1
0
mirror of git://projects.qi-hardware.com/openwrt-xburst.git synced 2024-07-07 17:25:08 +03:00
Commit Graph

147 Commits

Author SHA1 Message Date
nico
3a25b868c7 make the whole iptables/netfiter modular (closes: #3871, #3527)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12649 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-09-22 15:19:59 +00:00
nbd
78202d191b use $(FPIC) in a few places where it matters
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12225 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-08-06 22:10:29 +00:00
blogic
8e2cf077d0 adds a new uci firewall
- iptbales and netfilter packages need to be rewrapped when we switch to this firewall as default
- there are some examples in the file /etc/config/firewall
- iptables-save/restore are still missing
- hotplug takes care of adding/removing netdevs during runtime
- misisng features ? wishes ? let me know ...



git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12089 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-08-04 11:51:58 +00:00
juhosg
77ac43966f [package] netfilter/iptables: enable IMQ on 2.6.25
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@11335 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-06-02 19:46:47 +00:00
florian
76047329b3 We do not need to make the experimental/install-experimental targets starting with 1.4.x version
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@11325 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-06-02 11:54:05 +00:00
juhosg
2c64c2f0c9 [package] IMQ is not yet available on 2.6.25
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@11007 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-05-02 11:29:53 +00:00
juhosg
a58eaf210a update iptables to 1.4.0 (2.6 kernels only), refresh kernel patches
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@10843 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-04-15 06:11:23 +00:00
florian
724e74c175 Fix layer7 user-space iptables compilation (#3307)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@10745 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-04-06 18:01:53 +00:00
juhosg
8edc7d7a47 [package] iptables: remove obsolete patch
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@10464 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-02-15 09:31:07 +00:00
nbd
521e989c55 move /etc/config/firewall to /etc/firewall.config to prevent it from interfering with uci - yes, this beast really needs a rewrite :)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@10383 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-02-04 22:03:18 +00:00
nbd
afa5da1d1b Here comes the new UCI. Enjoy :)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@10367 3c298f89-4303-0410-b956-a3cf2f4a3e73
2008-02-03 06:48:15 +00:00
nbd
b7e7f4edf0 remove uninstalldev templates (no longer necessary)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@9906 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-12-25 01:40:47 +00:00
nbd
c3cd9cb9ab Use $(CP) instead of $(INSTALL_BIN) for binaries.
Signed-off-by: Andy Boyett <agb-openwrt@padded-cell.net>


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@9694 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-12-09 18:53:06 +00:00
pavlov
3b8c7ad8bb update stripped subset of l7 patterns to 11-03-2007 patterns
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@9582 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-11-19 23:07:00 +00:00
florian
baaf523765 Add a boolean to allow NAT from LAN or not, default to nat LAN (#2535)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@9503 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-11-05 14:19:16 +00:00
juhosg
32d3bbee3e [packages] iptables: update description of the iptables-mod-ipopt
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@9468 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-10-31 20:21:58 +00:00
florian
de87d871ff Only masquerade LAN, other settings need manual tweaking
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@9461 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-10-29 11:00:33 +00:00
florian
6880ed0d32 Only masquerade non routable addresses (#2535)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@9460 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-10-29 10:31:16 +00:00
florian
19c2890d13 Update description, iptables-mod-ipsec includes libipt_policy.so
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@9336 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-10-16 14:04:59 +00:00
juhosg
f29e1c9edb add TARPIT support to netfilter/iptables
* netfilter: add the xt_TARPIT target module required by xt_CHAOS
 * include/netfilter.mk: reorder, xt_CHAOS depends on xt_TARPIT and xt_DELUDE
 * iptables: add libipt_TARPIT to the kmod-ipt-extra package, bump release number
 * original patchset can be found [http://tinyurl.com/2mjk2kx here]

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@9178 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-10-07 17:17:04 +00:00
nbd
640652a244 add $(STAGING_DIR) as argument to the InstallDev template and update packages accordingly - this way we can reuse InstallDev to automatically generate UninstallDev or create -dev packages
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@9052 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-09-28 01:45:11 +00:00
nico
2cefa6162b move exec permissions fix at Build/Prepare stage
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@8802 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-09-16 16:25:53 +00:00
nico
c4b73fa154 move package description to a separate definition, remove it when DESCRIPTION=TITLE
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@8659 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-09-07 08:34:51 +00:00
florian
55807e35d6 Package ip6tables-utils as well (#2318)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@8636 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-09-05 21:40:11 +00:00
pavlov
88c477db44 iptables: refresh patches to 1.3.8
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@8286 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-07-31 20:28:55 +00:00
florian
2023b23e98 Fix the ip6tables dependency (#2079)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@7978 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-07-15 18:53:33 +00:00
pavlov
79586cd08c move to iptables 1.3.8
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@7946 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-07-12 16:05:28 +00:00
nbd
7ea4f506bb make the firewall script run after the network script again (required for working with dynamically assigned interfaces), include the network state
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@7806 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-06-30 19:30:38 +00:00
florian
3444eefb65 Initialise firewall before network (#1988)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@7757 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-06-28 12:56:55 +00:00
pavlov
a5799cd9ad package ipset for use
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@7517 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-06-07 15:30:59 +00:00
nbd
546d769c67 upgrade a few packages to newer versions (includes patch by kaloz) - preparation for 2.6.22
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@7507 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-06-05 22:46:02 +00:00
nbd
b5cb1795de refresh all package patches in the buildroot using quilt
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@7490 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-06-04 11:25:53 +00:00
florian
494412bf0a Add iprange (#1799)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@7462 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-06-02 22:57:33 +00:00
kaloz
e148281b00 break trunk temporary - upgrade to 2.6.21.1 and iptables 1.3.7
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@7315 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-05-23 19:48:34 +00:00
florian
9a3dff24f5 Add raw and NOTRACK targets (#1583)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6945 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-04-13 11:28:45 +00:00
nbd
262d6ed3a8 fix iptables extension issue with mac os x builds
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6786 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-04-01 12:28:56 +00:00
nbd
19c7123cff fix a problem with the firewall script (multicast traffic could produce packet loss)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6726 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-03-27 16:45:10 +00:00
nbd
878bf6bcc7 improve autorebuild for iptables when the kernel config changes
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6652 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-03-23 19:19:23 +00:00
nbd
643f013d15 add file type autodetection for the unpack command and nuke PKG_CAT:= in lots of places
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6582 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-03-16 20:21:39 +00:00
nbd
1d3cff733d add a default for PKG_BUILD_DIR and PKG_INSTALL_DIR (will use KERNEL_BUILD_DIR if kernel.mk is included, BUILD_DIR otherwise)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6580 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-03-16 19:18:55 +00:00
pavlov
151238116d trunk.. same deal as changeset:6526
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6527 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-03-05 01:38:44 +00:00
nbd
517db6bdd8 make the iptables package robust to kernel config changes
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6447 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-03-01 11:59:42 +00:00
florian
dd74e6606a Add ipt_CLASSIFY target for 2.4 kernels (#1338)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6424 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-02-28 12:04:58 +00:00
nbd
b89ba4c713 port [6229] to kamikaze
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6275 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-02-08 01:25:18 +00:00
nico
ca1b1f247f fix chaostables patch (closes: #1246)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6184 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-01-23 16:08:24 +00:00
florian
a13fd170d4 Add chaostable from #1187, also enable netfilter modules for ixp4xx.
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6182 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-01-22 23:55:22 +00:00
nico
4f53f8d738 more use of the INSTALL_DIR variable
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@6023 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-01-08 00:53:24 +00:00
nbd
81427a065b fix iptables warning about 'wierd' interface names (#1082)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@5962 3c298f89-4303-0410-b956-a3cf2f4a3e73
2007-01-01 23:31:36 +00:00
florian
8f52cffc45 Forgot kmod-ipt-imq dependency (#1076)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@5901 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-12-25 17:43:06 +00:00
nbd
49166d75b6 prepare for moving part of the firewall to hotplug. created new chains {input,forwarding,prerouting}_wan for wan port forwardings and updated the examples. syntax of /etc/config/firewall unchanged and old firewall.user files are still compatible
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@5878 3c298f89-4303-0410-b956-a3cf2f4a3e73
2006-12-20 05:58:41 +00:00