summaryrefslogtreecommitdiff
path: root/package/network/config
AgeCommit message (Collapse)Author
2013-05-02firewall3: update to git headjow
- assume "tcp+udp" if no protcol is specified in rules or redirects (#13422, #13386) - add support for fwmark matches and mark setting targets git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36521 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-27netifd: update to git head - disables multicast snooping by default on bridgesjow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36463 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-25netifd: update to the latest version, fixes interface reload issues when ↵nbd
removing the ifname option git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36424 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-24firewall3: Make IPv6 ULA-Border generation dynamiccyrus
This fixes working behind another router which gives out ULAs. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36416 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-22netifd: Improve IPv6-ULA assignment handlingcyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36383 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-15netifd: update to latest version, fixes some device handling crashesnbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36336 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-09qos-scripts: add queue length and quantum limit, suggested by dtahtnbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36294 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-09[swconfig] add portmap support to userlandblogic
Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36284 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-09[swconfig] add "swconfig list" supportblogic
Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36282 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-09netifd: fix route / route6 regression (#13303)jow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36281 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-09Remove deprecated ip6slaac optioncyrus
* use proto=dhcpv6 with reqprefix=no instead git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36280 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-05netifd: Bump to latest versioncyrus
* Fix a memory corruption when updating IPv6 prefixes * Fix route sorting order (nbd) * Add support for ip rules (jow) * Implement support for route / route6 table attribute (jow) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36196 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-04-03netifd: Rewrite IPv6 prefix assignmentcyrus
* Add ip6hint option to specify assigned subprefixes * Add preliminary support for RFC 6603 prefix exclusion git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36193 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-22firewall3: update to git headjow
* fixes parsing of src/dest '*' * fixes parsing of proto 'all' git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36111 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-21firewall3: update to git headjow
* fixes port remapping rules (#13217) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36100 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-20netifd: Fix adding IPv6 DNS-servers to resolv.confcyrus
In some cases IPv6 DNS-servers were not added correctly. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36095 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-19firewall3: update to git headjow
* fixes reload handling of zones and ipsets that are still running but already deleted from the config git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-19firewall3: update to git headjow
- support network names in per-zone 'masq_src', 'masq_dest' and 'subnet' options (#13197) - do not allow src_mac option for SNAT rules git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36090 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-14firewall3: update to git headjow
* Introduce "option reload" for includes to specify whether includes should be processed on reload (e.g. when tapping into internal chains) * Allow "network" and "device" commands while firewall is running (to make them usable in includes) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36009 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-13firewall3: update to git headjow
* Adds support for emitting hotplug events when creating and clearing zones (fixes miniupnpd) * Make NAT reflection direction configurable * Map init script stop action to flush * Map init script reload action to reload * Respect init script disabled state in hotplug handler git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35998 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-11firewall3: update to git headjow
* Fixes compilation against eglibc * Fixes tracking logic when selectively restarting IPv4 or IPv6 firewall * Fixes tracking logic for user chains by differentiating between reloads and restarts * Introduces per-zone user chains {input,output,forwarding,prerouting,postrouting}_$zone_rule * Supports legacy "tcpudp" protocol notation again git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35969 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-08Revert "firewall3: update to git head"jow
This reverts commit 89969fa333c90fdb217b7289272f3427add107de. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35904 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-08firewall3: update to git headjow
- introduce per-zone user chains - support legacy "tcpudp" protocol notation git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35903 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-05firewall3: add default config and firewall.userjow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35889 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-03-02firewall3: update to git head, introduces support for "enabled" optionjow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35845 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-27firewall3: clear contnrack table on flush, set policies to drop during rule ↵jow
reload git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35820 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-22firewall: fix logging rule regression (#12999)jow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35745 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-22firewall3: add support for shell script and iptables-restore style includesjow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35744 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-22netifd: only update resolv.conf.auto if changedcyrus
This avoids logspam under certain conditions. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35743 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-21firewall3: update to git headjow
- all uci rules are boxed in custom chains now, so a firewall stop leaves user rules intact - properly handle selective ipv4 or ipv6 only firewall start/stop/restart actions - support ip ranges (e.g. option src_ip '!192.168.1.1-192.168.1.100' -> -m iprange ! --src-range 192.168.1.1-192.168.1.100') - support time options (e.g. option weekdays 'Mon Tue Sat' -> -m time --weekdays 1,2,6') git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35738 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-17firewall3 - a C implementation of the current firewall scriptsjow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35643 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-04firewall: various enhancementsjow
- reduce mssfix related log spam (#10681) - separate src and dest terminal chains (#11453, #12945) - disable per-zone custom chains by default, they're rarely used Additionally introduce options "device", "subnet", "extra", "extra_src" and "extra_dest" to allow defining zones not related to uci interfaces, e.g. to match "ppp+" or any tcp traffic to and from a specific port. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35484 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-02-01netifd: Improved IPv6 featuresetcyrus
* Fix reloading of ula-prefixes * Added support for temporary addresses and routes * Added support for offlink addresses * Improved status-output for assigned prefixes git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35420 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-29netifd: update to latest versionnbd
fixes DNS servers on reload (#12910) fixes ubus object race on reload or down/up (#12612) git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35383 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-29netifd: implement IPv6 prefix deprecation according to RFC 6204cyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35377 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-29netifd: remove IPv6 forwarding-sysctl workaroundcyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35369 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-28netifd: update to latest version, fixes setting addresses/routes on alias ↵nbd
interfaces git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35362 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-28firewall: flush conntrack table after changing interface rulesjow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35348 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-28netifd: IPv6 sysctl, restart IPv6 in static mode to send RScyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35347 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-28netifd: add SLAAC ipv6 value for static-protocyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35346 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-22netifd: update to latest version, adds another fix for interface aliasesnbd
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35297 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-22netifd: Fix a segfault when globals.ula_prefix is emptycyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35296 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-21netifd: Fix segfaults in IPv6 prefix handlingcyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35259 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-20netifd: update to latest version, fixes alias supportnbd
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35251 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-19netifd: add a band-aid fix for the wifi setup vs. netifd init race by ↵jow
increasing the wait time to five seconds git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35240 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-17netifd: @aliases use layer 3 devices instead of main devicescyrus
Fixes dhcpv6 protocol alias git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35187 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-15netifd: Introduce native IPv6 prefix-handlingcyrus
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35167 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-13netifd: update to git head, adds 64bit countersjow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35140 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-01-04firewall: Add ULA site border for IPv6 trafficcyrus
This prevents private traffic from leaking out to the internet git-svn-id: svn://svn.openwrt.org/openwrt/trunk@35012 3c298f89-4303-0410-b956-a3cf2f4a3e73
2012-12-17netifd: update to latest version, fixes interface error reporting for shell ↵nbd
proto handlers git-svn-id: svn://svn.openwrt.org/openwrt/trunk@34741 3c298f89-4303-0410-b956-a3cf2f4a3e73