aboutsummaryrefslogtreecommitdiffstats
path: root/package/network
Commit message (Collapse)AuthorAgeFilesLines
* uhttpd: update to the latest version, fixes crashes in the ubus pluginFelix Fietkau2013-11-211-2/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 38888
* hostapd: remove random pool support - the entropy it gathers is questionable ↵Felix Fietkau2013-11-186-177/+5
| | | | | | | | and we have better entropy sources on common platforms now Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 38852
* firewall: optimize DNAT rules and skip invalid rules and redirects (#14485)Jo-Philipp Wich2013-11-181-2/+2
| | | | | | | | | | - instead of writing one (or more) ACCEPT rules in the filter table for each redirect install a global ctstate DNAT accept rule per zone - discard rules and redirects which have invalid options set instead of silently skipping the invalid values SVN-Revision: 38849
* 6rd: Clear correct IPv6 address bits in 6rdcalcSteven Barth2013-11-161-1/+1
| | | | | | | | | | | The correct bits are now cleared in the IPv6 address as the shift value to the correct byte in the IPv6 address was wrong. Depending on the stack values this could result in a hanging 6rdcalc program due to an endless loop. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> SVN-Revision: 38818
* procd: fixup 2 wrong option typesJohn Crispin2013-11-131-1/+1
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 38789
* procd: convert services to the new validation apiJohn Crispin2013-11-131-58/+51
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 38787
* hostapd: remove #ifdef MULTICALL around ap+sta support code (to support ↵Felix Fietkau2013-11-125-20/+11
| | | | | | | | separately installed supplicant+hostapd) Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 38782
* Add patch to fix ipset timeout setting problemJo-Philipp Wich2013-11-121-0/+28
| | | | | | | | Fixes #14325 Signed-off-by: Nikolay Martynov <mar.kolya@gmail.com> SVN-Revision: 38779
* Update ipset to version 6.20.1Jo-Philipp Wich2013-11-122-18/+2
| | | | | | Signed-off-by: Nikolay Martynov <mar.kolya@gmail.com> SVN-Revision: 38778
* iwinfo: don't report associations for broadcom wds interfacesHauke Mehrtens2013-11-111-0/+3
| | | | | | | | | | The associations list for Broadcom WDS interfaces are duplicate to those reported by the corresponding AP interface; so there is no need to report them again. Signed-off-by: Nathan Hintz <nlhintz@hotmail.com> SVN-Revision: 38746
* iwinfo: fix hwmodelist reporting for broadcom wlHauke Mehrtens2013-11-112-5/+59
| | | | | | | | | Modify the hwmodelist reporting for broadcom devices to include proper reporting of 802.11n support. Signed-off-by: Nathan Hintz <nlhintz@hotmail.com> SVN-Revision: 38745
* uhttpd: return after processing -d switch, only set ubus prefix if not ↵Jo-Philipp Wich2013-11-112-4/+8
| | | | | | already defined SVN-Revision: 38743
* uhttp: add ubus.defaultJohn Crispin2013-11-111-0/+2
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 38741
* pppd: don't call modprobe at all from pppoatmJohn Crispin2013-11-111-0/+13
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 38737
* uhttp: make the service auto respawn if it crashesJohn Crispin2013-11-111-0/+1
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 38724
* uhttp: make sure that the ubus module is loaded when when installedJohn Crispin2013-11-111-1/+2
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 38723
* netifd: remove connect_time from /var/state, it is unusedFelix Fietkau2013-11-101-1/+0
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 38704
* lantiq: fix vdsl-app dependencyJohn Crispin2013-11-071-1/+1
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 38666
* dnsmasq: fix backward compatibility with existing configsJo-Philipp Wich2013-11-042-2/+5
| | | | | | | | | | | | | | Changeset r36943 ("dnsmasq: use host-record instead of address") removed the automatic domain expansion for config domain sections, this breaks existing setups and alters the old behaviour in unexpected ways, therfore restore behaviour of the current stable release. Additionally handle fully qualified hostnames properly when setting up the own hostrecord by stripping the local domain part form the given name instead of unconditionally appending it, so that "example.lan" results in "example example.lan" and not "example.lan example.lan.lan". SVN-Revision: 38648
* openvpn: clean up and fix the init scriptFelix Fietkau2013-10-311-17/+16
| | | | | | | | | | | | | - clean up duplication of procd instance handling code - using --cd *after* --config is rather pointless - to be able to log errors properly, --syslog needs to be passed before --config - tell procd about the generated or referenced config file instead of the uci file. this avoids having to restart all instances if only one of them changes. Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 38632
* netifd: update to the latest version, fixes regression in proto-shell ↵Felix Fietkau2013-10-311-2/+2
| | | | | | | | scripts (#14400, #14402) Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 38627
* netifd: update to latest version, adds fixes and some preparation for ↵Felix Fietkau2013-10-301-3/+3
| | | | | | | | supporting wifi devices Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 38606
* odhcp6c: Multiple improvements and fixesSteven Barth2013-10-291-2/+2
| | | | | | | | * Various RFC compliance fixes (thanks to Hans Dedecker) * Fix RA spam filter logic causing ipv6 connection issues * Fix parameters -F and -P being order dependent SVN-Revision: 38577
* odhcp6c: filter similar RAs spammed by some ISPsSteven Barth2013-10-231-2/+2
| | | | SVN-Revision: 38505
* firewall: Improve ubus supportSteven Barth2013-10-232-3/+3
| | | | | | | | | | * Use network.interface dump call instead of individual status calls to reduce overall netifd lookups and invokes to 1 per fw3 process. * Allow protocol handlers to assign a firewall zone for an interface in the data section to allow for dynamic firewall zone assignment. SVN-Revision: 38504
* odhcpd: fix cleaning of configuration on reloadSteven Barth2013-10-231-2/+2
| | | | SVN-Revision: 38503
* 6relayd: reduce fallout of RA spamming a bitSteven Barth2013-10-212-3/+3
| | | | SVN-Revision: 38488
* netifd: Fix ifupdate eventsSteven Barth2013-10-191-2/+2
| | | | SVN-Revision: 38458
* odhcpd: various bugfixesSteven Barth2013-10-181-2/+2
| | | | SVN-Revision: 38454
* netifd: various improvementsSteven Barth2013-10-181-2/+2
| | | | | | | | | | | | * Add ubus methods for global interface status * Add ubus function to create nested interfaces * Add protocol update notifications and hotplug legacy calls * Fix: key to data elements point at wrong memory area * Add support for source-restricted routes * Add option "delegate" to toggle prefix delegation * Reevaluate target routes also on interface update SVN-Revision: 38453
* wpa_supplicant: fix beacon_int configuration optionJo-Philipp Wich2013-10-181-3/+3
| | | | | | | | | wpa_supplicant expects beacon_int instead of beacon_interval in its config file. Signed-off-by: Bruno Randolf <br1@einfach.org> SVN-Revision: 38451
* iw: add patch to support 802.11j frequenciesJo-Philipp Wich2013-10-181-0/+85
| | | | | | | | | A similar change was recently merged in iw commit 58b46da26ab9b5ff31c7033e175351eb1301d9af Signed-off-by: Bruno Randolf <br1@einfach.org> SVN-Revision: 38449
* iwinfo: make 'type' visible in wrapped iwinfoJo-Philipp Wich2013-10-182-1/+5
| | | | | | | | | | | There are several cases within 'luci' that attempt to access the interface 'type' from within the 'type' specific meta tables; however, 'type' is not currently available there. Replicate the common metadata in the 'type' specific meta tables. Signed-off-by: Nathan Hintz <nlhintz@hotmail.com> SVN-Revision: 38448
* netifd: rename customopts to sendopts for consistencySteven Barth2013-10-171-4/+4
| | | | SVN-Revision: 38437
* Added 'customopts' dhcp protocol option, which is an array passed along to ↵Steven Barth2013-10-171-2/+7
| | | | | | | | udhcpc as series of -x options. Signed-off-by: Markus Stenberg <markus.stenberg@iki.fi> SVN-Revision: 38436
* odhcp6c: fix parsing of IA_PD advertsSteven Barth2013-10-171-2/+2
| | | | SVN-Revision: 38433
* odhcpd: add new experimental dhcp-serverSteven Barth2013-10-163-0/+71
| | | | SVN-Revision: 38428
* dropbear: add dropbear.nl mirror, provided by dropbear maintainerJo-Philipp Wich2013-10-151-1/+2
| | | | | | Signed-off-by: Catalin Patulea <cat@vv.carleton.ca> SVN-Revision: 38413
* openvpn: make comp_lzo a parameterLuka Perkov2013-10-153-5/+5
| | | | | | | | Possible parameters are yes, no and adaptive. See manpage for more information. Signed-off-by: Philipp Borgers <borgers@mi.fu-berlin.de> SVN-Revision: 38412
* openvpn-easy-rsa: restore essential patch to make it actually work on the ↵Jo-Philipp Wich2013-10-152-2/+154
| | | | | | target (#14324) SVN-Revision: 38411
* odhcp6c: various fixesSteven Barth2013-10-141-2/+2
| | | | | | | | | | * Make SOL_MAX_RT configurable and default back to 120s * Prefer servers with bigger prefixes (allows to use Comcast /60) * Don't hang indefinitely if DHCPv6 REQUEST is not answered Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 38393
* iputils: do not compile this for brcm47xx with -O2Hauke Mehrtens2013-10-131-4/+0
| | | | | | | | | ping is now working for me with -Os on brcm47xx. This revert r26278. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 38389
* switch: remove old switch driverHauke Mehrtens2013-10-131-1/+1
| | | | | | | | | The switch driver is not used by brcm47xx any more and can be removed, instead of this switch driver b53 is used now. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 38387
* lantiq: add some missing PKG_SOURCE_URLsHauke Mehrtens2013-10-121-0/+2
| | | | | | | | These URLs where missing and causes build failures. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 38376
* dnsmasq: add option broadcast to host sectionsJo-Philipp Wich2013-10-112-2/+7
| | | | | | | | | | | | | | | | | | | There are certain consumer devices which are outliers in protocol conformance. An example is Samsung bluray players, which require broadcast DHCP responses (on Ethernet only, strangely not on Wifi). By specifying: config host ... option broadcast 1 this will enable the response to be sent as an Ethernet broadcast and not as a unicast. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> SVN-Revision: 38365
* firewall: small improvements in nat reflectionJo-Philipp Wich2013-10-101-2/+2
| | | | | | | - do not insert duplicate rules when setting up reflection to a zone containing multiple interfaces - set up reflection for any protocol, not just TCP and UDP SVN-Revision: 38361
* ppp: correct module loaded check in proto_pptp_setupJo-Philipp Wich2013-10-101-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | proto_pptp_setup is responsible for loading the required modules to establish a pptp connection to a foreign peer. The function checks whether all required modules are already loaded, before actually loading them. It seems that the filter being used to accomplish this, is not restrictive enough in some cases. For instance when pptp nat helper modules are present on a system, and already loaded before a pptp connection is enabled. Then the search filter (possibly) returns the following for module=pptp, where actually no matches are expected, resulting in the pptp.ko module not being loaded, thereby failing to establish the pptp connection. # module="pptp" ; grep "$module" /proc/modules nf_nat_pptp 1312 0 - Live 0x86ce7000 nf_conntrack_pptp 3072 1 nf_nat_pptp, Live 0x86cb9000 nf_nat_proto_gre 784 1 nf_nat_pptp, Live 0x86cba000 nf_conntrack_proto_gre 2368 1 nf_conntrack_pptp, Live 0x86cbf000 nf_nat 9792 13 nf_nat_rtsp,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_h323,nf_nat_proto_gre,nf_nat_amanda,nf_nat_irc,nf_nat_ftp,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,iptable_nat, Live 0x86ca8000 nf_conntrack 37264 31 nf_nat_rtsp,nf_conntrack_rtsp,nf_nat_tftp,nf_conntrack_tftp,nf_nat_snmp_basic,nf_conntrack_snmp,nf_nat_sip,nf_conntrack_sip,nf_nat_pptp,nf_conntrack_pptp,nf_nat_h323,nf_conntrack_h323,nf_conntrack_proto_gre,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_broadcast,nf_nat_irc,nf_conntrack_irc,nf_nat_ftp,nf_conntrack_ftp,ipt_MASQUERADE,iptable_nat,nf_nat,xt_helper,xt_connmark,xt_connbytes,xt_conntrack,xt_CT,xt_NOTRACK,xt_state,nf_conntrack_ipv4, Live 0x86c90000 The search filter can be made more accurate/restrictive, by requiring the occurance of the exact name of the module at the beginning of a line in /proc/modules. # module="pptp" ; grep "^$module " /proc/modules pptp 13296 2 - Live 0x86e80000 Signed-off-by: Tijs Van Buggenhout <tvb@able.be> SVN-Revision: 38358
* dropbear: update to 2013.59 (released 4 october 2013)Jo-Philipp Wich2013-10-108-38/+22
| | | | | | | | | | | - drop mirror www.mirrors.wiretapped.net (not working anymore) - drop patch 300-ipv6_addr_port_split.patch, included upstream - refresh patches - various upstream changes: http://matt.ucc.asn.au/dropbear/CHANGES Signed-off-by: Catalin Patulea <cat@vv.carleton.ca> SVN-Revision: 38356
* openvpn: rework initscript (fixes #14299)Luka Perkov2013-10-091-8/+30
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> SVN-Revision: 38351
* hostapd: recognize 8021x as an authentication modeFelix Fietkau2013-10-081-1/+1
| | | | | | | | | | | | | | Currently, in order to configure the authentication daemon in 8021x mode, we need to set wireless.@wifi-iface[0].encryption="wpa" Though it works it confuses folks as 8021x is using WEP encryption and not WPA. Therefore the terminology itself is confusing. This change adds 8021x as a recognized string for 8021x authentication. Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> SVN-Revision: 38339