Jo-Philipp Wich
89be702bff
firewall3: update to git head, introduces support for "enabled" option
...
SVN-Revision: 35845
12 years ago
Steven Barth
c81945e979
6relayd: Fix illegal memory accesses Spurious errors when receiving netlink-messages lead to unhandled errors which caused SIGBUS. Thanks to tdavis for debugging
...
SVN-Revision: 35836
12 years ago
Steven Barth
50b7fa217a
6relayd: various fixes cap preferred and valid lifetimes at more reasonable limits decrease memory usage (remove unnecessary book-keeping)
...
SVN-Revision: 35835
12 years ago
Jo-Philipp Wich
886ce188bf
xtables-addons: fix packaging of iptaccount
...
SVN-Revision: 35831
12 years ago
Jo-Philipp Wich
557c047f71
firewall3: clear contnrack table on flush, set policies to drop during rule reload
...
SVN-Revision: 35820
12 years ago
Steven Barth
a90b6f7d90
6relayd: Fix config behaviour for rewrite_dns_addr option
...
SVN-Revision: 35804
12 years ago
Steven Barth
32ac53821f
6relayd: compatibility with broken IPv6 devices * Announce ULA as deprecated if other addresses are available * Allow the announced DNS-server to be overwritten
...
SVN-Revision: 35803
12 years ago
Jo-Philipp Wich
92062542e2
firewall: fix logging rule regression ( #12999 )
...
SVN-Revision: 35745
12 years ago
Jo-Philipp Wich
4fb2cd18c1
firewall3: add support for shell script and iptables-restore style includes
...
SVN-Revision: 35744
12 years ago
Steven Barth
a7b262dc0a
netifd: only update resolv.conf.auto if changed This avoids logspam under certain conditions.
...
SVN-Revision: 35743
12 years ago
Jo-Philipp Wich
7d7d88b580
firewall3: update to git head
...
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact
- properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions
- support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100')
- support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6')
SVN-Revision: 35738
12 years ago
Florian Fainelli
280fa5a1a2
dante: fix broken configure script not using CFLAGS for conftest
...
Spotted by doing an ARM hard float build.
Signed-off-by: Florian Fainelli <florian@openwrt.org>
SVN-Revision: 35685
12 years ago
Steven Barth
3081c672fc
6relayd: Fix possible memory corruption issue
...
SVN-Revision: 35673
12 years ago
Steven Barth
f5b63ffd33
6relayd: Workaround potential signal handling issue
...
SVN-Revision: 35665
12 years ago
Jo-Philipp Wich
02b0c62f33
firewall3 - a C implementation of the current firewall scripts
...
SVN-Revision: 35643
12 years ago
Felix Fietkau
1d6574b9c3
hostapd: fix the scan wait patch for multiple interfaces
...
SVN-Revision: 35630
12 years ago
Felix Fietkau
99782943d2
hostapd: add back the patch that waits for interface bringup in ht40, it got lost with the update
...
SVN-Revision: 35619
12 years ago
Jonas Gorski
c98b12d911
samba36: fix segmentation fault when trying to add non-existent users
...
Based on a patch from НКВД. Closes #12962 .
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 35610
12 years ago
Steven Barth
99b69fd9c5
odhcp6c: allow setting a user-provided prefix as well
...
SVN-Revision: 35570
12 years ago
Jo-Philipp Wich
eeaf2c0b5a
iptables: fix bad PKG_RELEASE in previous commit
...
SVN-Revision: 35569
12 years ago
Jo-Philipp Wich
916902b1d2
iptables: add --lenient switch to iptables-restore and ip6tables-restore that allows to skip erroneous lines
...
SVN-Revision: 35568
12 years ago
Felix Fietkau
1810b80ec0
mac80211/hostapd: short_preamble is a per-vif option and should be enabled by default
...
SVN-Revision: 35565
12 years ago
Steven Barth
b8c796fbd7
odhcp6c: Various bugfixes * Don't send undesired suggestions for preferred and valid lifetimes * Be less verbose in logging
...
SVN-Revision: 35553
12 years ago
Felix Fietkau
a9058439cf
openvpn-easy-rsa: fix typo in version ( #12958 )
...
SVN-Revision: 35508
12 years ago
Felix Fietkau
dc2ba40af3
openvpn: remove the stale PKG_REV variable
...
SVN-Revision: 35499
12 years ago
Felix Fietkau
b8c903e6f8
openvpn: split easy-rsa into a separate package, it is no longer bundled with the release tarball
...
SVN-Revision: 35498
12 years ago
Jo-Philipp Wich
e106f25ee7
firewall: various enhancements
...
- reduce mssfix related log spam (#10681 )
- separate src and dest terminal chains (#11453 , #12945 )
- disable per-zone custom chains by default, they're rarely used
Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest"
to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp
traffic to and from a specific port.
SVN-Revision: 35484
12 years ago
Steven Barth
13544edce7
odhcp6c: Fix timing issues
...
SVN-Revision: 35472
12 years ago
Jo-Philipp Wich
e893d4d9a8
libiwinfo: reset ioctl_socket fd in iwinfo_close(), fixes random failures with multiple cycles of iwinfo_finish() / iwinfo_backend()
...
SVN-Revision: 35471
12 years ago
Steven Barth
6be5a5a73d
odhcp6c: Fix RENEW and REBIND requests
...
SVN-Revision: 35454
12 years ago
Steven Barth
e2193a69c8
odhcp6c: allow IPv6-config via SLAAC-only if no prefix is requested
...
SVN-Revision: 35421
12 years ago
Steven Barth
6a43437908
netifd: Improved IPv6 featureset * Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes
...
SVN-Revision: 35420
12 years ago
Steven Barth
9a62439c28
odhcp6c: switch to userspace RA-handling and offload address assignment to netifd
...
SVN-Revision: 35419
12 years ago
Steven Barth
a3368da479
6relayd: Fix announced router flags and IPv6 procfs-configuration
...
SVN-Revision: 35418
12 years ago
Felix Fietkau
416ce374c0
openvpn: add from openvpn-devel from /packages, fix support for current polarssl
...
SVN-Revision: 35412
12 years ago
Steven Barth
4bd3f54143
6in4: fix typo in last commit
...
SVN-Revision: 35409
12 years ago
Steven Barth
a0a91963af
6in4: work around hanging wget process
...
SVN-Revision: 35408
12 years ago
Felix Fietkau
65657fb585
netifd: update to latest version
...
fixes DNS servers on reload (#12910 )
fixes ubus object race on reload or down/up (#12612 )
SVN-Revision: 35383
12 years ago
Felix Fietkau
c16879a385
samba36: update to 3.6.11 and refresh patches (based on patch from #12914 )
...
SVN-Revision: 35382
12 years ago
Steven Barth
777f7b30ae
netifd: implement IPv6 prefix deprecation according to RFC 6204
...
SVN-Revision: 35377
12 years ago
Steven Barth
78a6439784
6relayd: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35371
12 years ago
Steven Barth
1a0b207d61
odhcp6c: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35370
12 years ago
Steven Barth
fac1ed35ac
netifd: remove IPv6 forwarding-sysctl workaround
...
SVN-Revision: 35369
12 years ago
Felix Fietkau
6ea9abadeb
netifd: update to latest version, fixes setting addresses/routes on alias interfaces
...
SVN-Revision: 35362
12 years ago
Jo-Philipp Wich
e804a663e3
hostapd: don't configure wpa_supplicant with empty password="" if no password is specified ( #12912 )
...
SVN-Revision: 35358
12 years ago
Jo-Philipp Wich
839f3ab0e7
firewall: flush conntrack table after changing interface rules
...
SVN-Revision: 35348
12 years ago
Steven Barth
ec41a6a08c
netifd: IPv6 sysctl, restart IPv6 in static mode to send RS
...
SVN-Revision: 35347
12 years ago
Steven Barth
75b06607db
netifd: add SLAAC ipv6 value for static-proto
...
SVN-Revision: 35346
12 years ago
Steven Barth
e964fa5d8f
odhcp6c: work-around for proto-script to avoid loosing the default route
...
SVN-Revision: 35345
12 years ago
Steven Barth
a81c76617e
ipv6-support: don't overwrite existing setting across reflashs
...
SVN-Revision: 35302
12 years ago