Jan Luebbe authored 6 years ago and chrissi^ committed 3 months ago

For parker we need DHCP on the client interface. Ths rule
prevents us from doing so.
In addition: make sure old rules will be deleted on upgrade.

Jan Luebbe authored 3 years ago and chrissi^ committed 3 months ago

respondd drops existing json object if any provider returns NULL, so we need to
return an empty object instead.

This change removes the prefix4 and prefix6 attributes from the
site.conf. These do not make sense in the context of parker.

Packages that are usually used in parker do not use these anymore. Some
other packages do - you should not enable those :-)

With this change a ipv6 route to prefix_6 will no longer be set on
br-client. Systems that already have this route will keep it.

With this change the (not working) redirect in the http status page has
been removed. We should consider to add this later on.

Hint: Some changes were moved from this commit to:
community-packages:ffbs-mesh-vpn-parker/files/lib/gluon/upgrade/401-respondd-firewall-parker
This reverts changes done in package/gluon-respondd/luasrc/lib/gluon/upgrade/400-respondd-firewall.

Jan Luebbe authored 4 years ago and chrissi^ committed 3 months ago

Packets which have a destination MAC of other local nodes should not be
redirected, as this possibly results in routing loops in networks with more
than one uplink.

Signed-off-by: Jan Luebbe <sho@stratum0.net>

chrissi^ authored 4 years ago and chrissi^ committed 3 months ago

This change let's uradvd deliver the v6 link-local of this node as DNS.
With this change DNS-requests are not affected by the radv-filterd
-rewrites during roaming.

Signed-off-by: Chrissi^ <chris@tinyhost.de>

Jan Luebbe authored 5 years ago and chrissi^ committed 3 months ago

When multiple routers are in the same local mesh and clients roam from one (A)
to the next (B), the change of global IP and default gateway are not
synchronized. This leads to packets with an address belonging to router A to be
sent via router B (or the other way around). Those packets are then dropped by
wireguard at the concentrator.

To avoid this, we let gluon-radv-filterd monitor router advertisements and keep
a list of neighbouring v6 networks. With this information, it can maintain a
set of ebtables DNAT rules to redirect the packets to the matching gateway.

Signed-off-by: Jan Luebbe <jluebbe@debian.org>

chrissi^ authored 5 years ago and chrissi^ committed 3 months ago

Using this change an VPN-node announces it's own IPv6 as DNS server.
/tmp/addr6 is written by nodeoute.lua during runtime configuration.

Signed-off-by: Chrissi^ <chris@tinyhost.de>

chrissi^ authored 6 years ago and chrissi^ committed 3 months ago

This change alles meshed PARKER-Nodes to forward IPv6 to the next node.

Signed-off-by: Chrissi^ <chris@tinyhost.de>

Jan Luebbe authored 6 years ago and chrissi^ committed 3 months ago

Signed-off-by: Jan Luebbe <jlu@pengutronix.de>

(cherry picked from commit e9acd522455f73f5778a313c73085f4b7c7193cb)

[v2023.2.x] modules: update to latest Git HEAD

c691e6f4c7ea ecdsautils: update to 0.4.2
df37b4e76420 hev-socks5-server: update to 2.6.8
5facb6cbccfb pbr: bugfix for dns & tor policies
340e85698777 rclone: Update to 1.68.1
0e4b82965e03 v2ray-geodata: Update to latest version
f98508023fa4 btop: Update to 1.4.0
e38a6889f4b2 sing-box: Update to 1.9.6
707c578436d0 sing-box: Update to 1.9.5

1efcdb244660 ramips: use OKLI loader for TP-Link RE200 v1 and RE210 v1
fb44dd731484 ramips: introduce TP-Link v1 header OKLI image recipe
1ec1aa9cc729 ramips: add support for netis N6
4d89918a98ae ipq40xx: fix MAC address on Meraki MR33 and MR74 after nvmem-layout
fa0a7e00e829 octeon: ubnt-edgerouter: fix sysupgrade config backup/restore
87477c756e11 tools: bzip2: use static lib and tools

docs: add v2023.2.4 release notes

modules: update to latest HEAD

Co-authored-by: David Bauer <mail@david-bauer.net>

33858483a delve: update to 1.23.1

5332351821 ipq40xx: fix AP-303H PSE GPIO pin
6e561fe0a1 kernel: r8126: add CONFLICT to rss variant
1d9f6d389e kernel: r8125: add CONFLICT to rss variant

[v2023.2.x] modules: update to latest Git HEAD

e351d1e mesh11sd: update to version 4.1.1

b5ed85f6e adblock-fast: bugfixes and shellcheck update
18d578cb3 banIP: update to 1.0.0-7
168a1eca5 softflowd: add '-b' option to config
11c95fc18 softflowd: bump to 1.1.0
716cd1c5f adblock: update to 4.2.2-5
187414e11 adblock: update to 4.2.2-4
67dccdd41 v2ray-geodata: Update to latest version
7616ee3eb v2ray-core: Update to 5.18.0
c6318aa1b v2ray-core: Update to 5.17.1
172b2cd74 v2ray-core: update to 5.16.1
ad3b4be54 rclone: Update to 1.68.0
48f320a2c travelmate: update to 2.1.3-1
d5db80daf php8: update to 8.2.23
b05da0905 banip: update 1.0.0-6
e89b1ac5e gg: Update to 0.2.19
c3fdd943c cloudflared: reload service if wan inferface has (re)connected
f778f04a9 nano: update to 8.2
3932357ff glib2: update to 2.74.7 to fix several CVEs
024272ff8 rust: update to 1.80.1
c2c0f5514 rust: update to 1.80.0
7d560dbbc yq: Update to 4.44.3
7e5b8c735 yq: Update to 4.44.1
8a37978c6 yq: Update to 4.43.1
3b364025d v2ray-geodata: Update to latest version
d34c3f449 xray-core: update to 1.8.24
37d3e2f92 apfree-wifidog: update to 7.08.2035
a34dbede2 apfree-wifidog: modify wifidogx.init 1. to address the isssue of incomplement firwall rules 2. added support for gateway settings
e0399913d dhtd: udpate to 1.0.2
cf2e9b4c2 dhtd: update to 1.0.1
05dd97469 crowdsec-firewall-bouncer: new upstream release version 0.0.29
ccd7ce9ba sing-box: update to 1.9.4
eb6939fde lxc: fix huge binary sizes by backporting upstream Meson dynlink fixes
a486e2ddb adblock: update to 4.2.2-3
24fadad60 adblock: update to 4.2.2-2
57e302966 adblock: update to 4.2.2
f62f2ecca bind: bump to 9.18.28
b3f9730ae natmap: allow binding to a port or port range
c7db0151f hev-socks5-server: update to 2.6.7
555fd4395 natmap: update to 20240813
a00aa8dab mjpg-streamer: fix option enabled check in init.d
77c9e3cbf pbr: update to 1.1.6-20
3bcd13f9c pbr: bugfix: fix IPv6 interface errors
174ba37b8 pbr: update to 1.1.4-r15
2be499750 pbr: prepare migration to APK
762778861 pbr: update to 1.1.4-5
1dfc6db2d boost: update GCC options in Makefile
e7459e61f adblock: update to 4.2.1
f8cb76aaa adblock: update to 4.2.0
f5527cd0d golang: Update to 1.21.13
1e97da910 adblock-fast: update to 1.1.2-3
4f4258074 https-dns-proxy: update to 2023.12.26-1
3e526a782 php8: update to 8.2.22
693d3554a ruby: update to 3.2.5
2fc7dc8ac dockerd: Update to 27.1.1
fbd7d6fe4 docker: Update to 27.1.1
ef3f699aa containerd: Update to 1.7.20
07f2aa3ea dockerd: Update to 27.1.0
6cf0eb600 docker: Update to 27.1.0
7db3965ca xray-core: update to 1.8.23
df53a0b1e sqm-scripts-extra: remove the ancient package
5ae298212 nano: update to 8.1

dced292d68 OpenWrt v23.05.5: revert to branch defaults
28cf53e6bd OpenWrt v23.05.5: adjust config defaults
10cc5fcd00 build: align SOURCE path for build system and SDK
87fbb5085d ipq40xx: re-add label MAC address for FritzBox 4040
a2a67804fc firmware-utils: bump to latest openwrt-23.05
ace013101c realtek: 5.15: backport VLAN fix
8e75eed617 ath79: fix I2C pins on GL-AR750
4d4d260f5b ramips: tp-link er605-v2: Remove sysupgrade-tar image
66055df3e0 ucode: another fix for host installation
dd4b05ee8a ipq40xx: add PoE passthrough GPIO
4d7ad37891 ramips: mt7621: use lzma-loader for Sercomm NA502s
e3bb35811e lldpd: fix reload bug: advertisements shall default to on
0b48b832a9 lldpd: extended interface(s) parsing to handle patterns
7ee813b3ef lldpd: make management address advertisement controllable
af6a852ced lldpd: make capabilities advertisement controllable
cec02193d5 lldpd: note about capabilities
ca0c2363c2 lldpd: fix restart
3d3dad61b2 lldpd: update URL
d7765c488c lldpd: shellcheck fixes
601bbdda6a lldpd: implement lldp_policy parameter
56675166e8 lldpd: Implement location parameter
7542e7927b lldpd: fix error "sh: XXXms: bad number"
b886948692 lldpd: refactor out ifaces derivation; reuse function
74581b02b2 lldpd: remove unneeded quotes
8766fed5cd lldpd: remove unneeded quotes and variable quoting
64b38f3bd5 lldpd: remove unneeded quotes and variable quoting
89759ee4bb lldpd: remove unneeded quotes and variable quoting
50135a03a6 lldpd: remove unneeded quotes
4446346fdd lldpd: remove unneeded quotes and variable quoting
b1ddf0a859 lldpd: fix a paste error from commit 1be2088a5247b2cfabe8be991c1e52ddaf780a16
c0217ef8f8 lldpd: spell fixes
1d14e0abfc lldpd: fix -k 'lldp_no_version' row
4ebd60b083 lldpd: add option to force EDP
13193cb070 lldpd: only use snmp options when compiled in
02e3845890 lldpd: Update Makefile package release
a7f749ded4 lldpd: add option for tx delay and tx hold
b2008404ab lldpd: add option to set system platform
18fc86a0f5 lldpd: add option to force SONMP enabled
1201a69664 lldpd: add option to force FDP on
d6da0952ab lldpd: set CDP version and allow forcing CDP on
7f58fc14d8 lldpd: allow disabling LLDP protcol
ed3f182d63 lldpd: add portidsubtype option
6cbc100762 lldpd: add agent-type option
be4824977b lldpd: add LLDP MED options
15e6259231 lldpd: option to disable LLDP-MED inventory TLV
59ad77faba lldpd: Init adds no-version option
1d83e4c5ed lldpd: Allow neighbour filtering
f79ab96312 lldpd: LLDPD binds to only specified interfaces
b0f991d03c lldpd: Init config read on reload
8f714af40b lldpd: add lldp_syscapabilities config option
3b85719b62 ucode: fix missing backslash
461102d99c ncurses: Fix path in ncursesw.pc
b1858ffbf3 build: autoconf: set ac_cv_func_setresuid=true
912acb6c09 filogic: add missing 2.5G PHY LEDs configuration for Zyxel EX5700
7e42fdcafe mac80211: Update to version 6.1.110-1
4fa16c1e24 openssl: update to 3.0.15
a0ebff651d mbedtls: Update to 2.28.9
8e5e62416f kernel: bump 5.15 to 5.15.167
fd6e077ddf kernel: bump 5.15 to 5.15.166
bad01d4806 kernel: bump 5.15 to 5.15.165
cc938b18a8 ucode: fix host installation
ee3efefc5e treewide: fixup models names for UniFi U6 series
7447eeac91 ipq40xx: define config-names for Aruba boards
5773538c90 base-files: fix merge of passwd/shadow/group lines with trailing colons
c4c43c64aa tools: libtool: do not symlink files in bootstrap
d811a09524 include: autotools: do not symlink files in autoreconf
5a8588e360 hostapd: fix anqp_3gpp_cell_net list delimiter
a07a531329 octeon: ubnt-edgerouter: Disable PCIe
bd79a16674 kernel: r8126: print link status when link up
4d33716f96 kernel: r8125: print link status when link up
561d534adb kernel: r8168: print link status when link up
fe8c1fdd24 kernel: r8101: print link status when link up
403af43fd4 kernel: r8126: ignore the rss rxnfc log
6a877053dd kernel: r8125: ignore the rss rxnfc log
c615bcf438 kernel: r8126: add RSS variant
a79157f257 package: add kmod-r8126 ethernet driver
4d0dc5e15e kernel: r8125: add RSS variant
68d5ed7526 package: add kmod-r8125 ethernet driver
7d6366dcd7 package: add kmod-r8168 ethernet driver
d1de7d3c92 package: add kmod-r8101 ethernet driver
cce5b49de4 mediatek: fix lan/wan macaddr for cmcc rax3000m
a591f9cd14 mediatek: enable rootwait for cmcc rax3000m emmc version
6fadcee50b mediatek: increase phy assert time for jdcloud re-cp-03
c241885687 kernel: ubootenv-nvram: driver for RAM backed environments
e4625c37c4 hostapd: fix SAE H2E security vulnerability
07cb7cb885 kernel: bump 5.15 to 5.15.164
f99dffcaca mac80211: Update to version 6.1.102-1
6edde2b502 ath25: eth: Fix PHY access over ar2313 driver
2e064182bf ipq40xx: eth: Fix PHY access over ipqess driver
c4dc5dbd33 ramips: eth: Fix PHY access over mtk_eth_soc driver
e5233fa70e ath79: Fix PHY access over ag71xx driver
1478f641bd ltq-ptm: Fix netdev ioctls with kernel > 5.15

Changed entry "python3-distutils" that is outdated to "python3-setuptools" (new version that is supported in modern linux distributions)

modules: update to latest Git HEAD

35cf5f7 mesh11sd: update to version 4.1.0

3db4314e2 delve: update to 1.23.0
6e2e3240d xray-core: update to 1.8.21
c2422e740 p910nd: set bidi only if not already set
a8c75f103 make: update to 4.4.1
3016416c5 autoconf: update to 2.72
bf11148e5 automake: update to 1.16.5
2d98802b1 xray-core: update to 1.8.20
66e793f9c unbound: Update to 1.20.0
7ebcd8c81 transmission: update to version 4.0.6
733e6808f transmission: fix compile with MbedTLS 3.X
16446a3b2 bind: bump to 9.18.27
dbac39060 ddns-scripts: Update knot resolver regexp
f2044c19c exim: update to 4.98
1b51b17c7 xray-core: update to 1.8.19

f791ec1f6d kernel: bump 5.15 to 5.15.163
56a84b3c47 mac80211: Fix wifi throughput

modules: update to latest HEAD (OpenWrt point release)

d14e460b5 dockerd: fix breaks IPv6 routing
8403d1466 v2ray-geodata: Update to latest version
7e77e583f v2ray-geodata: Update to latest version
2ac9aba4e v2ray-geodata: Update to latest version
c7cebd6ca v2raya: update to 2.2.5.7
08e499044 xray-core: update to 1.8.18
dc6172ecc banip: update 1.0.0-5
46c43fc4b krb5: update to 1.21.3
62fffe1a4 xray-core: update to 1.8.17
658aeee10 dnsproxy: Update to 0.67.0
05a0fbe21 php8: update to 8.2.21
37a65f217 adguardhome: Update to 0.107.46
9042b657d adguardhome: Update to 0.107.42
6908bf51a adguardhome: wait for interfaces to be up at boot
b7665f4f6 v2raya: update to 2.2.5.6
f19d10782 v2raya: update to 2.2.5.5
f24f16576 lang/python/python-paho-mqtt: fix license
8b613973b net/ntpd: fix license
e6e5f761b utils/lsof: fix license
e24386b3e libs/libgd: fix license
f0780bb91 libs/tiff: fix license
92a4808a2 libs/libev: fix license
e2e463171 net/tor: add license
652cce0ed devel/automake: fix license
a4d7058fe utils/vim: add license info
0d4d322e6 libassuan: Fix license
10babb22c gpgme: Fix license

76a0c2932c OpenWrt v23.05.4: revert to branch defaults
b9510660ce OpenWrt v23.05.4: adjust config defaults
d8dd03c46f build: include tests/Makefile if available
84b000e5d0 wolfssl: Update to version 5.7.2
d3552ccb17 mediatek: filogic: prevent faulty mac address assignment
74df6ce9db mediatek: filogic: add support for Cudy M3000 v1
a0645675d4 uboot-mediatek: enable rootwait for jdcloud re-cp-03
9f739daf05 uboot-mediatek: fix patch order
84ecd7c939 mediatek: fix lan/wan macaddr for jdcloud re-cp-03
9276bb1cf5 ath79: replace "mac-address-ascii" with "mac-base"
553a7a3265 ucode: update to Git 1a8a0bcf725520820802ad433db22d8f64fbed6c (2024-07-11)

[v2023.2.x] treewide: pending devices and bugfixes from master

Co-authored-by: David Lutz <kpanic@kpanicroom.de>
(cherry picked from commit d755d8b90c5a1c28a3a79379af9abff2cc5da721)

modules: update to latest HEAD

Switch config for swconfig can be found in the network,
not the system config.

This resulted in `Switch type: none` beeing reported for swconfig devices.

(cherry picked from commit d9cfa194c131452bc4f927076f35a8217dc2a483)