aboutsummaryrefslogtreecommitdiffstats
path: root/package/network/services
Commit message (Collapse)AuthorAgeFilesLines
* lldpd: add Build/InstallDev ruleJohn Crispin2015-03-211-0/+8
| | | | | | | | For using liblldpctl to talk to lldpd (via unix sockets). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> SVN-Revision: 44924
* igmpproxy: add names for default config lan/wan phyint sections to make it ↵Felix Fietkau2015-03-191-2/+2
| | | | | | | | easier to refer to them from scripts Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44896
* igmpproxy: Multiple downlink interfaces fix.John Crispin2015-03-171-0/+154
| | | | | | | | | | | | | | | | | | | | | | | | | | | | from Erik Tews <erik@datenzone.de> This patch has two effects. First, the quickleave feature/behaviour is disabled for all groups that are used on more than one interface. The idea of quickleave is to leave a group fast and later figure out whether there is still somebody interested in that group. For groups used on more than one interface, it is already known that there is still somebody interested in that group. Second, when a leave is received for a group that is used on more than one interface, igmpproxy sends queries on all interface to discover remeining listeners for that group. Previously these queries were only send on the interface the leave was received on, so that listeners on the other interfaces were not discovered and the group might be left on the upstream router incorrectly. This patch can be improved by sending the queries only on the interface the leave was received on and adapting the algorithm in internAgeRoute(...) in rttable.c in a way that only one interface is actually processed and all other interfaces of the route are silently assumed to be still active. Signed-off-by: Erik Tews <erik@datenzone.de> SVN-Revision: 44859
* packages: more (e)glibc fixes after r44701Nicolas Thill2015-03-161-0/+4
| | | | | | | | _GNU_SOURCE has been declared "deprecated" in favor of _DEFAULT_SOURCE in glibc Signed-off-by: Nicolas Thill <nico@openwrt.org> SVN-Revision: 44843
* packages: some (e)glibc fixes after r44701Nicolas Thill2015-03-164-4/+4
| | | | | | Signed-off-by: Nicolas Thill <nico@openwrt.org> SVN-Revision: 44842
* uhttpd: make generating SSL keys more reliable against interrupted bootsFelix Fietkau2015-03-151-2/+5
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44772
* dnsmasq: enable pxe-prompt, pxe-service config optionsJohn Crispin2015-03-131-1/+6
| | | | | | | | | | | | DNSMASQ has the ability to provide a menu to a pxeboot system, using the --pxe-prompt and --pxe-service configuration options. The current init.d script converting the "dhcp" file to "dnsmasq.conf" does not find these options, but they are supported. This patch thus enables the options. Signed-off-by: Derek LaHousse <dlahouss@mtu.edu> SVN-Revision: 44747
* relayd: bump to latest git HEADJohn Crispin2015-03-131-2/+2
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 44745
* dnsmasq: Make parameters optional in dhcpboot configJohn Crispin2015-03-131-4/+3
| | | | | | | | | The --dhcp-boot option of dnsmasq does not require servername and serveraddress arguments if the builtin tftp server is used. Signed-off-by: Stefan Tomanek <stefan.tomanek+openwrt@wertarbyte.de> SVN-Revision: 44744
* lldpd: make LLDP-MED, DOT1 and DOT3 extensions disable-ableJohn Crispin2015-03-132-0/+19
| | | | | | | | | The names for the config options were taken from lldpd's configure.ac file. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> SVN-Revision: 44743
* lldpd: add support for 'readonly_mode'John Crispin2015-03-121-0/+3
| | | | | | Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> SVN-Revision: 44689
* uhttp: update to latest git HEADJohn Crispin2015-03-111-2/+2
| | | | | | | | this add json-c 0.12, sorry forgot to push this earlier today Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 44682
* odhcpd: improvements for DHCPv4 and compile fixesSteven Barth2015-03-061-2/+2
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 44619
* lldpd: fix passing multiple ifnames to the daemonJo-Philipp Wich2015-03-012-3/+4
| | | | | | | | Instead of multiple -I arguments, lldpd expects a comma separated list. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 44585
* uhttpd: relay stderr to syslogJo-Philipp Wich2015-02-262-1/+2
| | | | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 44548
* samba36: update to 3.6.25, fixes remote code execution bug (CVE-2015-0240)Felix Fietkau2015-02-241-2/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44515
* ppp: Allow PPTP over a specified interfaceJohn Crispin2015-02-221-3/+5
| | | | | | | | | In a dual-WAN setup, it's useful to specify an interface over which to have PPTP. Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us> SVN-Revision: 44507
* packages: remove uneeded PKG_BUILD_DIR overridesNicolas Thill2015-02-221-2/+0
| | | | | | Signed-off-by: Nicolas Thill <nico@openwrt.org> SVN-Revision: 44498
* hostapd: fix c&p typoJohn Crispin2015-02-171-1/+1
| | | | | | | | https://dev.openwrt.org/ticket/19010 Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 44484
* hostapd: backport BSSID black/whitelistsJohn Crispin2015-02-133-0/+687
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change adds the configuration options "bssid_whitelist" and "bssid_blacklist" used to limit the AP selection of a network to a specified (finite) set or discard certain APs. This can be useful for environments where multiple networks operate using the same SSID and roaming between those is not desired. It is also useful to ignore a faulty or otherwise unwanted AP. In many applications it is useful not just to enumerate a group of well known access points, but to use a address/mask notation to match an entire set of addresses (ca:ff:ee:00:00:00/ff:ff:ff:00:00:00). This is especially useful if an OpenWrt device with two radios is used to retransmit the same network (one in AP mode for other clients, one as STA for the uplink); the following configuration prevents the device from associating with itself, given that the own AP to be avoided is using the bssid 'C0:FF:EE:D0:0D:42': config wifi-iface option device 'radio2' option network 'uplink' option mode 'sta' option ssid 'MyNetwork' option encryption 'none' list bssid_blacklist 'C0:FF:EE:D0:0D:42/00:FF:FF:FF:FF:FF' This change consists of the following cherry-picked upstream commits: b3d6a0a8259002448a29f14855d58fe0a624ab76 b83e455451a875ba233b3b8ac29aff8b62f064f2 79cd993a623e101952b81fa6a29c674cd858504f (squashed to implement bssid_{white,black}lists) 0047306bc9ab7d46e8cc22ff9a3e876c47626473 (Add os_snprintf_error() helper) Signed-off-by: Stefan Tomanek <stefan.tomanek+openwrt@wertarbyte.de> SVN-Revision: 44438
* relayd: update to the latest version, adds fixes by Alejandro EnriqueFelix Fietkau2015-02-111-2/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44389
* openvpn: autostart openvpn instances for each .conf file in /etc/openvpnJo-Philipp Wich2015-02-072-4/+32
| | | | | | | | | | | | | | | Align init behaviour with other distros by starting an OpenVPN instance for each config file found in /etc/openvpn/. This removes the additional requirement to "register" the configs with uci and thus simplifies the setup. Make sure to respect the disabled state in uci to not suddenly autostart instances which have been previously set to disabled, also skip configs which are already started due to uci configuration. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 44310
* uhttpd: fix another remaining relro issue in the Lua pluginJo-Philipp Wich2015-01-251-2/+2
| | | | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 44143
* uhttpd: fix time_t type mismatch on 32bit systemsJo-Philipp Wich2015-01-251-2/+2
| | | | | | | | | | | | The previous update introducing LFS support unconditionally changed the sprintf() pattern used to print the file modification time to use PRIx64. Explicitely convert the st_mtime member of the stat struct to uint64_t in order to avoid type mismatch errors when building for non-64bit targets. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 44138
* uhttpd: fix crash with enabled relro, memory leak in dirlists and lfsJo-Philipp Wich2015-01-251-3/+3
| | | | | | | | | | | | * Fix the ubus plugin to not make its uhttpd_plugin entry symbol constant as uhttpd needs to modify its list_head member * Make sure that uhttpd supports large files by using 64bit ints where appropriate and by passing _FILE_OFFSET_BITS=64 to the build * Plug a possible memleak in the directory listing code Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 44135
* uhttpd: fix exit code of mod-ubus postinstall scriptJo-Philipp Wich2015-01-251-0/+2
| | | | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 44132
* mac80211/hostapd: fix HT mode setup for RSN ad-hoc networksFelix Fietkau2015-01-241-1/+2
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44100
* relayd: prevent start for disabled interfacesFelix Fietkau2015-01-241-0/+3
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44099
* ppp: on PPPoE, always send PADT when shutting down the connectionFelix Fietkau2015-01-241-0/+11
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 44097
* ppp: rework host-uniq support to take hex encoded stringsJo-Philipp Wich2015-01-243-49/+149
| | | | | | | | | | | The previous implementation of the "host-uniq" option used plain strings for passing the value to pppd which made it impossible to specify binary data. Switch the format to a hex encoded string to support binary data. Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 44094
* igmpproxy: add patch to silence unnecessary logging of downstream igmp trafficFelix Fietkau2015-01-181-0/+19
| | | | | | | | | | | | | This patch adds a simple check to silence logging of messages about unrecognized igmp packets which originate from devices in local network. Without this patch igmpproxy floods openwrt syslog with messages such as: user.warn igmpproxy[19818]: The source address 192.168.1.175 for group 239.255.250.250, is not in any valid net for upstream VIF. Signed-off-by: Antti Seppälä <a.seppala@gmail.com> SVN-Revision: 44020
* dnsmasq: add option --quiet-dhcpJohn Crispin2015-01-171-0/+1
| | | | | | | | The --quiet-dhcp setting increases privacy by omitting DHCP lease logs including MAC addresses. Signed-off-by: Lars Kruse <devel@sumpfralle.de> SVN-Revision: 44006
* Support for building an hardened OpenWRTJohn Crispin2015-01-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Introduce configuration options to build an "hardened" OpenWRT. Options to enable Stack-Smashing Protection, FORTIFY_SOURCE and RELRO have been introduced. uClibc makefile now automatically detects if SSP support is necessary. hostapd makefile has been fixed to use "^" as sed separator since using a comma was problematic when using "-Wl,-z,now" and the like in TARGET_CFLAGS. Currently enabling SSP on user space depends on enabling SSP kernel side, this is due to the fact that TARGET_CFLAGS are used to build kernel modules (at least). Suggestions on how to avoid this are welcome. Using "select" instead of "depends on" doesn't seem to work with choice entries. Tested with a lantiq (WBMR) router, GCC 4.8, uClibc and a subset of the available packages. Needs to be tested with GCC 4.9 and the remaining packages. PIE not currently included. Signed-off-by: Alessandro Di Federico <ale+owrt@clearmind.me> SVN-Revision: 44005
* dnsmasq: support and use local-service by default (#14951)Jo-Philipp Wich2015-01-163-2/+4
| | | | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 43982
* mdns: install uci package as configLuka Perkov2015-01-141-1/+1
| | | | | | Signed-off-by: Alexander Couzens <lynxis@fe80.eu> SVN-Revision: 43967
* hostapd: backport patch fixing handling new stationsRafał Miłecki2015-01-121-0/+37
| | | | | | | | | This patch fixes adding new stations for some specific drivers when using more than 1 BSS. Signed-off-by: Rafał Miłecki <zajec5@gmail.com> SVN-Revision: 43951
* lldpd: update to v0.7.13Jo-Philipp Wich2015-01-092-5/+5
| | | | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 43891
* openvpn: procd_set_param respawnJohn Crispin2015-01-081-0/+1
| | | | | | | | | | | Makes sure that the openvpn instance gets restarted in case of a crash. Intentional stops using /etc/init.d/openvpn stop will not result in respawning. Anything else will, e.g. killall openvpn. Signed-off-by: Lars Gierth <larsg@systemli.org> SVN-Revision: 43886
* openvpn: bump PKG_REVISION and copyright yearJo-Philipp Wich2015-01-061-2/+2
| | | | | | Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 43859
* dnsmasq: fix dependency problems of the dnsmasq-full variant.Felix Fietkau2015-01-052-21/+70
| | | | | | | | | | | | | | | | | | | | This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
* hostapd: Add uapsd option to netifd.shFelix Fietkau2015-01-051-2/+4
| | | | | | | | | | | | | The uapsd option sets the uapsd_advertisement_enabled flag in hostapd. The check for phy support is already implemented here in hostapd since 2011: http://w1.fi/cgit/hostap/commit/?id=70619a5d8a3d32faa43d66bcb1b670cacf0c243e So this can be safely set to 1 as default. Signed-off-by: Vittorio Gambaletta <openwrt@vittgam.net> SVN-Revision: 43846
* openvpn: backport an upstream fix for a regression in using --cipher none ↵Felix Fietkau2015-01-041-0/+57
| | | | | | | | (fixes #18676) Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 43823
* hostapd: add support for configuring supported ratesFelix Fietkau2014-12-271-5/+15
| | | | | | | | patch by Wilco Baan Hofman from #18627 Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 43782
* dnsmasq: also add the actual patches...Steven Barth2014-12-222-0/+110
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 43759
* dnsmasq: backport some dnssec fixesSteven Barth2014-12-221-2/+2
| | | | | | Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 43758
* dnsmasq: allow de-selecting features from -full variant.Steven Barth2014-12-172-2/+30
| | | | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43733
* igmpproxy: do not attempt to ifstatus error messages as jsonFelix Fietkau2014-12-121-1/+4
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 43660
* igmpproxy: do not start instance if no upstream interface is availableFelix Fietkau2014-12-121-1/+6
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 43659
* igmpproxy: fix init script indentationFelix Fietkau2014-12-121-4/+4
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 43658
* openvpn: update to 2.3.6, fixes CVE-2014-8104Felix Fietkau2014-12-012-25/+46
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 43482