313 Commits

Author SHA1 Message Date
Jo-Philipp Wich
ab98ef05fc firewall3: update to git head
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
  - Do not leak memory when processing rules with unknown targets or matches

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36698 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-23 13:07:44 +00:00
Felix Fietkau
4ffd43dbc7 uhttpd: update to latest version, fixes #13564, #13560, improves error handling as pointed out in #13537
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36696 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-23 10:50:42 +00:00
Steven Barth
cee5ff18de firewall3: Remove abandonend include
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36692 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-23 06:38:25 +00:00
Jo-Philipp Wich
d164d12b83 firewall3: update to git head
- fix build on Linux < 3.7
  - limit zone names to 14 bytes

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36691 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-22 14:15:53 +00:00
Steven Barth
3ba70f3735 6relayd: Let OpenWrt override default CFLAGS
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36690 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-22 11:58:54 +00:00
Jo-Philipp Wich
2d37cb839e firewall3: update to git head
- fixes reload when firewall is not running already
  - fixes crash when ipsets are supported but undeclared
  - fixes handling of per zone user chains on reload

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36689 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-22 11:37:41 +00:00
Steven Barth
b9453b277b 6relayd: Fix a segfault when multiple downstream interfaces are present
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36687 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 18:05:37 +00:00
Jo-Philipp Wich
d3c5b49487 firewall3: update to git head
- fixes segfault in flush command if ipset support is not available
  - fixes internal rule generation if custom chains are enabled

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36686 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 14:49:37 +00:00
Jo-Philipp Wich
dc6ea761b5 ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36685 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 13:00:28 +00:00
Jo-Philipp Wich
557bb37cc1 firewall3: move libext*.a copying to compile phase
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36684 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 12:58:36 +00:00
Jo-Philipp Wich
2952cc9bc7 netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36683 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 12:58:15 +00:00
Jo-Philipp Wich
3538668acf firewall3: update to git head
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
 * make ipset integration more reliable

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36681 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 10:15:14 +00:00
Jo-Philipp Wich
7962222d78 iptables: use -ffunction-sections, -fdata-sections and --gc-sections
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36680 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 10:15:10 +00:00
Steven Barth
8e44875fa6 odhcp6c: Various fixes
* Honour T1 and T2 values from servers better
* Correctly send Reconfigure-Accept option in requests

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36678 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 09:13:48 +00:00
Steven Barth
4b922c28c7 6relayd: Various DHCPv6-fixes
* Be more standards-compliant in stateful mode
* Handle hostnames from Windows-clients correctly
* Handle messages from DHCPv6-relays better

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36677 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 09:13:40 +00:00
Steven Barth
faf3d16ffa odhcp6c: Fix address / prefix expiry logic
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36675 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-20 14:54:20 +00:00
Steven Barth
b846672f60 dnsmasq: add directory for external hosts-files
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36655 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-17 14:44:12 +00:00
Steven Barth
e474674f51 6relayd: Add stateful DHCPv6-support (IA_NA)
* Add management_level option (0: set O-flag, >=1: set M-flag)
* Add support for static DHCPv6-leases
* Various fixes for DHCPv6-PD

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36654 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-17 14:44:07 +00:00
Steven Barth
456cbe5af8 netifd: Unify interface-based routing for IPv4 and IPv6
* Add interface option to set routing table for protocol routes
* Enabled for IPv6 for source-based filtering, disabled for IPv4

Based on a patch by Kristian Evensen. Thank You.

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36653 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-17 14:44:02 +00:00
Felix Fietkau
8ca26bf040 uhttpd: update to latest version, fixes index page processing order
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36644 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-16 11:38:19 +00:00
Luka Perkov
2b66fe5d47 [package] iproute2: workaround compile issues with gcc 4.8.x
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36642 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-16 00:04:48 +00:00
Steven Barth
6e1d7c26c9 odhcp6c: Fix handling of RAs when no DHCPv6-server is present
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36641 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-15 11:07:01 +00:00
Luka Perkov
6f7b2ac2c6 [package] iproute2: upgrade to 3.9.0
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36638 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-14 23:49:34 +00:00
Luka Perkov
5349a138da [package] iproute2: print help in connmark
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36637 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-14 23:49:31 +00:00
Felix Fietkau
e252bdb152 uhttpd: update to latest version, fixes a SSL connection memory leak
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36636 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-14 17:43:00 +00:00
Felix Fietkau
a9020a0859 package: fold the IPv6 menu into Network
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36634 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-14 15:02:31 +00:00
Steven Barth
cf6fa4f194 6relayd: Always announce the current MAC-address
* Fixes #13516 thanks to berni for the detailed bugreport.

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36629 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13 17:54:36 +00:00
Steven Barth
7171040fb1 ds-lite: add ds-lite network protocol handler
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36628 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13 17:12:39 +00:00
Steven Barth
18473a01f8 netifd: Various IPv6 improvements
* Add support for IP-in-IPv6 tunnels (DS-Lite)
* Use source-based routing for IPv6 to allow multi-wan
* Various smaller tunnel setup improvements

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36627 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13 17:12:34 +00:00
Steven Barth
683810fbff netifd: added support for setting up 6rd from DHCP
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36626 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13 17:12:30 +00:00
Steven Barth
1f64838bbc odhcp6c: added support for DS-Lite + various fixes
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36625 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13 17:12:25 +00:00
Steven Barth
761238ce0a firewall3: Remove obsoleted ULA-border
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36624 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13 17:12:20 +00:00
Steven Barth
b20c42e9d1 firewall3: add wan6 interface to wan-zone by default
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36623 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13 17:12:15 +00:00
Steven Barth
ac82d7ad0a firewall: Remove obsoleted ULA-border rule
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36622 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-13 17:12:10 +00:00
Steven Barth
9d99dd82f9 6rd: increase metric of default route
This will prefer native IPv6 over 6rd if both are present.

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36605 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-12 08:07:15 +00:00
Jo-Philipp Wich
333261901e iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36604 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-12 01:12:56 +00:00
Steven Barth
47fcfd999d add uci support for "proxy-dnssec" in dnsmasq
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.

Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36570 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-07 07:19:51 +00:00
Felix Fietkau
f4f4d54058 iw: update to 3.10, sync with nl80211.h changes in compat-wireless
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36569 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-06 22:35:50 +00:00
Steven Barth
528c719a3f odhcp6c: Make SLAAC-only work without reqprefix=no
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36555 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-06 10:20:43 +00:00
Jo-Philipp Wich
7f8b27f0e5 ipset-dns: support simultaneously populating IPv4 and IPv6 sets
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36554 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-06 10:01:45 +00:00
Jo-Philipp Wich
280eac850b Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36552 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-06 08:44:54 +00:00
Felix Fietkau
a1caa0f493 hostapd: enable 802.11r for the -full variant (#13250)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36533 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-03 10:39:57 +00:00
Jo-Philipp Wich
339f78f6e9 firewall3: update to git head
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422, #13386)
	- add support for fwmark matches and mark setting targets

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36521 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-02 13:42:20 +00:00
Jo-Philipp Wich
07664b6ac3 Fix install of iptables pkg-config files.
libiptc.pc depends on libip[4|6]tc.pc, thus all of those need to be
installed.
Should fix collectd build and thus #13146; which should make collectd
appear in snapshots again.

Signed-off-by: Danny Baumann <dannybaumann@web.de>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36509 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-02 08:10:55 +00:00
Jo-Philipp Wich
fde7fcd36c iwinfo: fix iwinfo_hardware() return value if chip id is not found
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36471 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-28 14:04:39 +00:00
Jo-Philipp Wich
8605639a3a netifd: update to git head - disables multicast snooping by default on bridges
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36463 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-27 09:28:40 +00:00
Jo-Philipp Wich
6aef46b32b iwinfo: add hw database file
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36450 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-26 13:21:01 +00:00
Jo-Philipp Wich
9e66c65f62 iwinfo: move builtin hardware database to /usr/share/libiwinfo/hardware.txt
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36449 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-26 13:20:15 +00:00
Felix Fietkau
d9de51dff4 netifd: update to the latest version, fixes interface reload issues when removing the ifname option
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36424 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-25 16:28:19 +00:00
Steven Barth
d7fe9e70d8 6relayd: Fix generation of RA-messages
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36419 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-24 18:22:08 +00:00