Commit Graph

5025 Commits (2021.2)
 

Author SHA1 Message Date
M_ars 8b10490e28 shared: led.c - add conditional compilation and some cosmetic
Hint: sdk7 with extra commit
6 years ago
pedro cbc8a9cda6 OpenVPN: move loading of the policy routing modules (hash:ip) to openvpn.c script
- also rp_filter is now disabled there, instead of in vpnrouting.sh
6 years ago
Not Sure bb39824069 Merged in notsure2/freshtomato-arm/multiwan-scripts (pull request #28)
Implement MultiWAN Up script (WAN number passed as $1) that runs regardless of which one is considered the "primary" one.
6 years ago
Not Sure 0ee739302f Merged in notsure2/freshtomato-arm/multiwan-pbr-rp-filter (pull request #27)
Disable rp_filter on multiwan routing add to allow policy-based routing to work.
6 years ago
Not Sure 4011508e60 Merged in notsure2/freshtomato-arm/openvpn-policy-routing-priority (pull request #26)
OpenVPN policy routing fixes.

Approved-by: pedro <pedro311@gmail.com>
Approved-by: kille72 <mail@exotic.se>
6 years ago
Not Sure 84d2e9b981 Merged in notsure2/freshtomato-arm/multiwan-routing-table-multilan (pull request #23)
Add routes for all LAN bridges when creating multiwan routing tables.

Approved-by: pedro <pedro311@gmail.com>
Approved-by: kille72 <mail@exotic.se>
6 years ago
Not Sure 8810fba702 Merged in notsure2/freshtomato-arm/openvpn-password-length-validation-fix (pull request #24)
Fix openvpn password validation to actually accept 70 characters.

Approved-by: pedro <pedro311@gmail.com>
Approved-by: kille72 <mail@exotic.se>
6 years ago
Not Sure e8e34b149d Merged in notsure2/freshtomato-arm/openvpn-tunnelblick-xor (pull request #25)
Integrate OpenVPN 2.4.7 Tunnelblick XOR patch (allows using obfuscated servers).

Approved-by: pedro <pedro311@gmail.com>
Approved-by: kille72 <mail@exotic.se>
6 years ago
pedro 54b80aa3fe router: Makefile: clean-up and simplify libcurl recipe 6 years ago
kille72 cb0072cb46 Revert "Revert "libcurl: Updated to 7.65.1""
This reverts commit 4ffa4895ff.
6 years ago
pedro 54e9d63b2d router: Makefile: libcurl: fix build break
- add --disable-threaded-resolver to fix build break
- enable IPv6 only if IPv6 is really enabled
- remove old option --disable-thread
6 years ago
pedro 192b26237d router: Makefile: php: remove deprecated option - --without-mcrypt 6 years ago
pedro e4ada7b637 router: Makefile: dnsmasq: skip gost validation with nettle, it's not supported anyway
- ref: 0366f24d30
6 years ago
pedro 93468355b1 kernel: improve sack handling and resource usage
upstream commits:
967c05a tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
5f3e2bf tcp: add tcp_min_snd_mss sysctl
f070ef2 tcp: tcp_fragment() should apply sane memory limits
3b4929f tcp: limit payload size of sacked skbs
f331981 tcp: pass previous skb to tcp_shifted_skb()

- Ported from RMerlin, thanks.
dbd4abf8f7
f67ebf59ef
6 years ago
pedro 46b904c176 pppd: various fixes for errors found by coverity static analysis
- refs: fcb076c2b2 44012ae879
6 years ago
M_ars e3bd260a29 Tenda AC15: - enable blink for 5 GHz Wifi
Hint: blink will start only for 5 GHz Wifi LED (GPIO). 2.4 GHz Wifi LED is non GPIO and will use setting "7" (blink slightly)
6 years ago
M_ars 7f8595a1d7 Tenda AC15: change LED table and button feedback - add support for 2.4 GHz LED (non GPIO) - turn on WPS LED again (LED_AOSS) after WPS- OR WLAN- Button has been pressed
Summary for known GPIO LEDs:
- Sys LED GPIO 0, active HIGH (used for LED_DIAG, [substitute -99])
- WPS LED GPIO 6, active HIGH (used for LED_AOSS)
- USB LED GPIO 14, active HIGH (used for LED_USB)
- 5 GHz Wifi GPIO 2, active HIGH (used for LED_5G)
- 2.4 GHz Wifi LED (non GPIO, same like Asus RT-N18U for example)

The LEDs in front of router from left:
Power
LAN 3
LAN 2
LAN 1
Internet / WAN
WiFi 2.4 GHz
WiFI 5 GHz
WPS
USB
Sys

Hint: Power LED still turned on even in stealth mode! (tbd. if possible...)

thx at Marcin1108 (linksysinfo.org) for feedback
6 years ago
M_ars 12d916c92c Merge branch 'arm-master' of https://bitbucket.org/pedro311/freshtomato-arm into arm-master 6 years ago
notsure2 588999620b Implement MultiWAN Up script (WAN number passed as $1) that runs regardless of which one is considered the "primary" one. 6 years ago
notsure2 aeea9b78ed router/rc/openvpn.c: Make firewall rules consistent in both IPv4 and IPv6. 6 years ago
notsure2 b392e5a8a0 When OpenVPN inbound firewall is enabled, adjust fw rules to allow reply packets. 6 years ago
notsure2 d9c94b8ccf Fix OpenVPN policy based routing in case of using route-nopull or no pushed routes.
* Don't depend on $route_vpn_gateway because it is not passed by OpenVPN when no routes are pushed.
6 years ago
notsure2 97f2c1e7c8 Adjust OpenVPN policy routing priority to come before multiwan rules. 6 years ago
notsure2 612923045c Disable rp_filter on multiwan routing add to allow policy-based routing to work. 6 years ago
M_ars b9f535dbab shared: led.c - add conditional compilation and some cosmetic
Hint: sdk7 with extra commit
6 years ago
notsure2 ec09e63dc0 router/rc/openvpn.c: Make firewall rules consistent in both IPv4 and IPv6. 6 years ago
notsure2 d11f0be32d Implement MultiWAN Up script (WAN number passed as $1) that runs regardless of which one is considered the "primary" one. 6 years ago
notsure2 9f30f0d88d When OpenVPN inbound firewall is enabled, adjust fw rules to allow reply packets. 6 years ago
pedro b73a6d364d OpenVPN: move loading of the policy routing modules (hash:ip) to openvpn.c script
- also rp_filter is now disabled there, instead of in vpnrouting.sh
6 years ago
pedro f1a91babd1 Revert "Adjust OpenVPN policy routing priority to come before multiwan rules."
This reverts commit 769b80cf34.

- it doesn't change anything...
6 years ago
notsure2 c298352ca4 Fix OpenVPN policy based routing in case of using route-nopull or no pushed routes.
* Don't depend on $route_vpn_gateway because it is not passed by OpenVPN when no routes are pushed.
6 years ago
notsure2 57f2b3801a Disable rp_filter on multiwan routing add to allow policy-based routing to work. 6 years ago
M_ars 2e896375e1 Merge branch 'arm-master' of https://bitbucket.org/pedro311/freshtomato-arm into arm-master 6 years ago
notsure2 769b80cf34 Adjust OpenVPN policy routing priority to come before multiwan rules. 6 years ago
notsure2 ebe81ae045 Improve code layout, merge if branches. 6 years ago
notsure2 3bd958f138 Add routes for all LAN bridges when creating multiwan routing tables. 6 years ago
notsure2 99eb6b7038 Fix openvpn password validation to actually accept 70 characters. 6 years ago
notsure2 2e6d5dcf7e Integrate OpenVPN 2.4.7 Tunnelblick XOR patch (allows using obfuscated servers). 6 years ago
notsure2 6eafba8be8 Adjust OpenVPN policy routing priority to come before multiwan rules. 6 years ago
notsure2 2887e3e46a Improve code layout, merge if branches. 6 years ago
notsure2 2e1e920433 Integrate OpenVPN 2.4.7 Tunnelblick XOR patch (allows using obfuscated servers). 6 years ago
notsure2 59fdca5b23 Fix openvpn password validation to actually accept 70 characters. 6 years ago
pedro 1d8731f911 router: Makefile: clean-up and simplify libcurl recipe 6 years ago
notsure2 0f920bcf80 Add routes for all LAN bridges when creating multiwan routing tables. 6 years ago
pedro e5415bad60 Revert "Revert "libcurl: Updated to 7.65.1""
This reverts commit 49aa7e23a6.
6 years ago
pedro fcdd0db047 router: Makefile: libcurl: fix build break
- add --disable-threaded-resolver to fix build break
- enable IPv6 only if IPv6 is really enabled
- remove old option --disable-thread
6 years ago
pedro 4a81f4b6d9 router: Makefile: php: remove deprecated option - --without-mcrypt 6 years ago
pedro ffd8306d6a OpenVPN: some improvements
- updown-client.sh: remove unneeded dnsmasq restart
- vpnrouting.sh: add a FW restart instead of a simple local script call - when kill switch will be ready, it can be change back
6 years ago
Not Sure 39f584c12c Merged in notsure2/freshtomato-arm/multiwan-ppp-restart-race (pull request #22)
Fix race condition between ppp watchdog and redial (for keepalive mode).

Approved-by: pedro <pedro311@gmail.com>
Approved-by: kille72 <mail@exotic.se>
6 years ago
notsure2 0d4bb547a2 Fix race condition between ppp watchdog and redial (for keepalive mode).
Note: For demand mode there still exists an issue where start_wan_done
and the WAN UP script may be called concurrently due to being called
from start_tmp_ppp and again by ip-up if pppd is dialed by an outgoing
packet before start_tmp_ppp finished execution.

It is up to the WAN UP scripts to guard against this condition by
avoiding using demand mode, or by using an temp nvram variable or
PID file as a mutex and also checking the output of wanuptime for
the wan interface of interest.
6 years ago