| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
| |
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
- automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
- properly support output rules with dest '*' to hook directly into delegate_output
- fixes crash when processing rules with unresolved targets
SVN-Revision: 36721
|
|
|
|
| |
SVN-Revision: 36718
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Tested on Buffalo WZR-600DHP with ar8316 switch. Commands used to mirror both
RX and TX traffic from LAN port 1 to LAN port 4:
$ swconfig dev switch0 set enable_mirror_rx 1
$ swconfig dev switch0 set enable_mirror_tx 1
$ swconfig dev switch0 set mirror_monitor_port 4
$ swconfig dev switch0 set mirror_source_port 1
Signed-off-by: Colin Leitner <colin.leitner@googlemail.com>
Tested-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 36713
|
|
|
|
|
|
| |
- fixes linking issues with some toolchains
SVN-Revision: 36703
|
|
|
|
| |
SVN-Revision: 36702
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36699
|
|
|
|
|
|
|
| |
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
- Do not leak memory when processing rules with unknown targets or matches
SVN-Revision: 36698
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36697
|
|
|
|
|
|
|
|
| |
handling as pointed out in #13537
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36696
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36695
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36694
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36693
|
|
|
|
| |
SVN-Revision: 36692
|
|
|
|
|
|
|
| |
- fix build on Linux < 3.7
- limit zone names to 14 bytes
SVN-Revision: 36691
|
|
|
|
| |
SVN-Revision: 36690
|
|
|
|
|
|
|
|
| |
- fixes reload when firewall is not running already
- fixes crash when ipsets are supported but undeclared
- fixes handling of per zone user chains on reload
SVN-Revision: 36689
|
|
|
|
|
|
|
|
|
| |
Fix gcc version default after r36355 removing all GCC_DEFAULT_VERSION
symbols.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36688
|
|
|
|
| |
SVN-Revision: 36687
|
|
|
|
|
|
|
| |
- fixes segfault in flush command if ipset support is not available
- fixes internal rule generation if custom chains are enabled
SVN-Revision: 36686
|
|
|
|
|
|
| |
depend on it and the iptables matches are now part of the base
SVN-Revision: 36685
|
|
|
|
| |
SVN-Revision: 36684
|
|
|
|
|
|
| |
base iptables package - drop iptables-mod-ipset
SVN-Revision: 36683
|
|
|
|
|
|
|
| |
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
* make ipset integration more reliable
SVN-Revision: 36681
|
|
|
|
| |
SVN-Revision: 36680
|
|
|
|
|
|
|
|
| |
incompatible eraseblock sizes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36679
|
|
|
|
|
|
| |
Correctly send Reconfigure-Accept option in requests
SVN-Revision: 36678
|
|
|
|
|
|
| |
* Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better
SVN-Revision: 36677
|
|
|
|
|
|
| |
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36676
|
|
|
|
| |
SVN-Revision: 36675
|
|
|
|
|
|
| |
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36674
|
|
|
|
|
|
| |
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36673
|
|
|
|
|
|
| |
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36672
|
|
|
|
|
|
| |
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36671
|
|
|
|
|
|
| |
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36670
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* update the bootcode.bin to the newest version
- gpu/cpu mem split is now configured through config.txt, so no need
to create more than one sd card image (just edit the config.txt)
- bootcode.bin now supports the never revision 2 raspberry pis
* add a commented prepopulated config.txt for easier config changes
Taken from <https://github.com/Evilpaul/RPi-config>
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36668
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Use the gzipped download feature from github to get a tarball with a
stable hash.
* Use Liam McLoughlin's git which has a subset of the original git's
contents, dropping all the precompiled modules and kernels.
Reduces the download size from ~1.27 GiB to ~25 MiB.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36667
|
|
|
|
|
|
|
|
|
| |
This is already handles in compat-3.8.h as prandom* was introduced
in 3.8; only the aliases were removed in 3.10.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36666
|
|
|
|
| |
SVN-Revision: 36665
|
|
|
|
|
|
| |
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36663
|
|
|
|
|
|
| |
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36662
|
|
|
|
|
|
| |
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36661
|
|
|
|
|
|
| |
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36660
|
|
|
|
|
|
|
|
|
|
|
| |
Check bootloader argument in mtd.
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
[jogo@openwrt.org: split into two patches, one for detection,
one letting bcm63xxpart use it.]
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36659
|
|
|
|
|
|
| |
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36658
|
|
|
|
|
|
|
|
| |
These are needed for OF setup of clocksource, clocks and irqchips.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36657
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36656
|
|
|
|
| |
SVN-Revision: 36655
|
|
|
|
|
|
| |
(0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD
SVN-Revision: 36654
|
|
|
|
|
|
|
|
| |
option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4
Based on a patch by Kristian Evensen. Thank You.
SVN-Revision: 36653
|
|
|
|
| |
SVN-Revision: 36650
|