[OpenWrt-Devel] RFC: Adding IPv6 support to uci_firewall

2009-06-07 Thread Malte S. Stretz
Hi folks, in the context of my diploma thesis I'm currently working on an IPv6 gateway based on OpenWrt. I wrote quite a lengthy synopsis but later found out that my idea is already well summarized in RFC 4864 [1], chapter 4.2: To implement simple security for IPv6 in, for example, a DSL or

Re: [OpenWrt-Devel] RFC: Adding IPv6 support to uci_firewall

2009-06-08 Thread Malte S. Stretz
On Sunday 07 June 2009 20:20:24 Florian Fainelli wrote: > Le Sunday 07 June 2009 15:59:20 Malte S. Stretz, vous avez écrit : >[...] > > So I guess I've got to change that. > > > > [2] suggests to discuss the ideas in advance so double work can be > > avoi

[OpenWrt-Devel] [PATCH] [package] dnsmasq: make sure dnsmasq has polled the resolv.conf generated by udhcpc (#5301)

2009-06-08 Thread Malte S. Stretz
) need a working resolver on localhost, they will fail if hotplug is quicker than the dnsmasq poll interval. This patch simply introduces a one second delay before any 20+ hotplug scripts are started. Signed-off-by: Malte S. Stretz --- This patch (with less description) is also attached to

[OpenWrt-Devel] [PATCH] aiccu: fix heatbeat typo in init script

2009-06-08 Thread Malte S. Stretz
Signed-off-by: Malte S. Stretz --- ipv6/aiccu/files/aiccu.init |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/ipv6/aiccu/files/aiccu.init b/ipv6/aiccu/files/aiccu.init index 40c3bc6..56de87d 100644 --- a/ipv6/aiccu/files/aiccu.init +++ b/ipv6/aiccu/files/aiccu.init

[OpenWrt-Devel] [PATCH] aiccu: revamp the init script

2009-06-08 Thread Malte S. Stretz
nterface name instead but I didn't find a clean way to implement this. Signed-off-by: Malte S. Stretz --- ipv6/aiccu/files/aiccu.conf | 10 ++-- ipv6/aiccu/files/aiccu.init | 93 +- 2 files changed, 60 insertions(+), 43 deletions(-) diff --git

Re: [OpenWrt-Devel] [PATCH] aiccu: revamp the init script

2009-06-08 Thread Malte S. Stretz
On Monday 08 June 2009 22:10:27 I wrote: > This patch: ... is wordwrapped. Grmf, it did look good before I sent it out, seems like KMail wordwraps after closing the composer window :-/ Any comments, shall I send again? The patch is the base for other stuff I'm working on, coming soon. Cheers,

Re: [OpenWrt-Devel] Homepage: Current Wiki redirection is useless

2009-06-09 Thread Malte S. Stretz
On Tuesday 09 June 2009 10:22:27 Matthias Buecher / Germany wrote: > As it seems that the new Wiki won't be available soon, could someone > please fix the redirection for the old Wiki. > Instead of just replacing the domain, at least add ".html" add the end > of the redirection and replace all slas

Re: [OpenWrt-Devel] Ping Re: RFC: LuCI Web Interface Image Format

2009-06-17 Thread Malte S. Stretz
Hi, On Wednesday 17 June 2009 03:38:01 Daniel Dickinson wrote: > No one seems to have responded to this, and I'd like to start working > on it next week. If developers could think about this and comment, it > would be appreciated. I'm not a core OpenWrt developer but was thinking about implement

Re: [OpenWrt-Devel] RFC: Adding IPv6 support to uci_firewall

2009-06-17 Thread Malte S. Stretz
Moin, On Monday 08 June 2009 14:22:32 I wrote: > [stuff] If anybody's interested, my current work (including history) is available on GitHub [1]. Current state: * Works on 8.09.1, should work on trunk as well. * Moved some stuff around. Only refactoring, not a single firewall rule changed (

Re: [OpenWrt-Devel] Ping Re: RFC: LuCI Web Interface Image Format

2009-06-17 Thread Malte S. Stretz
Hi JoW, On Wednesday 17 June 2009 16:14:37 Jo-Philipp Wich wrote: > I like that .tar.gz idea, it would also cover devices like the Fonera > where you have two separate images too. > > However, it's planned to introduce a unified image format for OpenWrt > which would solve most of this issues so I

Re: [OpenWrt-Devel] Ping Re: RFC: LuCI Web Interface Image Format

2009-06-17 Thread Malte S. Stretz
Hi, On Wednesday 17 June 2009 22:01:24 Peter Korsgaard wrote: > Malte> A broken tgz header will be recognized by these tools already. > > Malte> If we need any logic for flashing, we can also introduce a > Malte> sysupgrade dir. Anything in there will go to /lib/upgrade > Malte> before flashi

Re: [OpenWrt-Devel] New OpenWrt Community Wiki

2009-06-18 Thread Malte S. Stretz
Hi, On Wednesday 17 June 2009 20:06:29 Gregers Petersen wrote: > After long and hard gestation the new OpenWrt community wiki is now > ready and open for action :-) Thanks for the work on the shiny new wiki :) > The OpenWrt developer team is looking for a few individuals who would be > willing t

Re: [OpenWrt-Devel] opkg remove ifconfig && opkg install 'ip'

2009-06-18 Thread Malte S. Stretz
On Thursday 18 June 2009 16:22:54 Jo-Philipp Wich wrote: > > today I've written a proof-of-concept for > > getting rid of oldstyle networking aka 'ifconfig'. > > You do realize that this "oldstyle" networking stuff uses busybox > internals while switching to "ip" will introduce yet another few > ki

Re: [OpenWrt-Devel] opkg remove ifconfig && opkg install 'ip'

2009-06-18 Thread Malte S. Stretz
On Thursday 18 June 2009 18:20:06 Ferenc Wagner wrote: > "Malte S. Stretz" writes: > > On Thursday 18 June 2009 16:22:54 Jo-Philipp Wich wrote: > >>> today I've written a proof-of-concept for > >>> getting rid of oldstyle networking aka 'if

Re: [OpenWrt-Devel] opkg remove ifconfig && opkg install 'ip'

2009-06-18 Thread Malte S. Stretz
On Thursday 18 June 2009 18:07:49 bud.d...@suisse.org wrote: > On 18.06.2009 18:00, Malte S. Stretz wrote: > > On Thursday 18 June 2009 16:22:54 Jo-Philipp Wich wrote: > >>> today I've written a proof-of-concept for > >>> getting rid of oldstyle networking ak

Re: [OpenWrt-Devel] New OpenWrt Community Wiki

2009-06-18 Thread Malte S. Stretz
On Thursday 18 June 2009 21:44:17 kloschi wrote: > On Thu, 2009-06-18 at 21:34 +0200, Matthias Buecher / Germany wrote: > > doesn't work for me: > > #1 > > http://wiki.openwrt.org/DropbearPublicKeyAuthenticationHowto > > should result in > > http://oldwiki.openwrt.org/DropbearPublicKeyAuthenticatio

Re: [OpenWrt-Devel] opkg remove ifconfig && opkg install 'ip'

2009-06-19 Thread Malte S. Stretz
On Friday 19 June 2009 09:31:59 Bastian Bittorf wrote: > * Vasilis Tsiligiannis [18.06.2009 21:15]: > > Try removing 'route' too (-ifconfig-route+ip). 'route' can be replaced by > > 'ip' also, if this function is implemented in busybox. > > -ifconfig -route -arp > +ip arp is already a oneliner in

Re: [OpenWrt-Devel] opkg remove ifconfig && opkg install 'ip'

2009-06-19 Thread Malte S. Stretz
On Friday 19 June 2009 12:52:26 Bastian Bittorf wrote: > * elektra [19.06.2009 12:15]: > > doesn't connect to other Asterisk servers if 'route' is missing. > > therefore i implement a route() wrapper. > ATM i start at /etc/functions.sh but e.g. > asterisk does not use it. maybe it is a good > idea

Re: [OpenWrt-Devel] RFC: Adding IPv6 support to uci_firewall

2009-06-19 Thread Malte S. Stretz
On Friday 19 June 2009 18:43:36 ZioPRoTo (Saverio Proto) wrote: >[...] > However, before using an IPv6 firewall I'd like to be able to assign > IPv6 addresses to my router ! > > But how do you assign IPv6 addresses at boot ? I use tunnels, no static addresses. > Can you reproduce this bug ? > htt

[OpenWrt-Devel] [PATCH] A revamped firewall with IPv6 support

2009-07-13 Thread Malte S. Stretz
Hi folks, last month I wrote to this list [1] with a suggestion on how to extend the current firewall package (aka uci_firewall) to support IPv6 rules. I got a bit side tracked in between but after a lot of trying around and refactoring I've got a working (and I think nice) solution. I dubbed it

Re: [OpenWrt-Devel] etherwake configuration, not working on eth0

2009-07-19 Thread Malte S. Stretz
On Sunday 19 July 2009 13:27:47 Matthias Buecher / Germany wrote: >[...] > I'm done creating the patches for etherwake and busybox's ether-wake to > use br-lan as a default. > But can somebody confirm that br-lan is also a working interface for > other devices or Kamikaze 8.09 in general? Kamikaze

Re: [OpenWrt-Devel] etherwake configuration, not working on eth0

2009-07-19 Thread Malte S. Stretz
On Sunday 19 July 2009 14:22:38 Matthias Buecher / Germany wrote: > On 19.07.2009 13:52, Malte S. Stretz wrote: > > On Sunday 19 July 2009 13:27:47 Matthias Buecher / Germany wrote: > >> [...] > > > > And even if eth0 is bridged, etherwake should work on the base devi

Re: [OpenWrt-Devel] [legal] Compatibility of GPL with Apache

2009-07-21 Thread Malte S. Stretz
On Tuesday 21 July 2009 10:58:28 paolo del bene wrote: > [quoted mail] Well, somebody should pay a lawyer to find out about GPL/ASL compatibility :) Short: OpenWrt is a distribution, the build environment is GPLv2 (unless otherwise stated), LuCI is a third party project like dnsmasq or the Lin

[OpenWrt-Devel] [PATCH] sdk: do not exclude share directory or bison and friends break

2009-08-05 Thread Malte S. Stretz
For some reason the share (ie. /usr/share) directory is not included in the SDK tarball, see bug 5629 [1] for details, a patch is attached to the bug [2]. Maybe somebody familiar with the SDK could also have a quick glance at bug 5417 [3]. Cheers, Malte [1]https://dev.openwrt.org/ticket/5629 [

[OpenWrt-Devel] [PATCH] base-files: set default value for config_get via 4th parameter plus some more (#5636)

2009-08-06 Thread Malte S. Stretz
The command config_get_bool allows a fourth parameter which defines a default value. At many places it would be very useful if the plain three-parameter version of config get supported such a parameter as well, that saves a bunch of [ -z "$foo" ] checks in my scripts. In bug 5636 [0] you can f

Re: [OpenWrt-Devel] [PATCH] base-files: set default value for config_get via 4th parameter plus some more (#5636)

2009-08-07 Thread Malte S. Stretz
On Friday 07 August 2009 04:12:00 Jo-Philipp Wich wrote: > Applied in r17155-r17160. Yay, I didn't expect this one to be applied that quick :) I added a 7th patch to the ticket [7] which updates the tex docs accordingly. Cheers, Malte [7]https://dev.openwrt.org/attachment/ticket/5636/0007-docs-

Re: [OpenWrt-Devel] [PATCH] base-files: set default value for config_get via 4th parameter plus some more (#5636)

2009-08-07 Thread Malte S. Stretz
On Friday 07 August 2009 14:59:37 I wrote: > On Friday 07 August 2009 04:12:00 Jo-Philipp Wich wrote: > > Applied in r17155-r17160. > > Yay, I didn't expect this one to be applied that quick :) > > I added a 7th patch to the ticket [7] which updates the tex docs > accordingly. I attached another d

Re: [OpenWrt-Devel] [PATCH] firewall/iptables

2009-10-20 Thread Malte S. Stretz
On Tuesday 20 October 2009 14:58:49 Ugur DOGRU wrote: > This patch is for firewall/iptables. Most of it is to fix some hush > script problems. >[...] As most other init/hotplug scripts don't work with hush as well, I wonder why you went for the firewall only :) What you "fixed" are actually not

Re: [OpenWrt-Devel] [PATCH] Disable IPv6 autoconfiguration

2010-04-28 Thread Malte S. Stretz
Moin, On Wednesday 28 April 2010 16:45:58 Jo-Philipp Wich wrote: > > Therefore I believe that the /etc/sysctl.conf file should have > > net.ipv6.conf.all.forwarding=1 set by default. > > A default firewall solution is needed before it can be made the default. > > Even if you or me do not need a

Re: [OpenWrt-Devel] New firewall (was: [PATCH] Disable IPv6 autoconfiguration)

2010-04-29 Thread Malte S. Stretz
Hi, On Thursday 29 April 2010 11:31:06 Andrew Byrne wrote: > > So I gave it a try now and it works well for me, will do some more ipv6 > > testing in the next days. I also ported several fixes from the trunk > > version of the uci firewall, added some compat code and hotplug events. Thanks! I tr

Re: [OpenWrt-Devel] New firewall (was: [PATCH] Disable IPv6 autoconfiguration)

2010-04-29 Thread Malte S. Stretz
On Thursday 29 April 2010 17:00:55 Jo-Philipp Wich wrote: > > But some breakage with custom scripts hacking the chains was unavoidable > > I guess so thats where people have to watch out. > > If someone relied on firewall internals (e.g. me :P) he has to expect > that it could break at some point

Re: [OpenWrt-Devel] New firewall (was: [PATCH] Disable IPv6 autoconfiguration)

2010-05-05 Thread Malte S. Stretz
Hi, On Saturday 01 May 2010 21:12:45 Jo-Philipp Wich wrote: > I merged the new firewall + my modifications into trunk now. thanks. I guess I'll have to write up the documentation now :) And buy a new device to keep hacking on my project and fix the firewall when it breaks... Are you also look