Re: SAD DNS cache poisoning attack

2020-11-15 Thread Bjørn Mork
Michael Richardson writes: > better if dnsmasq just implemented > https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 > which alas, has never become an RFC, AFAIK. Does dnsmasq use cookies? Ref https://tools.ietf.org/html/rfc7873 That pretty solves the cache poisoning problem, and should

[PATCH] ramips: mt7621: fix Telco X1 GPIO switches

2020-11-15 Thread DENG Qingfang
The GPIO base of MT7621 GPIO 0~31 is 480 on kernel 5.4 Fix the GPIO numbering. Signed-off-by: DENG Qingfang --- .../linux/ramips/mt7621/base-files/etc/board.d/03_gpio_switches | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/target/linux/ramips/mt7621/base-files/etc/board.d/03

[RPCD RFC PATCH 2/2] iwinfo: add ht and vht operation info to wifi scan

2020-11-15 Thread Ansuel Smith
Iwinfo exports ht and vht operation info useful to get channel info of nearby stations. Add these new info to ubus output. Signed-off-by: Ansuel Smith --- iwinfo.c | 35 ++- 1 file changed, 34 insertions(+), 1 deletion(-) diff --git a/iwinfo.c b/iwinfo.c index 77

[IWINFO RFC PATCH 1/2] iwinfo: export ht and vht operation in scan results

2020-11-15 Thread Ansuel Smith
Export ht and vht operation data in scan results. These additional data can be usefull to check wifi channel utilizzation by neraby stations. Signed-off-by: Ansuel Smith --- The final goal of this patch is to add a nice and easy graph to luci to better check wifi channel utilizzation directly fro

Re: SAD DNS cache poisoning attack

2020-11-15 Thread Michael Richardson
better if dnsmasq just implemented https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 which alas, has never become an RFC, AFAIK. Alternatively, DNSSEC was designed to deal with the entire gamut of DNS cache poisioning. More fiddling with ICMP source ports is not going to help in the lon

[PATCH v3 1/3] dropbear: create a submenu for public key algorithms

2020-11-15 Thread Rui Salvaterra
This allows the user to select only the public key algorithms (s)he requires (e.g., disabling RSA and keeping only Ed25519). The default selection maintains the current functionality. Additionally, make sure at least one public key algorithm is selected, lest the build would fail. Dropbear execut

[PATCH v3 3/3] dropbear: create a submenu for key exchange algorithms

2020-11-15 Thread Rui Salvaterra
This allows the user to select only the key exchange algorithms (s)he requires (e.g., disabling group 14 SHA-{1,256} and keeping only Curve25519). The default selection maintains the current functionality. Additionally, make sure at least one key exchange algorithm is selected, lest the build woul

[PATCH v3 2/3] dropbear: create a submenu for encryption algorithms

2020-11-15 Thread Rui Salvaterra
This allows the user to select only the encryption algorithms (s)he requires (e.g., disabling AES and keeping only ChaCha20-Poly1305). The default selection maintains the current functionality. Additionally, make sure at least one encryption algorithm is selected, lest the build would fail. Signe

[PATCH v3 0/3] dropbear: overhaul the crypto algorithm selection

2020-11-15 Thread Rui Salvaterra
This patch series enables a much more fine-grained configuration of the public key, encryption and key exchange algorithms in Dropbear. v3: rebase against current master. v2: correct file permissions. Rui Salvaterra (3): dropbear: create a submenu for public key algorithms dropbear: create a

[PATCH] ethtool: update to version 5.9

2020-11-15 Thread Hans Dedecker
The ipkg sizes changes as follows for mips 24kc : 5.8 : ethtool_5.8-1_mips_24kc.ipk 34930 5.9 : ethtool_5.9-1_mips_24kc.ipk 35241 Signed-off-by: Hans Dedecker --- package/network/utils/ethtool/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/packag

[no subject]

2020-11-15 Thread Stephen Walker via openwrt-devel
The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software.--- Begin Message --- Branch: refs/heads/master Home

[no subject]

2020-11-15 Thread Filip Moc via openwrt-devel
The sender domain has a DMARC Reject/Quarantine policy which disallows sending mailing list messages using the original "From" header. To mitigate this problem, the original message has been wrapped automatically by the mailing list software.--- Begin Message --- Hi, please could anyone give me a

Re: Lots of packages fail in buildbot (cryptodev-linux, hostapd, openssl, ...)

2020-11-15 Thread Hannu Nyman
Rosen Penev kirjoitti 15.11.2020 klo 12.21: On Sun, Nov 15, 2020 at 2:15 AM Hannu Nyman wrote: Notified by forum discussion, I noticed that lots of packages seem to fail to build in buildbot. Faillogs e.g. in * https://downloads.openwrt.org/snapshots/faillogs/arm_cortex-a15_neon-vfpv4/package

Re: Lots of packages fail in buildbot (cryptodev-linux, hostapd, openssl, ...)

2020-11-15 Thread Rosen Penev
On Sun, Nov 15, 2020 at 2:15 AM Hannu Nyman wrote: > > Notified by forum discussion, I noticed that lots of packages seem to fail to > build in buildbot. > > Faillogs e.g. in > > * > https://downloads.openwrt.org/snapshots/faillogs/arm_cortex-a15_neon-vfpv4/packages/ > * https://downloads.openwrt.

Lots of packages fail in buildbot (cryptodev-linux, hostapd, openssl, ...)

2020-11-15 Thread Hannu Nyman
Notified by forum discussion, I noticed that lots of packages seem to fail to build in buildbot. Faillogs e.g. in * https://downloads.openwrt.org/snapshots/faillogs/arm_cortex-a15_neon-vfpv4/packages/ * https://downloads.openwrt.org/snapshots/faillogs/mipsel_24kc/packages/ * https://downloads

Re: [PATCH] client: don`t clear cl->dispatch

2020-11-15 Thread Wojciech Jowsa
pon., 26 paź 2020 o 09:46 napisał(a): > > From: Wojciech Jowsa > > A segfault occurs in ubus_cmp_id when a client > tries to subscribe to an ubus object after the > object was removed and added again. When the ubus > object is removed then a client subcribed to > this object in notified about tha

[PATCH] ubus: fix uhttpd crash

2020-11-15 Thread Wojciech Jowsa
Unregister ubus subscriber in notification remove callback. Without this call, uhttpd crashes when client tries to subscribe to the ubus object after the object was unregistred and registered again. It is bacuse the reference to ubus subscriber is not freed but the memory is cleared in the uh_reque