122

Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 39518
2014-02-06 22:20:20 +00:00
Steven Barth
c666dcfe08 odhcp6c: Fix timing and some regressions from yesterday
SVN-Revision: 39502
2014-02-06 10:38:02 +00:00
Hauke Mehrtens
3f07af337c iw: update to iw 3.14
- update iw to 3.14
- remove some patches that are obsolete
- 200-reduce_size.patch has new coalesce removed from Makefile matching prev. ver
- refresh patches

This increases the size of the binary by 6.7%:
  87801	   4400	    320	  92521	  16969	iw-3.10/iw
  93995	   4424	    324	  98743	  181b7	iw-3.14/iw

Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de>

SVN-Revision: 39486
2014-02-05 20:52:34 +00:00
Steven Barth
ef7bc81961 odhcpd: fix homenet dhcpv6 filter
SVN-Revision: 39479
2014-02-05 15:42:02 +00:00
Steven Barth
05c9507cd3 odhcp6c: Add support for userclass and vendorclass
SVN-Revision: 39478
2014-02-05 14:56:37 +00:00
Felix Fietkau
8c737e1864 tcpdump: update to current upstream version 4.5.1
-size_of(old tcpdump-mini 4.2.1) = 145245 Byte
-size_of(new tcpdump-mini 4.5.1) = 149416 Byte
=> ~4.2 KByte increase

Signed-off-by: Thomas Huehn <thomas@net.t-labs.tu-berlin.de>

SVN-Revision: 39474
2014-02-05 09:54:38 +00:00
Felix Fietkau
38587f87ed wifi: Introduce 802.11ac support
This patch introduces 802.11ac support to mac80211 and hostapd. The split of
VHT160 in two 80 MHz bands is not yet supported, since it requires an
additional user supplied parameter for the channel of the second band.

Signed-off-by: Matti Laakso <malaakso@elisanet.fi>
Signed-off-by: Simon Wunderlich <simon@open-mesh.com>
[sven@open-mesh.com: Rebased patch, merged htmode and vhtmode,
removed special hwmode, replaced uci vht_capab list with overwritable
autoconfig, fixed hostapd integration, fixed commit description, add HT40+/-
for VHT modes, add VHT40 center_freq autoconfig, refactored major parts]
Signed-off-by: Sven Eckelmann <sven@open-mesh.com>

SVN-Revision: 39456
2014-02-03 13:31:44 +00:00
Steven Barth
02c763c4ab odhcp6c: Revert to slightly modified version of old behaviour
Latest changes broke source-restriction of on-link routes. Restoring
old-behaviour but adding correct source-restrictions which prevents
the offlink handler to remove the on-link route.

SVN-Revision: 39454
2014-02-03 09:06:25 +00:00
Steven Barth
a9a0b62785 odhcp6c: improve handling of RA on-link routes and addresses
SVN-Revision: 39451
2014-02-02 19:40:33 +00:00
Felix Fietkau
50417b58ad hostapd: do not get basic_rate as a simple string variable
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39448
2014-02-02 14:25:02 +00:00
Steven Barth
8fa06b7e3c odhcpd: fix internal router DHCPv4 filter
SVN-Revision: 39441
2014-02-01 13:33:05 +00:00
Steven Barth
b965dab148 odhcp6c: several bugfixes and improvements
* Fixed broken stateless-mode (fixes #14863)
* Support for multiple IAIDs, improved server compatibility,
  improved NTP/SNTP support and other fixes (thanks to T-Labs)

SVN-Revision: 39433
2014-01-31 11:23:00 +00:00
Felix Fietkau
cfc20090f1 hostapd: fix basic rate list handling with netifd
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39431
2014-01-31 10:43:18 +00:00
Felix Fietkau
2725913d2a hostapd: fix frequency selection for ap+sta
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39426
2014-01-30 13:21:30 +00:00
Jo-Philipp Wich
76e28f6b6e lldpd: build without libreadline
lldpcli uses libreadline for tab completion. libreadline take around 110kb.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

SVN-Revision: 39421
2014-01-29 13:10:39 +00:00
Jo-Philipp Wich
b2593a3f49 lldpd: add missing lldpcli
lldpd calls on startup lldpcli to configure itself.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

SVN-Revision: 39420
2014-01-29 13:10:35 +00:00
Jo-Philipp Wich
3aefca6b07 lldpd: push to version 0.7.7
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

SVN-Revision: 39419
2014-01-29 13:10:31 +00:00
Jo-Philipp Wich
b5400c775e hostapd: Fix 80211w setup with netifd
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 39412
2014-01-28 21:12:45 +00:00
Jo-Philipp Wich
c1cb867c13 hostapd: Fix basic_rate setup with netifd
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 39411
2014-01-28 21:12:36 +00:00
Steven Barth
3787078b26 odhcpd: fix certain config values being overwritten
Thanks to Hans Dedecker for the fix.

SVN-Revision: 39371
2014-01-23 11:02:18 +00:00
Steven Barth
e1c5111997 6rd: Make don't fragment bit (df) a configurable variable
Make the IPv4 "do not fragment" bit a configurable variable for the 6rd
tunnel interface as the bit should not be set in the encapsulating IPv4
header according to RFC3056.
On top the config variable allows to enable/disable path mtu discovery
for tunnel interfaces.
Config variable can be passed to netifd as tunnel config support is
already present for the "do not fragment" bit.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>

SVN-Revision: 39370
2014-01-23 10:59:04 +00:00
Steven Barth
229d186490 netifd: don't add unnecessary NOP policy rules
SVN-Revision: 39351
2014-01-20 18:23:02 +00:00
Steven Barth
c67ec51c85 6in4: fix typo in config variable (fixes #14830)
SVN-Revision: 39347
2014-01-20 12:53:15 +00:00
Steven Barth
fac5e62abd firewall: don't reload if there were no address or data changes
This fixes packet loss due to reloading firewall every minute with IPv6
implementation of certain ISPs.

SVN-Revision: 39332
2014-01-19 17:35:33 +00:00
Steven Barth
471095f869 odhcpd: Fix a memory corruption when static leases are used
SVN-Revision: 39319
2014-01-18 10:11:03 +00:00
Steven Barth
24ba434185 odhcpd: be even less verbose and don't start unnecessary relays
SVN-Revision: 39315
2014-01-17 19:05:54 +00:00
Steven Barth
2c9d868900 odhcpd: fix logspam
SVN-Revision: 39314
2014-01-17 15:53:43 +00:00
Steven Barth
17b0d874eb odhcpd: use hybrid management mode by default
SVN-Revision: 39313
2014-01-17 15:48:02 +00:00
Steven Barth
9ec0e5df14 dnsmasq: add dnsmasq.d config folder & improve odhcpd coexistence
SVN-Revision: 39312
2014-01-17 14:00:09 +00:00
Steven Barth
140a5b22d9 odhcp6c: Use sourcerouting by default
SVN-Revision: 39311
2014-01-17 14:00:04 +00:00
Steven Barth
570eb45f23 odhcp6c: fix several small issues + decrease size
SVN-Revision: 39310
2014-01-17 14:00:00 +00:00
Steven Barth
684537f3e7 odhcpd: several bugfixes and improved integration
SVN-Revision: 39308
2014-01-17 13:59:51 +00:00
Steven Barth
a5ee266cd9 6in4, 6rd, 6to4: Use source-restricted routes by default
SVN-Revision: 39307
2014-01-17 13:59:47 +00:00
Steven Barth
bc8412b90e netifd: Add IFUPDATE-flags and use main IPv6 routing table again
SVN-Revision: 39306
2014-01-17 13:59:40 +00:00
John Crispin
a844275f37 firewall: improve logging in hotplug script
Signed-off-by: Nathan Hintz <nlhintz@hotmail.com>

SVN-Revision: 39300
2014-01-15 18:29:59 +00:00
Zoltan Herpai
c87513de6b packages: ifenslave: add kernel dependencies as source was removed from 3.12
Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>

SVN-Revision: 39295
2014-01-15 09:28:41 +00:00
John Crispin
4ae2d6f293 hostapd: fix mcast_rate setting
Introduced by ("netifd: add wireless configuration support and port mac80211 to
the new framework")

Reported-by: René van Weert <r.vanweert@sowifi.com>
Signed-off-by: Antonio Quartulli <antonio@meshcoding.com>

SVN-Revision: 39288
2014-01-14 19:35:55 +00:00
John Crispin
2f9048d8d3 hostapd: fix frequency setting for IBSS/RSN
Introduced by ("netifd: add wireless configuration support and port mac80211 to
the new framework")

Reported-by: René van Weert <rene@sowifi.com>
Signed-off-by: Antonio Quartulli <antonio@meshcoding.com>

SVN-Revision: 39231
2014-01-12 12:07:11 +00:00
John Crispin
4810de8e4b swconfig: improve usability when switch device incorrect
http://patchwork.openwrt.org/patch/4701/

Signed-off-by: Andreas Mohr <andim2@users.sf.net>

SVN-Revision: 39229
2014-01-12 12:07:01 +00:00
John Crispin
efad45bb0b samba: add browsable option
https://dev.openwrt.org/ticket/14682

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 39227
2014-01-12 12:06:53 +00:00
Steven Barth
bc370646cd 6relayd: try to workaround race condition at startup
SVN-Revision: 39184
2014-01-02 11:38:36 +00:00
Felix Fietkau
20151a3394 netifd: initialize the switch early at start time and on reload (fixes #13015)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39183
2013-12-31 13:09:20 +00:00
Felix Fietkau
6865f1d6b2 netifd: update to the latest version, fixes wireless related segfaults on arm
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39180
2013-12-29 02:26:34 +00:00
Felix Fietkau
5607a13aa1 netifd: update to the latest version, fixes wifi related segfaults
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39176
2013-12-28 14:19:54 +00:00
Felix Fietkau
c7d23cbeb9 hostapd: fix mixed wep/wpa with netifd
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>

SVN-Revision: 39174
2013-12-28 11:07:37 +00:00
Felix Fietkau
da886d761a hostapd: fix the uci option name for ap isolate
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39173
2013-12-28 11:07:28 +00:00
John Crispin
d1156bca0a swconfig: remove useless variables, return -1 on errors
spotted with cppcheck

Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 39170
2013-12-27 21:15:20 +00:00
Felix Fietkau
aab522e1e3 hostapd: fix wep with netifd
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>

SVN-Revision: 39156
2013-12-23 12:11:28 +00:00
Felix Fietkau
fd4cd3825b wpa_supplicant: fix interface combination parsing issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39155
2013-12-21 19:42:45 +00:00
Jo-Philipp Wich
efce764f0e dnsmasq: rework init procedure
- cache udhcp check results to speed up subsequent reloads
	- enable procd file tracking for /var/etc/dnsmasq.conf to only reload service if needed
	- implement reload action to only restart dnsmasq if /var/etc/dnsmasq.conf actually changed
	- launch dnsmasq from interface hotplug to avoid race conditions with network bringup

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 39152
2013-12-21 13:31:28 +00:00
Jo-Philipp Wich
1789744958 netifd: add reload trigger for /etc/config/wireless as well
SVN-Revision: 39131
2013-12-18 12:38:29 +00:00
Jo-Philipp Wich
de5ebc19c0 firewall: fix handling of tcp_ecn parameter
The firewall3 implementation as well as the shell implementation predating it
used to process the tcp_ecnoption as boolean while it actually is an integer.

Change the code to parse tcp_ecn as integer.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 39122
2013-12-17 16:59:47 +00:00
Felix Fietkau
088eea282d iproute2: reduce .ipk package size from ~100k down to ~60k
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39119
2013-12-17 15:59:29 +00:00
Felix Fietkau
b6bcb7ff2d hostapd: move old wifi setup scripts to hostapd-common-old
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39103
2013-12-16 18:42:43 +00:00
Jo-Philipp Wich
eda27e8382 dnsmasq: switch to /lib/functions/network.sh
This commit changes the dnsmasq init script to use the interface
status exposed by netifd. The old references to scan_interfaces()
and (indirect) accesses to uci state variables are removed and
replaced with corresponding network_*() calls.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

SVN-Revision: 39101
2013-12-16 16:47:41 +00:00
Felix Fietkau
12c05542e8 netifd: update to latest version, fixes a null pointer crash
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39088
2013-12-16 10:08:13 +00:00
Steven Barth
e49d67f192 Convert DHCP->6rd and DHCPv6->DS-Lite autoconfig to dynamic interface
SVN-Revision: 39061
2013-12-15 19:38:53 +00:00
Steven Barth
fd50416248 odhcp6c: add source routing support
SVN-Revision: 39058
2013-12-15 19:10:20 +00:00
Jo-Philipp Wich
e444eb0bbd uhttpd: don't process ubus_* and lua_* options if corresponding plugin is not installed (#14618)
SVN-Revision: 39057
2013-12-15 15:32:37 +00:00
Felix Fietkau
ce062a7b5c netifd: update to the latest version, adds a revert of the link state handling patches which caused regressions in combination with wifi devices
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39050
2013-12-14 14:59:05 +00:00
Felix Fietkau
47730fe355 netifd: prevent an unnecessary restart of netifd-managed wifi interfaces at boot time
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39046
2013-12-13 16:43:11 +00:00
Felix Fietkau
9c3adcb2e6 iw: reduce size and make the phy dump output more readable
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39041
2013-12-13 11:02:05 +00:00
Felix Fietkau
3f744a4ad3 netifd: fix crashes triggered by adding/removing wireless devices on reload
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39035
2013-12-11 18:23:52 +00:00
Jo-Philipp Wich
32223b3c4d hostapd: fix short_preamble option
SVN-Revision: 39027
2013-12-10 16:24:48 +00:00
John Crispin
31a2912cd9 netifd: enable coredumps again
got broken due procd startup. Requires procd resource limit patch.

Signed-off-by: Ulrich Weber <uw@xyne.com>

SVN-Revision: 39020
2013-12-09 17:29:34 +00:00
Jo-Philipp Wich
18dd101903 hostapd: properly parse wmm and hidden uci options (#14589)
SVN-Revision: 39005
2013-12-08 20:51:21 +00:00
Felix Fietkau
6242255df2 netifd: update to the latest version, adds tunnel fixes by Hans Dedecker and adds back support for multiple networks per wifi-iface
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 39004
2013-12-08 18:00:05 +00:00
Steven Barth
4bdd40c08b odhcpd/6c: Add config menu for prefix class ext.
SVN-Revision: 38996
2013-12-05 12:17:09 +00:00
Steven Barth
fb6ebac74a odhcpd: Fix ubus integration
SVN-Revision: 38994
2013-12-04 13:14:27 +00:00
Felix Fietkau
4155016637 netifd: update to the latest version, improves wireless status output and fixes some bridge handling issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38992
2013-12-03 14:17:44 +00:00
Felix Fietkau
603c532eed hostapd: fix maclist processing with netifd
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38991
2013-12-03 09:02:58 +00:00
Felix Fietkau
3c50feca19 wifi: rename the "reload" (restarting non-netifd wifi) command to "reload_legacy"
Add a new "reload" command that reloads the netifd config as well

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38989
2013-12-02 16:53:24 +00:00
Felix Fietkau
498d84fc4e netifd: add wireless configuration support and port mac80211 to the new framework
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38988
2013-12-02 16:41:03 +00:00
Felix Fietkau
a26242cb63 hostapd: change the wildcard for the hostapd control socket directory
prepare for using /var/run/hostapd instead of /var/run/hostapd-phy*

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38986
2013-12-02 13:08:14 +00:00
Felix Fietkau
9381eaccb3 wpa_supplicant: clean up hostapd control socket on exit to fix socket leak in ap+sta mode on wifi restarts
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38985
2013-12-02 13:08:11 +00:00
Felix Fietkau
6960ae4e65 hostapd: fix os_daemonize vs starting process race by creating the pid file in the parent
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38984
2013-12-02 13:08:08 +00:00
Felix Fietkau
107bcb5de3 netifd: remove redundant calls to /sbin/wifi down
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38982
2013-12-02 13:08:00 +00:00
Felix Fietkau
5022b3949a hostapd: always include p2p options in wpa_cli
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38981
2013-12-02 13:07:46 +00:00
Felix Fietkau
15b4975925 hostapd: add support for auto-channel selection
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38915
2013-11-25 15:43:30 +00:00
Felix Fietkau
1d75f7506d hostapd: update to version 2013-11-20
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38914
2013-11-25 15:43:15 +00:00
John Crispin
cba772f5bc pppd: Place plugin-specific options after plugin name.
Before this patch, if we specify a plugin specific option through
`pppd_options` in /etc/config/network, e.g. `rp_pppoe_verbose 1`, pppd
would quit with the following error in log.

    Wed Oct  9 09:42:58 2013 daemon.notice netifd: GORG (1689): /usr/sbin/pppd: unrecognized option 'rp_pppoe_verbose'
    Wed Oct  9 09:42:58 2013 daemon.err pppd[1689]: unrecognized option 'rp_pppoe_verbose'
    Wed Oct  9 09:42:58 2013 daemon.notice netifd: GORG (1689): pppd version 2.4.5
    Wed Oct  9 09:42:58 2013 daemon.notice netifd: GORG (1689): Usage: /usr/sbin/pppd [ options ], where options are:

This is due to the requirement that function add_option() should be
called by the plugin_init() function first before pppd can parse those
options.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

SVN-Revision: 38911
2013-11-25 14:09:16 +00:00
Felix Fietkau
5143157af8 uhttpd: update to the latest version, fixes crashes in the ubus plugin
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38888
2013-11-21 21:52:24 +00:00
Felix Fietkau
cd1c8d463f hostapd: remove random pool support - the entropy it gathers is questionable and we have better entropy sources on common platforms now
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38852
2013-11-18 13:54:26 +00:00
Jo-Philipp Wich
bc9043cc53 firewall: optimize DNAT rules and skip invalid rules and redirects (#14485)
- instead of writing one (or more) ACCEPT rules in the filter table
	  for each redirect install a global ctstate DNAT accept rule per zone

	- discard rules and redirects which have invalid options set instead
	  of silently skipping the invalid values

SVN-Revision: 38849
2013-11-18 11:59:27 +00:00
Steven Barth
b5a4fb1c95 6rd: Clear correct IPv6 address bits in 6rdcalc
The correct bits are now cleared in the IPv6 address as the shift
value to the correct byte in the IPv6 address was wrong. Depending
on the stack values this could result in a hanging 6rdcalc program
due to an endless loop.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>

SVN-Revision: 38818
2013-11-16 09:18:14 +00:00
John Crispin
a9cfb4b827 procd: fixup 2 wrong option types
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38789
2013-11-13 11:07:24 +00:00
John Crispin
1f93857092 procd: convert services to the new validation api
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38787
2013-11-13 10:49:41 +00:00
Felix Fietkau
37756a97a0 hostapd: remove #ifdef MULTICALL around ap+sta support code (to support separately installed supplicant+hostapd)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38782
2013-11-12 22:11:14 +00:00
Jo-Philipp Wich
7ad5350dfb Add patch to fix ipset timeout setting problem
Fixes #14325

Signed-off-by: Nikolay Martynov <mar.kolya@gmail.com>

SVN-Revision: 38779
2013-11-12 11:01:11 +00:00
Jo-Philipp Wich
c9bc0e12a9 Update ipset to version 6.20.1
Signed-off-by: Nikolay Martynov <mar.kolya@gmail.com>

SVN-Revision: 38778
2013-11-12 11:00:49 +00:00
Hauke Mehrtens
20d64e929f iwinfo: don't report associations for broadcom wds interfaces
The associations list for Broadcom WDS interfaces are duplicate to those
reported by the corresponding AP interface; so there is no need to report
them again.

Signed-off-by: Nathan Hintz <nlhintz@hotmail.com>

SVN-Revision: 38746
2013-11-11 21:54:55 +00:00
Hauke Mehrtens
e3a5401fb2 iwinfo: fix hwmodelist reporting for broadcom wl
Modify the hwmodelist reporting for broadcom devices to include
proper reporting of 802.11n support.

Signed-off-by: Nathan Hintz <nlhintz@hotmail.com>

SVN-Revision: 38745
2013-11-11 21:54:25 +00:00
Jo-Philipp Wich
8a1d77efed uhttpd: return after processing -d switch, only set ubus prefix if not already defined
SVN-Revision: 38743
2013-11-11 19:14:01 +00:00
John Crispin
989783255e uhttp: add ubus.default
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38741
2013-11-11 18:12:26 +00:00
John Crispin
f48568af8e pppd: don't call modprobe at all from pppoatm
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38737
2013-11-11 13:40:28 +00:00
John Crispin
3cc0f479dc uhttp: make the service auto respawn if it crashes
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38724
2013-11-11 12:19:02 +00:00
John Crispin
9f3b161a57 uhttp: make sure that the ubus module is loaded when when installed
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38723
2013-11-11 12:18:58 +00:00
Felix Fietkau
e78e720a6f netifd: remove connect_time from /var/state, it is unused
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38704
2013-11-10 10:01:33 +00:00
John Crispin
edf6236838 lantiq: fix vdsl-app dependency
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38666
2013-11-07 12:45:39 +00:00
Jo-Philipp Wich
5db9587b5f dnsmasq: fix backward compatibility with existing configs
Changeset r36943 ("dnsmasq: use host-record instead of address") removed
the automatic domain expansion for config domain sections, this breaks
existing setups and alters the old behaviour in unexpected ways, therfore
restore behaviour of the current stable release.

Additionally handle fully qualified hostnames properly when setting up the
own hostrecord by stripping the local domain part form the given name
instead of unconditionally appending it, so that "example.lan" results
in "example example.lan" and not "example.lan example.lan.lan".

SVN-Revision: 38648
2013-11-04 22:40:56 +00:00
Felix Fietkau
2c84ff42f7 openvpn: clean up and fix the init script
- clean up duplication of procd instance handling code
- using --cd *after* --config is rather pointless
- to be able to log errors properly, --syslog needs to be passed before --config
- tell procd about the generated or referenced config file instead of
  the uci file. this avoids having to restart all instances if only one
  of them changes.

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38632
2013-10-31 17:36:24 +00:00
Felix Fietkau
e16f104a6f netifd: update to the latest version, fixes regression in proto-shell scripts (#14400, #14402)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38627
2013-10-31 11:22:01 +00:00
Felix Fietkau
22890e6382 netifd: update to latest version, adds fixes and some preparation for supporting wifi devices
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38606
2013-10-30 11:25:01 +00:00
Steven Barth
dfa9ca772b odhcp6c: Multiple improvements and fixes
* Various RFC compliance fixes (thanks to Hans Dedecker)
* Fix RA spam filter logic causing ipv6 connection issues
* Fix parameters -F and -P being order dependent

SVN-Revision: 38577
2013-10-29 13:23:28 +00:00
Steven Barth
d8d0e2c536 odhcp6c: filter similar RAs spammed by some ISPs
SVN-Revision: 38505
2013-10-23 10:31:06 +00:00
Steven Barth
bb699867e0 firewall: Improve ubus support
* Use network.interface dump call instead of individual status calls
  to reduce overall netifd lookups and invokes to 1 per fw3 process.

* Allow protocol handlers to assign a firewall zone for an interface
  in the data section to allow for dynamic firewall zone assignment.

SVN-Revision: 38504
2013-10-23 10:25:26 +00:00
Steven Barth
a54f104701 odhcpd: fix cleaning of configuration on reload
SVN-Revision: 38503
2013-10-23 09:30:28 +00:00
Steven Barth
1ff15bfe83 6relayd: reduce fallout of RA spamming a bit
SVN-Revision: 38488
2013-10-21 10:26:57 +00:00
Steven Barth
91b173d231 netifd: Fix ifupdate events
SVN-Revision: 38458
2013-10-19 11:01:25 +00:00
Steven Barth
579e2df8c5 odhcpd: various bugfixes
SVN-Revision: 38454
2013-10-18 13:39:48 +00:00
Steven Barth
c3bcdd59de netifd: various improvements
* Add ubus methods for global interface status
* Add ubus function to create nested interfaces
* Add protocol update notifications and hotplug legacy calls
* Fix: key to data elements point at wrong memory area
* Add support for source-restricted routes
* Add option "delegate" to toggle prefix delegation
* Reevaluate target routes also on interface update

SVN-Revision: 38453
2013-10-18 13:39:43 +00:00
Jo-Philipp Wich
4f1e282238 wpa_supplicant: fix beacon_int configuration option
wpa_supplicant expects beacon_int instead of beacon_interval in its config
file.

Signed-off-by: Bruno Randolf <br1@einfach.org>

SVN-Revision: 38451
2013-10-18 11:47:47 +00:00
Jo-Philipp Wich
6da1c9d3ea iw: add patch to support 802.11j frequencies
A similar change was recently merged in iw commit
58b46da26ab9b5ff31c7033e175351eb1301d9af

Signed-off-by: Bruno Randolf <br1@einfach.org>

SVN-Revision: 38449
2013-10-18 11:43:02 +00:00
Jo-Philipp Wich
c8e0c28c15 iwinfo: make 'type' visible in wrapped iwinfo
There are several cases within 'luci' that attempt to access the interface
'type' from within the 'type' specific meta tables; however, 'type' is not
currently available there.  Replicate the common metadata in the 'type'
specific meta tables.

Signed-off-by: Nathan Hintz <nlhintz@hotmail.com>

SVN-Revision: 38448
2013-10-18 11:42:43 +00:00
Steven Barth
56bc536713 netifd: rename customopts to sendopts for consistency
SVN-Revision: 38437
2013-10-17 13:12:06 +00:00
Steven Barth
c759b49a4f Added 'customopts' dhcp protocol option, which is an array passed along to udhcpc as series of -x options.
Signed-off-by: Markus Stenberg <markus.stenberg@iki.fi>

SVN-Revision: 38436
2013-10-17 12:55:40 +00:00
Steven Barth
7e13c80b3d odhcp6c: fix parsing of IA_PD adverts
SVN-Revision: 38433
2013-10-17 07:19:32 +00:00
Steven Barth
76dfe21a27 odhcpd: add new experimental dhcp-server
SVN-Revision: 38428
2013-10-16 09:03:55 +00:00
Jo-Philipp Wich
fce216ac7e dropbear: add dropbear.nl mirror, provided by dropbear maintainer
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>

SVN-Revision: 38413
2013-10-15 13:10:32 +00:00
Luka Perkov
5dc102ce04 openvpn: make comp_lzo a parameter
Possible parameters are yes, no and adaptive. See manpage for more information.

Signed-off-by: Philipp Borgers <borgers@mi.fu-berlin.de>

SVN-Revision: 38412
2013-10-15 12:42:58 +00:00
Jo-Philipp Wich
eda0fc3c6c openvpn-easy-rsa: restore essential patch to make it actually work on the target (#14324)
SVN-Revision: 38411
2013-10-15 12:23:21 +00:00
Steven Barth
156ea733d4 odhcp6c: various fixes
* Make SOL_MAX_RT configurable and default back to 120s
* Prefer servers with bigger prefixes (allows to use Comcast /60)
* Don't hang indefinitely if DHCPv6 REQUEST is not answered

Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 38393
2013-10-14 18:53:02 +00:00
Hauke Mehrtens
232a654833 iputils: do not compile this for brcm47xx with -O2
ping is now working for me with -Os on brcm47xx.
This revert r26278.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 38389
2013-10-13 22:51:33 +00:00
Hauke Mehrtens
e1523b5504 switch: remove old switch driver
The switch driver is not used by brcm47xx any more and can be removed,
instead of this switch driver b53 is used now.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 38387
2013-10-13 22:15:31 +00:00
Hauke Mehrtens
af32e63bae lantiq: add some missing PKG_SOURCE_URLs
These URLs where missing and causes build failures.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 38376
2013-10-12 22:33:55 +00:00
Jo-Philipp Wich
78f69b66d4 dnsmasq: add option broadcast to host sections
There are certain consumer devices which are outliers in protocol conformance.
An example is Samsung bluray players, which require broadcast DHCP responses
(on Ethernet only, strangely not on Wifi).

By specifying:

config host
	...
	option broadcast 1

this will enable the response to be sent as an Ethernet broadcast and not as
a unicast.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

SVN-Revision: 38365
2013-10-11 18:33:15 +00:00
Jo-Philipp Wich
db3013852a firewall: small improvements in nat reflection
- do not insert duplicate rules when setting up reflection to a zone containing multiple interfaces
	- set up reflection for any protocol, not just TCP and UDP

SVN-Revision: 38361
2013-10-10 18:15:10 +00:00
Jo-Philipp Wich
5380fa27e9 ppp: correct module loaded check in proto_pptp_setup
proto_pptp_setup is responsible for loading the required modules to establish
a pptp connection to a foreign peer. The function checks whether all required
modules are already loaded, before actually loading them.

It seems that the filter being used to accomplish this, is not restrictive
enough in some cases. For instance when pptp nat helper modules are present on
a system, and already loaded before a pptp connection is enabled. Then the
search filter (possibly) returns the following for module=pptp, where actually
no matches are expected, resulting in the pptp.ko module not being loaded,
thereby failing to establish the pptp connection.

# module="pptp" ; grep "$module" /proc/modules
nf_nat_pptp 1312 0 - Live 0x86ce7000
nf_conntrack_pptp 3072 1 nf_nat_pptp, Live 0x86cb9000
nf_nat_proto_gre 784 1 nf_nat_pptp, Live 0x86cba000
nf_conntrack_proto_gre 2368 1 nf_conntrack_pptp, Live 0x86cbf000
nf_nat 9792 13 nf_nat_rtsp,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_h323,nf_nat_proto_gre,nf_nat_amanda,nf_nat_irc,nf_nat_ftp,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,iptable_nat, Live 0x86ca8000
nf_conntrack 37264 31 nf_nat_rtsp,nf_conntrack_rtsp,nf_nat_tftp,nf_conntrack_tftp,nf_nat_snmp_basic,nf_conntrack_snmp,nf_nat_sip,nf_conntrack_sip,nf_nat_pptp,nf_conntrack_pptp,nf_nat_h323,nf_conntrack_h323,nf_conntrack_proto_gre,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_broadcast,nf_nat_irc,nf_conntrack_irc,nf_nat_ftp,nf_conntrack_ftp,ipt_MASQUERADE,iptable_nat,nf_nat,xt_helper,xt_connmark,xt_connbytes,xt_conntrack,xt_CT,xt_NOTRACK,xt_state,nf_conntrack_ipv4, Live 0x86c90000

The search filter can be made more accurate/restrictive, by requiring the
occurance of the exact name of the module at the beginning of a line in
/proc/modules.

# module="pptp" ; grep "^$module " /proc/modules
pptp 13296 2 - Live 0x86e80000

Signed-off-by: Tijs Van Buggenhout <tvb@able.be>

SVN-Revision: 38358
2013-10-10 14:58:12 +00:00
Jo-Philipp Wich
61e83f9c29 dropbear: update to 2013.59 (released 4 october 2013)
- drop mirror www.mirrors.wiretapped.net (not working anymore)
- drop patch 300-ipv6_addr_port_split.patch, included upstream
- refresh patches
- various upstream changes: http://matt.ucc.asn.au/dropbear/CHANGES

Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>

SVN-Revision: 38356
2013-10-10 14:42:05 +00:00
Luka Perkov
cdb871ac48 openvpn: rework initscript (fixes #14299)
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 38351
2013-10-09 11:25:09 +00:00
Felix Fietkau
ff40bc2db9 hostapd: recognize 8021x as an authentication mode
Currently, in order to configure the authentication daemon in
8021x mode, we need to set wireless.@wifi-iface[0].encryption="wpa"
Though it works it confuses folks as 8021x is using WEP
encryption and not WPA. Therefore the terminology itself is
confusing. This change adds 8021x as a recognized string for 8021x
authentication.

Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>

SVN-Revision: 38339
2013-10-08 11:09:52 +00:00
Felix Fietkau
9beaea6fc2 hostapd: add external registrar support
Setting wireless.@wifi-iface[N].ext_registrar=1 will enable UPNP
advertising and add an external registrar to the interface this vif
belongs to (br-lan if the vif is included in the LAN bridge). By
enabling this we append upnp_iface=xxx to the hostapd config file.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>

SVN-Revision: 38338
2013-10-08 11:09:48 +00:00
Felix Fietkau
246e9b449b hostapd: enable WPS2 support on hostapd-full.config
Enable CONFIG_WPS2 for hostapd. This is required to support
options like Virtual Push Button in WPS.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>

SVN-Revision: 38337
2013-10-08 11:09:44 +00:00
Felix Fietkau
bcbc9b1e89 hostapd: fix hostapd RSN preauthentication PMKSA caching
In 2009 OpenWrt's hostapd config added an "auth_cache" boolean
to be used to address a reported issue #12129 [0] on a forum [1].
The reported issue on the ticket is different that the one
described on the forum. The commit was r33359. This change broke
proper RSN preauthentication [2] [3] [4] expectations on hostapd's
configuration for WPA2 and this in turn disabled PMKSA caching and
Opportunistic Key Caching. This change:

  * Leaves the "auth_cache" to be used only for WPA networks for those
    looking to use this as a workaround to a reported issue but annotates
    a warning over its usage.

  * Separate "auth_cache" from WPA2 RSN preauthentication, leaving
    WPA2 RSN preauthentication to enabled only with "rsn_preauth" with
    the expected and recommended settings.

  * Adds a new WPA2 RSN preauthentication "rsn_preauth_testing" to
    be used when evaluating funcionality for WPA2 RSN preauthentication
    with the expected and recommended settings with the only difference
    so far with what should be enabled by default to disable Opportunistic
    Key Caching.

Disabling the PMKSA cache should mean the STA could not roam off and back
onto the AP that had PMKSA caching disabled and would require a full
authentication cycle. This fixes this for WPA2 networks with
RSN preauthentication enabled.

This change should be applied to AA as well as trunk.

  TL DR;

The issue described on the forum has to do with failure of a STA
being able to try to authenticate again with the AP if it failed
its first try. This may have been an issue with hostapd in 2009
but as per some tests I cannot reproduce this today on a WPA2
network.

The issue described on the ticket alludes to a security issue with the
design of using a Radius server to authenticate to an AP. The issue
vaguely alludes to the circumstances of zapping a user, deleting their
authentication credentials to log in to the network, and that if
RSN preauthentication is enabled with PMKSA caching that the user
that was zapped would still be able to authenticate.

Lets treat these as separate issues.

I cannot reproduce the first issue reported on the forums of not
being able to authenticate anymore on a WPA2 network.

The issue reported on the ticket modified WPA2 RSN preauthentication
by adding two fields to the hostapd configuration if auth_cache
was enabled:

  * disable_pmksa_caching=1
  * okc=0

The first one disables PMKSA authentication cache.
The second one disables Opportunistic Key Caching.

The issue reported on the ticket was fixed by implementing a workaround
in hostapd's configuration. Disabling PMKSA caching breaks proper use
of WPA2 RSN pre authentication. The usage of disable_pmksa_caching=1
prevents hostapd from adding PMKSA entries into its cache when a successful
802.1x authentication occurs. In practice RSN preauthentication would
trigger a STA to perform authentication with other APs on the same SSID,
it would then have its own supplicant PMKSA cache held. If a STA roams
between one AP to another no new authenitcation would need to be performed
as the new AP would already have authenticated the STA. The purpose of the
PMKSA cache on the AP side would be for the AP to use the same PMKID for
a STA when the STA roams off onto another BSSID and later comes back to it.

Disabling Opportunistic Key Caching could help the reported issue
as well but its not the correct place to address this. Opportunistic
Key Caching enables an AP with different interfaces to share the
PMKSA cache. Its a technical enhancement and disabling it would
be useful to let a testing suite properly test for RSN preauthentication
given that otherwise Opportunistic Key Caching would enable an
interface being tested to derive its own derive the PMKSA entry.
In production though okc=1 should be enabled to help with RSN
preauthentication.

The real fix for this particular issue outside of the scope of hostapd's
configuration and it should not be dealt with as a workaround to
its configuration and breaking expected RSN preauthentication and
technical optimizations. Revert this change and enable users to pick
and choose to enable or disable disable_pmksa_caching and okc expecting them
to instead have read clearly more what these do.

As for the core issure ported, the correct place to fix this is to
enable a sort of messaging between the RADIUS server and its peers
so that if caching for authentication is enabled that cache can be
cleared upon user credential updates. Updating a user password
(not just zapping a user) is another possible issue that would need
to be resolved here. Another part of the solution might be to reduce
the cache timing to account for any systematic limitations (RADIUS
server not able to ask peers to clear cache might be
one).

[0] https://dev.openwrt.org/changeset/33359
[1] https://forum.openwrt.org/viewtopic.php?id=19596
[2] http://wireless.kernel.org/en/users/Documentation/hostapd#IEEE_802.11i.2FRSN.2FWPA2_pre-authentication
[3] http://wireless.kernel.org/en/users/Documentation/wpa_supplicant#RSN_preauthentication
[4] http://wiki.openwrt.org/doc/recipes/rsn_preauthentication

Signed-off-by: Luis R. Rodriguez <mcgrof@do-not-panic.com>

SVN-Revision: 38336
2013-10-08 11:09:40 +00:00
Felix Fietkau
40aec9ed46 hostapd: Add WPS unconfigured & WPS pin method support
Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>

SVN-Revision: 38335
2013-10-08 11:09:36 +00:00
Felix Fietkau
4689bc8517 hostapd: Add eap_reauth_period config option
This adds the eap_reauth_period to be used for modifying
the RADIUS server reauthentication authentication period,
a parameter that gets passed directly to the hostapd
configuration file.

Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>

SVN-Revision: 38334
2013-10-08 11:09:27 +00:00
Luka Perkov
c5bd00d82a openvpn: switch to new procd init script style
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 38331
2013-10-07 21:28:14 +00:00
Steven Barth
6dbfe22601 odhcp6c: improve server selection, introduce "forceprefix" option
SVN-Revision: 38314
2013-10-07 08:43:33 +00:00
Luka Perkov
702936f4c9 iproute2: update to 3.11
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 38313
2013-10-07 08:26:41 +00:00
Felix Fietkau
e96695df10 netifd: update to latest version, adds macvlan support
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38299
2013-10-03 14:51:34 +00:00
Steven Barth
95e9c260bc odhcp6c: validate hop-limit on RAs
SVN-Revision: 38285
2013-10-02 14:16:05 +00:00
Steven Barth
0ad1d06c13 6relayd: remove compat ULA setting by default (too many bad sideeffects)
SVN-Revision: 38283
2013-10-02 06:14:39 +00:00
Steven Barth
1d485c737e netifd: don't remove & readd addresses that only have a changed lifetime
SVN-Revision: 38269
2013-10-01 17:30:05 +00:00
Felix Fietkau
f8ee248701 uhttpd: add a config option for using ustream-polarssl, and use it by default
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38250
2013-09-29 11:26:09 +00:00
Felix Fietkau
59c05778f0 uhttpd: fix appending https ports to cmdline
Otherwise it is started only on non-secure ports.

Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@neratec.com>

SVN-Revision: 38171
2013-09-25 07:44:48 +00:00
Gabor Juhos
99d13b09b9 iwinfo: add Ubiquiti WispStation M5 to hardware.txt
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

SVN-Revision: 38145
2013-09-24 05:58:29 +00:00
Luka Perkov
ef5f836207 fix various init scripts
Changes include:

* removing unused variables
* replacing spaces with tabs where appropriate
* more consistency with variable declarations

Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 38142
2013-09-23 21:58:36 +00:00
Felix Fietkau
5137cdb1e1 xtables-addons: fix missing conversion from r38021 (resolves a broken dependency)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 38124
2013-09-22 19:49:23 +00:00
Steven Barth
4894800bdd odhcp6c: handle NoAddrsAvail IA-status
SVN-Revision: 38092
2013-09-21 10:54:13 +00:00
Steven Barth
808a1c7808 odhcp6c: Restart when server returns IAID error
SVN-Revision: 38032
2013-09-18 10:27:15 +00:00
John Crispin
f874094402 procd: convert various packages to procd style init.d scripts
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38023
2013-09-17 21:45:30 +00:00
John Crispin
f12f4074af kernel: make most modules use AutoProbe
now that we have modprobe we can set more than half of the modules to AutoProbe

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 38021
2013-09-17 21:45:17 +00:00
Felix Fietkau
b2447d1fca hostapd: adjust the md5sum for the uploaded source tarball (fixes #14155)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37990
2013-09-14 20:07:35 +00:00
Felix Fietkau
28eceb0343 iwinfo: when using nl80211, parse interface combinations instead of creating/deleting interfaces
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37983
2013-09-14 14:46:51 +00:00
Jo-Philipp Wich
c3cc912ed9 uhttpd: udpat to git head
- fixes buffer corruption with JSON-RPC list calls
	- change JSON-RPC protocol to include the session ID into the call
	  attributes instead of passing it via the URL
	- forcibly pass effective session ID as "ubus_rpc_session" attribute
	  to called procedures
	- change ubus acl checking to conform with new ubus session namespace

SVN-Revision: 37962
2013-09-13 13:24:45 +00:00
Steven Barth
eba3ab9ade odhcp6c: Timing workaround for buggy servers
SVN-Revision: 37951
2013-09-12 12:57:42 +00:00
Steven Barth
b2a71fedd9 odhcp6c: more compatibility fixes
SVN-Revision: 37907
2013-09-05 21:13:51 +00:00
Steven Barth
0a85c59040 netfilter: Add IPv6-NAT support for kernel and ipt Thanks to Berni, Adam Novak and Sedat Dilek for patches and inspiration
SVN-Revision: 37866
2013-09-01 17:59:48 +00:00
Steven Barth
3e647ac9b6 iptables: Update to 1.4.20
SVN-Revision: 37865
2013-09-01 13:46:10 +00:00
Felix Fietkau
7fc90889d5 netifd: update to the latest version, fixes a bridge handling corner case on config reload
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37856
2013-08-29 22:20:36 +00:00
Vasilis Tsiligiannis
03b1d4289b lldpd: Add libbsd dependency when using eglibc
Signed-off-by: Vasilis Tsiligiannis <acinonyx@openwrt.gr>

SVN-Revision: 37837
2013-08-25 18:47:08 +00:00
Jo-Philipp Wich
2864fb107f firewall: update to git head
- uses "-j CT --notrack" instead of deprecated "-j NOTRACK"
	- fixes support for rule sections with target "NOTRACK"

SVN-Revision: 37777
2013-08-14 15:40:38 +00:00
Felix Fietkau
4cda88a879 hostapd: fix typo in version number
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37742
2013-08-08 20:45:15 +00:00
Felix Fietkau
9df75e7f34 hostapd: fix ubus reconnect handling
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37741
2013-08-08 20:45:12 +00:00
Felix Fietkau
750197b3af hostapd: add a build variant for wpa_supplicant with p2p (aka Wi-Fi Direct) support
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37739
2013-08-08 16:24:50 +00:00
Felix Fietkau
f53b96813e hostapd: update to latest version (20130707)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37738
2013-08-08 16:04:19 +00:00
Felix Fietkau
9a22315ca4 hostapd: Settings for DAE/CoA server
hostapd supports "Dynamic Authorization Extensions", making it possible
to forcibly disconnect a user by sending it a RADIUS "Disconnect-Request"
packet.

I've added three new variables to enable setting of the
"radius_das_client" and "radius_das_port" variables in the hostapd
configuration, which enable these extensions.

* dae_client - IP of the client that can send disconnect requests
* dae_secret - shared secret for DAE packets

These are combined into the "radius_das_client" option in hostapd.conf
To enable the server, both dae_client and dae_secret must be set.

* dae_port - optional, default value is 3799 as specified in RFC 5176

Signed-off-by: Martijn van de Streek <martijn@vandestreek.net>

SVN-Revision: 37734
2013-08-06 18:55:30 +00:00
Felix Fietkau
91f0b411f4 hostapd: Fix WDS/WEP usage
WEP in WDS is currently broken in hostapd. Add a patch
to fix the issue.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37733
2013-08-06 17:59:12 +00:00
Felix Fietkau
76ca564e79 hostapd: Refresh patches
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37731
2013-08-06 17:59:05 +00:00
Felix Fietkau
22e012bad8 hostapd: Add an option to disable beaconing
Add a patch for hostapd that introduces a config option
"start_disabled" which can be used to bring up an AP
interface with beaconing disabled. This is useful in
a Repeater-AP setup where the Repeater AP has to start
beaconing only after the WDS link has been established.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

SVN-Revision: 37730
2013-08-06 17:59:02 +00:00
Felix Fietkau
719adb6471 uhttpd: update to the latest version, fixes a crash on early cgi/lua process termination
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37628
2013-07-31 22:07:09 +00:00
Luka Perkov
1646bd096c iproute2: update to 3.10.0
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37590
2013-07-28 23:27:35 +00:00
Felix Fietkau
aff8c18ad0 openvpn: update to 2.3.2
this patches updates openvpn to v2.3.2
and adds a PKG_MD5SUM to the Makefile

This release fixes a memory access violation when cipher none is used
on ar71xx - at least with my config

Signed-off-by: Peter Wagner <tripolar@gmx.at>

SVN-Revision: 37560
2013-07-26 12:35:22 +00:00
Steven Barth
4d37ae33b6 6relayd: Overridden DNS should affect DHCPv6
SVN-Revision: 37558
2013-07-26 11:59:25 +00:00
Felix Fietkau
8faa8a6420 uhttpd: update to latest version, fixes issues with POST and keep-alive (#13940)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37556
2013-07-26 10:03:07 +00:00
Felix Fietkau
3d2ace5d71 authsae: add myself as a maintainer
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37555
2013-07-26 10:03:03 +00:00
Felix Fietkau
4478c69b86 authsae: adapt uci scripts to use authsae
This patch modifies the uci scripts to be able to
start meshd-nl80211 for encrypted mesh networks,
therefor a new script (authsae.sh) is inserted.

Signed-off-by: Emanuel Taube <emanuel.taube@gmail.com>
[etienne.champetier@free.fr: just update mac80211.sh path]
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37554
2013-07-26 10:02:59 +00:00
Felix Fietkau
6dbea6416b authsae 80211s authentication daemon
This patch adds authsae open80211s authentication daemon (http://open80211s.org)
It's a rework of Peter Naulls patch (http://patchwork.openwrt.org/patch/1350/)
I've excluded the sample conf file as it's useless when used with mac80211.sh (Emanuel Taube patch)
It now link against libnl-tiny instead of libnl (patch merged in authsae git)
Authsae is 58 Ko (OPENSSL_WITH_EC option adds 35Ko to libopenssl)

Signed-off-by: Peter Naulls <peter@chocky.org>
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

SVN-Revision: 37553
2013-07-26 10:02:55 +00:00
Felix Fietkau
85e585ddce ead: fix compile errors with recent kernels
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37482
2013-07-20 12:56:07 +00:00
Hauke Mehrtens
96f1953fb1 kernel: fix xtables-addons dependencies with kernel 3.3
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

SVN-Revision: 37461
2013-07-19 22:36:47 +00:00
Jo-Philipp Wich
7bbe1656cb xtables-addons: use a select of kmod-ipt-core instead of depending on it
SVN-Revision: 37425
2013-07-19 09:58:17 +00:00
Jo-Philipp Wich
d474a77edf xtables-addons: add missing kmod dependencies
SVN-Revision: 37424
2013-07-19 09:58:11 +00:00
Jo-Philipp Wich
d6e8047f83 firewall: update to git head
- handles redirects as port relocations if the dest_ip points to the router itself

SVN-Revision: 37374
2013-07-16 14:04:59 +00:00
Steven Barth
54ae5ce507 netifd: Fix IPv6-prefix assignment with continuous hints
SVN-Revision: 37371
2013-07-16 12:07:11 +00:00
Steven Barth
6a034ce5b1 6relayd: Fix DHCPv6-PD with continuous hints
SVN-Revision: 37370
2013-07-16 12:07:06 +00:00
Steven Barth
0444e32acd Bump iptables version
SVN-Revision: 37329
2013-07-15 06:12:07 +00:00
Steven Barth
ea6a5d0c22 iptables: restore reap functionality to recent module
The reap functionality appears to have been accidentally disabled by
commit 74ded7257e5da5e309844d386290f24ae91950a6 to iptables.git, see:

  git://git.netfilter.org/iptables.git

and subsequently in iptables 1.4.15 and later.  This adds a patch to
restore reap functionality for recent_opts_v1.

Signed-off-by: Russell Senior <russell@personaltelco.net>

SVN-Revision: 37328
2013-07-15 06:12:03 +00:00
Luka Perkov
1a963355b0 netifd: update to latest version, add bridge_empty option
with this option enabled it's possible to create empty bridges

Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37318
2013-07-14 18:50:04 +00:00
John Crispin
7d7c2ff5f9 swconfig: fix dependency bug introduced by [37304]
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37316
2013-07-14 18:16:42 +00:00
Hauke Mehrtens
f8d55e7541 brcm47xx: use b53 phy driver for the switch in kernel 3.10
This makes it possible to use swconfig to controll the switch.

This was tested with devices using b43 and bgmac.
This was not tested on devices using tg3.
This does not support the adm switch used in some very old devices.

SVN-Revision: 37304
2013-07-14 14:11:17 +00:00
John Crispin
8d546699c5 dropbear: register a config.change trigger
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37245
2013-07-11 17:00:40 +00:00
Felix Fietkau
4e042e4a84 ipset: force the shell to bash to fix build issues on mac os x
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37227
2013-07-10 14:59:00 +00:00
Felix Fietkau
4a0c312dc3 xtables-addons: update to version 2.3, adds linux 3.10 compatibility
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37226
2013-07-10 14:51:13 +00:00
Felix Fietkau
f98f69adc9 firewall: add missing dependencies
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37224
2013-07-10 11:33:48 +00:00
John Crispin
fc40051569 lantiq: move dsl tools to package/network/config
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37198
2013-07-08 09:01:38 +00:00
Luka Perkov
4a7439401b linux-atm: fix dependencies
Signed-off-by: Luka Perkov <luka@openwrt.org>

SVN-Revision: 37189
2013-07-08 00:37:49 +00:00
Jo-Philipp Wich
4aa82d07a6 firewall: allow routed lan<->lan traffic by default
SVN-Revision: 37171
2013-07-04 18:10:36 +00:00
Jo-Philipp Wich
2561bce232 lldpd: upgrade to 0.7.5
lldpd 0.7.1 has several alignment issues that trip a system configured
to fault on misaligned accesses.  Version 0.7.5 fixes that along with a
few other minor issues.

Signed-off-by: John Szakmeister <john@szakmeister.net>

SVN-Revision: 37168
2013-07-04 16:57:03 +00:00
Steven Barth
e3a369e597 odhcp6c: avoid integer overflows in resend logic
SVN-Revision: 37150
2013-07-03 16:14:24 +00:00
Steven Barth
b9aa47d5b6 odhcp6c: add missing config parameter
SVN-Revision: 37148
2013-07-03 13:50:06 +00:00
Jo-Philipp Wich
7c197d9f0e hostapd: truncate default mac file before adding entries to it (#13797)
SVN-Revision: 37114
2013-07-01 10:52:35 +00:00
Felix Fietkau
ee68734929 hostapd: fix multi-ssid and AP+STA, clean up code
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37111
2013-06-30 21:01:13 +00:00
Felix Fietkau
60b040bbaf hostapd: update to latest git version
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37110
2013-06-30 20:27:38 +00:00
Felix Fietkau
12c033dfd9 mac80211: update to wireless-testing 2013-06-27, fix ATH_USER_REGD handling
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 37097
2013-06-30 10:44:19 +00:00
Jo-Philipp Wich
2d506f46fb firewall: update to git head
- uses custom formatting for mac addresses to ensure leading zeroes, required for older iptables mac match parser

SVN-Revision: 37082
2013-06-29 13:28:27 +00:00
Steven Barth
d8051a8814 netifd: fix typo in dhcp script
SVN-Revision: 37051
2013-06-28 04:19:21 +00:00
Florian Fainelli
fe7c236a06 6relayd: prevent build on AVR32
AVR32 misses a bunch of updated syscalls, including timerfd_create()
which is used by 6relayd. Since that requires Linux/libc changes, just
prevent building it for now.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 37040
2013-06-27 15:33:05 +00:00
Steven Barth
cb66ed972b odhcp6c: Add missing config option "ifaceid"
SVN-Revision: 37033
2013-06-25 05:18:20 +00:00
John Crispin
e7dbdad43b hostapd: fix superflous coma
this cause the wps trigegr to be copied to the wrong place

https://dev.openwrt.org/ticket/13753

Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37031
2013-06-24 16:44:18 +00:00
Steven Barth
eecce5abad arptables: Bump to 0.0.4
SVN-Revision: 37020
2013-06-24 05:48:12 +00:00
Steven Barth
69cd09ebbf 6relayd: don't accidentally remove regular prefix routes
SVN-Revision: 37018
2013-06-23 16:26:09 +00:00
Steven Barth
f47c4c80d4 6relayd: fix lease-update behaviour for clients without reconfigure
SVN-Revision: 37011
2013-06-22 08:31:28 +00:00
Steven Barth
d0d5f109d8 6relayd: Keep PD-downstream across RENEW/REBIND
SVN-Revision: 37009
2013-06-22 08:19:25 +00:00
John Crispin
4ebf19b48f packages: clean up the package folder
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 37007
2013-06-21 16:54:37 +00:00
John Crispin
4999ae4236 hostapd: remove old button hotplug script
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36991
2013-06-21 16:53:07 +00:00
Steven Barth
5108318edb 6relayd: Fix DHCPv6-PD assignment logic
SVN-Revision: 36980
2013-06-21 06:15:09 +00:00
Steven Barth
de2a7547b7 6relayd: correctly set downstream routes for DHCPv6-PD
SVN-Revision: 36969
2013-06-19 13:08:33 +00:00
Felix Fietkau
b4babf9f81 netifd: update to latest version, fixes a NULL pointer deref bug
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36965
2013-06-18 16:24:48 +00:00
Jo-Philipp Wich
65f82e2311 firewall: update to git head
- fixes misprocessing of unknown symbolic protocol names

SVN-Revision: 36963
2013-06-18 14:30:51 +00:00
Jo-Philipp Wich
37ae268729 firewall: update to git head
- fixes calculation of IPv4 netmasks derived from 0.0.0.0/0 CIDRs

SVN-Revision: 36960
2013-06-18 14:14:35 +00:00
Steven Barth
5219d38da2 odhcp6c: Add option to override interface identifier in RA-client
SVN-Revision: 36959
2013-06-18 12:51:14 +00:00
Steven Barth
9f1899242c netifd: IPv6: Fix sorting order in last commit.
SVN-Revision: 36952
2013-06-17 21:29:14 +00:00
Steven Barth
213269a8f7 netifd: Satisfy IPv6 assignments ordered by prefix length
SVN-Revision: 36950
2013-06-17 21:16:22 +00:00
Jo-Philipp Wich
541fbfbb9e hostapd: correctly handle macfile uci option
Make hostapd.sh correctly handle the macfile uci option.

Such option specifies the macfile name to pass into the
hostapd configuration file. Moreover, if a maclist option
has been specified, copy the macfile before appending new
entries.

Signed-off-by: Antonio Quartulli <antonio@open-mesh.com>

SVN-Revision: 36944
2013-06-17 11:59:29 +00:00
Jo-Philipp Wich
dfea3bae11 dnsmasq: use host-record instead of address
Using "--address" for individual host A records is broken, use "--host-record" instead.
The following patch changes dnsmasq.init to build individual host records using "--host-record" instead of "--address".

Signed-off-by: Adam Gensler <openwrt at gnslr.us>

[jow: shorter description, simplified shell script code]

SVN-Revision: 36943
2013-06-17 11:55:30 +00:00
Jo-Philipp Wich
36d3fafd77 firewall: update to git head
- properly process intermediate "!" options in argument list (fixes negated ipsets)

SVN-Revision: 36935
2013-06-13 18:54:49 +00:00
Jo-Philipp Wich
0db38adf1c firewall: update to git head
- fixes handling of reject target for rule sections with specific destination zone

SVN-Revision: 36933
2013-06-13 12:49:00 +00:00
Jo-Philipp Wich
1150e299bb uhttpd: expose missing options to uci
SVN-Revision: 36932
2013-06-13 11:55:12 +00:00
Steven Barth
302cf427cb odhcp6c: add sanity checks for NDP and MTU parameters from RAs
SVN-Revision: 36930
2013-06-13 06:38:48 +00:00
Steven Barth
4f0a0defa6 6relayd: make route preference and prefix on-link flag configurable
SVN-Revision: 36922
2013-06-11 20:52:27 +00:00
Steven Barth
f6dd266c97 iproute2: add drop-failed rule action (patch by Jonas Gorski)
SVN-Revision: 36910
2013-06-11 09:27:46 +00:00
Felix Fietkau
9fb5bf176e netifd: update to latest version, uses the new uci/blob code from libuci
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36909
2013-06-10 12:42:30 +00:00
Steven Barth
5caa45d0b3 ppp: correctly handle address when reloading
SVN-Revision: 36904
2013-06-10 10:42:34 +00:00
Steven Barth
491deaed2c netifd: improve reloading behaviour
SVN-Revision: 36903
2013-06-10 10:42:15 +00:00
Jo-Philipp Wich
bc73ca5619 iwinfo: add phyname attribute, this is useful to group networks by radio phy
SVN-Revision: 36889
2013-06-09 14:39:14 +00:00
Jo-Philipp Wich
cb24c37858 libiwinfo: ignore log messages from wpa_supplicant while scanning
wpa_supplicant may send log and event messages intermixed with the
expected scan results.  This makes "iwinfo wlan0 scan" and LuCI
"site survey" display nothing when many AP's are around.

Eliminate the CTRL-EVENT-BSS-ADDED events, interspersed log messages,
lines with unexpected format.  Increase timeout to handle the max
number of channels (2.4, 3.6, 4.9, 5 GHz).  Insure receive buffer is
null-terminated.

Signed-off-by: Jean-Pierre Tosoni <jp.tosoni@acksys.fr>

SVN-Revision: 36888
2013-06-09 14:39:09 +00:00
Steven Barth
f995c90329 netifd: Improve IPv6 source-routing policies
SVN-Revision: 36884
2013-06-08 13:26:33 +00:00
Jonas Gorski
b9de8ca7f5 netifd: bring wifi down before shutting down
works around wifiX references not being freed on network restart.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 36883
2013-06-08 11:44:12 +00:00
Jo-Philipp Wich
e7b15446a8 firewall: udpate to git head (#13652, #13654, #13658)
- optimizes chain usage for ingress rules
  - adds limit match support for redirect rules
  - fixes automatic redirect dest detection on little endian systems
  - leaves base chains in place on reload to allow user rules to target e.g. "reject"

SVN-Revision: 36871
2013-06-06 14:12:02 +00:00
Jo-Philipp Wich
5cf06bd17b firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols
SVN-Revision: 36868
2013-06-06 14:02:29 +00:00
Jo-Philipp Wich
e94cf1c72b iptables: install libext*.a into staging dir
SVN-Revision: 36867
2013-06-06 14:02:24 +00:00
Jo-Philipp Wich
ecc95dcba8 firewall: update to git head (#13652)
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
  - uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones

SVN-Revision: 36854
2013-06-05 11:40:40 +00:00
Jo-Philipp Wich
0a74d9d5c3 firewall3: fix accidentally changed install directive
SVN-Revision: 36840
2013-06-04 12:30:50 +00:00
Jo-Philipp Wich
07a3110e88 firewall: fix git source url
SVN-Revision: 36839
2013-06-04 12:23:47 +00:00
Jo-Philipp Wich
b721c92221 firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA
SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
Jo-Philipp Wich
0dd6753c09 Drop legacy firewall package
SVN-Revision: 36837
2013-06-04 12:21:44 +00:00
Jo-Philipp Wich
6f60308257 firewall3: update to git head (#13641)
* Fixes wrong chain used for zone forward policy

SVN-Revision: 36830
2013-06-04 10:26:49 +00:00
Jo-Philipp Wich
6eeca5176e firewall3: update to git head
- Fixes problems with reusing matches or targets from loadable extensions

SVN-Revision: 36826
2013-06-03 16:38:29 +00:00
Felix Fietkau
8c69057980 uhttpd: update to latest version, fixes CGI related crashes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36817
2013-06-01 21:43:06 +00:00
Steven Barth
089d6612ce 6relayd: Work around Windows DHCPv6 quirks Announcing deprecated addresses breaks Windows clients
SVN-Revision: 36815
2013-06-01 17:51:02 +00:00
Steven Barth
7ae506c7d4 odhcp6c: work around spurious false-positive address DECLINEs
SVN-Revision: 36809
2013-05-31 13:49:17 +00:00
Jo-Philipp Wich
3bb397c997 firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly
SVN-Revision: 36806
2013-05-31 13:23:23 +00:00
Steven Barth
bf582fbb7b odhcp6c: fix handling of multiple RAs in a row
SVN-Revision: 36804
2013-05-31 10:02:39 +00:00
Steven Barth
cdc3caf533 6relayd: Better compatibility with misbheaving DHCPv6 clients * Make the "best" address / prefix the first one being announced * Only add the "best" address to the hosts-file
SVN-Revision: 36772
2013-05-30 15:42:30 +00:00
Steven Barth
519f27cd33 netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes
SVN-Revision: 36771
2013-05-30 15:42:25 +00:00
Felix Fietkau
02fe12c00d uhttpd: update again to fix a ubus plugin crash bug
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36770
2013-05-30 13:16:38 +00:00
Felix Fietkau
eeb7fdc13e uhttpd: update to latest version, fixes script timeout for ubus requests
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36767
2013-05-30 10:44:20 +00:00
Steven Barth
dc6625f977 6relayd: more verbosity in leases and logging
SVN-Revision: 36764
2013-05-30 07:56:55 +00:00
Steven Barth
56a3396bf2 iptables: bump to 1.4.19.1
SVN-Revision: 36760
2013-05-29 14:58:04 +00:00
Steven Barth
439fdd4d65 netifd: fix IPv6-addresses disappearing due to lifetime-overflows
SVN-Revision: 36748
2013-05-28 18:32:01 +00:00
Steven Barth
23b3cebd56 odhcp6c: fix or debug disappearing IPv6 addresses
SVN-Revision: 36745
2013-05-28 16:28:14 +00:00
Felix Fietkau
e6250644be mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36743
2013-05-28 11:10:41 +00:00
Steven Barth
61c0c6ab68 6relayd: RFC 6204 and naming improvements * Announce delegated prefixes using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default
SVN-Revision: 36738
2013-05-27 20:38:13 +00:00
Jo-Philipp Wich
63603ee478 firewall3: update to git head
- allows building without IPv6 support
	- uses more robust rules to cope with missing libext.a
	- uses better linking strategy to avoid symbol clashes with older iptables
	- introduces source compatiblity layer for different libxtables versions

SVN-Revision: 36736
2013-05-27 15:13:19 +00:00
Jo-Philipp Wich
e4f8c38ed1 firewall3: update to git head
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
  - automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
  - properly support output rules with dest '*' to hook directly into delegate_output
  - fixes crash when processing rules with unresolved targets

SVN-Revision: 36721
2013-05-26 15:48:04 +00:00
Steven Barth
f63064a257 6relayd: Fix DHCPv6-server picking up addresses from master interface
SVN-Revision: 36718
2013-05-26 10:06:02 +00:00
Jo-Philipp Wich
90887b5fb3 firewall3: update to git head
- fixes linking issues with some toolchains

SVN-Revision: 36703
2013-05-24 12:49:06 +00:00
Steven Barth
d8d7d7f4aa 6relayd: fix a lease-timing issue with stateful DHCPv6
SVN-Revision: 36702
2013-05-24 12:31:30 +00:00
Jo-Philipp Wich
c1ff8cd9bb firewall3: update to git head
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
  - Do not leak memory when processing rules with unknown targets or matches

SVN-Revision: 36698
2013-05-23 13:07:44 +00:00
Felix Fietkau
75bb3138aa uhttpd: update to latest version, fixes #13564, #13560, improves error handling as pointed out in #13537
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36696
2013-05-23 10:50:42 +00:00
Steven Barth
32c6ffb5a1 firewall3: Remove abandonend include
SVN-Revision: 36692
2013-05-23 06:38:25 +00:00
Jo-Philipp Wich
b757ca2259 firewall3: update to git head
- fix build on Linux < 3.7
  - limit zone names to 14 bytes

SVN-Revision: 36691
2013-05-22 14:15:53 +00:00
Steven Barth
9c3ac668e0 6relayd: Let OpenWrt override default CFLAGS
SVN-Revision: 36690
2013-05-22 11:58:54 +00:00
Jo-Philipp Wich
c12189b379 firewall3: update to git head
- fixes reload when firewall is not running already
  - fixes crash when ipsets are supported but undeclared
  - fixes handling of per zone user chains on reload

SVN-Revision: 36689
2013-05-22 11:37:41 +00:00
Steven Barth
9d115df749 6relayd: Fix a segfault when multiple downstream interfaces are present
SVN-Revision: 36687
2013-05-21 18:05:37 +00:00
Jo-Philipp Wich
dd83e87ab0 firewall3: update to git head
- fixes segfault in flush command if ipset support is not available
  - fixes internal rule generation if custom chains are enabled

SVN-Revision: 36686
2013-05-21 14:49:37 +00:00
Jo-Philipp Wich
6eec8009ba ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base
SVN-Revision: 36685
2013-05-21 13:00:28 +00:00
Jo-Philipp Wich
9b6c31d4cc firewall3: move libext*.a copying to compile phase
SVN-Revision: 36684
2013-05-21 12:58:36 +00:00
Jo-Philipp Wich
8df6cd005c netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
SVN-Revision: 36683
2013-05-21 12:58:15 +00:00
Jo-Philipp Wich
e8050c6c35 firewall3: update to git head
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
 * make ipset integration more reliable

SVN-Revision: 36681
2013-05-21 10:15:14 +00:00
Jo-Philipp Wich
a9a9644efd iptables: use -ffunction-sections, -fdata-sections and --gc-sections
SVN-Revision: 36680
2013-05-21 10:15:10 +00:00
Steven Barth
24c39ddcf7 odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests
SVN-Revision: 36678
2013-05-21 09:13:48 +00:00
Steven Barth
37baf2d6b2 6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better
SVN-Revision: 36677
2013-05-21 09:13:40 +00:00
Steven Barth
c6f70381c9 odhcp6c: Fix address / prefix expiry logic
SVN-Revision: 36675
2013-05-20 14:54:20 +00:00
Steven Barth
dd161ae62b dnsmasq: add directory for external hosts-files
SVN-Revision: 36655
2013-05-17 14:44:12 +00:00
Steven Barth
334c40da14 6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD
SVN-Revision: 36654
2013-05-17 14:44:07 +00:00
Steven Barth
0f1be4425f netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4
Based on a patch by Kristian Evensen. Thank You.

SVN-Revision: 36653
2013-05-17 14:44:02 +00:00
Felix Fietkau
7365e647f6 uhttpd: update to latest version, fixes index page processing order
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36644
2013-05-16 11:38:19 +00:00
Luka Perkov
4fc8e64a40 iproute2: workaround compile issues with gcc 4.8.x
SVN-Revision: 36642
2013-05-16 00:04:48 +00:00
Steven Barth
a62ca72309 odhcp6c: Fix handling of RAs when no DHCPv6-server is present
SVN-Revision: 36641
2013-05-15 11:07:01 +00:00
Luka Perkov
580481cd6d iproute2: upgrade to 3.9.0
SVN-Revision: 36638
2013-05-14 23:49:34 +00:00
Luka Perkov
5be36cbe83 iproute2: print help in connmark
SVN-Revision: 36637
2013-05-14 23:49:31 +00:00
Felix Fietkau
d090eea125 uhttpd: update to latest version, fixes a SSL connection memory leak
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36636
2013-05-14 17:43:00 +00:00
Felix Fietkau
d481486aad package: fold the IPv6 menu into Network
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36634
2013-05-14 15:02:31 +00:00
Steven Barth
e8f3897389 6relayd: Always announce the current MAC-address
* Fixes #13516 thanks to berni for the detailed bugreport.

SVN-Revision: 36629
2013-05-13 17:54:36 +00:00
Steven Barth
a1af842016 ds-lite: add ds-lite network protocol handler
SVN-Revision: 36628
2013-05-13 17:12:39 +00:00
Steven Barth
5ce135ed87 netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements
SVN-Revision: 36627
2013-05-13 17:12:34 +00:00
Steven Barth
ea71678b09 netifd: added support for setting up 6rd from DHCP
SVN-Revision: 36626
2013-05-13 17:12:30 +00:00
Steven Barth
ad93a571c6 odhcp6c: added support for DS-Lite + various fixes
SVN-Revision: 36625
2013-05-13 17:12:25 +00:00
Steven Barth
973dad61b0 firewall3: Remove obsoleted ULA-border
SVN-Revision: 36624
2013-05-13 17:12:20 +00:00
Steven Barth
07d99b62b7 firewall3: add wan6 interface to wan-zone by default
SVN-Revision: 36623
2013-05-13 17:12:15 +00:00
Steven Barth
4cb9d9715c firewall: Remove obsoleted ULA-border rule
SVN-Revision: 36622
2013-05-13 17:12:10 +00:00
Steven Barth
8560648082 6rd: increase metric of default route
This will prefer native IPv6 over 6rd if both are present.

SVN-Revision: 36605
2013-05-12 08:07:15 +00:00
Jo-Philipp Wich
d59f8cfa8e iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode
SVN-Revision: 36604
2013-05-12 01:12:56 +00:00
Steven Barth
29d4c36622 add uci support for "proxy-dnssec" in dnsmasq
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.

Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>

SVN-Revision: 36570
2013-05-07 07:19:51 +00:00
Felix Fietkau
9d8e3e03df iw: update to 3.10, sync with nl80211.h changes in compat-wireless
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36569
2013-05-06 22:35:50 +00:00
Steven Barth
9c1ed6447b odhcp6c: Make SLAAC-only work without reqprefix=no
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.

SVN-Revision: 36555
2013-05-06 10:20:43 +00:00
Jo-Philipp Wich
95e139d0b2 ipset-dns: support simultaneously populating IPv4 and IPv6 sets
SVN-Revision: 36554
2013-05-06 10:01:45 +00:00
Jo-Philipp Wich
3c17fd41a4 Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset
SVN-Revision: 36552
2013-05-06 08:44:54 +00:00
Felix Fietkau
b85c442e81 hostapd: enable 802.11r for the -full variant (#13250)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36533
2013-05-03 10:39:57 +00:00
Jo-Philipp Wich
4bba31b64c firewall3: update to git head
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422, #13386)
	- add support for fwmark matches and mark setting targets

SVN-Revision: 36521
2013-05-02 13:42:20 +00:00
Jo-Philipp Wich
a0b655b8f2 Fix install of iptables pkg-config files.
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146; which should make collectd
appear in snapshots again.

Signed-off-by: Danny Baumann <dannybaumann@web.de>

SVN-Revision: 36509
2013-05-02 08:10:55 +00:00
Jo-Philipp Wich
f1e214411d iwinfo: fix iwinfo_hardware() return value if chip id is not found
SVN-Revision: 36471
2013-04-28 14:04:39 +00:00
Jo-Philipp Wich
f1497ccf4f netifd: update to git head - disables multicast snooping by default on bridges
SVN-Revision: 36463
2013-04-27 09:28:40 +00:00
Jo-Philipp Wich
05c1424e87 iwinfo: add hw database file
SVN-Revision: 36450
2013-04-26 13:21:01 +00:00
Jo-Philipp Wich
e02d373f90 iwinfo: move builtin hardware database to /usr/share/libiwinfo/hardware.txt
SVN-Revision: 36449
2013-04-26 13:20:15 +00:00
Felix Fietkau
5062838fa5 netifd: update to the latest version, fixes interface reload issues when removing the ifname option
SVN-Revision: 36424
2013-04-25 16:28:19 +00:00
Steven Barth
49f97af481 6relayd: Fix generation of RA-messages
SVN-Revision: 36419
2013-04-24 18:22:08 +00:00
Jo-Philipp Wich
a040ead1c5 iwinfo: add SR71-15 radio info, fix nl80211 channel/frequency reporting on some architectures
SVN-Revision: 36417
2013-04-24 14:44:20 +00:00
Steven Barth
2c78c1457b firewall3: Make IPv6 ULA-Border generation dynamic
This fixes working behind another router which gives out ULAs.

SVN-Revision: 36416
2013-04-24 14:17:24 +00:00
Steven Barth
2dbcd2ba7b 6relayd: update package description
SVN-Revision: 36413
2013-04-24 07:21:42 +00:00
Steven Barth
e17ac4c257 dnsmasq: update to 2.66 Thanks to Christoph König for patches.
SVN-Revision: 36412
2013-04-24 05:55:39 +00:00
Steven Barth
21e4e2a766 odhcp6c: Set default SOL_MAX_RT to 1h
SVN-Revision: 36411
2013-04-24 05:02:45 +00:00
Felix Fietkau
d7908e02b5 hostapd: return the frequency to some ubus calls to make integration easier
SVN-Revision: 36410
2013-04-23 18:35:50 +00:00
Jo-Philipp Wich
61a6f45cdc lldpd: upgrade to 0.7.1
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

SVN-Revision: 36401
2013-04-23 10:37:23 +00:00
Steven Barth
17b8c0c7b8 netifd: Improve IPv6-ULA assignment handling
SVN-Revision: 36383
2013-04-22 19:40:06 +00:00
Steven Barth
c96c05d549 odhcp6c: Several fixes and improvements * Add preliminary support for RFC 6603 prefix exclusion * Fix reconfigure-support and reconfigure authentication * Set maximum retransmission timeout for solicitations to 2h * Fix a segfault when parsing IA_PD in advertise messages
SVN-Revision: 36382
2013-04-22 19:40:01 +00:00
Steven Barth
1e78c3e297 6relayd: Add DHCPv6-PD server support, fix relaying in stateful mode
SVN-Revision: 36381
2013-04-22 19:39:55 +00:00
Felix Fietkau
62244d73ae hostapd: update to 2013-04-05
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36376
2013-04-22 13:24:48 +00:00
Felix Fietkau
96bb7c123b build: consistently use 'depends on' instead of 'depends'
make the syntax more compatible with kernel menuconfig

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36351
2013-04-17 15:36:41 +00:00
Jo-Philipp Wich
e66a4af8c3 uhttpd: update to git head, fixes regression when parsing IPv6 listen arguments
SVN-Revision: 36348
2013-04-17 11:34:39 +00:00
Jo-Philipp Wich
25ffe0446c iwinfo: print info of all existing wireless ifaces when cli is called without arguments
SVN-Revision: 36339
2013-04-15 15:00:16 +00:00
Felix Fietkau
eb10581ce3 uhttpd: update to latest version, fixes compile error with latest libubox
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36338
2013-04-15 14:49:52 +00:00
Felix Fietkau
099e3d8183 netifd: update to latest version, fixes some device handling crashes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36336
2013-04-15 14:21:45 +00:00
Felix Fietkau
88c418bc75 qos-scripts: add queue length and quantum limit, suggested by dtaht
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 36294
2013-04-09 14:59:10 +00:00
Jo-Philipp Wich
7ca7bc501e iwinfo: fix frequency/channel and channel/frequency conversions to properly implement 802.11j
SVN-Revision: 36292
2013-04-09 14:37:55 +00:00
John Crispin
04dcd12c91 add portmap support to userland
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36284
2013-04-09 14:19:13 +00:00
John Crispin
f13ae9965c add "swconfig list" support
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36282
2013-04-09 14:19:05 +00:00
Jo-Philipp Wich
f90f025f20 netifd: fix route / route6 regression (#13303)
SVN-Revision: 36281
2013-04-09 12:21:12 +00:00
Steven Barth
3abc915522 Remove deprecated ip6slaac option * use proto=dhcpv6 with reqprefix=no instead
SVN-Revision: 36280
2013-04-09 12:12:30 +00:00
Steven Barth
2c087dc785 Remove obsoleted ipv6-support meta-package
SVN-Revision: 36279
2013-04-09 09:45:51 +00:00
Steven Barth
35d716fbbb netifd: Bump to latest version * Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow)
SVN-Revision: 36196
2013-04-05 12:28:06 +00:00
Steven Barth
0393e52623 netifd: Rewrite IPv6 prefix assignment * Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion
SVN-Revision: 36193
2013-04-03 17:08:21 +00:00
Felix Fietkau
71e9171717 openvpn: enable password save support (#13245)
SVN-Revision: 36144
2013-04-01 10:02:43 +00:00
Steven Barth
eedf9e72f9 odhcp6c: Fix a race-condition in RA-handling
Thanks to Markus Stenberg for investigating and providing a fix

SVN-Revision: 36132
2013-03-26 13:39:17 +00:00
Steven Barth
5a9c2c77b4 iptables: don't use --enable-ipv6 if IPv6 is disabled
SVN-Revision: 36125
2013-03-25 11:22:12 +00:00
Steven Barth
6529cf6cea odhcp6c: minor bug fixes
SVN-Revision: 36123
2013-03-25 10:58:48 +00:00
Jo-Philipp Wich
6fa1b5346e firewall3: update to git head
* fixes parsing of src/dest '*'
	* fixes parsing of proto 'all'

SVN-Revision: 36111
2013-03-22 14:10:29 +00:00
Jo-Philipp Wich
76d1c0a067 firewall3: update to git head
* fixes port remapping rules (#13217)

SVN-Revision: 36100
2013-03-21 14:25:17 +00:00
Hauke Mehrtens
c9544f4af0 kernel: add some fixes for kernel 3.9
This patch fixes some compile problems with kernel 3.9 and adds some missing linux 3.9 handling into kernel packages.

SVN-Revision: 36098
2013-03-20 21:59:24 +00:00
Steven Barth
261be7b8f3 netifd: Fix adding IPv6 DNS-servers to resolv.conf
In some cases IPv6 DNS-servers were not added correctly.

SVN-Revision: 36095
2013-03-20 13:49:39 +00:00
Steven Barth
eeb88a1df3 odhcp6c: Fix metric for on-link prefix routes
SVN-Revision: 36094
2013-03-20 09:26:52 +00:00
Jo-Philipp Wich
6fbd824e9b firewall3: update to git head
* fixes reload handling of zones and ipsets that are still running but already deleted from the config

SVN-Revision: 36092
2013-03-19 16:18:05 +00:00
Jo-Philipp Wich
03cb7986fc firewall3: update to git head
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197)
	- do not allow src_mac option for SNAT rules

SVN-Revision: 36090
2013-03-19 13:54:34 +00:00
Felix Fietkau
31876c193a hostapd: fix build errors on supplicant-only builds
SVN-Revision: 36085
2013-03-18 16:11:32 +00:00
Steven Barth
3ebdd3b330 odhcp6c: fix preference handling, custom client-ID * thanks to mbidewell for investigating
SVN-Revision: 36083
2013-03-18 07:24:49 +00:00
Felix Fietkau
2167101c90 hostapd: initial prototype of an ubus binding
Supports listing, removing and banning clients, and hooking into
probe/assoc/auth requests via object subscribe.

SVN-Revision: 36081
2013-03-17 20:47:18 +00:00
Felix Fietkau
84069f8534 uhttpd: update to latest version, fixes an occasional crash on CGI scripts
SVN-Revision: 36034
2013-03-15 13:43:55 +00:00
Jo-Philipp Wich
54f9f47a28 firewall3: update to git head
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains)
 * Allow "network" and "device" commands while firewall is running (to make them usable in includes)

SVN-Revision: 36009
2013-03-14 15:29:43 +00:00
John Crispin
fce3deddff use new button scheme
Signed-off-by: John Crispin <blogic@openwrt.org>

SVN-Revision: 36004
2013-03-13 18:11:25 +00:00
Jo-Philipp Wich
9faa312dbb firewall3: update to git head
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd)
 * Make NAT reflection direction configurable
 * Map init script stop action to flush
 * Map init script reload action to reload
 * Respect init script disabled state in hotplug handler

SVN-Revision: 35998
2013-03-13 15:46:30 +00:00
Felix Fietkau
9ddc45bc3f hostapd: fix client reassociation after too many ACK failures
SVN-Revision: 35973
2013-03-12 00:19:25 +00:00
Jo-Philipp Wich
8c7ed1cb7b firewall3: update to git head
* Fixes compilation against eglibc
 * Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall
 * Fixes tracking logic for user chains by differentiating between reloads and restarts
 * Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule
 * Supports legacy "tcpudp" protocol notation again

SVN-Revision: 35969
2013-03-11 20:52:20 +00:00
Jo-Philipp Wich
e259ecad7e Revert "firewall3: update to git head"
This reverts commit 89969fa333c90fdb217b7289272f3427add107de.

SVN-Revision: 35904
2013-03-08 19:52:18 +00:00
Jo-Philipp Wich
50213fc354 firewall3: update to git head
- introduce per-zone user chains
	- support legacy "tcpudp" protocol notation

SVN-Revision: 35903
2013-03-08 15:27:33 +00:00
Steven Barth
39a001dc69 odhcp6c: various bugfixes * Don't prematurely send RENEW / REBIND when T1 or T2 is > 1 day * Add "norelease" option to not send a RELEASE when stopping
SVN-Revision: 35902
2013-03-08 07:04:38 +00:00
Steven Barth
62ea398cd8 iptables: Add missing IPv6 builtin modules
SVN-Revision: 35898
2013-03-07 08:48:41 +00:00
Steven Barth
9779b0b88c iptables: redo update to 1.4.18 with old linking-behaviour
SVN-Revision: 35896
2013-03-06 17:05:34 +00:00
Steven Barth
bacd71648b Revert "iptables: update to 1.4.18" due to toolchain-issue: binaries cause segfaults when stripped on ar71xx
SVN-Revision: 35894
2013-03-06 12:55:48 +00:00
Felix Fietkau
c3faa6be75 hostapd: include the madwifi headers in the package directory to avoid compile breakage if the madwifi build fails
SVN-Revision: 35893
2013-03-05 22:06:30 +00:00
Steven Barth
d023a08753 iptables: update to 1.4.18
SVN-Revision: 35892
2013-03-05 20:51:57 +00:00
Jo-Philipp Wich
d75c632de6 firewall3: add default config and firewall.user
SVN-Revision: 35889
2013-03-05 13:45:09 +00:00
Felix Fietkau
fa1749e668 hostapd: update to git version 2013-03-02
SVN-Revision: 35887
2013-03-04 17:16:38 +00:00
Jo-Philipp Wich
89be702bff firewall3: update to git head, introduces support for "enabled" option
SVN-Revision: 35845
2013-03-02 17:09:33 +00:00
Steven Barth
c81945e979 6relayd: Fix illegal memory accesses Spurious errors when receiving netlink-messages lead to unhandled errors which caused SIGBUS. Thanks to tdavis for debugging
SVN-Revision: 35836
2013-02-28 16:37:20 +00:00
Steven Barth
50b7fa217a 6relayd: various fixes cap preferred and valid lifetimes at more reasonable limits decrease memory usage (remove unnecessary book-keeping)
SVN-Revision: 35835
2013-02-28 14:57:19 +00:00
Jo-Philipp Wich
886ce188bf xtables-addons: fix packaging of iptaccount
SVN-Revision: 35831
2013-02-28 10:58:12 +00:00
Jo-Philipp Wich
557c047f71 firewall3: clear contnrack table on flush, set policies to drop during rule reload
SVN-Revision: 35820
2013-02-27 14:09:37 +00:00
Steven Barth
a90b6f7d90 6relayd: Fix config behaviour for rewrite_dns_addr option
SVN-Revision: 35804
2013-02-26 12:50:52 +00:00
Steven Barth
32ac53821f 6relayd: compatibility with broken IPv6 devices * Announce ULA as deprecated if other addresses are available * Allow the announced DNS-server to be overwritten
SVN-Revision: 35803
2013-02-26 12:42:53 +00:00
Jo-Philipp Wich
92062542e2 firewall: fix logging rule regression (#12999)
SVN-Revision: 35745
2013-02-22 13:45:20 +00:00
Jo-Philipp Wich
4fb2cd18c1 firewall3: add support for shell script and iptables-restore style includes
SVN-Revision: 35744
2013-02-22 12:45:38 +00:00
Steven Barth
a7b262dc0a netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions.
SVN-Revision: 35743
2013-02-22 08:56:29 +00:00
Jo-Philipp Wich
7d7d88b580 firewall3: update to git head
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
	- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
	- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
	- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')

SVN-Revision: 35738
2013-02-21 22:33:44 +00:00
Florian Fainelli
280fa5a1a2 dante: fix broken configure script not using CFLAGS for conftest
Spotted by doing an ARM hard float build.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 35685
2013-02-19 17:22:55 +00:00
Steven Barth
3081c672fc 6relayd: Fix possible memory corruption issue
SVN-Revision: 35673
2013-02-19 12:04:41 +00:00
Steven Barth
f5b63ffd33 6relayd: Workaround potential signal handling issue
SVN-Revision: 35665
2013-02-18 12:50:36 +00:00
Jo-Philipp Wich
02b0c62f33 firewall3 - a C implementation of the current firewall scripts
SVN-Revision: 35643
2013-02-17 19:26:52 +00:00
Felix Fietkau
1d6574b9c3 hostapd: fix the scan wait patch for multiple interfaces
SVN-Revision: 35630
2013-02-16 19:00:34 +00:00
Felix Fietkau
99782943d2 hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update
SVN-Revision: 35619
2013-02-16 14:26:03 +00:00
Jonas Gorski
c98b12d911 samba36: fix segmentation fault when trying to add non-existent users
Based on a patch from НКВД. Closes #12962.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

SVN-Revision: 35610
2013-02-16 11:39:42 +00:00
Steven Barth
99b69fd9c5 odhcp6c: allow setting a user-provided prefix as well
SVN-Revision: 35570
2013-02-12 08:23:54 +00:00
Jo-Philipp Wich
eeaf2c0b5a iptables: fix bad PKG_RELEASE in previous commit
SVN-Revision: 35569
2013-02-11 22:14:38 +00:00
Jo-Philipp Wich
916902b1d2 iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
SVN-Revision: 35568
2013-02-11 21:58:42 +00:00
Felix Fietkau
1810b80ec0 mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default
SVN-Revision: 35565
2013-02-11 18:59:10 +00:00
Steven Barth
b8c796fbd7 odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging
SVN-Revision: 35553
2013-02-11 12:30:16 +00:00
Felix Fietkau
a9058439cf openvpn-easy-rsa: fix typo in version (#12958)
SVN-Revision: 35508
2013-02-06 22:17:11 +00:00
Felix Fietkau
dc2ba40af3 openvpn: remove the stale PKG_REV variable
SVN-Revision: 35499
2013-02-05 10:40:19 +00:00
Felix Fietkau
b8c903e6f8 openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball
SVN-Revision: 35498
2013-02-05 10:40:13 +00:00
Jo-Philipp Wich
e106f25ee7 firewall: various enhancements
- reduce mssfix related log spam (#10681)
	- separate src and dest terminal chains (#11453, #12945)
	- disable per-zone custom chains by default, they're rarely used

Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.

SVN-Revision: 35484
2013-02-04 14:38:33 +00:00
Steven Barth
13544edce7 odhcp6c: Fix timing issues
SVN-Revision: 35472
2013-02-03 17:26:40 +00:00
Jo-Philipp Wich
e893d4d9a8 libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend()
SVN-Revision: 35471
2013-02-03 12:03:24 +00:00
Steven Barth
6be5a5a73d odhcp6c: Fix RENEW and REBIND requests
SVN-Revision: 35454
2013-02-02 10:44:13 +00:00
Steven Barth
e2193a69c8 odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested
SVN-Revision: 35421
2013-02-01 13:38:47 +00:00
Steven Barth
6a43437908 netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
SVN-Revision: 35420
2013-02-01 12:28:43 +00:00
Steven Barth
9a62439c28 odhcp6c: switch to userspace RA-handling and offload address assignment to netifd
SVN-Revision: 35419
2013-02-01 12:28:39 +00:00
Steven Barth
a3368da479 6relayd: Fix announced router flags and IPv6 procfs-configuration
SVN-Revision: 35418
2013-02-01 12:28:34 +00:00
Felix Fietkau
416ce374c0 openvpn: add from openvpn-devel from /packages, fix support for current polarssl
SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
Steven Barth
4bd3f54143 6in4: fix typo in last commit
SVN-Revision: 35409
2013-01-30 09:07:23 +00:00
Steven Barth
a0a91963af 6in4: work around hanging wget process
SVN-Revision: 35408
2013-01-30 09:05:53 +00:00
Felix Fietkau
65657fb585 netifd: update to latest version
fixes DNS servers on reload (#12910)
fixes ubus object race on reload or down/up (#12612)

SVN-Revision: 35383
2013-01-29 14:40:04 +00:00
Felix Fietkau
c16879a385 samba36: update to 3.6.11 and refresh patches (based on patch from #12914)
SVN-Revision: 35382
2013-01-29 13:18:56 +00:00
Steven Barth
777f7b30ae netifd: implement IPv6 prefix deprecation according to RFC 6204
SVN-Revision: 35377
2013-01-29 11:05:22 +00:00
Steven Barth
78a6439784 6relayd: remove IPv6 forwarding-sysctl workaround
SVN-Revision: 35371
2013-01-29 10:13:49 +00:00
Steven Barth
1a0b207d61 odhcp6c: remove IPv6 forwarding-sysctl workaround
SVN-Revision: 35370
2013-01-29 10:13:44 +00:00
Steven Barth
fac1ed35ac netifd: remove IPv6 forwarding-sysctl workaround
SVN-Revision: 35369
2013-01-29 10:13:39 +00:00
Felix Fietkau
6ea9abadeb netifd: update to latest version, fixes setting addresses/routes on alias interfaces
SVN-Revision: 35362
2013-01-28 20:35:55 +00:00
Jo-Philipp Wich
e804a663e3 hostapd: don't configure wpa_supplicant with empty password="" if no password is specified (#12912)
SVN-Revision: 35358
2013-01-28 18:05:33 +00:00
Jo-Philipp Wich
839f3ab0e7 firewall: flush conntrack table after changing interface rules
SVN-Revision: 35348
2013-01-28 15:53:44 +00:00
Steven Barth
ec41a6a08c netifd: IPv6 sysctl, restart IPv6 in static mode to send RS
SVN-Revision: 35347
2013-01-28 14:07:27 +00:00
Steven Barth
75b06607db netifd: add SLAAC ipv6 value for static-proto
SVN-Revision: 35346
2013-01-28 13:53:48 +00:00
Steven Barth
e964fa5d8f odhcp6c: work-around for proto-script to avoid loosing the default route
SVN-Revision: 35345
2013-01-28 13:53:43 +00:00
Steven Barth
a81c76617e ipv6-support: don't overwrite existing setting across reflashs
SVN-Revision: 35302
2013-01-23 08:15:09 +00:00
Felix Fietkau
55eab5ac44 netifd: update to latest version, adds another fix for interface aliases
SVN-Revision: 35297
2013-01-22 16:05:59 +00:00
Steven Barth
5859fc7a39 netifd: Fix a segfault when globals.ula_prefix is empty
SVN-Revision: 35296
2013-01-22 15:49:42 +00:00
Felix Fietkau
a4c7a953e5 uhttpd: always turn on TLS support, include ustream-ssl as a build dependency
SVN-Revision: 35295
2013-01-22 15:05:04 +00:00
Felix Fietkau
bab482b93f uhttpd: fix another small hang issue with the same symptoms
SVN-Revision: 35291
2013-01-22 09:38:00 +00:00
Felix Fietkau
166ea3832b uhttpd: fix connection hangs
SVN-Revision: 35290
2013-01-22 09:28:55 +00:00
Felix Fietkau
bc1d72c7bf tcpdump: add SLL parsing support to tcpdump-mini, use -ffunction-sections, -fdata-sections and --gc-sections to reduce size
SVN-Revision: 35288
2013-01-22 07:51:15 +00:00
Felix Fietkau
c725669079 uhttpd: fix unencrypted passwords in httpd.conf
SVN-Revision: 35265
2013-01-21 12:46:41 +00:00
Steven Barth
38080ae550 6relayd: fix shell library includes in init-script
Thanks to Daniel Golle

SVN-Revision: 35262
2013-01-21 11:27:03 +00:00
Steven Barth
8a97d823a4 6relayd: avoid a race-condition with looping RAs
SVN-Revision: 35260
2013-01-21 10:42:31 +00:00
Steven Barth
f129c6786e netifd: Fix segfaults in IPv6 prefix handling
SVN-Revision: 35259
2013-01-21 09:21:30 +00:00
Steven Barth
f1fd0f8278 odhcp6c: Fix address assignment with infinite validity
SVN-Revision: 35258
2013-01-21 07:58:58 +00:00
Felix Fietkau
4a86973285 uhttpd: fix selecting the right ustream implementation when openssl is to be used (#12857)
SVN-Revision: 35257
2013-01-20 21:15:43 +00:00
Felix Fietkau
5bc6555e08 netifd: update to latest version, fixes alias support
SVN-Revision: 35251
2013-01-20 15:47:09 +00:00
Felix Fietkau
18a7d0e945 network/iproute2: Bump version to 3.7.0
Updated to latest stable version and added an upstream patch to handle
a link failure

Signed-off-by: Oliver Smith <olipro@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>
[dgolle@allnet.de: refreshed patches]
Signed-off-by: Daniel Golle <dgolle@allnet.de>

SVN-Revision: 35250
2013-01-20 11:25:18 +00:00
Felix Fietkau
e55ee0817f uhttpd: update to a newer version, fixes chunked transfer on some POST requests
SVN-Revision: 35249
2013-01-19 22:55:46 +00:00
Felix Fietkau
6f0ecf0541 uhttpd: switch to uhttpd2, it is now feature complete
SVN-Revision: 35247
2013-01-19 18:47:09 +00:00
Jo-Philipp Wich
f2766239ea netifd: add a band-aid fix for the wifi setup vs. netifd init race by increasing the wait time to five seconds
SVN-Revision: 35240
2013-01-19 10:13:14 +00:00
Steven Barth
62e9957cc4 ipv6-support: adapt UCI defaults to new ordering
SVN-Revision: 35219
2013-01-18 12:52:51 +00:00
Steven Barth
5a122f7e5f odhcp6c: Fix parsing more than one DNS server
SVN-Revision: 35215
2013-01-18 08:21:35 +00:00
Steven Barth
f517d0481a ipv6-support: Rename enable-ipv6 UCI defaults
SVN-Revision: 35205
2013-01-17 16:16:06 +00:00
Jo-Philipp Wich
7250e27869 xtables-addons: rework uid/gid compat patch to use KUIDT_INIT() and KGIDT_INIT() macros
SVN-Revision: 35203
2013-01-17 16:05:30 +00:00
Jo-Philipp Wich
3b798d819d xtables-addons: move to package/, add myself as maintainer
SVN-Revision: 35193
2013-01-17 12:29:26 +00:00
Steven Barth
66fa83d211 odhcp6c: Detect a different MAC if interface has none * Fixes DHCPv6 behaviour over PPP and similar
SVN-Revision: 35189
2013-01-17 08:29:01 +00:00
Steven Barth
73875c1215 ppp: don't automatically set IPv6 default route * Fixes "ndisc_router_discovery() failed to add default route"
SVN-Revision: 35188
2013-01-17 08:28:57 +00:00
Steven Barth
1ecc744583 netifd: @aliases use layer 3 devices instead of main devices Fixes dhcpv6 protocol alias
SVN-Revision: 35187
2013-01-17 08:28:51 +00:00
Steven Barth
3235d860a6 ipv6-support: Switch to native IPv6 support
SVN-Revision: 35174
2013-01-15 13:08:19 +00:00
Steven Barth
955a1e8e28 6rd: add support for native IPv6 prefix handling
SVN-Revision: 35173
2013-01-15 13:08:14 +00:00
Steven Barth
811cd2acf4 6to4: add support for native IPv6 prefix handling
SVN-Revision: 35172
2013-01-15 13:08:10 +00:00
Steven Barth
2a94f67029 6in4: add support for native IPv6 prefix handling
SVN-Revision: 35171
2013-01-15 13:08:05 +00:00
Steven Barth
a1e92f6dd1 6relayd: add suitable default configuration
SVN-Revision: 35170
2013-01-15 13:08:00 +00:00
Steven Barth
859fd7f614 6distributed: Remove obsolete service (replaced by netifd)
SVN-Revision: 35169
2013-01-15 13:07:56 +00:00
Steven Barth
06890959d1 netifd: Introduce native IPv6 prefix-handling
SVN-Revision: 35167
2013-01-15 13:07:41 +00:00
Jo-Philipp Wich
03a50b9087 netfilter.mk: add addrtype match to iptables-mod-extra (kmod-ipt-extra)
SVN-Revision: 35155
2013-01-14 16:12:56 +00:00
Jo-Philipp Wich
e5548b03e5 netifd: update to git head, adds 64bit counters
SVN-Revision: 35140
2013-01-13 19:48:52 +00:00
Steven Barth
0cd21ca785 odhcp6c: Send RS on start
SVN-Revision: 35137
2013-01-13 18:06:24 +00:00
Steven Barth
f0df2006af odhcp6c: Add preliminary proto-handler
SVN-Revision: 35135
2013-01-13 17:35:09 +00:00
Steven Barth
b58a13cb2c ipv6-support: don't use disable_ipv6
SVN-Revision: 35134
2013-01-13 17:25:43 +00:00
Steven Barth
fde5b934fd 6relayd: Rewrite init-script logic
SVN-Revision: 35133
2013-01-13 17:25:38 +00:00
Steven Barth
b077480a59 firewall: Add ULA site border for IPv6 traffic This prevents private traffic from leaking out to the internet
SVN-Revision: 35012
2013-01-04 15:59:28 +00:00
Jo-Philipp Wich
3b7882e775 iwinfo: don't use the txpower value from debugfs for now, it does not match the values reported via wext
SVN-Revision: 35007
2013-01-04 14:08:08 +00:00
John Crispin
ff0c7a9ec9 don't depend on lua
Delete +lua from libiwinfo-lua.

Signed-off-by: Stefan Hellermann <stefan@the2masters.de>

SVN-Revision: 35005
2013-01-04 09:32:06 +00:00
Steven Barth
965afef317 ipv6-support: Update iteration * Add support for blocking forwarding while address assignments * Fix relay restarting function
SVN-Revision: 34985
2013-01-02 23:05:44 +00:00
Steven Barth
c7d9d7c952 odhcp6c: Add support for SNTP and SIP options
SVN-Revision: 34984
2013-01-02 23:05:39 +00:00
Steven Barth
4a2e55f30f 6relayd: Announce RDNSS and DNSSL via RA
SVN-Revision: 34983
2013-01-02 23:05:35 +00:00
Jo-Philipp Wich
1683a146f4 iwinfo: replace more wext calls with nl80211 equivalents, attempt to infer nl80211 tx power from debugfs before querying wext
SVN-Revision: 34982
2013-01-02 19:10:29 +00:00
Jo-Philipp Wich
54c0b40427 dnsmasq: allow dhcp host entries without mac addresses (#11928)
SVN-Revision: 34971
2013-01-02 15:14:19 +00:00
Jo-Philipp Wich
c8a8f8fd55 lldpd: various enhancements
- introduce "list interface" options to specify the ifaces to listen on, takes uci- or network device name
	- set the default system description to distrib @ hostname, e.g. "OpenWrt Barrier Breaker r34744 @ vbox"
	- introduce "option lldp_description" to override the automatically generated description

SVN-Revision: 34970
2013-01-02 14:35:43 +00:00
John Crispin
a730e96569 Remove remaining etrax references
SVN-Revision: 34968
2013-01-02 11:28:11 +00:00
Steven Barth
7a25be66c3 6relayd: Detect changes of default routes for RAs
SVN-Revision: 34958
2013-01-01 21:41:37 +00:00
Steven Barth
def80bbecf ipv6-support: Remove unnecessary code
SVN-Revision: 34957
2013-01-01 21:41:32 +00:00
Steven Barth
4c09d5dde3 ipv6-support: Fix typo in dhcpv6-script * thanks to KarlHegbloom for reporting
SVN-Revision: 34940
2012-12-31 09:38:59 +00:00
Steven Barth
b7c1f24f9b ipv6-support: Use more consistent default values
SVN-Revision: 34913
2012-12-29 10:12:31 +00:00
Steven Barth
e7719bb4aa ipv6-support: Updated functionality * Add site-border feature again * Add option to always announce a default router
SVN-Revision: 34908
2012-12-28 12:02:22 +00:00
Steven Barth
ce41e59030 6distributed: Add null-route for delegated prefix * Fixes forwarding loops for unused subprefixes
SVN-Revision: 34907
2012-12-28 12:02:17 +00:00
Steven Barth
d6c955e39a 6relayd: Announce DNS search domain via DHCPv6
SVN-Revision: 34906
2012-12-28 12:02:12 +00:00
Steven Barth
253d7345e1 ipv6-support: Remove site-border feature * was causing routing problems * will be reimplemented using firewall
SVN-Revision: 34898
2012-12-27 15:47:53 +00:00
Steven Barth
941f4ccd68 Remove site-border routing filter due to problems
SVN-Revision: 34897
2012-12-27 15:47:47 +00:00
Steven Barth
01059c8914 ipv6-support: * Automatically detect and propagate MTU from upstream interfaces * Add site-border feature (RFC 6204, ULA-4) * Fix a typo
SVN-Revision: 34896
2012-12-27 14:10:17 +00:00
Steven Barth
50a9fed238 6distributed: feature update * Add feature to decrease IPv6-specific MTU on-demand * Add commands to enable / disable a site-border
SVN-Revision: 34895
2012-12-27 14:10:12 +00:00
Steven Barth
4bab347e98 6relayd: Advertise IPv6-specific MTU instead of generic * Fixes announced MTU when using tunnels
SVN-Revision: 34894
2012-12-27 14:10:07 +00:00
Steven Barth
970adc9eb9 ipv6-support: Fix default RA settings for dnsmasq
SVN-Revision: 34873
2012-12-23 18:22:48 +00:00
Felix Fietkau
7ed89e8542 dropbear: convert init script to procd
SVN-Revision: 34867
2012-12-22 18:56:13 +00:00
Felix Fietkau
82bd58c793 dropbear: use network_get_device instead of scan_interfaces to get the device name
SVN-Revision: 34863
2012-12-22 18:55:57 +00:00
Steven Barth
a4e656ef24 ipv6-support: Preliminary support for dnsmasq >=2.66
SVN-Revision: 34858
2012-12-22 13:00:53 +00:00
Steven Barth
2dbfffef68 6relayd: Fix detection of prefix changes
SVN-Revision: 34857
2012-12-22 13:00:49 +00:00
Steven Barth
f36c3067c6 odhcp6c: Fix build on arch where char is unsigned
SVN-Revision: 34856
2012-12-22 13:00:45 +00:00
Steven Barth
970c5d97fe 6distributed: Improve prefix deprecation algorithm
SVN-Revision: 34855
2012-12-22 13:00:40 +00:00
Gabor Juhos
149b1c46c7 ipset: update to 6.16.1 to fix build with kernel 3.7
Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

SVN-Revision: 34752
2012-12-18 14:50:44 +00:00
Felix Fietkau
bf34eeaea4 netifd: update to latest version, fixes interface error reporting for shell proto handlers
SVN-Revision: 34741
2012-12-17 22:24:31 +00:00
Felix Fietkau
14281559e1 netifd: update to latest version, no longer needs the removed jshn_append() shell function
SVN-Revision: 34734
2012-12-17 14:57:15 +00:00
Felix Fietkau
056d75049d wpa_supplicant.sh: always use parameters from the current section
Using variables from the outer scope unnecessarily complicates the code and
leads to issues.

This patch fixes the bug when having an "adhoc" wifi-iface section before a
"sta" section prevents wpa_supplicant from using the key specified in the
corresponding section as it tries to use the "adhoc" key instead (1 by
default).

Signed-off-by: Paul Fertser <fercerpav@gmail.com>

SVN-Revision: 34716
2012-12-16 13:23:37 +00:00
John Crispin
e9c0b95829 fixes uapi helper define
SVN-Revision: 34715
2012-12-16 11:04:27 +00:00
Felix Fietkau
860c2e8116 netifd: call /etc/udhcp.user from the netifd dhcp.script
This was done previously when dhcp was handled by the network scripts.
So netifd should behave the same.

Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 34704
2012-12-15 17:19:24 +00:00
John Crispin
06c9170a7c move ltq-adsl-tool
SVN-Revision: 34694
2012-12-15 02:00:39 +00:00
John Crispin
4583469413 make use of uapi directory wrapper
SVN-Revision: 34684
2012-12-15 01:59:19 +00:00
Gabor Juhos
86cd825c1f package/swconfig: don't use kernel headers
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

SVN-Revision: 34679
2012-12-14 12:11:50 +00:00
Felix Fietkau
b85c8a6361 netifd: update to latest version, fixes purging old resolv.conf entries after ifdown
SVN-Revision: 34664
2012-12-13 16:14:41 +00:00
Steven Barth
8d9564af1b ipv6-support: Make ULA addresses secondary * Deprecates ULA prefixes when there are other public prefixes * Fixes issues with clients using incorrect source addresses
SVN-Revision: 34630
2012-12-11 16:56:37 +00:00
Steven Barth
8546f8a401 6distributed: Add support for secondary addresses
SVN-Revision: 34629
2012-12-11 16:56:32 +00:00
Steven Barth
14273e1120 6relayd: Fix announcement of deprecated prefixes
SVN-Revision: 34628
2012-12-11 16:56:27 +00:00
Steven Barth
faba477274 ipv6-support: Add support for NPT status tracking
SVN-Revision: 34609
2012-12-10 16:46:59 +00:00
Steven Barth
cd76023e97 6distributed: add status-call for luci-integration
SVN-Revision: 34608
2012-12-10 16:46:54 +00:00
Felix Fietkau
01513b7c8b iw: sync with nl80211.h to fix setting antenna gain
SVN-Revision: 34593
2012-12-10 13:51:06 +00:00
Steven Barth
a07ddb955f ipv6-support: Next iteration * Make ula_prefix a global option * Add preliminary support for NAT (Linux >= 3.7, ip6tables >= 1.4.17) * Minor fixes for prefix fallback
SVN-Revision: 34586
2012-12-09 13:54:22 +00:00
Steven Barth
57d853ffc4 6distributed: Correctly handle duplicate prefixes
SVN-Revision: 34585
2012-12-09 13:32:30 +00:00
Steven Barth
eeeb59e451 6relayd: Always send NA with hop-limit 255 * thanks risa2000 for investigating
SVN-Revision: 34584
2012-12-09 12:33:28 +00:00
Jo-Philipp Wich
16d0957a4e firewall: fix typo in reflection hotplug script
SVN-Revision: 34569
2012-12-07 13:08:28 +00:00
Steven Barth
63135142d8 6to4: Remove static radvd-integration * Please use the new ipv6-support package
SVN-Revision: 34567
2012-12-07 08:53:53 +00:00
Steven Barth
82576f0ca3 ipv6-support: next iteration * Introduce mode 6rd * Introduce mode 6to4 * Fix announcement of DNS-Servers received from DHCPv6 * Fix some corner-cases in relaying behaviour
SVN-Revision: 34542
2012-12-06 20:52:40 +00:00
Steven Barth
61e8c6b83b 6relayd: More RFC-compatibility and size reduction
SVN-Revision: 34541
2012-12-06 20:52:35 +00:00
Steven Barth
f14e1f1b1d 6distributed: Add compatibility with 6rd and 6to4
SVN-Revision: 34540
2012-12-06 20:52:30 +00:00
Jo-Philipp Wich
d221222907 ppp: unconditionally start pppd with nodefaultroute and usepeerdns (#12580)
Since the switch to netifd, proto handlers may always set the defaultroute
and provide dns server addresses, netifd will decide in the generic code
path whether the announced values are masked or not.

Additionally protocol handlers should not modify the routing tables themselves
and prevent any launched services from doing so.

Remove the additional defaultroute and peerdns option handling from the ppp.sh
protocol handler and rely on netifd to mask or not mask the values.

SVN-Revision: 34536
2012-12-06 18:17:21 +00:00
Felix Fietkau
838d6e3b8d netifd: update to latest version, fixes resolv.conf writes on interface setting changes
SVN-Revision: 34500
2012-12-05 13:28:56 +00:00
Florian Fainelli
9e355444a6 dropbear: update to 2012.55 and refresh patches
Upstream has a few code cleanups, more eagerly burns sensitive memory and
includes the fix for CVE-2012-0920. Full changelog:
https://matt.ucc.asn.au/dropbear/CHANGES

Local changes:
- Removed PKG_MULTI which is no longer in options.h (even before 2011.54)
- Merged DO_HOST_LOOKUP into 120-openwrt_options.patch
- Removed LD from make opts (now included in TARGET_CONFIGURE_OPTS)
- Removed 400-CVE-2012-0920.patch which is included in 2012.55

Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>
Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34496
2012-12-04 16:40:17 +00:00
Jo-Philipp Wich
6504b268b3 firewall: extend nat reflection support
- use comment match to keep track of per-network rules
	- setup reflection for any interface which is part of a masqueraded zone, not just "wan"
	- delete per-network reflection rules if network is brought down

SVN-Revision: 34472
2012-12-04 15:24:21 +00:00
Felix Fietkau
8516ddb133 mac80211, hostapd: Fix macfilter for multi bssid setups
Previously only the first macfilter configuration would have been used
on all interfaces. However, the configuration was always done per vif
already. Hence, move the macfilter setup into hostapd.sh where and
create one mac list file per vif.

Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

SVN-Revision: 34470
2012-12-04 12:06:40 +00:00
Mirko Vogt
4c30952394 Make ltq-dsl-app compile with an eglibc-based toolchain
Signed-Off-By: Frank Meerkötter <frank@meerkoetter.org>

SVN-Revision: 34468
2012-12-03 12:46:57 +00:00
Steven Barth
4bda16cf27 ipv6-support: Second Iteration * mode 'downstream' renamed to 'router' * mode 'upstream' renamed to 'dhcpv6' * mode 'relay' added * cleanups and minor bugfixes in state handling
SVN-Revision: 34466
2012-12-03 09:18:53 +00:00
Steven Barth
71ed7ae842 netifd: empty hotplug handler removed
SVN-Revision: 34465
2012-12-03 07:20:44 +00:00
Steven Barth
c6b0c63cad 6distributed: Poll for ubus to come up (fix race)
SVN-Revision: 34462
2012-12-02 19:06:48 +00:00
Gabor Juhos
5d8a7a0ce5 Make teql hotplug script run sooner
In particular, it wants to run before the ntpclient script. Which may
block for a long time attempting to do DNS lookups for NTP servers. In
my case, that would have *worked* if the new device had been added to
teql first, rather than timing out.

This was effectively causing a huge delay between an interface coming
up, and routing actually starting to work.

Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
Signed-off-by: Gabor Juhos <juhosg@openwrt.org>

SVN-Revision: 34442
2012-12-02 13:04:03 +00:00
Steven Barth
a0f0c23109 ipv6-support: Add conffiles section
SVN-Revision: 34423
2012-11-29 20:33:17 +00:00
Steven Barth
a4edea5ef3 ipv6-support: Add new IPv6-support meta-package
SVN-Revision: 34422
2012-11-29 20:14:28 +00:00
Steven Barth
e6e6e0d152 odhcp6c: Add new embedded DHCPv6 client
SVN-Revision: 34421
2012-11-29 20:14:23 +00:00
Steven Barth
25d943e872 6distributed: add local IPv6 prefix distributor
SVN-Revision: 34420
2012-11-29 20:14:18 +00:00
Steven Barth
7d3495b431 6relayd: Fix some RFC 6204 compatibility issues
SVN-Revision: 34419
2012-11-29 20:14:14 +00:00
Steven Barth
dffa972af1 Remove old IPv6 sysctl-config (deprecated)
SVN-Revision: 34418
2012-11-29 20:14:09 +00:00
Florian Fainelli
062d3c1e67 iptables: fix typo in iptables musl patch after r34313
Thanks to Frank Meerkötter and Szabolcs Nagy for spotting the issue.

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34326
2012-11-25 11:40:59 +00:00
Florian Fainelli
14ed3f0f22 iptables: add some musl portability fixes
Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34313
2012-11-23 20:02:23 +00:00
Florian Fainelli
94bdc366d4 netfid: fix build on musl
AF_INET* is provided by sys/socket.h

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34310
2012-11-23 20:02:10 +00:00
Florian Fainelli
f1498531c7 hostapd: include sys/stat.h for a struct stat definition
Some libcs need this header to be explicitely included (e.g: musl)

Signed-off-by: Florian Fainelli <florian@openwrt.org>

SVN-Revision: 34295
2012-11-21 20:27:06 +00:00
Steven Barth
417af03ba5 6relayd: add conffiles section, thanks swalker
SVN-Revision: 34222
2012-11-17 09:44:41 +00:00
Steven Barth
45137b0896 6relayd: various updates & fixes - Add RD- and DHCPv6-server functionality - Rework configuration and add example UCI file - Fix various bugs and be more RFC compliant
SVN-Revision: 34204
2012-11-16 09:27:56 +00:00
Jo-Philipp Wich
db207e2a87 ppp: - fix multilink ppp with custom ifnames, patch by George Kashperko <george@znau.edu.ua> - refresh patches
SVN-Revision: 34171
2012-11-12 19:13:45 +00:00
Jo-Philipp Wich
3a81f75d72 resolveip: fix endless getopt() loop when compiled for arm (#12290)
SVN-Revision: 34116
2012-11-08 10:48:08 +00:00
Jo-Philipp Wich
611b2e8bb3 netifd: don't send a default client identifier in DHCP requests if no clientid uci option is given (#12426)
SVN-Revision: 34089
2012-11-05 19:28:24 +00:00
Felix Fietkau
c1aae78816 ppp: add more pppol2tpv3 related structs from the kernel headers to fix compile issues with linux 3.6
SVN-Revision: 34070
2012-11-04 17:01:27 +00:00
Felix Fietkau
16c72b09cc iptables: remove support for libipq, it has been obsolete for years and is unsupported in newer kernels
SVN-Revision: 34069
2012-11-04 17:01:23 +00:00
Steven Barth
9aba83eced 6relayd: auto-configure local interfaces as well
SVN-Revision: 34027
2012-10-31 12:48:54 +00:00
Jo-Philipp Wich
73c75e0dd8 uhttpd: update to latest git head, improves handling of invalid requests
SVN-Revision: 34010
2012-10-30 13:13:21 +00:00
Steven Barth
c3d04d4630 6relayd: update to work around a raw-socket bug
SVN-Revision: 34009
2012-10-30 07:43:07 +00:00
Steven Barth
1fe7efbddb ipv6: add 6relayd (RD-, DHCPv6- & NDP-Proxy)
6relayd is an IPv6-tool that relays IPv6-management protocols like router
discovery, neighbor discovery and DHCPv6 so that clients on routed
(non-bridged) interfaces can use the public address prefix, DHCPv6 and
DNS-service of a master interface. This is useful to avoid NAT in chained
IPv6-routers.

SVN-Revision: 34008
2012-10-30 07:14:07 +00:00
Felix Fietkau
fc3939a996 netifd: update to latest version, fixes adding an alias during config reload for an interface that is already up
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

SVN-Revision: 34006
2012-10-30 00:24:31 +00:00
Jo-Philipp Wich
0e3de8eff7 iwinfo: properly initialize memory of global nl80211_state, fixes random libnl-tiny assertions when using nl80211_probe() on not supported devices
SVN-Revision: 34003
2012-10-29 22:11:57 +00:00
Felix Fietkau
f911fb32fe hostapd: merge some pending fixes (fixes assoc errors when moving between vaps of the same wifi device)
SVN-Revision: 33919
2012-10-25 14:31:17 +00:00
Jo-Philipp Wich
1895d55e9d ltq-dsl-app: fix offline postinstall for dsl_control
SVN-Revision: 33901
2012-10-23 19:57:47 +00:00
Hamish Guthrie
81a3d9ba31 licensing: Add licensing metadata to many packages Two new variables are introduces to many packages, namely PKG_LICENSE and PKG_LICENSE_FILES - there may be more than one license applied to packages, and these are listed in the PKG_LICENSE variable and separated by spaces. All relevant license files are also added to the PKG_LICENSE_FILES variable, also space separated.
The licensing metadata is put into the bin/<platform>/packages/Packages file
for later parsing. A script for that is on it's way!

SVN-Revision: 33861
2012-10-19 15:34:28 +00:00
Jo-Philipp Wich
5fb6cf9a11 uhttpd: fix compilation with eglibc
SVN-Revision: 33860
2012-10-19 13:54:29 +00:00
Felix Fietkau
825592b54b netifd: update to latest version, fixes device cleanup and config reload issues when assigning a device to a different bridge
SVN-Revision: 33858
2012-10-19 13:51:48 +00:00
Felix Fietkau
88f3c59fb9 netifd: enable parallel build
SVN-Revision: 33832
2012-10-18 00:09:45 +00:00
John Crispin
a34499e095 move lots of kernel related packages to the new system/ folder
SVN-Revision: 33830
2012-10-17 22:45:58 +00:00
Felix Fietkau
965710d3e1 samba36: enable parallel build
SVN-Revision: 33829
2012-10-17 22:18:30 +00:00
John Crispin
c2b8d1a619 Fix broadcast DHCP client startup option in dhcp.sh
Signed-off-by: Hans Dedecker (hans.dedecker at technicolor.com)

Fixes the DHCP request broadcasts replies option parsing

SVN-Revision: 33826
2012-10-17 21:53:46 +00:00
Felix Fietkau
26944502e3 hostapd: merge a security fix for a TLS message buffer overflow (CVE-2012-4445)
SVN-Revision: 33815
2012-10-17 18:16:56 +00:00
Florian Fainelli
8fc2b30281 iftop: update iftop to 1.0pre2
Most significantly, includes IPv6 support.  This version forces
libncurses, by patching the configure script, instead of allowing
libncursesw, saving (~65k) image space.

Signed-off-by: Russell Senior <russell@personaltelco.net>

SVN-Revision: 33782
2012-10-16 15:49:49 +00:00
Jo-Philipp Wich
160c2ef011 uhttpd: update to latest git head - introduces support for multiple index files - fixes build with only the TLS module selected
SVN-Revision: 33778
2012-10-15 18:19:57 +00:00
Jo-Philipp Wich
14e14faa0b uhttpd: switch to external git repo + cmake build system
SVN-Revision: 33775
2012-10-15 12:31:33 +00:00
Florian Fainelli
19f91b26f5 rssileds: improve performance
LEDs brightness is now only updated if the value actually changed, thus reducing
the number of fwrite syscalls significantly.

Signed-off-by: Daniel Golle <dgolle@allnet.de>

SVN-Revision: 33766
2012-10-14 16:22:04 +00:00
Jo-Philipp Wich
a00110a063 6in4: make local ip6addr optional
SVN-Revision: 33761
2012-10-14 09:17:14 +00:00
Jo-Philipp Wich
1eded4f376 ipset: update to v6.14, drop obsolete patches
SVN-Revision: 33735
2012-10-12 12:19:46 +00:00
Jo-Philipp Wich
9e9efd8e49 lldpd: fix minor whitespace quirk in init script
SVN-Revision: 33730
2012-10-12 12:02:56 +00:00
Jo-Philipp Wich
0019b39001 lldpd: bump to v0.6.1, enable privilege separation and chrooting
SVN-Revision: 33729
2012-10-12 11:58:19 +00:00
Jo-Philipp Wich
f248332d52 thc-ipv6: update to v2.0, package all available utilities
SVN-Revision: 33728
2012-10-11 21:57:56 +00:00
Jo-Philipp Wich
f5d12a126d thc-ipv6: move to trunk and add myself as maintainer
SVN-Revision: 33727
2012-10-11 21:17:08 +00:00
Jo-Philipp Wich
936c1b9424 iputils: move to trunk and add myself as maintainer
SVN-Revision: 33704
2012-10-10 13:22:18 +00:00
Jo-Philipp Wich
c748c36d2c iftop: move to trunk and add myself as maintainer
SVN-Revision: 33702
2012-10-10 13:21:30 +00:00
Jo-Philipp Wich
711fdc3b09 conntrack-tools: move to trunk and add myself as maintainer
SVN-Revision: 33701
2012-10-10 13:19:43 +00:00
Jo-Philipp Wich
47ea3c7fee lldpd: move to trunk and add myself as maintainer
SVN-Revision: 33700
2012-10-10 13:17:14 +00:00
Jo-Philipp Wich
11549e1b73 dante: move to trunk and add myself as maintainer
SVN-Revision: 33699
2012-10-10 13:14:39 +00:00
Jo-Philipp Wich
b5ab35e816 ipset: move to trunk and add myself as maintainer
SVN-Revision: 33698
2012-10-10 13:13:17 +00:00
Felix Fietkau
05c2442957 package/network/utils/rssileds: claim maintainership
SVN-Revision: 33697
2012-10-10 13:07:29 +00:00
Jo-Philipp Wich
d1d1ae994b claim maintainership for resolveip and lua
SVN-Revision: 33694
2012-10-10 12:57:20 +00:00
Felix Fietkau
e51eb6046d add myself as a maintainer for a few more packages
SVN-Revision: 33693
2012-10-10 12:49:37 +00:00
Felix Fietkau
2fb3792fa9 hostapd: remove redundant MAINTAINER lines
SVN-Revision: 33692
2012-10-10 12:36:44 +00:00
Felix Fietkau
ed33bd8c7c iperf: move to trunk and add myself as maintainer
SVN-Revision: 33691
2012-10-10 12:35:43 +00:00
Felix Fietkau
5806525653 tcpdump: move to trunk and add myself as maintainer
SVN-Revision: 33690
2012-10-10 12:35:26 +00:00
Felix Fietkau
445936955e samba36: move to trunk and add myself as a maintainer
SVN-Revision: 33689
2012-10-10 12:34:29 +00:00
Felix Fietkau
405e21d167 packages: sort network related packages into package/network/
SVN-Revision: 33688
2012-10-10 12:32:29 +00:00