Maintainer: Rob White rob@blue-wave.net
Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64
Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 22.03
opennds (9.9.0)
* This version adds new functionality, and fixes some issues
* Add - Community ThemeSpec to support legacy splash.html [bluewavenet]
* Fix - ensure nat_traversal_poll_interval defaults to 10 seconds [bluewavenet]
* Add - process send_to_fas_deauthed and send_to_fas_custom in fas-aes-https [bluewavenet]
* Add - support for send_to_fas_deauthed library call in binauth_log.sh [bluewavenet]
* Add - heartbeat file containing timestamp [bluewavenet]
* Add - send_to_fas_deauthed and send_to_fas_custom library calls [bluewavenet]
* Add - Save authmon daemon startup arguments for libopennds [bluewavenet]
* Fix - potential divide by zero errors [bluewavenet]
* Add - option nat_traversal_poll_interval [bluewavenet]
* Add - Library calls for urlencode and urldecode[bluewavenet]
* Fix - Don't download remotes if ThemeSpec not configured [bluewavenet]
* Add - Error report in syslog if dhcp database is not found [bluewavenet]
* Add - library calls, deauth and daemon_deauth [bluewavenet]
* Fix - change WTERMSIG log from WARNING to NOTICE [bluewavenet]
* Add - Set minimum bucket size to 5 regardless of configured bucket ratio [bluewavenet]
* Fix - safe_vasprint return value [bluewavenet]
* Add - test if safe_calloc failed and serve error 503 [bluewavenet]
* Add - use calloc instead of malloc[bluewavenet]
* fix - safe functions to return error rather than exit [bluewavenet]
* Add - b64decode custom string received by binauth script [bluewavenet]
Signed-off-by: Rob White <rob@blue-wave.net>
Maintainer: Rob White rob@blue-wave.net
Compile tested: All
Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64, on 21.02, 22.03 and snapshot.
Description:
* This version adds new functionality.
* Update README.md
* Add - Traffic volume, Peers and stations to status output [bluewavenet]
* Add - limit up-checks to mesh interfaces only [bluewavenet]
-- Rob White <dot@blue-wave.net> Mon, 08 Aug 2022 13:40:31 +0000
Signed-off-by: Rob White <rob@blue-wave.net>
Maintainer: Rob White rob@blue-wave.net
Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64
Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 22.03
* This version adds new functionality, and fixes some issues
* Fix - suppress stderr in client_params in generic linux [bluewavenet]
* Fix - client_params on generic linux, remote logo not supported yet [bluewavenet]
* Fix - compiler warning [bluewavenet]
* Fix - set voucher script as executable [bluewavenet]
* Update OpenWrt Makefile [bluewavenet]
* Add - format footer in Themespec scripts [bluewavenet]
* Update footer on all scripts [bluewavenet]
* Update - Community Voucher Themespec [bluewavenet]
* Add - Check on startup for Y2.038K bug (32 bit time) [bluewavenet]
* Fix - Remove deprecated Debian specific files [bluewavenet]
* Add - More css updates [bluewavenet]
* Add - user friendly RFC8910 page511 text and remove refresh button [bluewavenet]
* Fix - MHD becomes unresponsive serving page 511 for rfc8910 clients [bluewavenet]
* Add - extra startup settings - ignore_sigpipe and write nds info [bluewavenet]
* Add - set MHD connection limit to 100, set MHD listen backlog size to 128, set MHD_HTTP_HEADER_CONNECTION "close" [bluewavenet]
* Fix - Add missing LOG_CRIT in debug [bluewavenet]
* Add - some useful diagnostic output in authmon [bluewavenet]
* Fix - Move testing to community [bluewavenet]
* Fix - Community - Use tmpfs by default for vouchers.txt file [bluewavenet]
* Add - README with use instructions and notice about flash wearout [fservida]
* Fix - Refactor folder structure for community themespec [fservida]
* Add - Create vouchers.txt [fservida]
* Add - Create theme_voucher.sh [fservida]
* Update - README.md [bluewavenet]
* Add - image download info message [bluewavenet]
* Add - css updates [dianariyanto]
* Add - allow downloaded remotes refresh for all modes [bluewavenet]
* Add - download_resources.sh to installed files [bluewavenet]
* Add - support for download of custom images and files in the status.client page [bluewavenet]
* Remove - Debian man page support [bluewavenet]
* Fix - Add missing mkdir command in Makefile [dzatoah]
* Fix - typos in src/{conf, main}.c [dzatoah]
Signed-off-by: Rob White <rob@blue-wave.net>
* support event notification via unix socket
* improve timing stability of transmitted announcement packets
* reduce socket handling overhead when many clients and interfaces
Signed-off-by: Sven Eckelmann <sven@narfation.org>
* cjdns: bump source from v21 to v21.1
* cjdns: bump release with patch to prefer python2
* cjdns: refresh patches and remove patch musl
Signed-off-by: William Fleurant <meshnet@protonmail.com>
The previous build errors with v5 have been fixed. This version builds
packages as a normal user instead of as root.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
Maintainer: Rob White rob@blue-wave.net
Compile tested: All
Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64, on 21.02.2 and snapshot.
Description:
* This version adds new functionality, and fixed some issues
* Fix - repeated syslog messages - output only on mode change [bluewavenet]
* Add - service status to json output [bluewavenet]
* Add - support for multiple mesh interfaces [bluewavenet]
* Fix - duplicate ifname if more than one mesh interface [bluewavenet]
* Add - compatibility with iw < v5.16-1 [bluewavenet]
* Add - search and delete phantom meshnodes [bluewavenet]
Signed-off-by: Rob White <rob@blue-wave.net>
Changelog:
916d3d9 Update CHANGES for babeld-1.12.1
3d8aec4 Schedule an interface check after adding an interface.
f13602b Split last PC into unicast and multicast values
Signed-off-by: Nick Hainke <vincent@systemli.org>
The build failed in this kernel due to some missing implicit includes:
build_dir/target-aarch64_cortex-a53_musl/linux-mediatek_mt7622/batman-adv-2022.1/compat-hacks.h:64:42: warning: 'struct sk_buff' declared inside parameter list will not be visible outside of this definition or declaration
64 | static inline int batadv_netif_rx(struct sk_buff *skb)
| ^~~~~~~
build_dir/target-aarch64_cortex-a53_musl/linux-mediatek_mt7622/batman-adv-2022.1/compat-hacks.h: In function 'batadv_netif_rx':
build_dir/target-aarch64_cortex-a53_musl/linux-mediatek_mt7622/batman-adv-2022.1/compat-hacks.h:66:13: error: implicit declaration of function 'in_interrupt' [-Werror=implicit-function-declaration]
66 | if (in_interrupt())
| ^~~~~~~~~~~~
build_dir/target-aarch64_cortex-a53_musl/linux-mediatek_mt7622/batman-adv-2022.1/compat-hacks.h:67:24: error: implicit declaration of function 'netif_rx' [-Werror=implicit-function-declaration]
67 | return netif_rx(skb);
| ^~~~~~~~
build_dir/target-aarch64_cortex-a53_musl/linux-mediatek_mt7622/batman-adv-2022.1/compat-hacks.h:69:24: error: implicit declaration of function 'netif_rx_ni' [-Werror=implicit-function-declaration]
69 | return netif_rx_ni(skb);
| ^~~~~~~~~~~
In file included from <command-line>:
./include/linux/netdevice.h: At top level:
build_dir/target-aarch64_cortex-a53_musl/linux-mediatek_mt7622/batman-adv-2022.1/compat-hacks.h:71:18: error: conflicting types for 'batadv_netif_rx'; have 'int(struct sk_buff *)'
71 | #define netif_rx batadv_netif_rx
| ^~~~~~~~~~~~~~~
./include/linux/netdevice.h:4029:5: note: in expansion of macro 'netif_rx'
4029 | int netif_rx(struct sk_buff *skb);
| ^~~~~~~~
build_dir/target-aarch64_cortex-a53_musl/linux-mediatek_mt7622/batman-adv-2022.1/compat-hacks.h:64:19: note: previous definition of 'batadv_netif_rx' with type 'int(struct sk_buff *)'
64 | static inline int batadv_netif_rx(struct sk_buff *skb)
| ^~~~~~~~~~~~~~~
cc1: some warnings being treated as errors
Reported-by: Chen Minqiang <ptpt52@gmail.com>
Fixes: b65a8ca03a ("batman-adv: update to version 2022.1")
Signed-off-by: Sven Eckelmann <sven@narfation.org>
Changelog:
5 May 2022: babeld-1.12
* Implement v4-via-v6 routing (RFC 9229), which allows a router with
IPv4 addresses only to route IPv4. Thanks to Théophile Bastian.
* Enable extended Netlink acks when available.
Thanks to Toke Høyland-Jørgensen.
* Fix restoring of interface configuration to avoid unbounded memory
consumption. Thanks to andrew-hoff.
* Fix handling of deny filters in the install chain.
Refreshed patches:
- 600-add-ubus.patch
Signed-off-by: Nick Hainke <vincent@systemli.org>
* support latest kernels (4.9 - 5.18)
* bugs squashed:
- resolve "time-of-check-time-of-use" race condition when checking the
network namespace of a lower device
- fix sanity check of network devices in different namespaces with
colliding IDs
- prevent transmission errors after splitting large GRO packets into
smaller fragments
Signed-off-by: Sven Eckelmann <sven@narfation.org>
The bird service needs to stop before network is stopped, otherwise it
might not be able to cleanly terminate its sessions. Introduce STOP=10
as is used in the bird1 init scripts.
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
OpenWrt master is no longer providing any kernels older than 5.10. Just
drop the compat-hacks for older kernels to make it easier to maintain the
package.
Signed-off-by: Sven Eckelmann <sven@narfation.org>
The minimal kernel version in OpenWrt is now Linux 5.10.111. It already
provides various thing which needed special patches on older versions.
Signed-off-by: Sven Eckelmann <sven@narfation.org>
Eric Dumazet changed the mc_forwarding in commit 145c7a793838 ("ipv6: make
mc_forwarding atomic") the type of mc_forwarding from __s32 to an atomic_t.
This patch was then ported to various stable kernels.
This code change caused a FTBFS when in batman-adv when
CONFIG_BATMAN_ADV_MCAST was activated. To work around this problem, provide
a version for kernels with __s32 mc_forwarding and a version for kernel
with atomic_t mc_forwarding.
Fixes: #850
Reported-by: Huangbin Zhan <zhanhb88@gmail.com>
Signed-off-by: Sven Eckelmann <sven@narfation.org>
The opennds software interfaces with netfilter using `iptables` commands,
it does not rely on a specific implementation of the iptables frontend.
Furthermore, the semantically wrong conflict with iptables-legacy
introcduces recursive dependencies in the build system, even for people
not using opendns.
Remove the explicit conflict marker for iptables-legacy.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Naywatch should first try to reboot normally, and if that does not work
do a hard reboot. However, the hard reboot was never called.
Signed-off-by: Nick Hainke <vincent@systemli.org>
In order to use feeds from GH mirror for GH actions, thus saving a lot
of resources being wasted. While at it fix whitespace issue.
Signed-off-by: Petr Štetiar <ynezz@true.cz>
[applied to routing feed]
[whitespace issue not existing in routing feed]
Signed-off-by: Nick Hainke <vincent@systemli.org>
No also check mirror hashes and badly formated init files
Signed-off-by: Paul Spooren <mail@aparcar.org>
[applied to routing feed]
Signed-off-by: Nick Hainke <vincent@systemli.org>
Maintainer: Rob White rob@blue-wave.net
Compile tested: All
Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64, on 21.02.2
Description:
Mesh11sd is a dynamic parameter configuration daemon for 802.11s mesh networks.
It was originally designed to leverage 802.11s mesh networking at Captive Portal venues.
This is the open source version and it enables easy and automated mesh network operation with multiple mesh nodes.
It allows all mesh parameters supported by the wireless driver to be set in the uci config file.
Settings take effect immediately without having to restart the wireless network.
Default settings give rapid and reliable layer 2 mesh convergence.
Without mesh11sd, many mesh parameters cannot be set in the uci wireless config file as the mesh interface must be up before the parameters can be set.
Some of those that are supported, would fail to be implemented when the network is (re)started resulting in errors or dropped nodes.
The mesh11sd daemon dynamically checks configured parameters and sets them as required.
This version does not require a Captive Portal to be running.
Signed-off-by: Rob White <rob@blue-wave.net>
30 March 2022: babeld-1.11
* Implemented MAC authentication (RFC 8967). Thanks to Clara Dô,
Weronika Kołodziejak and Antonin Décimo.
* Changed the interface of the add_filter function in order to simplify
integration in OpenWRT. Thanks to Nick Hainke.
Detailed List:
7c053fe Export add_filters and simplify interface.
91c44f8 Rename blake2s to blake2s128.
dda8d63 Update CHANGES.
43a0066 Allow Blake2s keys up to 32 bytes.
375ea5f Rename interface option hmac to key.
1b9abc4 Replace hmac-verify with accept-bad-signatures.
3777eb4 Ignore .gitmodules when releasing an archive.
3551b45 Simplify and fix preparse phase.
ba8f116 Add rate limitations for challenges.
6d44238 Show PC number.
ceda3a0 Expire Index and challenge timer.
d66a4d2 Ignore a Challenge Request received on multicast.
024c17a Fix confusion between INDEX_LEN and NONCE_LEN when sending PC TLV.
ceb021f Fix double-free in error path.
1e08aed Change no_hmac_verify to hmac-verify.
c7ad387 Use 'hmac-sha256' and not 'sha256'.
5a15957 Fix nodes incorrectly rejecting packets.
af02039 Append a PC message if Babel-MAC is enabled.
46fc7da Follow the spec closely for the preparse phase.
87f39d0 Rename MAC functions and constants to match the spec.
02b14e3 Helpful error messages in key configuration.
d763f3e Error if configured key can't be found.
3cb0ab7 Use RFC3542 for IPv6 on macOS.
69df1cb Use _GNU_SOURCE instead of __USE_GNU.
ef3a113 Don't copy nonce, suppress VLA.
c243769 Move key validation in parse_key.
b06b2fc Constify source argument of fromhex.
9529941 Use AUTH_TYPE_NONE consistently.
d922b64 Document the HMAC options in manual page.
0c4afc2 Only allow keys configured on a given interface.
7de6715 Create neighbour after checking HMAC.
ecd1f42 Fix typo in compare_hmac.
9a5de34 Fix HMAC-SHA-256 computation.
f1051fd Fix constants to be consistent with SHA-256.
9688b68 Fix memory leaks in error-handling paths in configuration parser.
4d8a831 Fix some more (read-only) buffer overflows.
ebda926 Fix potential memory leaks.
d53fec0 Use AUTH_TYPE_* consistently.
a1afd51 Add no_hmac_verify flag.
b4e28f2 Fix ordering of fields in pseudo-header.
c8ace8b Use IANA-assigned TLV numbers.
739f76a Implement HMAC authentication.
e3adf47 Compile with SHA-256 and Blake2s.
ca0a512 Add SHA-2 and Blake2 submodules.
756783e Untabify
Remove upstreamed patches:
- 000-export-add-filters-and-simplify-interface.patch
Signed-off-by: Nick Hainke <vincent@systemli.org>
You can define filter functions in babeld by:
in if eth0 metric 128
This commit adds the ubus equivalent to dynamically add filter on
runtime:
ubus call babeld add_filter '{"ifname":"eth0", "type":"input",
"metric":128}'
Signed-off-by: Nick Hainke <vincent@systemli.org>
You can now give a lqm when adding an interface:
ubus call olsrd add_interface '{"ifname":"wg_51821", "lqm":"0.5"}'
Signed-off-by: Nick Hainke <vincent@systemli.org>
Maintainer: Rob White rob@blue-wave.net
Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc
Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64, on snapshot
* This version adds new functionality, and fixes some issues
* Fix - syntax error (missing comma) in awk command in bash on generic Linux [bluewavenet]
* Add - option to append serial number suffix to gatewayname [bluewavenet]
* Add - block use of ip aliases on gateway interface [doctor-ox] [bluewavenet]
* Fix - ndsctl json syntax error [bluewavenet]
* Add - check for null variables in key value pairs in MHD callbacks [bluewavenet]
* Fix - changed some notice messages into debug messages [bluewavenet]
* Fix - possible return of incorrect pid [doctor-ox] [bluewavenet]
* Fix - possible abiguities resulting in failure to parse parameters correctly [bluewavenet]
* Fix - Remove deprecated get_client_token.sh [bluewavenet]
* Fix - Prevent possible malformed mac address returned from dhcpcheck() [doctor-ox] [bluewavenet]
Signed-off-by: Rob White <rob@blue-wave.net>
- Switch to AUTORELEASE in PKG_RELEASE
This avoids cases when someone forgets to bump PKG_RELEASE
- Fixed SPDX License Identifier
- Changed package versioning
Before: vis_1440-2_arm_cortex-a9_vfpv3-d16.ipk
After: vis_2013-04-07-7710cce4-1_arm_cortex-a9_vfpv3-d16.ipk
- Drop not necessary rows
(Some of them were overwritting defaults and it is not necessary)
Downloaded tarball is ~2kB smaller
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
The upcoming OpenWrt version (currently in the master branch) ships
firewall4 by default [1], which uses nftables instead of iptables.
Users might choose to use a compatible layer [2] with iptables-nft,
decide which iptables they want to use, and make appropriate changes
related to fw3/f4[3].
This package requires to use iptables (no matter which variant) for
smart-gw-rules.
[1] 08d9f6e302
[2] https://www.redhat.com/en/blog/using-iptables-nft-hybrid-linux-firewall
[3] 795e7155cb
Signed-off-by: Nick Hainke <vincent@systemli.org>
According to the author [1]:
1. It is no longer supported and maintained.
2. It is no longer necessary as since 2005 the native multicast
forwarding support was added to the Linux Kernel
As alternative pimbd could be used.
[1] c805eb3325
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
- Fixed LICENSE
Software is licensed under MIT
- Added PKG_LICENSE_FILES
- The was wrong date in PKG_VERSION
The latest commit is 2014-12-12.
- Changed package versioning
Before: minimalist-pcproxy_2015-01-12-2d6d1b0b0a3b79a9b4a9b0a7606a84600a967bcb-2_arm_cortex-a9_vfpv3-d16.ipk
After: minimalist-pcproxy_2014-12-12-2d6d1b0b-1_arm_cortex-a9_vfpv3-d16.ipk
Also the downloaded tarball is smaller by 0,4 kB
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
- Use AUTORELEASE in PKG_RELEASE
- Use tarball instead of checkouting git
- Use two spaces instead of indentation
- In install section reorder it (first folder, then files and so on)
- Added LICENSE file
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>