qi-hardware/openwrt-xburst
1
0
Fork 0
mirror of git://projects.qi-hardware.com/openwrt-xburst.git synced 2024-11-24 01:01:52 +02:00
Code
20,329 Commits 13 Branches 0 Tags 117 MiB
b518284fa1
Commit Graph

1121 Commits

Author SHA1 Message Date
jow
0874d00715 firewall: allow local redirection of ports 
Allow a redirect like:

config redirect
        option src 'wan'
        option dest 'lan'
        option src_dport '22001'
        option dest_port '22'
        option proto 'tcp'

note the absence of the "dest_ip" field, meaning to terminate the connection on the firewall itself.

This patch makes three changes:

(1) moves the conntrack module into the conntrack package (but not any of the conntrack_* helpers).
(2) fixes a bug where the wrong table is used when the "dest_ip" field is absent.
(3) accepts incoming connections on the destination port on the input_ZONE table, but only for DNATted
    connections.

In the above example,

ssh -p 22 root@myrouter

would fail from the outside, but:

ssh -p 22001 root@myrouter

would succeed.  This is handy if:

(1) you want to avoid ssh probes on your router, or
(2) you want to redirect incoming connections on port 22 to some machine inside your firewall, but
    still want to allow firewall access from outside.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26617 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-12 20:03:59 +00:00
jow
4bfeacbc85 [include] autotools.mk: disable autoreconf recursion if more than one dir is given in PKG_AUTOMAKE_PATHS 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26589 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-11 14:18:55 +00:00
jow
e57549e01f [include] cmake.mk: don't assume toolchain binaries in .../bin/ if an external toolchain is used, rely on which instead 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26584 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-11 02:11:11 +00:00
hauke
76cd9d7bc5 iipt-debug: create bundle of netfilter modules for debugging 
Add a bundle for including commonly useful modules for IPtables debugging and development.

For now, it just contains xt_TRACE.ko

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26567 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-09 23:23:46 +00:00
nbd
4d2516986c build: log package dump failures to logs to avoid forcing user to write cryptic commands to figure out what's going on 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26499 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-06 14:48:59 +00:00
nbd
0a4b9c0e44 build: clean up handling of the kernel config 
- support kernel config overlays in env/
- allow overriding the target kernel config with CONFIG_TARGET=platform|subtarget|env

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26498 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-06 14:48:55 +00:00
nbd
db273bc36e add a new package metadata variable MDEPENDS for specifying local menuconfig dependencies that do not propagate to other packages 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26491 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-05 19:03:51 +00:00
nbd
0b6fa8e53e site: set ac_cv_sizeof_off_t=8 to fix autoconf applications using it for detecting largefile support (#8376, #5681) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26471 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-04 12:11:43 +00:00
nbd
020dd72982 make the build system a bit more silent without V=99 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26460 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-04 00:54:37 +00:00
nbd
02e218141b toplevel: add a warning about .config being out of sync after an update 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26459 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-04 00:54:33 +00:00
florian
9444af102a [package] add kmod-ipt-led 
Netfilter LED target triggers blinkenlichten when a network packet hits
a rule.

LED target requires iptables 1.4.9 or higher

Signed-off-by: Łukasz Stelmach <stlman@poczta.fm>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26451 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-03 18:30:37 +00:00
hauke
271da7f4e9 kernel: add md5sum of kernel 
This was missing in r26441


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26442 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-03 14:54:37 +00:00
nbd
68373275cb build: reduce the amount of generated make code for the initial prereq scan - makes it about 20% faster 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26436 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-03 03:40:09 +00:00
nbd
1ae73b4f48 build: use a conditional @ sign before silenced targets instead of .SILENT - makes prereq checks more than twice as fast 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26435 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-03 03:40:04 +00:00
nbd
ef045f22ff build: undefine debug helper templates used by subdir.mk if the DEBUG variable is empty, speeds up "make prereq" by 25% when lots of packages are installed 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26434 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-03 03:40:01 +00:00
nbd
748cabc8d4 build: move the SH_FUNC eval to the beginning of the opkg control file build command chain, not in front of every single command 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26432 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-03 02:10:32 +00:00
nbd
0ae05aca57 build: do not use shell calls to export empty opkg control files, speeds up package build and fixes some "Argument list too long" errors 
Patch by Thomas Langer from #8450

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26431 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-03 02:07:59 +00:00
nbd
b5b89c2298 tools/squashfs4: update to version 4.2 (adds support for xz compression) 
Based on a patch by Jonas Gorski

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26422 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-04-03 01:02:00 +00:00
mb
4828b8d8e3 Update 2.6.38 to 2.6.38.2 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26332 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-28 15:44:03 +00:00
nbd
d46648401a global cflags: remove -funit-at-a-time, it is ignored by recent compilers. instead add -fno-caller-saves, which improves compression ratio for generated code with no apparent negative effects on performance 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26300 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-26 01:07:12 +00:00
jow
909ceae342 [include] target.mk: don't enable coreutils by default, it does not even exist anymore... fixes the Image Builder 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26269 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-22 18:06:12 +00:00
nbd
45e42754c7 add support for md5sum checks for mirrored tarballs of packages with version control source urls 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26260 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-21 23:02:06 +00:00
jow
d80e0f114c [include] image.mk: only upgrade permissions instead of overwriting, utilize tar -p flag for targz image targets (#7667) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26259 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-21 17:38:15 +00:00
kaloz
946c99ded8 update to 2.6.32.33 and 2.6.37.4 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26226 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-18 13:25:32 +00:00
kaloz
7077455bc6 add 2.6.38 md5sum 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26221 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-18 12:56:19 +00:00
nbd
63c3f4a351 build: move the CCACHE_DIR to the build targets so that it doesn't interfere with a host ccache setup 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26181 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-15 19:58:32 +00:00
nbd
a9714431a9 download.mk: properly quote download urls 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26129 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-13 18:38:43 +00:00
hauke
b1ca5c4826 kernel: update to kernel version 2.6.37.3 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26126 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-13 17:14:08 +00:00
hauke
dbf062aadf kernel: update to kernel version 2.6.34.8 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26125 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-13 17:13:11 +00:00
hauke
d6c6d9b502 kernel: update to kernel version 2.6.32.32 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26124 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-13 17:12:20 +00:00
cshore
41d06d84ec [include] target: Added coreutils to list of default packages. It doesn't build or install anything (0 bytes, 0 dependencies) and it prevents other packages from appearing in the package list if it is not selected 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26026 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-11 08:57:37 +00:00
nbd
bbe3a4f17e Revert "[include] provide mipsel-openwrt-linux-uclibcgnueabi site script, fixes the majority of configure problems" 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25970 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-09 11:37:55 +00:00
jow
633650a642 [include] provide mipsel-openwrt-linux-uclibcgnueabi site script, fixes the majority of configure problems 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25968 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-09 10:13:56 +00:00
jow
a59c56be0a [include] site: cache ac_cv_func_malloc_0_nonnull and ac_cv_func_realloc_0_nonnull 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25946 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-08 06:00:56 +00:00
kaloz
c0b7eece82 only support EABI on ARM targets 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25928 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-07 12:59:19 +00:00
nbd
ce2febec6d hotplug2: replace udevtrigger from the udev-106 source with a much smaller self-contained, stripped-down version 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25920 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-07 02:49:24 +00:00
jow
9de501aa56 [include] deploy .ipk archives with --force-maintainer to ensure that configs are kept up-to-date in case they exist already for various reasons 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25915 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-06 23:52:13 +00:00
mb
31ff12316a cmake: Fix ccache 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25878 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-05 10:36:52 +00:00
nbd
5f6d9de5eb add a stamp that can forcibly disable autorebuild for a specific package - useful for testing changes to packages with extremely long recompilation times 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25838 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-03-03 00:17:08 +00:00
jow
f4ea439183 [buildroot] add config.rpath and link it in autotools.mk if missing, some packages might need it, especially users of lib-link.m4 or iconv.m4 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25753 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-02-27 15:39:27 +00:00
nbd
648bae0258 netfilter.mk: put ipv6 conntrack in the right package 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25750 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-02-27 11:22:30 +00:00
nbd
e99b8fd1b6 netfilter: add missing modules for v6 conntrack (patch from #8940) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25731 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-02-26 15:50:01 +00:00
nbd
031c5bb6cb move nf_{conntrack,nat}_tftp to ipt-nathelper-extra, most people don't need this 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25722 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-02-26 00:35:22 +00:00
nbd
55664ae04b kernel: remove imq support, refresh patches 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25641 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-02-21 02:06:51 +00:00
jow
c45b60efa6 [include] toplevel.mk: remove quotes from the release name, its up to its users to ensure proper quoting 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25596 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-02-19 22:15:17 +00:00
florian
57a443b8dd [kernel] update to 2.6.32.29 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25583 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-02-19 12:44:23 +00:00
florian
31ed958204 [kernel] update to 2.6.35.11 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25582 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-02-19 12:44:16 +00:00
florian
ea7e9693a2 [kernel] update to kernel 2.6.36.4 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25580 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-02-19 12:44:07 +00:00
florian
5a446cf2d8 [kernel] update to 2.6.37.1 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25577 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-02-19 12:43:59 +00:00
florian
1e87adcdd3 add git (git-core) as a prerequisite (#8866) 
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@25536 3c298f89-4303-0410-b956-a3cf2f4a3e73
 2011-02-14 15:06:11 +00:00