Commit Graph

5046 Commits (2021.4)

Author SHA1 Message Date
pedro 1f976c34a1 dnsmasq: update to 2021.04.10 (3573ca0) snapshot
- refresh patches
4 years ago
pedro de15d81ae0 sqlite: update to 3.35.4 4 years ago
pedro aee5e38052 Revert "GUI: Advanced: VLAN: add enforcement of the default vlan always being untagged"
This reverts commit 347e6b1aec.
4 years ago
pedro 23e967b063 Revert "GUI: Advanced: VLAN: fix commit 347e6b1"
This reverts commit 5925c4ee58.
4 years ago
M_ars 97780d5b9c IPv6: for case DHCPv6 PD use first ethernet for DUID-LL (LLT) (and not ifb0); fixes #113
DUID used by a client or server should not change over time, therefore we use eth0 (constant) now

Note: see arm Issue 113
https://bitbucket.org/pedro311/freshtomato-arm/issues/113/keeping-duid-between-reboots

tested with DHCPv6 PD, working
4 years ago
pedro 7f1964aca7 www: update optimized cell icon 4 years ago
pedro 5aa651f2dc www: do not include cell.gif icon if built without USB support 4 years ago
pedro dee1a7ae30 GUI improvements: add interface/bridge info to the device list page and other changes; fixes #106
- thanks to @rs232 for idea, help and testing
4 years ago
pedro 28875323f4 www: update (part of) signal bar icons again
- thanks to @rs232
4 years ago
pedro c69d87f83a BWL: unfortunately, fix for the 'Highest' priority doesn't work 4 years ago
pedro a37c247788 Merge branch 'arm-master' into arm-sdk7 4 years ago
M_ars 227ee05a72 dhcp6c: add declaration for function gettimeofdaymonotonic()
Note: remove compiler warning
see commit
1178cceb77
4 years ago
M_ars 5c09e8e54f WIDE-DHCPV6: adjust makefile and (re-) add missing file lease.c (we need function is_leased (...))
Note: adjust the following commit
e77c032c2a
4 years ago
M_ars d17da2be6d IPv6: for case DHCPv6 PD use IPv6 preferred lifetime provided by your ISP/Server for LAN0-3 (IPv6 lease time)
Note: get back IPv6 connectivity faster with IPv6 addr/prefix changes. (Some ISPs provide really very low lifetimes)

tested with R7000, working correct
4 years ago
pedro c43ea1a273 BWL: fix problems with priorities when default class for unlisted MAC/IP is enabled 4 years ago
pedro f669e13249 rc/httpd: vstrsep() can only check if the number of arguments is smaller than the required 4 years ago
pedro 6d0d3e5203 BWL: add the ability to enable/disable rule and enter the description 4 years ago
pedro 2c72b79d2c tor: update to 0.4.5.7 4 years ago
pedro 5925c4ee58 GUI: Advanced: VLAN: fix commit 347e6b1 4 years ago
pedro 8558597e50 busybox: build with CONFIG_FEATURE_TOP_INTERACTIVE 4 years ago
pedro aba8d3976c QoS: extend qos_irates and qos_orates nvram variables to 256 characters for multiwan images 4 years ago
pedro 347e6b1aec GUI: Advanced: VLAN: add enforcement of the default vlan always being untagged
- thanks to @tvlz
4 years ago
pedro 5c9e374c33 dnsmasq: fixes in patches
- delete no more needed 103-fix-router-reboots-when-connect-to-wifi.patch
- correct 101-tomato-specific.patch
- correct 110-add-openssl-backend-for-dnssec.patch
4 years ago
pedro f110f2a701 stubby: rename alternative configuration file 4 years ago
pedro 32e86e8256 GUI: update all icons
- thanks to @rs232
4 years ago
pedro 67b7666d7e www: remove unneeded gif file 4 years ago
pedro 23ac80e9b5 Merge branch 'arm-master' into arm-sdk7 4 years ago
pedro 574dce1254 openssl: update to 1.1.1k 4 years ago
pedro 540e5c5a2f Bump version to 2021.2 4 years ago
pedro cc690063bb GUI: update signal bar and ethernet icons
- thanks to @rs232
4 years ago
pedro 79b7292ab7 www: advanced-wlanvifs.as: fix javascript error - WL interface details can not be displayed if it does not exist yet 4 years ago
pedro 319ba5ab4c www: restrict*: one more fix... 4 years ago
pedro 3d369e4185 www: restrict*: fix in the case of editing already existing rule 4 years ago
pedro 1a1a2d3843 GUI: Advanced: VLAN: use the same port order as on Overview page 4 years ago
pedro f3afc5c9b2 Revert "www: tomato.js: update html attributes for password fields"
This reverts commit 25bcb634da.
4 years ago
pedro bd6ec90ab8 www: restrict*: prepare for incoming changes 4 years ago
pedro 9f8907d416 build: remove asp_lipp(), use asp_lanip(1) instead 4 years ago
pedro 3bdea44d71 GUI: Bandwidth: change of naming convention as on other pages 4 years ago
pedro 8438821475 GUI: Basic: Network: fix problems with Wireless Client mode
- when changing Wireless Client Mode to one of WLs, Security stays on (for ex.) 'WPA2 Personal' and if it was not corrected to the appropriate value (in this case 'WPA / WPA2 Personal'), but saved, the connection has not been established for obvious reasons
- when changed back, restore original Wireless Mode value also on correspondent Wireless
4 years ago
pedro 4d846bc922 Merge branch 'arm-master' into arm-sdk7 4 years ago
pedro acf24467b7 GUI: change of naming convention for WANs and LANs; also in some places for WL
WAN-WAN2-WAN3-WAN4 => WAN0-WAN1-WAN2-WAN3
LAN-LAN1-LAN2-LAN3 => LAN0-LAN1-LAN2-LAN3
4 years ago
pedro 461d48f399 GUI: update signal bar images
- thanks to @rs232
4 years ago
pedro 20f6c508de www: move more global JS variables to tomato.js 4 years ago
pedro d9ed8eed7b www: basic-static.asp: no such service - dhcpd 4 years ago
pedro 9f30be3765 GUI: Basic: Network: fix LTE/3G fields checker (this mode can only be set to one WAN) 4 years ago
pedro 72b5ce48c7 GUI: Advanced: VLAN: fix the order of displayed port icons 4 years ago
pedro dcfbdc90b3 www: move global JS variables to tomato.js 4 years ago
pedro 69ee71106c GUI: Advanced: VLAN: add marking that the given WL is turned off; cosmetic 4 years ago
pedro 82c71d0927 tomatoanon: fix script 4 years ago
pedro 6ca3b88a29 www: admin-debug.asp: fix typo 4 years ago
pedro 1d0c036757 GUI: Advanced: VLAN: improvement to the page; fixes #104
- thanks to @rs232 for help and testing
4 years ago
pedro 94afca867c QoS: statistics and classification not available in Cake mode 4 years ago
pedro 610c955c61 watchdog: also use temporary added route for WAN check in case of failover 4 years ago
pedro 2883beec5e watchdog: fix problems with DHCP on multiwan 4 years ago
pedro 8ee10d7df2 Merge branch 'arm-master' into arm-sdk7 4 years ago
pedro 24ab7634bb httpd: httpd.c: fix compilation 4 years ago
pedro a000eab12a Merge branch 'arm-master' into arm-sdk7 4 years ago
pedro 6c7e29d980 httpd: misc.c: put LAN check in loop for all bridges in print_ipv6_addrs() 4 years ago
pedro 46631b2720 busybox: ntpd: fix the case where two replies received at once and first one causes a step
- fix from upstream: https://git.busybox.net/busybox/commit/?id=afb5d8b2db432b8433ba80a1206ae41ef4f4ea8b
4 years ago
M_ars c461693525 GUI: basic-network.asp - in case wan disabled (for ex. wireless bridge) make sure to use static dns
Note: no DNS after (full) reset in some cases (tested with RT-AC56U). Make sure that we have valid nvram values by default. If we disable wanX set nvram wanX_dns_auto to 0 (use static dns)
4 years ago
M_ars 8845191869 rc: adjust new ntpd handling for case wan disabled (time was not working after boot up; bridge mode and AP only)
Note: small addendum for commit 57fac61fc7
4 years ago
pedro 76240e7db5 stubby: add location of alternative configuration file (/etc/stubby/stubby.alt) to bypass stubby UI configuration; fixes #108 4 years ago
pedro c27a97c069 adblock: fix the issue when only a custom black list is added (without any URL defined), dnsmasq restarts every 5 minutes
- discussion: https://www.linksysinfo.org/index.php?threads/bug-adblock-assumes-no-internet-when-no-blacklist-urls-active-kills-dnsmasq.76350/
4 years ago
pedro 8fd4581c2f GUI: Admin: Debugging: add the ability to disable cache in the httpd daemon 4 years ago
pedro 4c3ae8bdd8 httpd: add IP when logging bad password attempt; fix incorrect sizeof() in strlcpy() (line 820+); clean-up 4 years ago
M_ars 78e2942ae5 SDK6: update wireless driver (dual core)
For Info:
6.37 RC14.126
wl0: Feb  4 2021 16:49:59 version 6.37.14.126 (r561982)

previous wireless driver:
6.37 RC14.126
wl0: Jan 15 2021 14:50:50 version 6.37.14.126 (r561982)

tested with R7000, working
4 years ago
pedro b416a07428 Revert "pppd: update to 2.4.9"
It doesn't work correctly on FreshTomato:

Mar  9 17:11:51 Tomato-Router daemon.info pppd[2816]: Plugin rp-pppoe.so loaded.
Mar  9 17:11:51 Tomato-Router daemon.info pppd[2816]: RP-PPPoE plugin version 3.14 compiled against pppd 2.4.9
Mar  9 17:11:51 Tomato-Router daemon.err pppd[2816]: tdb_store failed: Corrupt database
Mar  9 17:11:51 Tomato-Router daemon.err pppd[2823]: tdb_store failed: Corrupt database
Mar  9 17:11:51 Tomato-Router daemon.notice pppd[2823]: pppd 2.4.9 started by root, uid 0
Mar  9 17:11:51 Tomato-Router daemon.err pppd[2823]: tdb_store failed: Corrupt database
Mar  9 17:11:51 Tomato-Router daemon.err pppd[2823]: tdb_store key failed: Corrupt database
Mar  9 17:11:51 Tomato-Router daemon.err pppd[2823]: tdb_store failed: Corrupt database
Mar  9 17:11:51 Tomato-Router daemon.err pppd[2823]: tdb_store key failed: Corrupt database
Mar  9 17:11:51 Tomato-Router daemon.err pppd[2823]: tdb_store failed: Corrupt database
Mar  9 17:11:51 Tomato-Router daemon.err pppd[2823]: tdb_store failed: Corrupt database
Mar  9 17:11:51 Tomato-Router daemon.err pppd[2823]: tdb_store failed: Corrupt database
Mar  9 17:11:51 Tomato-Router daemon.err pppd[2823]: tdb_store failed: Corrupt database
Mar  9 17:11:51 Tomato-Router daemon.err pppd[2823]: tdb_store failed: Corrupt database
Mar  9 17:11:51 Tomato-Router user.info redial[2824]: Redial (wan) started, the check interval is 20 seconds
Mar  9 17:11:52 Tomato-Router daemon.info pppd[2823]: PPP session is 4404 (0x1134)
Mar  9 17:11:52 Tomato-Router daemon.warn pppd[2823]: Connected to cc:e1:7f:xx:xx:xx via interface vlan70
Mar  9 17:11:52 Tomato-Router daemon.err pppd[2823]: tdb_store failed: Corrupt database
Mar  9 17:11:52 Tomato-Router daemon.info pppd[2823]: Using interface ppp0
Mar  9 17:11:52 Tomato-Router daemon.err pppd[2823]: tdb_store key failed: Corrupt database
Mar  9 17:11:52 Tomato-Router daemon.err pppd[2823]: tdb_store failed: Corrupt database
Mar  9 17:11:52 Tomato-Router daemon.err pppd[2823]: tdb_store key failed: Corrupt database
Mar  9 17:11:52 Tomato-Router daemon.err pppd[2823]: tdb_store failed: Corrupt database
Mar  9 17:11:52 Tomato-Router daemon.err pppd[2823]: tdb_store failed: Corrupt database
Mar  9 17:11:52 Tomato-Router daemon.notice pppd[2823]: Connect: ppp0 <--> vlan70

Also problems with IPv6

This reverts commit 82a7d9c2b7.
4 years ago
pedro d953a59ebc Revert "pppd: fix IPv6 on Freshtomato"
This reverts commit 69da1b11d8.
4 years ago
pedro a4850500b4 Revert "pppd: remove (last piece of) old no more needed patch"
This reverts commit 0277d5b1f9.
4 years ago
pedro aa9471148e rc: tor.c: fix permissions on tor tmp directory 5 years ago
pedro 0277d5b1f9 pppd: remove (last piece of) old no more needed patch 5 years ago
M_ars c80d86cc2f IPv6: adjust linux setup and make it more stable
- do not wipe out default route every time we start/reload the firewall (move out ipv6 forward & ndp proxy)
- remove service ipv6 start/stop (not working and not used)
- call ipv6 forward and ndp proxy only if start or stop ipv6

tested with DHCPv6 PD, working
5 years ago
M_ars c0432af44f rc: wan.c: remove enable_ip_forward() at start_wan()
Note: function start_firewall() will call enable_ip_forward() (no need to call it twice)
5 years ago
pedro a052b434ca rc: services.c: also restart httpd on ntp sync; clean-up 5 years ago
pedro 90000a13f9 httpd: some changes to gencert.sh and httpd.c
- revert back to 10 years duration, as the Safari limitation only targets certificates signed by one of the built-in CAs
- remove CommonName entries as modern browsers no longer use that field - only hardcode router's IP address as the sole CN.
- add router_name and make sure that the hostname is not the same to avoid duplicate SANs
- use file_lock in httpd to avoid collisions if another httpd instance is initializing SSL cert; clean-up

Thanks to @RMerlin
5 years ago
pedro ee24af4898 rc: nfs: add threads support 5 years ago
pedro 2215cb3763 nfs-utils: update to 1.3.5-rc6 5 years ago
pedro b1fe97682d e2fsprogs: update to 1.46.2 5 years ago
pedro d7286fda7a nano: update to 5.6.1 5 years ago
pedro 19d4224cdb nginx: update to 1.19.7 5 years ago
pedro bb2a409bf7 sqlite: update to 3.34.01 5 years ago
pedro c705edeb0a tor: update to 0.4.5.6 5 years ago
pedro 3af2242d23 libcurl: update CA certificate bundle as of 2021-01-19 5 years ago
pedro 57fac61fc7 rc: further tweaks to ntpd handling on wanup
Based on @RMelin work - thanks!
5 years ago
pedro a139b2a4c0 ebtables: libebtc: Open the lockfile with O_CLOEXEC
Fix from upstream: https://git.netfilter.org/ebtables/commit/?id=46eb78ff358724f5addf14e45f2cfc31542ede3c
5 years ago
pedro d3d405f3ba stubby: update resolvers file 5 years ago
pedro 69da1b11d8 pppd: fix IPv6 on Freshtomato 5 years ago
pedro 4a0a2ea14d build: Makefile: enable CRASHLOG by default on AIO targets 5 years ago
pedro 82a7d9c2b7 pppd: update to 2.4.9
- refresh patches, remove no more needed
5 years ago
pedro 1dd79fd92f pppd: update to 2.4.8
- rewrite patches, add some more from openwrt
- 'use monotonic time' applied in code (fix from upstream)
5 years ago
pedro 1178cceb77 dhcp6c: use monotonic time if possible
Based on: 363b692a13
5 years ago
M_ars 47189ecc4e SDK6: update wireless driver (dual core)
For Info:
6.37 RC14.126
wl0: Jan 15 2021 14:50:50 version 6.37.14.126 (r561982)

previous wireless driver:
6.37 RC14.126
wl0: Oct 20 2020 11:55:53 version 6.37.14.126 (r561982)

tested with R7000, working
5 years ago
pedro 0dc26e13a3 iptables: fix save formatting for libipt_ipp2p 5 years ago
pedro 28800a22ed iptables: fix save formatting for libipt_layer7 5 years ago
pedro 613e32464e iptables: fix default location of l7-protocols of iptables userspace components 5 years ago
pedro 9a8fc25e2e rc: qos.c: use the same size of buffer as in restrict.c 5 years ago
pedro 3d071372b2 rc: openvpn.c: fix compiler warning 5 years ago
pedro cf2408380e Merge branch 'arm-master' into arm-sdk7 5 years ago
pedro 11c0b669bf pppd: use monotonic time if possible
- refresh patches, remove no more needed patch known as "pppd: watch out for time warps"

Feature from upstream: c78e3129d4
5 years ago
pedro 5bdc12918a rp-pppoe: use monotonic time if possible, added as a patch 5 years ago
pedro a13e77f65b busybox: use CLOCK_MONOTONIC instead of gettimeofday 5 years ago
pedro 90344fc748 busybox: ntpd: add -t switch to disable rfc4330 cross-check, parameters tuning
Based on: e8dcb55c0e
Thanks!
5 years ago
pedro ade6622c1f openvpn: update to 2.5.1 5 years ago
pedro 963312a448 www: basic-network.asp: cosmetic 5 years ago
pedro d54e30f3a2 GUI: Status: Overview: correctly display used DNS 5 years ago
pedro 545f5dcdc5 GUI: Basic: Network: disable DNS and set to Auto if dnscrypt/Stubby with No-Resolv is enabled (except for static proto); fix variable in for loop; cosmetic 5 years ago
pedro 79405fe0c4 GUI: Advanced: Wireless: remove 'AP Isolation' option because it's already on 'Virtual Wireless' page (where it's also possible to use this option with virtual interfaces) 5 years ago
pedro 8908540018 GUI: Advanced: DHCP/DNS: add warning to dnscrypt-proxy/Stubby priority option regarding possible DNS leak 5 years ago
pedro ef295be54a www: qos-classify.asp: there is no need to reload the page when saving 5 years ago
pedro 0b3b7ef2f0 GUI: Admin: Logging: add 'Drop duplicates' option 5 years ago
pedro 5f469507c7 GUI: Status: Overview: correct Connect/Disconnect buttons behaviour; fixes #103 5 years ago
pedro 06a0c191e7 www: add Status_Router.asp with current IP (only WAN) for ddclient; use '-use=linksys-wrt854g' as a supported router (https://sourceforge.net/p/ddclient/git/ci/master/tree/ddclient) 5 years ago
pedro 395fdc3843 rc: openvpn.c: fix typo in f710bac 5 years ago
pedro c421688439 busybox: enable CONFIG_FEATURE_SYSLOGD_DUP 5 years ago
pedro f710bac5c1 rc: openvpn.c: only add 'username-as-common-name' to server config if user/pass auth only is checked 5 years ago
pedro 71bade8d3e openvpn: vpnrouting.sh: fix removal of firewall rules 5 years ago
pedro 8c6efc9e85 rc: openvpn.c: don't allow duplicate-cn while in non-exclusive config-dir mode 5 years ago
pedro e7f1b1587b GUI: modification to QoS and Bandwidth/IP-Traffic pages; fixes #79
- modification of default chart colors
- now the colors are stored in the css file so they can be easily changed in any theme
- some fixes for svg, html, js
- clean-up
5 years ago
pedro 1d839e5312 httpd: iptraffic: cosmetic 5 years ago
pedro d3bb77cafa www: advanced-dhcpdns.asp: fix javascript error on images without OpenVPN 5 years ago
pedro 32725b6ddd openssl: update to 1.1.1j 5 years ago
pedro cadcd4a441 www: remove unused rstats/cstats_color leftovers 5 years ago
pedro 87db56e6d6 GUI: change default colours of _all_ speed graphs to Blue & Orange 5 years ago
pedro 898e199342 www: basic-time.asp: fix potential problem with _service input field; display Router Time (almost) in real time 5 years ago
pedro ba3708b903 www: .asp: fix potential problem with _service input field 5 years ago
pedro 8aaeb895f4 Merge branch 'arm-master' into arm-sdk7 5 years ago
pedro b89a5f370a GUI: UPnP/NAT-PMP: fix javascipt (hidden) error causing issue with Forwarded Ports tables 5 years ago
pedro 3bb5d7265b miniupnpd: only build miniupnpd exe; also build with HAVE_IP_MREQN 5 years ago
pedro 6e0d71fdd6 rc: openvpn.c: another attempt to obtain an automatic restart after the client/server dies
Based on @RMerlin work
5 years ago
pedro 81a3e09b73 rc: wan.c: do not send user/password when empty in PPP3G proto 5 years ago
pedro fb4e35bfc6 build: Makefile: e2fsprogs: include badblocks in image 5 years ago
pedro 9f88d965ef dnsmasq: fix version 5 years ago
pedro 9ceb067fe2 www: vpn-pptp-server.asp: add info about user ip-up/ip-down scripts; cosmetic 5 years ago
pedro 25bcb634da www: tomato.js: update html attributes for password fields 5 years ago
pedro 8ee5c0d5ea iptables: update to 1.8.7 5 years ago
pedro 58ddee7c6c e2fsprogs: update to 1.46.1 5 years ago
pedro 0ee534f608 adminer: update to 4.8.0 5 years ago
pedro a02040c63a tor: update to 0.4.4.7 5 years ago
pedro a58e935ddd rc/shared: do not redefine functions in different folders! It already cost me a lot of time... Also move killall_tk_period_wait() to libshared 5 years ago
pedro 59a74ad687 GUI: Advanced: Firewall: add the ability to configure udpxy upstream interface; closes #35 5 years ago
pedro f6f453ffb3 SNMP: tune recipe: add 2 more modules, set default snmp level to 2, set enable-mfd-rewrites 5 years ago
pedro 218b70c21d rc: restart nas services/wsdd2 on WAN up
- temp workaround for issue with wsdd2
5 years ago
pedro 89259ce5c4 wsdd2: cosmetic in patch 5 years ago
pedro 241cf85b8a GUI: QoS: Basic Settings: small fix for CAKE priority queue mode variable 5 years ago
Further Lin 52c54dbe56 DDNS: add Duck DNS support 5 years ago
pedro e80f63e605 www: advanced-dhcpdns.asp: fix javascript error (again...)
- thanks @M_ars for pointing this out
5 years ago
pedro 3d98661230 GUI: Tunneling: OpenVPN Server: add auth file (if needed) for generated client configuration; fix client number in generated certificate; some code improvements 5 years ago
pedro 5cd4ab9606 openvpn_plugin_auth_nvram: cosmetic, no code change 5 years ago
pedro 3f8c7a84fd Merge branch 'arm-master' into arm-sdk7 5 years ago
pedro 2c0d1765de GUI: use Advanced/VLAN instead of Basic/Network for WAN bridging
- the old method only caused bugs in the GUI and confusion
5 years ago
pedro 8b6a711d93 GUI: VPN Tunneling: OpenVPN Server: use ajax for all buttons; also refresh status tile automatically 5 years ago
pedro 2477099630 GUI: remove unneeded footer messages when using Start/Stop/etc. buttons 5 years ago
pedro 2cab7e1e38 GUI: VPN Tunneling: OpenVPN Client: use ajax for all buttons; also refresh status tile automatically 5 years ago
pedro c26d57cd71 www: restrict-edit.asp: change wait time to 3 secs; cosmetic 5 years ago
pedro 006c5806f6 GUI: Port Forwarding: UPnP/NAT-PMP: use ajax for all buttons 5 years ago
M_ars cbd24029cb rc: misc.c - adjust killall_tk_period_wait() (100 ms instead of 1 sec)
fix for: if there is no active PPPoE session at the time basic changes are made, the router is not controlable for a while (1-3 minutes) [For example if you setup the router from scratch]

see also arm issue 94
https://bitbucket.org/pedro311/freshtomato-arm/issues/94/stalling-services-daemons-with-pppoe-when
5 years ago
pedro 510c44ef8e GUI: VPN Tunneling: PPTP Client: use ajax for Start/Stop button 5 years ago
pedro 929612eec9 www: advanced-dhcpdns.asp: add some forgotten checks on save event 5 years ago
M_ars 2b2283a7d2 Belkin F9K1113v2: adjust button setup (align to version 20X0)
thx to feedback from xuzhun
5 years ago
pedro b15d1fd514 www: nas-media.asp: simplify check if Media Server is enabled 5 years ago
pedro 8729bb8a04 GUI: VPN Tunneling: Tinc: use ajax for all buttons 5 years ago
pedro c3e0b66b25 GUI: USB and NAS: Media Server: use ajax for all buttons 5 years ago
M_ars 1878650161 build: extend support for Belkin F9K1113v2 router (add version 2000 and 2010)
thx to user Joe A from www.linksysinfo.org for helping & provding the needed infos

Detection Infos:
boardflags2=0x00000000
boardflags=0x00000110
boardnum=AC1200v2
boardrev=0x1100
boardtype=0x0646
5 years ago
M_ars 20094cd65b IPv6: rc: services.c - use global address and not link-local address for DNS
tested with android 10, working correct
5 years ago
pedro c919de9f2b GUI: Admin Access: use ajax for Start/Stop sshd and telnetd buttons; clean-up 5 years ago
pedro d3169a4cbb GUI: web-nginx.asp: fix javascript error caused by commit 6e8b880 5 years ago
pedro 887b2246ba www: about.asp: bump copyright notice for 2021 5 years ago
pedro 811bd6f4db www: advanced-dhcpdns.asp: fix javascript error if image built without DNSSEC 5 years ago
pedro f4164d736a GUI: Status: Overview: use ajax for all buttons; some fixes in css 5 years ago
pedro 6e8b880657 GUI: Web Server: Nginx & PHP: use ajax to Start/Stop button; clean-up 5 years ago
pedro 7dd50a35c9 rc: services.c: remove leftovers 5 years ago
pedro 6f762915f4 dnsmasq: bump version to 2.84 5 years ago
pedro fdd136d9a1 Merge branch 'arm-master' into arm-sdk7 5 years ago
M_ars e08d2f6310 GUI: advanced-dhcpdns.asp - add Fast RA mode option
Note: dnsmasq advertises the IPv6 prefix frequently (every ~10 seconds) for the first minute, and then drops back to sending maintenance advertisements every 10 minutes.
This option forces dnsmasq to send RAs every 15 seconds ==> can help some devices to not lose conectivity
5 years ago
M_ars 4d46e0c54b ipv6: addrconf.c: Checkpatch cleanups
net/ipv6/addrconf.c: Checkpatch cleanups
net/ipv6/addrconf.c:340: WARNING: EXPORT_SYMBOL(foo); should immediately follow its function/variable
net/ipv6/addrconf.c:342: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:444: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:1337: WARNING: EXPORT_SYMBOL(foo); should immediately follow its function/variable
net/ipv6/addrconf.c:1526: ERROR: "(foo*)" should be "(foo *)"
net/ipv6/addrconf.c:1671: ERROR: open brace '{' following function declarations go on the next line
net/ipv6/addrconf.c:1914: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:2368: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:2370: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:2416: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:2437: ERROR: "foo    * bar" should be "foo    *bar"
net/ipv6/addrconf.c:2573: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:3797: ERROR: "foo* bar" should be "foo *bar"

Signed-off-by: Eldad Zack <eldad@fogrefinery.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

see https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v3.19&id=8e5e8f30d0dea1db2c8e2a78802e7e57f796f339
5 years ago
M_ars 71aa300b0c ipv6: addrconf.c: Checkpatch cleanups
net/ipv6/addrconf.c: Checkpatch cleanups
net/ipv6/addrconf.c:340: WARNING: EXPORT_SYMBOL(foo); should immediately follow its function/variable
net/ipv6/addrconf.c:342: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:444: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:1337: WARNING: EXPORT_SYMBOL(foo); should immediately follow its function/variable
net/ipv6/addrconf.c:1526: ERROR: "(foo*)" should be "(foo *)"
net/ipv6/addrconf.c:1671: ERROR: open brace '{' following function declarations go on the next line
net/ipv6/addrconf.c:1914: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:2368: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:2370: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:2416: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:2437: ERROR: "foo    * bar" should be "foo    *bar"
net/ipv6/addrconf.c:2573: ERROR: "foo * bar" should be "foo *bar"
net/ipv6/addrconf.c:3797: ERROR: "foo* bar" should be "foo *bar"

Signed-off-by: Eldad Zack <eldad@fogrefinery.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

see https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v3.19&id=8e5e8f30d0dea1db2c8e2a78802e7e57f796f339
5 years ago
M_ars fef26bb219 ipv6: hash is calculated but not used afterwards
ipv6: hash is calculated but not used afterwards
hash is declared and assigned but not used anymore. ipv6_addr_hash()
exhibit no side-effects.

Signed-off-by: Hagen Paul Pfeifer <hagen@jauu.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

see https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv6/addrconf.c?h=v3.19&id=96d796a38e9ec9a7c04a6cda3fc15d79efebb008
5 years ago
M_ars aa9928f805 ipv6: hash is calculated but not used afterwards
ipv6: hash is calculated but not used afterwards
hash is declared and assigned but not used anymore. ipv6_addr_hash()
exhibit no side-effects.

Signed-off-by: Hagen Paul Pfeifer <hagen@jauu.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

see https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/ipv6/addrconf.c?h=v3.19&id=96d796a38e9ec9a7c04a6cda3fc15d79efebb008
5 years ago
pedro cf210be737 Merge branch 'arm-master' into arm-sdk7 5 years ago
pedro edf3a94b0d stubby: add full GUI support (part 2/2)
- also add IPv6 listen address to config file if IPv6 is enabled
5 years ago
pedro 403bf0c244 rc: openvpn.c: fix firewall rules for ovpn server when [udp/tcp]4/6 is selected 5 years ago
lancethepants a0ecf2ea56 busybox: enable CONFIG_FEATURE_SWAPONOFF_LABEL
In order to automatically mount swap on boot from /etc/fstab, usb.c calls `swapon -a`, which requires CONFIG_FEATURE_SWAPONOFF_LABEL to be enabled in busybox to function. Was disabled in commit 93c885c50e.
5 years ago
notsure2 f52f49f1d4 kernel: backport CAKE SQM scheduler and needed kernel functions 5 years ago
M_ars adeec7116a kernel: fix/addendum for commit "backport CAKE SQM scheduler and needed kernel functions" 48407b077b
see arm Issue #93
https://bitbucket.org/pedro311/freshtomato-arm/issues/93/ea6700-vpn-e-build-complete-buggy-unstable

tested with DHCPv6 PD, working again
5 years ago
M_ars 200f7dab85 kernel: fix/addendum for commit "backport CAKE SQM scheduler and needed kernel functions" 48407b077b
see arm Issue #93
https://bitbucket.org/pedro311/freshtomato-arm/issues/93/ea6700-vpn-e-build-complete-buggy-unstable

tested with DHCPv6 PD, working again
5 years ago
pedro 571148e18a Merge branch 'arm-master' into arm-sdk7 5 years ago
pedro 1cfd87eccd dnsmasq: update to 2.84rc2 5 years ago
pedro 3e373f4463 ww: qos-settings.asp: cosmetic 5 years ago
M_ars 5aac9c0ac8 Belkin F9K1113v2: add NOSMP to image name (only cosmetic) 5 years ago
M_ars 1aca005c6b GUI: Bandwidth & IP Traffic - make it possible to show (save) values up to 500 Mbit/s (for last 24 hours, Daily, ...)
see problem report:
https://www.linksysinfo.org/index.php?threads/wan-upload-graph-drops-to-zero-if-over-245mbps-asus-rt-ac66u_b1-freshtomato-2020-6.76203/#post-322589

Note: for higher values we (would) need to switch to 64 bit calculation
5 years ago
pedro 34354aed12 nano: update to 5.5 5 years ago
pedro 4d5da5bd37 www: fix typos 5 years ago
pedro 135a0eedcc rc: remove redundant parameter from start_wan() and start_wan_if() functions 5 years ago
pedro 1d2eacb3aa Merge branch 'arm-master' into arm-sdk7 5 years ago
pedro b288d0c59a multiwan: improvements for GUI and connection time
- show real WAN status on Status->Overview page
- time needed to connect WANs (traffic) has been reduced twice
- code clean-up and cosmetic
5 years ago
M_ars 7d19d2302b router: shared: shared.h - adjust preprocessor conditons for SDK7
Note: prepare for merge with SDK6 (--> function declarations needed)
5 years ago
pedro cb7d01d7b3 rc: services.c: name of the service could be "jffs" or "jffs2" 5 years ago
M_ars 4ce26f6a66 SDK6: update wireless driver (dual core)
For Info:
6.37 RC14.126
wl0: Oct 20 2020 11:55:53 version 6.37.14.126 (r561982)

previous wireless driver:
6.37 RC14.126
wl0: Aug 10 2020 17:00:56 version 6.37.14.126 (r561982)

tested with R7000, working

Note: preprocessor conditions may need to be adjusted if we get updates for SDK6 single-core and/or SDK7 / DHD --> we will see :)
5 years ago
M_ars 02508c00c2 SDK6: small update/addendum for new wireless drivers (single- and dual-core) *.126 Year 2020
see driver commits (and up/newer):
86fd29f5a2
3c5386704e

Note: differentiate a little more between single core and dual core and add comments/notes
5 years ago
M_ars 9825ea0e57 router: rc: network.c : adjust and update host DHCP relay code
Note: distinguish SDK7 and SDK6
5 years ago
M_ars 1cdf9c8a8a router: rc: network.c : - small clean-up for BSD (remove left-overs, not needed/used) 5 years ago
pedro 462bdefcbb multiwan: also allow to init state file with value "1" instead of "0" - it could speed up connection process in some cases 5 years ago
pedro e5016fc9f9 multiwan: rename and move the state file to the directory where the other state files are 5 years ago
pedro b9f395a847 GUI: change default colours of speed graphs to Blue & Orange; cosmetic 5 years ago
pedro ce72307e9c Merge branch 'arm-master' into arm-sdk7 5 years ago
pedro 48fd96de8f GUI: Status: Overview: corrections and fixes
- display more info in real-time
- in case of Wireless Client mode, stick to Signal Quality (like on Device List page), not SNR (signal value to the noise value)
- clean-up javascript code, remove duplicate functions, unused variables
- cosmetic
5 years ago
pedro eb79ed2c83 www: cosmetic in asp files 5 years ago
xuzhun daaf299eac build: add support for Belkin F9K1113v2 router 5 years ago
notsure2 66909ea517 Add Wireguard tools
- wg-quick not supported because it depends on bash

* Sources: https://git.zx2c4.com/wireguard-tools/commit/?id=66ed611bd0f477fbe5792212d0a88076bec9bf3b
5 years ago
notsure2 5599460c26 kernel sdk7: add Wireguard v1.0.20201221 5 years ago
notsure2 5c192dddf4 kernel sdk7: add wireguard support
- backport get_monotonic_boottime https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=abb3a4ea2e0ea7114a4475745da2f32bd9ad5b73
- backport nf_reset_trace
- backport skb_transport_header_was_set and skb_probe_transport_header
- backport kref_get_unless_zero
- backport NAPI_POLL_WEIGHT
- backport kfree_skb_list
- backport ipv6_iface_scope_id
- backport INET_ECN_decapsulate
- backport deferrable work https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dd6414b50fa2b1cd247a8aa8f8bd42414b7453e1
- backport netlink: advertise incomplete dumps https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=670dc2833d144375eac36ad74111495a825a9288
- backport rol64 and ror64
- backport sg_nents
- backport net: Export __sock_create https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=721db93a55dad71bb89e7d11cc6be1f180ec3f2d
- backport ip6_flow_hdr
- backport ip6tunnel_xmit
- export ip6_dst_hoplimit
- fix compile warnings
5 years ago
notsure2 13fcaefef5 kernel: add Wireguard v1.0.20201221 5 years ago
notsure2 0985fafe51 kernel: add wireguard support
- backport get_monotonic_boottime https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=abb3a4ea2e0ea7114a4475745da2f32bd9ad5b73
- backport nf_reset_trace
- backport skb_transport_header_was_set and skb_probe_transport_header
- backport kref_get_unless_zero
- backport NAPI_POLL_WEIGHT
- backport kfree_skb_list
- backport ipv6_iface_scope_id
- backport INET_ECN_decapsulate
- backport deferrable work https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dd6414b50fa2b1cd247a8aa8f8bd42414b7453e1
- backport netlink: advertise incomplete dumps https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=670dc2833d144375eac36ad74111495a825a9288
- backport rol64 and ror64
- backport sg_nents
- backport net: Export __sock_create https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=721db93a55dad71bb89e7d11cc6be1f180ec3f2d
- backport ip6_flow_hdr
- backport ip6tunnel_xmit
- export ip6_dst_hoplimit
- fix compile warnings
5 years ago
pedro 455578ad1a www: advanced-dhcpdns.asp: fix javascript error in VPN builds 5 years ago
pedro 5ef41896c4 rc: do not restart WAN for changes on BW Limiter page when nocat is disabled; remove unused reset_nocat() function 5 years ago
notsure2 93f2e5b11c Implement GUI and nvram variables for CAKE AQM QoS 5 years ago
notsure2 df220cca74 iproute2: tc: cross-port cake support to tc from tc-adv project 5 years ago
notsure2 48407b077b kernel: backport CAKE SQM scheduler and needed kernel functions 5 years ago
pedro 914fe49bcd Merge branch 'arm-master' into arm-sdk7 5 years ago
pedro 114022d1f0 QoS: re-enable View Details without having to enable QoS itself
- it works actually only on MIPS routers
- in ARM: TBD (now need to enable/disable QoS for it to work)
5 years ago
pedro aa139e511b www: qos-ctrate.asp: cosmetic 5 years ago
pedro ea96ec875f www: qos-settings.asp: restart BW Limiter automatically when disabling QoS, also show/hide notice when needed; cosmetic 5 years ago
pedro a86d999fec rc: qos.c: improve logging; cosmetic 5 years ago
pedro 9438c1fecb rc: bwlimit.c: add start/stop options and in only one exe file (like in QoS) 5 years ago
pedro 150c421192 rc: cosmetic 5 years ago
pedro 30f2893178 rc: add logger to QoS and BW Limiter 5 years ago
pedro 1cc83b6f47 rc: qos.c: yet another fix 5 years ago
pedro a4bf005170 www: qos-settings.asp: improved 'Classify traffic' checkbox
- when checked, also change 'Default class' to align the default value with the other pages
- when unchecked, restore the default values for 'Default class' and 'Qdisc Scheduler'
5 years ago
pedro 4e2be68022 rc: qos.c: fix commit 4ff9e45 5 years ago
pedro 4ff9e45741 rc: qos.c: use #ifdef to distinguish between ARM and MIPS versions 5 years ago
pedro e4f1ee2d1c www: qos-settings.asp: automate fq_codel enabling when using only SQM; cosmetic 5 years ago
pedro ad6bccec2a www: qos-settings.asp: cosmetic 5 years ago
pedro 741adea766 Merge branch 'arm-master' into arm-sdk7 5 years ago
notsure2 0c8c35358b Major QoS improvements. Harmonize all uses of firewall marks between VPN, wan PBR, BWLimit and QoS.
QoS:
- use correct WAN MTU when starting QoS
- fix completely broken behavior with multiple wans
- fix 'rate' and 'limit' table headings
- separate ATM overhead fields for each wan
- add PPPoE LLC + VLAN to overhead options
- support enabling queuing without classification (SQM)
- rearrange QoS Basic Settings page to make it clear
- when stopping qos, don't forget to delete the ingress qdisc
- don't use broken iptables set-return
- L7 fix and comment improvement
- use proper fwmask when matching fwmark
- check wan up once and use the same result for all rules

PBR:
- don't use broken iptables set-return
- fix connmark restore mark mask
- copy connection mark to packet mark to pbr
5 years ago
notsure2 606bf3e8e0 kernel sdk7: ifb: dont hard code inet_net use
ifb should lookup devices in the appropriate namespace.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Acked-by: Jamal Hadi Salim <jhs@mojatatu.com>
Cc: Benjamin LaHaise <bcrl@kvack.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

Fix from upstream: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=73bf0d0eecba15e2a2f96b1092554b01fc07044b
5 years ago
notsure2 1ef5767038 kernel sdk7: pkt_sched: namespace aware act_mirred
Eric Dumazet pointed out that act_mirred needs to find the current net_ns,
and struct net pointer is not provided in the call chain.  His original
patch made use of current->nsproxy->net_ns to find the network namespace,
but this fails to work correctly for userspace code that makes use of
netlink sockets in different network namespaces.  Instead, pass the
"struct net *" down along the call chain to where it is needed.

This version removes the ifb changes as Eric has submitted that patch
separately, but is otherwise identical to the previous version.

Signed-off-by: Benjamin LaHaise <bcrl@kvack.org>
Tested-by: Eric Dumazet <eric.dumazet@gmail.com>
Acked-by: Jamal Hadi Salim <jhs@mojatatu.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

Fix from upstream: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c1b52739e45f5969b208ebc377f52468280af11e
5 years ago
notsure2 5a15bfbbab kernel sdk7: net sched: Pass the skb into change so it can access NETLINK_CB
cls_flow.c plays with uids and gids.  Unless I misread that
code it is possible for classifiers to depend on the specific uid and
gid values.  Therefore I need to know the user namespace of the
netlink socket that is installing the packet classifiers.  Pass
in the rtnetlink skb so I can access the NETLINK_CB of the passed
packet.  In particular I want access to sk_user_ns(NETLINK_CB(in_skb).ssk).

Pass in not the user namespace but the incomming rtnetlink skb into
the the classifier change routines as that is generally the more useful
parameter.

Cc: Jamal Hadi Salim <jhs@mojatatu.com>
Acked-by: David S. Miller <davem@davemloft.net>
Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>

Prerequisite patch for mirred namespace compatibility: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=af4c6641f5ad445fe6d0832da42406dbd9a37ce4
5 years ago
notsure2 42dca15b49 kernel: ifb: dont hard code inet_net use
ifb should lookup devices in the appropriate namespace.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Acked-by: Jamal Hadi Salim <jhs@mojatatu.com>
Cc: Benjamin LaHaise <bcrl@kvack.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

Fix from upstream: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=73bf0d0eecba15e2a2f96b1092554b01fc07044b
5 years ago
notsure2 ed6758ae65 kernel: pkt_sched: namespace aware act_mirred
Eric Dumazet pointed out that act_mirred needs to find the current net_ns,
and struct net pointer is not provided in the call chain.  His original
patch made use of current->nsproxy->net_ns to find the network namespace,
but this fails to work correctly for userspace code that makes use of
netlink sockets in different network namespaces.  Instead, pass the
"struct net *" down along the call chain to where it is needed.

This version removes the ifb changes as Eric has submitted that patch
separately, but is otherwise identical to the previous version.

Signed-off-by: Benjamin LaHaise <bcrl@kvack.org>
Tested-by: Eric Dumazet <eric.dumazet@gmail.com>
Acked-by: Jamal Hadi Salim <jhs@mojatatu.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

Fix from upstream: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c1b52739e45f5969b208ebc377f52468280af11e
5 years ago
notsure2 423a070cd1 kernel: net sched: Pass the skb into change so it can access NETLINK_CB
cls_flow.c plays with uids and gids.  Unless I misread that
code it is possible for classifiers to depend on the specific uid and
gid values.  Therefore I need to know the user namespace of the
netlink socket that is installing the packet classifiers.  Pass
in the rtnetlink skb so I can access the NETLINK_CB of the passed
packet.  In particular I want access to sk_user_ns(NETLINK_CB(in_skb).ssk).

Pass in not the user namespace but the incomming rtnetlink skb into
the the classifier change routines as that is generally the more useful
parameter.

Cc: Jamal Hadi Salim <jhs@mojatatu.com>
Acked-by: David S. Miller <davem@davemloft.net>
Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>

Prerequisite patch for mirred namespace compatibility: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=af4c6641f5ad445fe6d0832da42406dbd9a37ce4
5 years ago
pedro 5b55bfbdab rc: log when calling a nonexistent service; cosmetics 5 years ago
pedro cd4e11d6c8 rc: openvpn.c: enable multihome for UDP servers when in multiwan mode
- required as the router has multiple interfaces and we don't bind to a specific one

- Ported from @RMerlin (thanks!)
5 years ago
pedro de6e1875f7 openvpn: ignore unsupported ipv6 push configurations for ovpn client 5 years ago
pedro 971fd4a3fe Merge branch 'arm-master' into arm-sdk7 5 years ago
pedro 4e189a5a31 busybox: update to 1.32.1
- refresh patches
5 years ago
pedro 477a6d509f libsodium: update to 1.0.18-stable 5 years ago
pedro 94791cc156 miniupnpd: update to 2.2.1 5 years ago
pedro 0f0f16df6e nginx: update to 1.19.6 5 years ago
pedro f273c0fe06 nettle: update to 3.7 5 years ago
pedro aae3182bf2 igmpproxy: update to 0.3 5 years ago