| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
framework
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38988
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38982
|
|
|
|
|
|
|
|
|
|
| |
- instead of writing one (or more) ACCEPT rules in the filter table
for each redirect install a global ctstate DNAT accept rule per zone
- discard rules and redirects which have invalid options set instead
of silently skipping the invalid values
SVN-Revision: 38849
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38704
|
|
|
|
|
|
| |
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38666
|
|
|
|
|
|
|
|
| |
scripts (#14400, #14402)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38627
|
|
|
|
|
|
|
|
| |
supporting wifi devices
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38606
|
|
|
|
|
|
|
|
|
|
| |
* Use network.interface dump call instead of individual status calls
to reduce overall netifd lookups and invokes to 1 per fw3 process.
* Allow protocol handlers to assign a firewall zone for an interface
in the data section to allow for dynamic firewall zone assignment.
SVN-Revision: 38504
|
|
|
|
| |
SVN-Revision: 38458
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Add ubus methods for global interface status
* Add ubus function to create nested interfaces
* Add protocol update notifications and hotplug legacy calls
* Fix: key to data elements point at wrong memory area
* Add support for source-restricted routes
* Add option "delegate" to toggle prefix delegation
* Reevaluate target routes also on interface update
SVN-Revision: 38453
|
|
|
|
| |
SVN-Revision: 38437
|
|
|
|
|
|
|
|
| |
udhcpc as series of -x options.
Signed-off-by: Markus Stenberg <markus.stenberg@iki.fi>
SVN-Revision: 38436
|
|
|
|
|
|
|
|
|
| |
The switch driver is not used by brcm47xx any more and can be removed,
instead of this switch driver b53 is used now.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
SVN-Revision: 38387
|
|
|
|
|
|
|
|
| |
These URLs where missing and causes build failures.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
SVN-Revision: 38376
|
|
|
|
|
|
|
| |
- do not insert duplicate rules when setting up reflection to a zone containing multiple interfaces
- set up reflection for any protocol, not just TCP and UDP
SVN-Revision: 38361
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 38299
|
|
|
|
| |
SVN-Revision: 38269
|
|
|
|
|
|
| |
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 38023
|
|
|
|
|
|
|
|
| |
config reload
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37856
|
|
|
|
|
|
|
| |
- uses "-j CT --notrack" instead of deprecated "-j NOTRACK"
- fixes support for rule sections with target "NOTRACK"
SVN-Revision: 37777
|
|
|
|
|
|
| |
- handles redirects as port relocations if the dest_ip points to the router itself
SVN-Revision: 37374
|
|
|
|
| |
SVN-Revision: 37371
|
|
|
|
|
|
|
|
| |
with this option enabled it's possible to create empty bridges
Signed-off-by: Luka Perkov <luka@openwrt.org>
SVN-Revision: 37318
|
|
|
|
|
|
| |
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 37316
|
|
|
|
|
|
|
|
|
|
| |
This makes it possible to use swconfig to controll the switch.
This was tested with devices using b43 and bgmac.
This was not tested on devices using tg3.
This does not support the adm switch used in some very old devices.
SVN-Revision: 37304
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 37224
|
|
|
|
|
|
| |
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 37198
|
|
|
|
| |
SVN-Revision: 37171
|
|
|
|
|
|
| |
- uses custom formatting for mac addresses to ensure leading zeroes, required for older iptables mac match parser
SVN-Revision: 37082
|
|
|
|
| |
SVN-Revision: 37051
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36965
|
|
|
|
|
|
| |
- fixes misprocessing of unknown symbolic protocol names
SVN-Revision: 36963
|
|
|
|
|
|
| |
- fixes calculation of IPv4 netmasks derived from 0.0.0.0/0 CIDRs
SVN-Revision: 36960
|
|
|
|
| |
SVN-Revision: 36952
|
|
|
|
| |
SVN-Revision: 36950
|
|
|
|
|
|
| |
- properly process intermediate "!" options in argument list (fixes negated ipsets)
SVN-Revision: 36935
|
|
|
|
|
|
| |
- fixes handling of reject target for rule sections with specific destination zone
SVN-Revision: 36933
|
|
|
|
|
|
| |
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36909
|
|
|
|
| |
SVN-Revision: 36903
|
|
|
|
| |
SVN-Revision: 36884
|
|
|
|
|
|
|
|
| |
works around wifiX references not being freed on network restart.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36883
|
|
|
|
|
|
|
|
|
| |
- optimizes chain usage for ingress rules
- adds limit match support for redirect rules
- fixes automatic redirect dest detection on little endian systems
- leaves base chains in place on reload to allow user rules to target e.g. "reject"
SVN-Revision: 36871
|
|
|
|
|
|
| |
solves problem with colliding CONFIG_IPV6 symbols
SVN-Revision: 36868
|
|
|
|
|
|
|
| |
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
- uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones
SVN-Revision: 36854
|
|
|
|
| |
SVN-Revision: 36840
|
|
|
|
| |
SVN-Revision: 36839
|
|
|
|
|
|
| |
head with compatibility fixes for AA
SVN-Revision: 36838
|
|
|
|
| |
SVN-Revision: 36837
|
|
|
|
|
|
| |
* Fixes wrong chain used for zone forward policy
SVN-Revision: 36830
|
|
|
|
|
|
| |
- Fixes problems with reusing matches or targets from loadable extensions
SVN-Revision: 36826
|