chrissi^ authored 5 years ago and chrissi^ committed 1 month ago

Signed-off-by: Chrissi^ <chris@tinyhost.de>

Emantor authored 9 months ago and chrissi^ committed 3 months ago

For the redirect login implemented for parker, it is beneficial to keep
a list of seen routers and mark them as expired instead of removing them
from the global routers list. This way we don't enter a new redirect
entry for the same router when it shows up again after a mesh link
failure.

All foreach loops should be adjusted to correctly ignore expired
routers.

Signed-off-by: Rouven Czerwinski <rouven@czerwinskis.de>

A popen of `ebtables` can block, when there is already another instance
running.
This timeout was intended to be 1 second.
So we should wait at least that long.

Signed-off-by: Chris Fiege <cfi@pengutronix.de>

Finding the actual IPv4 address of the node relied on "-br" of ip.
Since Gluon v2022 we must live with busybox ip...
This change works around this change...

Jan Luebbe authored 6 years ago and chrissi^ committed 3 months ago

For parker we need DHCP on the client interface. Ths rule
prevents us from doing so.
In addition: make sure old rules will be deleted on upgrade.

Jan Luebbe authored 3 years ago and chrissi^ committed 3 months ago

respondd drops existing json object if any provider returns NULL, so we need to
return an empty object instead.

This change removes the prefix4 and prefix6 attributes from the
site.conf. These do not make sense in the context of parker.

Packages that are usually used in parker do not use these anymore. Some
other packages do - you should not enable those :-)

With this change a ipv6 route to prefix_6 will no longer be set on
br-client. Systems that already have this route will keep it.

With this change the (not working) redirect in the http status page has
been removed. We should consider to add this later on.

Hint: Some changes were moved from this commit to:
community-packages:ffbs-mesh-vpn-parker/files/lib/gluon/upgrade/401-respondd-firewall-parker
This reverts changes done in package/gluon-respondd/luasrc/lib/gluon/upgrade/400-respondd-firewall.

Jan Luebbe authored 4 years ago and chrissi^ committed 3 months ago

Packets which have a destination MAC of other local nodes should not be
redirected, as this possibly results in routing loops in networks with more
than one uplink.

Signed-off-by: Jan Luebbe <sho@stratum0.net>

chrissi^ authored 4 years ago and chrissi^ committed 3 months ago

This change let's uradvd deliver the v6 link-local of this node as DNS.
With this change DNS-requests are not affected by the radv-filterd
-rewrites during roaming.

Signed-off-by: Chrissi^ <chris@tinyhost.de>

Jan Luebbe authored 5 years ago and chrissi^ committed 3 months ago

When multiple routers are in the same local mesh and clients roam from one (A)
to the next (B), the change of global IP and default gateway are not
synchronized. This leads to packets with an address belonging to router A to be
sent via router B (or the other way around). Those packets are then dropped by
wireguard at the concentrator.

To avoid this, we let gluon-radv-filterd monitor router advertisements and keep
a list of neighbouring v6 networks. With this information, it can maintain a
set of ebtables DNAT rules to redirect the packets to the matching gateway.

Signed-off-by: Jan Luebbe <jluebbe@debian.org>

chrissi^ authored 5 years ago and chrissi^ committed 3 months ago

Using this change an VPN-node announces it's own IPv6 as DNS server.
/tmp/addr6 is written by nodeoute.lua during runtime configuration.

Signed-off-by: Chrissi^ <chris@tinyhost.de>

chrissi^ authored 6 years ago and chrissi^ committed 3 months ago

This change alles meshed PARKER-Nodes to forward IPv6 to the next node.

Signed-off-by: Chrissi^ <chris@tinyhost.de>

Jan Luebbe authored 6 years ago and chrissi^ committed 3 months ago

Signed-off-by: Jan Luebbe <jlu@pengutronix.de>

(cherry picked from commit e9acd522455f73f5778a313c73085f4b7c7193cb)

[v2023.2.x] modules: update to latest Git HEAD

c691e6f4c7ea ecdsautils: update to 0.4.2
df37b4e76420 hev-socks5-server: update to 2.6.8
5facb6cbccfb pbr: bugfix for dns & tor policies
340e85698777 rclone: Update to 1.68.1
0e4b82965e03 v2ray-geodata: Update to latest version
f98508023fa4 btop: Update to 1.4.0
e38a6889f4b2 sing-box: Update to 1.9.6
707c578436d0 sing-box: Update to 1.9.5

1efcdb244660 ramips: use OKLI loader for TP-Link RE200 v1 and RE210 v1
fb44dd731484 ramips: introduce TP-Link v1 header OKLI image recipe
1ec1aa9cc729 ramips: add support for netis N6
4d89918a98ae ipq40xx: fix MAC address on Meraki MR33 and MR74 after nvmem-layout
fa0a7e00e829 octeon: ubnt-edgerouter: fix sysupgrade config backup/restore
87477c756e11 tools: bzip2: use static lib and tools

docs: add v2023.2.4 release notes

modules: update to latest HEAD

Co-authored-by: David Bauer <mail@david-bauer.net>

33858483a delve: update to 1.23.1

5332351821 ipq40xx: fix AP-303H PSE GPIO pin
6e561fe0a1 kernel: r8126: add CONFLICT to rss variant
1d9f6d389e kernel: r8125: add CONFLICT to rss variant

[v2023.2.x] modules: update to latest Git HEAD

e351d1e mesh11sd: update to version 4.1.1

b5ed85f6e adblock-fast: bugfixes and shellcheck update
18d578cb3 banIP: update to 1.0.0-7
168a1eca5 softflowd: add '-b' option to config
11c95fc18 softflowd: bump to 1.1.0
716cd1c5f adblock: update to 4.2.2-5
187414e11 adblock: update to 4.2.2-4
67dccdd41 v2ray-geodata: Update to latest version
7616ee3eb v2ray-core: Update to 5.18.0
c6318aa1b v2ray-core: Update to 5.17.1
172b2cd74 v2ray-core: update to 5.16.1
ad3b4be54 rclone: Update to 1.68.0
48f320a2c travelmate: update to 2.1.3-1
d5db80daf php8: update to 8.2.23
b05da0905 banip: update 1.0.0-6
e89b1ac5e gg: Update to 0.2.19
c3fdd943c cloudflared: reload service if wan inferface has (re)connected
f778f04a9 nano: update to 8.2
3932357ff glib2: update to 2.74.7 to fix several CVEs
024272ff8 rust: update to 1.80.1
c2c0f5514 rust: update to 1.80.0
7d560dbbc yq: Update to 4.44.3
7e5b8c735 yq: Update to 4.44.1
8a37978c6 yq: Update to 4.43.1
3b364025d v2ray-geodata: Update to latest version
d34c3f449 xray-core: update to 1.8.24
37d3e2f92 apfree-wifidog: update to 7.08.2035
a34dbede2 apfree-wifidog: modify wifidogx.init 1. to address the isssue of incomplement firwall rules 2. added support for gateway settings
e0399913d dhtd: udpate to 1.0.2
cf2e9b4c2 dhtd: update to 1.0.1
05dd97469 crowdsec-firewall-bouncer: new upstream release version 0.0.29
ccd7ce9ba sing-box: update to 1.9.4
eb6939fde lxc: fix huge binary sizes by backporting upstream Meson dynlink fixes
a486e2ddb adblock: update to 4.2.2-3
24fadad60 adblock: update to 4.2.2-2
57e302966 adblock: update to 4.2.2
f62f2ecca bind: bump to 9.18.28
b3f9730ae natmap: allow binding to a port or port range
c7db0151f hev-socks5-server: update to 2.6.7
555fd4395 natmap: update to 20240813
a00aa8dab mjpg-streamer: fix option enabled check in init.d
77c9e3cbf pbr: update to 1.1.6-20
3bcd13f9c pbr: bugfix: fix IPv6 interface errors
174ba37b8 pbr: update to 1.1.4-r15
2be499750 pbr: prepare migration to APK
762778861 pbr: update to 1.1.4-5
1dfc6db2d boost: update GCC options in Makefile
e7459e61f adblock: update to 4.2.1
f8cb76aaa adblock: update to 4.2.0
f5527cd0d golang: Update to 1.21.13
1e97da910 adblock-fast: update to 1.1.2-3
4f4258074 https-dns-proxy: update to 2023.12.26-1
3e526a782 php8: update to 8.2.22
693d3554a ruby: update to 3.2.5
2fc7dc8ac dockerd: Update to 27.1.1
fbd7d6fe4 docker: Update to 27.1.1
ef3f699aa containerd: Update to 1.7.20
07f2aa3ea dockerd: Update to 27.1.0
6cf0eb600 docker: Update to 27.1.0
7db3965ca xray-core: update to 1.8.23
df53a0b1e sqm-scripts-extra: remove the ancient package
5ae298212 nano: update to 8.1

dced292d68 OpenWrt v23.05.5: revert to branch defaults
28cf53e6bd OpenWrt v23.05.5: adjust config defaults
10cc5fcd00 build: align SOURCE path for build system and SDK
87fbb5085d ipq40xx: re-add label MAC address for FritzBox 4040
a2a67804fc firmware-utils: bump to latest openwrt-23.05
ace013101c realtek: 5.15: backport VLAN fix
8e75eed617 ath79: fix I2C pins on GL-AR750
4d4d260f5b ramips: tp-link er605-v2: Remove sysupgrade-tar image
66055df3e0 ucode: another fix for host installation
dd4b05ee8a ipq40xx: add PoE passthrough GPIO
4d7ad37891 ramips: mt7621: use lzma-loader for Sercomm NA502s
e3bb35811e lldpd: fix reload bug: advertisements shall default to on
0b48b832a9 lldpd: extended interface(s) parsing to handle patterns
7ee813b3ef lldpd: make management address advertisement controllable
af6a852ced lldpd: make capabilities advertisement controllable
cec02193d5 lldpd: note about capabilities
ca0c2363c2 lldpd: fix restart
3d3dad61b2 lldpd: update URL
d7765c488c lldpd: shellcheck fixes
601bbdda6a lldpd: implement lldp_policy parameter
56675166e8 lldpd: Implement location parameter
7542e7927b lldpd: fix error "sh: XXXms: bad number"
b886948692 lldpd: refactor out ifaces derivation; reuse function
74581b02b2 lldpd: remove unneeded quotes
8766fed5cd lldpd: remove unneeded quotes and variable quoting
64b38f3bd5 lldpd: remove unneeded quotes and variable quoting
89759ee4bb lldpd: remove unneeded quotes and variable quoting
50135a03a6 lldpd: remove unneeded quotes
4446346fdd lldpd: remove unneeded quotes and variable quoting
b1ddf0a859 lldpd: fix a paste error from commit 1be2088a5247b2cfabe8be991c1e52ddaf780a16
c0217ef8f8 lldpd: spell fixes
1d14e0abfc lldpd: fix -k 'lldp_no_version' row
4ebd60b083 lldpd: add option to force EDP
13193cb070 lldpd: only use snmp options when compiled in
02e3845890 lldpd: Update Makefile package release
a7f749ded4 lldpd: add option for tx delay and tx hold
b2008404ab lldpd: add option to set system platform
18fc86a0f5 lldpd: add option to force SONMP enabled
1201a69664 lldpd: add option to force FDP on
d6da0952ab lldpd: set CDP version and allow forcing CDP on
7f58fc14d8 lldpd: allow disabling LLDP protcol
ed3f182d63 lldpd: add portidsubtype option
6cbc100762 lldpd: add agent-type option
be4824977b lldpd: add LLDP MED options
15e6259231 lldpd: option to disable LLDP-MED inventory TLV
59ad77faba lldpd: Init adds no-version option
1d83e4c5ed lldpd: Allow neighbour filtering
f79ab96312 lldpd: LLDPD binds to only specified interfaces
b0f991d03c lldpd: Init config read on reload
8f714af40b lldpd: add lldp_syscapabilities config option
3b85719b62 ucode: fix missing backslash
461102d99c ncurses: Fix path in ncursesw.pc
b1858ffbf3 build: autoconf: set ac_cv_func_setresuid=true
912acb6c09 filogic: add missing 2.5G PHY LEDs configuration for Zyxel EX5700
7e42fdcafe mac80211: Update to version 6.1.110-1
4fa16c1e24 openssl: update to 3.0.15
a0ebff651d mbedtls: Update to 2.28.9
8e5e62416f kernel: bump 5.15 to 5.15.167
fd6e077ddf kernel: bump 5.15 to 5.15.166
bad01d4806 kernel: bump 5.15 to 5.15.165
cc938b18a8 ucode: fix host installation
ee3efefc5e treewide: fixup models names for UniFi U6 series
7447eeac91 ipq40xx: define config-names for Aruba boards
5773538c90 base-files: fix merge of passwd/shadow/group lines with trailing colons
c4c43c64aa tools: libtool: do not symlink files in bootstrap
d811a09524 include: autotools: do not symlink files in autoreconf
5a8588e360 hostapd: fix anqp_3gpp_cell_net list delimiter
a07a531329 octeon: ubnt-edgerouter: Disable PCIe
bd79a16674 kernel: r8126: print link status when link up
4d33716f96 kernel: r8125: print link status when link up
561d534adb kernel: r8168: print link status when link up
fe8c1fdd24 kernel: r8101: print link status when link up
403af43fd4 kernel: r8126: ignore the rss rxnfc log
6a877053dd kernel: r8125: ignore the rss rxnfc log
c615bcf438 kernel: r8126: add RSS variant
a79157f257 package: add kmod-r8126 ethernet driver
4d0dc5e15e kernel: r8125: add RSS variant
68d5ed7526 package: add kmod-r8125 ethernet driver
7d6366dcd7 package: add kmod-r8168 ethernet driver
d1de7d3c92 package: add kmod-r8101 ethernet driver
cce5b49de4 mediatek: fix lan/wan macaddr for cmcc rax3000m
a591f9cd14 mediatek: enable rootwait for cmcc rax3000m emmc version
6fadcee50b mediatek: increase phy assert time for jdcloud re-cp-03
c241885687 kernel: ubootenv-nvram: driver for RAM backed environments
e4625c37c4 hostapd: fix SAE H2E security vulnerability
07cb7cb885 kernel: bump 5.15 to 5.15.164
f99dffcaca mac80211: Update to version 6.1.102-1
6edde2b502 ath25: eth: Fix PHY access over ar2313 driver
2e064182bf ipq40xx: eth: Fix PHY access over ipqess driver
c4dc5dbd33 ramips: eth: Fix PHY access over mtk_eth_soc driver
e5233fa70e ath79: Fix PHY access over ag71xx driver
1478f641bd ltq-ptm: Fix netdev ioctls with kernel > 5.15

Changed entry "python3-distutils" that is outdated to "python3-setuptools" (new version that is supported in modern linux distributions)

modules: update to latest Git HEAD