[LEDE-DEV] firewall: flood protection feature

2017-05-19 Thread Alin Năstac
Hi Jo, I need to add flood protection feature to firewall. The ratelimit section parameters would be: proto, src_port, dest_port, family, global_limit, global_burst, per_srcip_limit, per_srcip_burst, per_srcip_mask, per_srcip_buckets. These rules will have effect on a raw table user chain called

[LEDE-DEV] [PATCH] dnsmasq: write resolv.conf also when noresolv = 1

2017-05-19 Thread Paul Oranje
When UCI dhcp.dnsmasq.noresolv is true, dnsmasq ignores the (wan) resolv.conf for upstream name resolution and the dnsmasq init script ialso skips writing /tmp/resolv.conf (/etc/resolv.conf soft links that file). Not using the local running DNS service when noresolv is true does not make sence; th

Re: [LEDE-DEV] [PATCH v5] dnsmasq: also write /tmp/resolv.conf when UCI dhcp.dnsmasq.noresolv is '1'

2017-05-19 Thread Hans Dedecker
On Fri, May 19, 2017 at 4:13 PM, Paul Oranje wrote: > Question: when the subject is changed in order the make it less than 50 > characters long, does that result in a distinct new patch ? > Paul Yes that results into a new distinct patch in patchwork Hans > >> Op 19 mei 2017, om 12:58 heeft Paul

[LEDE-DEV] [PATCH 2/2] mac80211: add support for rtl8821ae pcie adapter

2017-05-19 Thread Hans Ulli Kroll
Add support for Realtek RTL8821AE/RTL8812AE PCIe adapter. This device supports 802.11ac and bluetooth testet on PC Engines APU with AP and STA mode Signed-off-by: Hans Ulli Kroll --- package/kernel/mac80211/Makefile | 24 ++-- 1 file changed, 22 insertions(+), 2 deletions(-)

[LEDE-DEV] [PATCH 1/2] firmware: add firmware for rtl8821ae support

2017-05-19 Thread Hans Ulli Kroll via Lede-dev
The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software.--- Begin Message --- add needed firmware to support rtl

Re: [LEDE-DEV] [PATCH v2 00/19] Universal staged sysupgrade and assorted fixes

2017-05-19 Thread Lucian Cristian
On 13.05.2017 22:56, Matthias Schiffer wrote: Text from my RFC mail: --- When talking about https://bugs.lede-project.org/index.php?do=details&task_id=685 with jow and lynxis, we came to the conclusion that the best way to fix sysupgrades would be to generalize the staged sysupgrade used on NAND

Re: [LEDE-DEV] Toolchain/Buildroot requirements, testing and common lowest denominator?

2017-05-19 Thread Florian Fainelli
On 05/19/2017 02:10 AM, Daniel Engberg wrote: > Long story short: > * Updated tools/sparse > * Compiles fine on my side (Debian 8) > * Blows up on buildbot (slave-lede-local) because it runs GCC 4.7 (lacks > bswap, 4.8+ works according to > https://sourceware.org/bugzilla/show_bug.cgi?id=20530) >

[LEDE-DEV] [PATCH] dropbear: bump to 2017.75

2017-05-19 Thread Kevin Darbyshire-Bryant
The following fixes are still awaiting CVE allocations - Security: Fix double-free in server TCP listener cleanup A double-free in the server could be triggered by an authenticated user if dropbear is running with -a (Allow connections to forwarded ports from any host) This could potentially allow

[LEDE-DEV] GSOC 2017 - Implement NetJSON output in ubus (OpenWRT/LEDE) - Progress Report 2

2017-05-19 Thread Arun Kumar
Hi Mentors and Developer Community, This is the 2nd week's progress report of the project: Implement NetJSON output in ubus (OpenWRT/LEDE) 1. Refined the timeline of the proposal and updated. 2. CLI is made to support other inputs as in [1] but the backend functions havent been implemented. 3. Ef

Re: [LEDE-DEV] [PATCH v5] dnsmasq: also write /tmp/resolv.conf when UCI dhcp.dnsmasq.noresolv is '1'

2017-05-19 Thread Paul Oranje
Question: when the subject is changed in order the make it less than 50 characters long, does that result in a distinct new patch ? Paul > Op 19 mei 2017, om 12:58 heeft Paul Oranje het volgende > geschreven: > > Oké, I’ll submit another version with the requested changes later today. > This t

Re: [LEDE-DEV] [PATCH v5] dnsmasq: also write /tmp/resolv.conf when UCI dhcp.dnsmasq.noresolv is '1'

2017-05-19 Thread Paul Oranje
Oké, I’ll submit another version with the requested changes later today. This trivial change is turning out a ping pong lesson. Thanks anyway, Paul > Op 18 mei 2017, om 16:53 heeft Hans Dedecker het > volgende geschreven: > > On Sun, May 14, 2017 at 8:22 PM, Paul Oranje wrote: >> >> fixes FS

[LEDE-DEV] Fwd: Re: convention on uid/gid for packages

2017-05-19 Thread Karl Palsson
Resending to the list properly as planned... I've modified one of my packages (mosquitto) to use the autoassignment style, as it never cared about the actual uid/gid. However, is this really the expected behaviour? # cat /etc/passwd root:x:0:0:root:/root:/bin/ash daemon:*:1:1:daemon:/var:/bin/

[LEDE-DEV] [PATCH netifd] system-linux: parse 6rd specific settings as nested json data object

2017-05-19 Thread Hans Dedecker
Parse 6rd specific settings prefix, relay-prefix as nested json data objects. At the same time improve 6rd error handling. Signed-off-by: Hans Dedecker --- system-linux.c | 89 ++ system.c | 12 ++-- system.h | 7 + 3 f

[LEDE-DEV] Toolchain/Buildroot requirements, testing and common lowest denominator?

2017-05-19 Thread Daniel Engberg
Long story short: * Updated tools/sparse * Compiles fine on my side (Debian 8) * Blows up on buildbot (slave-lede-local) because it runs GCC 4.7 (lacks bswap, 4.8+ works according to https://sourceware.org/bugzilla/show_bug.cgi?id=20530) Having a look at the buildbots, it shows that tictex-02

[LEDE-DEV] [PATCH][procd] ubus: use ubus_auto_connect() logic

2017-05-19 Thread Alexandru Ardelean
Admittedly, the semantic is a bit different, in the sense that there are no progressive retry timeouts. ubus_auto_connect() uses 1 second fixed retry intervals. Whereas the old logic would start at 50 millisecs and progress up to 1 second. Other than that, the rest should be the same overall logi

Re: [LEDE-DEV] [netifd]Merged: Remove redundant check for strtoul() return value

2017-05-19 Thread Hans Dedecker
Merged into project/netifd.git, branch master with https://git.lede-project.org/?p=project/netifd.git;a=commit;h=a063705a03a6c5a41b5f7aed251bfb3ba5c844c3 Thanks ___ Lede-dev mailing list Lede-dev@lists.infradead.org http://lists.infradead.org/mailman/li

Re: [LEDE-DEV] [PATCH v3] ramips: add support for GL-inet GL-MT300N-V2

2017-05-19 Thread Mathias Kresin
2017-05-17 12:18 GMT+02:00 kysonlok : > This patch adds supports for the GL-inet GL-MT300N-V2. > > Specification: > - SoC: MediaTek MT7628AN > - Flash: 16 MiB (W25Q128FVSG) > - RAM: 128 MiB DDR > - Ethernet: 1 x WAN (100 Mbps) and 1 x LAN (100 Mbps) > - USB: 1 x USB 2.0 port > - Button: 1 x switch