Commit Graph

49 Commits

Author SHA1 Message Date
coolsnowwolf
9728c59e9b firewall: add iptables-mod-conntrack-extra by default 2024-06-22 18:16:32 +08:00
coolsnowwolf
1b7087bae5 firewall/firewall4: provide uci-firewall 2024-05-08 12:55:32 +08:00
coolsnowwolf
8f42e0d971 firewall: fix firewall reload lock 2023-04-13 17:33:33 +08:00
coolsnowwolf
a4426eb5a4 firewall: fix TCP MSS settings issue 2023-04-12 16:44:19 +08:00
coolsnowwolf
9364fa6e6c firewall: fix locking issue when running racing condition 2022-12-16 11:32:41 +08:00
coolsnowwolf
e50a86b90f firewall: set default fullcone to high performance mode 2022-12-15 03:59:10 +08:00
lovehackintosh
5a8163e07b
sync with upstream (#10562)
* package: sync with upstream

Removed: package/libs/libselinux/bcm27xx-userland (Already in package/utils/bcm27xx-userland)

Signed-off-by: Linhui Liu <liulinhui36@gmail.com>

* uclibc++: remove

No package here depends on it. Furthermore, uClibc++ is a fairly buggy
C++ library and seems to be relatively inactive upstream.

It also lacks proper support for modern C++11 features.

The main benefit of it is size: 66.6 KB	vs 287.3 KB on mips24kc. Static
linking and LTO can help bring the size down of packages that need it.

Added warning message to uclibc++.mk

Signed-off-by: Rosen Penev <rosenp@gmail.com>
Acked-by: Hauke Mehrtens <hauke@hauke-m.de>

* target: sync with upstream

Signed-off-by: Linhui Liu <liulinhui36@gmail.com>

* toolchain: gcc: Remove gcc 10.x support

This compiler is old and was never used by default in OpenWrt.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

* ucode: update to latest Git HEAD

46d93c9 tests: fixup testcases
4c654df types: adjust double printing format
eac2add compiler: fix bytecode for logical assignments of properties
3903b18 fs: add `realpath()` function
8366102 math: add isnan() function
eef83d3 tests: relax sleep() test
394e901 lib: uc_json(): accept trailing whitespace when parsing strings
1867c8b uloop: terminate parent uloop in task child processes
d2cc003 uci: auto-load package in `ctx.foreach()` and `ctx.get_first()`
6c5ee53 compiler: ensure that arrow functions with block bodies return no value
fdc9b6a compiler: fix `??=`, `||=` and `&&=` logical assignment semantics
88dcca7 add cmake to install requires for debian

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

* firewall4: update to latest Git HEAD

700a925 fw4: prevent null access when no ipsets are defined
6443ec7 config: drop input traffic by default
119ee1a ruleset: drop ctstate invalid traffic for masq-enabled zones

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

* ustream-ssl: update to Git version 2022-12-07

9217ab4 ustream-openssl: Disable renegotiation in TLSv1.2 and earlier
2ce1d48 ci: fix building with i.MX6 SDK
584f1f6 ustream-openssl: wolfSSL: provide detailed information in debug builds
aa8c48e cmake: add a possibility to set library version

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

* tools/mpfr: import patch fixing macro bug

Co-authored-by: Nick Hainke <vincent@systemli.org>
Signed-off-by: Linhui Liu <liulinhui36@gmail.com>

Signed-off-by: Linhui Liu <liulinhui36@gmail.com>
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Co-authored-by: Rosen Penev <rosenp@gmail.com>
Co-authored-by: Hauke Mehrtens <hauke@hauke-m.de>
Co-authored-by: Jo-Philipp Wich <jo@mein.io>
Co-authored-by: Nick Hainke <vincent@systemli.org>
2022-12-08 14:20:57 +08:00
lovehackintosh
a653ef540f
kernel: bump 5.15 to 5.15.81 (#10554)
* kernel: bump 5.15 to 5.15.81

Manually rebased:
	backport-5.15/715-v6.0-net-ethernet-mtk_eth_soc-add-the-capability-to-run-m.patch
	hack-5.15/645-netfilter-connmark-introduce-set-dscpmark.patch[1]

All other patches automatically rebased

Signed-off-by: John Audia <therealgraysky@proton.me>
Co-authored-by: John Audia <therealgraysky@proton.me>
2022-12-06 15:01:21 +08:00
coolsnowwolf
193db6f186 network: add brcm fullcone support from ASUS Merlin kernel 4.19 2022-12-06 00:26:03 +08:00
lean
fabfc44859 bpftools: update to standalone bpftools + libbpf, use the latest version 2022-09-15 12:11:45 +08:00
lean
9c0a73385d kernel: netfilter: Add nf_tproxy_ipv{4,6} and nf_socket_ipv{4,6} 2022-09-12 02:58:55 +08:00
Dawneng
13aa14c64b
firewall3: fix the hash value (#9277) 2022-04-19 23:00:51 +08:00
breakings
1e354e4699
firewall3: bump to latest git HEAD (#9253)
4cd7d4f Revert "firewall3: support table load on access on Linux 5.15+"
50979cc firewall3: remove unnecessary fw3_has_table

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>

Co-authored-by: Rui Salvaterra <rsalvaterra@gmail.com>
2022-04-15 19:32:19 +08:00
lean
3cab5d38e9 netifd: revert to 2021-06-04 2022-04-06 01:06:20 +08:00
lean
8f2b0b86b1 netifd: bump to version 2022-02-20 2022-04-03 19:12:12 +08:00
aakkll
281327352d
firewall: update to latest HEAD (#8666)
0f16ea5 options.c: add DSCP code LE Least Effort
24ba465 firewall3: remove redundant syn check
df1306a firewall3: fix locking issue
3624c37 firewall3: support table load on access on Linux 5.15+

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

Co-authored-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2022-01-12 13:24:59 +08:00
Ailick
b947b26d6b
firewall: add reload config for triggers (#8027) 2021-10-11 16:14:23 +08:00
Beginner
287ffc5e01
firewall: update to git HEAD (#7682)
40e5f6a ipsets: permit default timeout of 0

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

Co-authored-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2021-08-17 23:30:36 +08:00
coolsnowwolf
adf04492ee ipq806x: add NSS Hardware Offloading support 2021-07-09 17:03:34 +08:00
dansir
d7bef8a8f4
packages: use old extra_command wrapper (#7259)
* dnsforwarder: use old extra_command wrapper

* zram-swap: use old extra_command wrapper

* ltq-adsl-app: use old extra_command wrapper

* ltq-vdsl-app: use old extra_command wrapper
2021-07-03 14:44:24 +08:00
lean
a3f1e837fd x64: fix grub2 booting 2021-06-15 17:58:07 +08:00
lean
7a50383ab6 add kernel 5.10 support and sync with upstream 2021-06-14 18:30:08 +08:00
AmadeusGhost
0456744e39
mac80211: sync upstream source code (#5860)
[mac80211]
  08a42ef mac80211: fix memory leak on filtered powersave frames
  daeda8a mac80211: pass phy name to hostapd_set_bss_options
  7ca9b82 mac80211: Fix wpa_supplicant config removal ubus call
  bf3158b mac80211: backport the new tasklet API
  0bb5d39 mac80211: add minstrel fixes that fix mt76 issues in legacy mode

[ath10k]
  c3b2efa linux-firmware: ath10k: add board firmware packages
  655091e ath10k-ct-firmware: switch to linux-firmware board binaries
  61e381d ath10k-firmware: remove unused package
2020-12-02 12:24:26 +08:00
coolsnowwolf
33abeff31c Sync to snapshot kernel 5.4 version 2020-07-02 23:30:56 +08:00
AmadeusGhost
23378ed9a4
netifd: add dynamic wireless reconfiguration (#4518)
Set new option 'reconf' in 'wifi-device' section to enable dynamic re-configuration on that radio. Also fix wifi relay and 'netifd: radio1 (9654): Command failed'.
2020-05-02 19:11:45 +08:00
coolsnowwolf
8b05d9f36d firewall: bump to new version 2020-02-04 01:00:39 +08:00
LEAN-ESX
3376f50203 Revert "netifd: bump to latest version"
This reverts commit d6ce485de7.
2019-11-24 19:57:24 -08:00
LEAN-ESX
d6ce485de7 netifd: bump to latest version 2019-11-23 10:39:08 -08:00
LEAN-ESX
820b0f12ec netifd: bump to 2019-08-05 2019-10-24 03:44:25 -07:00
LEAN-ESX
4910870f52 netifd: fix missing ip rules after network reload 2019-05-31 07:27:16 -07:00
LEAN-ESX
91bdd6b3e0 firewall: add Fullcone-NAT option 2019-05-26 10:26:57 -07:00
coolsnowwolf
a932838a03 netifd:fix "if-down" hotplug event handling 2019-04-17 11:01:10 +08:00
coolsnowwolf
4f8c1b29e2 netifd:fix delegate config update on reload 2019-03-20 13:39:37 +08:00
coolsnowwolf
d2eafde1a2 firewall: update to latest git HEAD 2019-01-04 13:24:10 +08:00
coolsnowwolf
fcff889b0e firewall: bump to new version 2019-01-03 20:38:08 +08:00
coolsnowwolf
347daa04b2 Merge branch master of https://github.com/coolsnowwolf/lede 2019-01-03 19:29:28 +08:00
coolsnowwolf
67b9ae2d3a hostapd: add WPA3 support 2018-10-17 21:54:59 +08:00
coolsnowwolf
d18f879b45 repare for ipsec ipv6 support 2018-09-27 12:54:30 +08:00
coolsnowwolf
0f4c3eb2d5 default enable fullconenat in fw3 2018-09-22 18:31:40 +08:00
coolsnowwolf
806f5db174 sync with OpenWrt trunk 2018-09-07 13:43:55 +08:00
coolsnowwolf
9ba04fd0d7 sync with OpenWrt v18.06.1 stable new R8.1 version 2018-08-23 17:40:23 +08:00
coolsnowwolf
a4af6b9325 firewall: update to latest git HEAD 2018-06-16 12:12:47 +08:00
coolsnowwolf
8fe0636b8a Merge branch 'master' of github.com:lede-project/source 2018-04-23 18:50:49 +08:00
coolsnowwolf
85c231621c firewall: update to the latest version, adds hardware flow offload support 2018-04-08 16:57:27 +08:00
coolsnowwolf
20f7e75789 update to R7.5.4 2018-01-15 18:26:41 +08:00
coolsnowwolf
b0f643aa87 update to R7.5.3 stable to fix firewall freeze 2018-01-10 20:55:06 +08:00
coolsnowwolf
6d210c00b6 revert netifd 2018-01-10 16:34:02 +08:00
coolsnowwolf
229cde62a4 Merge branch 'master' of https://github.com/lede-project/source 2018-01-09 14:38:15 +08:00
coolsnowwolf
97a4ffcc12 update source 2017-09-06 19:19:45 +08:00