M_ars
8b10490e28
shared: led.c - add conditional compilation and some cosmetic
...
Hint: sdk7 with extra commit
6 years ago
pedro
cbc8a9cda6
OpenVPN: move loading of the policy routing modules (hash:ip) to openvpn.c script
...
- also rp_filter is now disabled there, instead of in vpnrouting.sh
6 years ago
Not Sure
bb39824069
Merged in notsure2/freshtomato-arm/multiwan-scripts (pull request #28 )
...
Implement MultiWAN Up script (WAN number passed as $1) that runs regardless of which one is considered the "primary" one.
6 years ago
Not Sure
0ee739302f
Merged in notsure2/freshtomato-arm/multiwan-pbr-rp-filter (pull request #27 )
...
Disable rp_filter on multiwan routing add to allow policy-based routing to work.
6 years ago
Not Sure
4011508e60
Merged in notsure2/freshtomato-arm/openvpn-policy-routing-priority (pull request #26 )
...
OpenVPN policy routing fixes.
Approved-by: pedro <pedro311@gmail.com>
Approved-by: kille72 <mail@exotic.se>
6 years ago
Not Sure
84d2e9b981
Merged in notsure2/freshtomato-arm/multiwan-routing-table-multilan (pull request #23 )
...
Add routes for all LAN bridges when creating multiwan routing tables.
Approved-by: pedro <pedro311@gmail.com>
Approved-by: kille72 <mail@exotic.se>
6 years ago
Not Sure
8810fba702
Merged in notsure2/freshtomato-arm/openvpn-password-length-validation-fix (pull request #24 )
...
Fix openvpn password validation to actually accept 70 characters.
Approved-by: pedro <pedro311@gmail.com>
Approved-by: kille72 <mail@exotic.se>
6 years ago
Not Sure
e8e34b149d
Merged in notsure2/freshtomato-arm/openvpn-tunnelblick-xor (pull request #25 )
...
Integrate OpenVPN 2.4.7 Tunnelblick XOR patch (allows using obfuscated servers).
Approved-by: pedro <pedro311@gmail.com>
Approved-by: kille72 <mail@exotic.se>
6 years ago
pedro
54b80aa3fe
router: Makefile: clean-up and simplify libcurl recipe
6 years ago
kille72
cb0072cb46
Revert "Revert "libcurl: Updated to 7.65.1""
...
This reverts commit 4ffa4895ff
.
6 years ago
pedro
54e9d63b2d
router: Makefile: libcurl: fix build break
...
- add --disable-threaded-resolver to fix build break
- enable IPv6 only if IPv6 is really enabled
- remove old option --disable-thread
6 years ago
pedro
192b26237d
router: Makefile: php: remove deprecated option - --without-mcrypt
6 years ago
pedro
e4ada7b637
router: Makefile: dnsmasq: skip gost validation with nettle, it's not supported anyway
...
- ref: 0366f24d30
6 years ago
pedro
93468355b1
kernel: improve sack handling and resource usage
...
upstream commits:
967c05a tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
5f3e2bf tcp: add tcp_min_snd_mss sysctl
f070ef2 tcp: tcp_fragment() should apply sane memory limits
3b4929f tcp: limit payload size of sacked skbs
f331981 tcp: pass previous skb to tcp_shifted_skb()
- Ported from RMerlin, thanks.
dbd4abf8f7
f67ebf59ef
6 years ago
pedro
46b904c176
pppd: various fixes for errors found by coverity static analysis
...
- refs: fcb076c2b2
44012ae879
6 years ago
M_ars
e3bd260a29
Tenda AC15: - enable blink for 5 GHz Wifi
...
Hint: blink will start only for 5 GHz Wifi LED (GPIO). 2.4 GHz Wifi LED is non GPIO and will use setting "7" (blink slightly)
6 years ago
M_ars
7f8595a1d7
Tenda AC15: change LED table and button feedback - add support for 2.4 GHz LED (non GPIO) - turn on WPS LED again (LED_AOSS) after WPS- OR WLAN- Button has been pressed
...
Summary for known GPIO LEDs:
- Sys LED GPIO 0, active HIGH (used for LED_DIAG, [substitute -99])
- WPS LED GPIO 6, active HIGH (used for LED_AOSS)
- USB LED GPIO 14, active HIGH (used for LED_USB)
- 5 GHz Wifi GPIO 2, active HIGH (used for LED_5G)
- 2.4 GHz Wifi LED (non GPIO, same like Asus RT-N18U for example)
The LEDs in front of router from left:
Power
LAN 3
LAN 2
LAN 1
Internet / WAN
WiFi 2.4 GHz
WiFI 5 GHz
WPS
USB
Sys
Hint: Power LED still turned on even in stealth mode! (tbd. if possible...)
thx at Marcin1108 (linksysinfo.org) for feedback
6 years ago
M_ars
12d916c92c
Merge branch 'arm-master' of https://bitbucket.org/pedro311/freshtomato-arm into arm-master
6 years ago
notsure2
588999620b
Implement MultiWAN Up script (WAN number passed as $1) that runs regardless of which one is considered the "primary" one.
6 years ago
notsure2
aeea9b78ed
router/rc/openvpn.c: Make firewall rules consistent in both IPv4 and IPv6.
6 years ago
notsure2
b392e5a8a0
When OpenVPN inbound firewall is enabled, adjust fw rules to allow reply packets.
6 years ago
notsure2
d9c94b8ccf
Fix OpenVPN policy based routing in case of using route-nopull or no pushed routes.
...
* Don't depend on $route_vpn_gateway because it is not passed by OpenVPN when no routes are pushed.
6 years ago
notsure2
97f2c1e7c8
Adjust OpenVPN policy routing priority to come before multiwan rules.
6 years ago
notsure2
612923045c
Disable rp_filter on multiwan routing add to allow policy-based routing to work.
6 years ago
M_ars
b9f535dbab
shared: led.c - add conditional compilation and some cosmetic
...
Hint: sdk7 with extra commit
6 years ago
notsure2
ec09e63dc0
router/rc/openvpn.c: Make firewall rules consistent in both IPv4 and IPv6.
6 years ago
notsure2
d11f0be32d
Implement MultiWAN Up script (WAN number passed as $1) that runs regardless of which one is considered the "primary" one.
6 years ago
notsure2
9f30f0d88d
When OpenVPN inbound firewall is enabled, adjust fw rules to allow reply packets.
6 years ago
pedro
b73a6d364d
OpenVPN: move loading of the policy routing modules (hash:ip) to openvpn.c script
...
- also rp_filter is now disabled there, instead of in vpnrouting.sh
6 years ago
pedro
f1a91babd1
Revert "Adjust OpenVPN policy routing priority to come before multiwan rules."
...
This reverts commit 769b80cf34
.
- it doesn't change anything...
6 years ago
notsure2
c298352ca4
Fix OpenVPN policy based routing in case of using route-nopull or no pushed routes.
...
* Don't depend on $route_vpn_gateway because it is not passed by OpenVPN when no routes are pushed.
6 years ago
notsure2
57f2b3801a
Disable rp_filter on multiwan routing add to allow policy-based routing to work.
6 years ago
M_ars
2e896375e1
Merge branch 'arm-master' of https://bitbucket.org/pedro311/freshtomato-arm into arm-master
6 years ago
notsure2
769b80cf34
Adjust OpenVPN policy routing priority to come before multiwan rules.
6 years ago
notsure2
ebe81ae045
Improve code layout, merge if branches.
6 years ago
notsure2
3bd958f138
Add routes for all LAN bridges when creating multiwan routing tables.
6 years ago
notsure2
99eb6b7038
Fix openvpn password validation to actually accept 70 characters.
6 years ago
notsure2
2e6d5dcf7e
Integrate OpenVPN 2.4.7 Tunnelblick XOR patch (allows using obfuscated servers).
6 years ago
notsure2
6eafba8be8
Adjust OpenVPN policy routing priority to come before multiwan rules.
6 years ago
notsure2
2887e3e46a
Improve code layout, merge if branches.
6 years ago
notsure2
2e1e920433
Integrate OpenVPN 2.4.7 Tunnelblick XOR patch (allows using obfuscated servers).
6 years ago
notsure2
59fdca5b23
Fix openvpn password validation to actually accept 70 characters.
6 years ago
pedro
1d8731f911
router: Makefile: clean-up and simplify libcurl recipe
6 years ago
notsure2
0f920bcf80
Add routes for all LAN bridges when creating multiwan routing tables.
6 years ago
pedro
e5415bad60
Revert "Revert "libcurl: Updated to 7.65.1""
...
This reverts commit 49aa7e23a6
.
6 years ago
pedro
fcdd0db047
router: Makefile: libcurl: fix build break
...
- add --disable-threaded-resolver to fix build break
- enable IPv6 only if IPv6 is really enabled
- remove old option --disable-thread
6 years ago
pedro
4a81f4b6d9
router: Makefile: php: remove deprecated option - --without-mcrypt
6 years ago
pedro
ffd8306d6a
OpenVPN: some improvements
...
- updown-client.sh: remove unneeded dnsmasq restart
- vpnrouting.sh: add a FW restart instead of a simple local script call - when kill switch will be ready, it can be change back
6 years ago
Not Sure
39f584c12c
Merged in notsure2/freshtomato-arm/multiwan-ppp-restart-race (pull request #22 )
...
Fix race condition between ppp watchdog and redial (for keepalive mode).
Approved-by: pedro <pedro311@gmail.com>
Approved-by: kille72 <mail@exotic.se>
6 years ago
notsure2
0d4bb547a2
Fix race condition between ppp watchdog and redial (for keepalive mode).
...
Note: For demand mode there still exists an issue where start_wan_done
and the WAN UP script may be called concurrently due to being called
from start_tmp_ppp and again by ip-up if pppd is dialed by an outgoing
packet before start_tmp_ppp finished execution.
It is up to the WAN UP scripts to guard against this condition by
avoiding using demand mode, or by using an temp nvram variable or
PID file as a mutex and also checking the output of wanuptime for
the wan interface of interest.
6 years ago