Commit Graph

5025 Commits (2021.2)
 

Author SHA1 Message Date
pedro 604dca76aa kernel: netfilter: xt_recent: add address masking option (ported from upstream)
The mask option allows you put all address belonging that mask into
the same recent slot. This can be useful in case that recent is used
to detect attacks from the same network segment.

Tested for backward compatibility.

Signed-off-by: Denys Fedoryshchenko <denys@visp.net.lb>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

efdedd5426
5 years ago
snowman58 e5b0af1e4f Update version to "V1.0.12.99" due to NETGEAR mandating no downgrades and having a limit on how high the new version can be. 5 years ago
M_ars 5bc54580e2 SDK7: update part 1
Note: sync SDK7 with ASUS SRC and also stay closer to SDK6
5 years ago
pedro dc9cbd7e55 Bump version to 2020.6 5 years ago
pedro aa0de4b620 Merge branch 'arm-master' into arm-sdk7 5 years ago
pedro f1d61a7f8d Update CHANGELOG 5 years ago
pedro a5d373adb8 WL: update wireless driver for SDK7 to GPL 382.52287 (Kr00k)
$ dhd -i eth1 version
(null): 1.194 RC33.0
Dongle Host Driver, version 1.194.33 (r526004)
Compiled in drivers/net/wireless/bcmdhd on Jun 23 2020 at 18:27:39
5 years ago
M_ars afe4a65026 Asus RT-AC56U/R: do not unload wifi driver
Note: this is a workaround, to avoid a reboot after saving basic settings for example. (No change for all other routers)
The reboot problem for this older sdk6 router is independent of the SDK6 upgrade and wifi driver upgrade to *.126 (also happens with *.86)
(probably a combination of older cfe/hardware/driver)

tested, working correct now :)
5 years ago
M_ars 3af003dc6e Asus RT-AC56R: improve/fix support with new wifi driver (*.126)
see problem report:
https://www.linksysinfo.org/index.php?threads/fork-freshtomato-arm-development-discussion-only-for-support-always-open-your-own-thread.74117/page-203#post-317427

Note: set country to US by default for that router
5 years ago
pedro d4373ca3c7 GUI: advanced-wireless.asp: when changing country for WL driver, also change its short version - 'ccode' 5 years ago
pedro 8208f872e6 firewall: fix commit 31a8eb0 (brute force mitigation rule on port defined for GUI remote access) - increase hitcount / lower period of time (hardcoded) 5 years ago
pedro 1ad8d4bd5f libevent: update to 2.1.12-stable 5 years ago
pedro 81947100df tor: update to 0.4.3.6 5 years ago
pedro ec61cf1279 libcurl: update to 7.71.1 5 years ago
pedro 3f5e4b9b10 httpd: add to log failed GUI login attempts 5 years ago
pedro 4926a1818a kernel: r2q change message from priority WARNING to priority DEBUG 5 years ago
pedro f3c8387e34 kernel: r2q change message from priority WARNING to priority DEBUG 5 years ago
M_ars 1295fa6634 shared: defaults: wl clean-up (part 3) / remove wl_radarthrs for ARM branch
Note: the radar thrs params are not valid and not complete for SDK6.37 (and up)
--> do not provide them and use driver default values (no change)
5 years ago
M_ars 9c0b914cc9 Netgear Router (all supported): Raise revision level (again)
see original commit:
0c2fb23a97

changed / lowered (ooops)... ;-)
a30b1e86ab (chg-release)/src-rt-6.x.4708/wnrtool/tomato_cfg.h
5 years ago
pedro e0580ff9a7 www: clearcookies.asp: remove the comment left when debugging 5 years ago
pedro 5b765f1e1a www: tomato.js: add SameSite=Lax when creating cookies 5 years ago
pedro 7dfc2ad925 Bump version to 2020.5 5 years ago
pedro 2db50c1638 Merge branch 'arm-master' into arm-sdk7 5 years ago
pedro 48cb28e5ca Update CHANGELOG 5 years ago
pedro c871772e89 router: Makefile: fix diskdev_cmds install 5 years ago
pedro 02c0ae7303 build: fix processor count for parallel building
Ported from @Merlin: b87c07288f
5 years ago
pedro bde4feba38 build: kernel: enable HIDRAW for UPS support in apcupsd 5 years ago
pedro 6ee943d6af patches: getdns: fix commit 767220d 5 years ago
pedro d3bf34c4b9 rc: mtd.c: skip bad blocks during erase 5 years ago
pedro 767220d55b patches: getdns: rename the patches according to the function 5 years ago
pedro 72f6a54d24 shared: update ifaddrs.c 5 years ago
pedro 7bc28353e7 dropbear: strip version from ident
Ported from @Merlin: dbdda187ca
5 years ago
pedro febc41d18b kernel sdk7: net: usb: qmi_wwan: remove redundant assignment to variable status
The variable status is being initializeed with a value that is never read
and it is being updated later with a new value. The initialization
is redundant and can be removed.

Addresses-Coverity: ("Unused value")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Acked-by: Bjørn Mork <bjorn@mork.no>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

Fix from upstream
5 years ago
pedro cf78991eb9 kernel sdk7: net: huawei_cdc_ncm: remove redundant assignment to variable ret
The variable ret is being initializeed with a value that is never read
and it is being updated later with a new value. The initialization
is redundant and can be removed.

Addresses-Coverity: ("Unused value")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

Fix from upstream
5 years ago
pedro ee6a0ad283 kernel: net: usb: qmi_wwan: remove redundant assignment to variable status
The variable status is being initializeed with a value that is never read
and it is being updated later with a new value. The initialization
is redundant and can be removed.

Addresses-Coverity: ("Unused value")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Acked-by: Bjørn Mork <bjorn@mork.no>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

Fix from upstream
5 years ago
pedro 38486d0740 kernel: net: huawei_cdc_ncm: remove redundant assignment to variable ret
The variable ret is being initializeed with a value that is never read
and it is being updated later with a new value. The initialization
is redundant and can be removed.

Addresses-Coverity: ("Unused value")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

Fix from upstream
5 years ago
pedro 31a8eb0b64 firewall: add a brute force mitigation rule on port defined for GUI remote access 5 years ago
pedro 26772d31f8 firewall: retry failed iptables-restore in a few secs
This resolves the collision occuring if another process tries to modify the
table while we are in the process of applying the firewall rules.
5 years ago
M_ars e2da127857 kernel: netns: Deduplicate and fix copy_net_ns when !CONFIG_NET_NS
The copy of copy_net_ns used when the network stack is not
built is broken as it does not return -EINVAL when attempting
to create a new network namespace.  We don't even have
a previous network namespace.

Since we need a copy of copy_net_ns in net/net_namespace.h that is
available when the networking stack is not built at all move the
correct version of copy_net_ns from net_namespace.c into net_namespace.h
Leaving us with just 2 versions of copy_net_ns.  One version for when
we compile in network namespace suport and another stub for all other
occasions.

Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.7&id=d727abcb2355566a3372ee1810f156fba75112b7
5 years ago
M_ars 6085f0f543 kernel: netns: Deduplicate and fix copy_net_ns when !CONFIG_NET_NS
The copy of copy_net_ns used when the network stack is not
built is broken as it does not return -EINVAL when attempting
to create a new network namespace.  We don't even have
a previous network namespace.

Since we need a copy of copy_net_ns in net/net_namespace.h that is
available when the networking stack is not built at all move the
correct version of copy_net_ns from net_namespace.c into net_namespace.h
Leaving us with just 2 versions of copy_net_ns.  One version for when
we compile in network namespace suport and another stub for all other
occasions.

Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.7&id=d727abcb2355566a3372ee1810f156fba75112b7
5 years ago
M_ars 1802443537 GUI: basic-network.asp - hide and disable wan options/settings if the user selects/enables wireless bridge mode
see problem report:
https://www.linksysinfo.org/index.php?threads/tomato-e4200-wireless-ethernet-bridge-on-5ghz-eth2.75637/#post-317127

Note: option add wan port to lan will be hidden in wireless bridge mode (only visible with wan disabled now)
5 years ago
pedro f418c76f68 build: enable kernel network namespaces and veth for AIO targets 5 years ago
Not Sure e8256c74d0 Merged in fix-crash-when-quickly-add-remove-namespaces (pull request #23)
Fix panic due to incorrect check of error pointer when proc_ns_fget fails.
5 years ago
pedro cb0f6ef043 openvpn: in case of openvpn unexpectedly dies - flush tun IF, otherwise openvpn will not re-start (required by iproute2) 5 years ago
pedro 384d7395d2 openvpn: no longer dump stats to system log 5 years ago
pedro 47bd0f22ae openvpn: ensure duplicate-cn is set as default if not specified 5 years ago
pedro ce5f7a8a92 openvpn: shutdown all running servers/clients on wan stop and remove tunnel modules 5 years ago
pedro 7b38f92287 openvpn: set up firewall in correct order - before starting openvpn but after stopping it 5 years ago
pedro b5b5f60215 openvpn: fix multiple issues in stopping vpn services 5 years ago
pedro 7017a32b80 firewall: openvpn: fix duplicate openvpn rules on wan/openvpn restart 5 years ago