Hi,
On Saturday 01 May 2010 21:12:45 Jo-Philipp Wich wrote:
> I merged the new firewall + my modifications into trunk now.
thanks. I guess I'll have to write up the documentation now :) And buy a new
device to keep hacking on my project and fix the firewall when it breaks...
Are you also look
On Thursday 29 April 2010 17:00:55 Jo-Philipp Wich wrote:
> > But some breakage with custom scripts hacking the chains was unavoidable
> > I guess so thats where people have to watch out.
>
> If someone relied on firewall internals (e.g. me :P) he has to expect
> that it could break at some point
Hi,
On Thursday 29 April 2010 11:31:06 Andrew Byrne wrote:
> > So I gave it a try now and it works well for me, will do some more ipv6
> > testing in the next days. I also ported several fixes from the trunk
> > version of the uci firewall, added some compat code and hotplug events.
Thanks! I tr
Moin,
On Wednesday 28 April 2010 16:45:58 Jo-Philipp Wich wrote:
> > Therefore I believe that the /etc/sysctl.conf file should have
> > net.ipv6.conf.all.forwarding=1 set by default.
>
> A default firewall solution is needed before it can be made the default.
>
> Even if you or me do not need a
On Tuesday 20 October 2009 14:58:49 Ugur DOGRU wrote:
> This patch is for firewall/iptables. Most of it is to fix some hush
> script problems.
>[...]
As most other init/hotplug scripts don't work with hush as well, I wonder why
you went for the firewall only :)
What you "fixed" are actually not
On Friday 07 August 2009 14:59:37 I wrote:
> On Friday 07 August 2009 04:12:00 Jo-Philipp Wich wrote:
> > Applied in r17155-r17160.
>
> Yay, I didn't expect this one to be applied that quick :)
>
> I added a 7th patch to the ticket [7] which updates the tex docs
> accordingly.
I attached another d
On Friday 07 August 2009 04:12:00 Jo-Philipp Wich wrote:
> Applied in r17155-r17160.
Yay, I didn't expect this one to be applied that quick :)
I added a 7th patch to the ticket [7] which updates the tex docs accordingly.
Cheers,
Malte
[7]https://dev.openwrt.org/attachment/ticket/5636/0007-docs-
The command config_get_bool allows a fourth parameter which defines a default
value. At many places it would be very useful if the plain three-parameter
version of config get supported such a parameter as well, that saves a bunch
of [ -z "$foo" ] checks in my scripts.
In bug 5636 [0] you can f
For some reason the share (ie. /usr/share) directory is not included in the
SDK tarball, see bug 5629 [1] for details, a patch is attached to the bug [2].
Maybe somebody familiar with the SDK could also have a quick glance at bug
5417 [3].
Cheers,
Malte
[1]https://dev.openwrt.org/ticket/5629
[
On Tuesday 21 July 2009 10:58:28 paolo del bene wrote:
> [quoted mail]
Well, somebody should pay a lawyer to find out about GPL/ASL compatibility :)
Short: OpenWrt is a distribution, the build environment is GPLv2 (unless
otherwise stated), LuCI is a third party project like dnsmasq or the Lin
On Sunday 19 July 2009 14:22:38 Matthias Buecher / Germany wrote:
> On 19.07.2009 13:52, Malte S. Stretz wrote:
> > On Sunday 19 July 2009 13:27:47 Matthias Buecher / Germany wrote:
> >> [...]
> >
> > And even if eth0 is bridged, etherwake should work on the base devi
On Sunday 19 July 2009 13:27:47 Matthias Buecher / Germany wrote:
>[...]
> I'm done creating the patches for etherwake and busybox's ether-wake to
> use br-lan as a default.
> But can somebody confirm that br-lan is also a working interface for
> other devices or Kamikaze 8.09 in general?
Kamikaze
Hi folks,
last month I wrote to this list [1] with a suggestion on how to extend the
current firewall package (aka uci_firewall) to support IPv6 rules. I got a bit
side tracked in between but after a lot of trying around and refactoring I've
got a working (and I think nice) solution. I dubbed it
On Friday 19 June 2009 18:43:36 ZioPRoTo (Saverio Proto) wrote:
>[...]
> However, before using an IPv6 firewall I'd like to be able to assign
> IPv6 addresses to my router !
>
> But how do you assign IPv6 addresses at boot ?
I use tunnels, no static addresses.
> Can you reproduce this bug ?
> htt
On Friday 19 June 2009 12:52:26 Bastian Bittorf wrote:
> * elektra [19.06.2009 12:15]:
> > doesn't connect to other Asterisk servers if 'route' is missing.
>
> therefore i implement a route() wrapper.
> ATM i start at /etc/functions.sh but e.g.
> asterisk does not use it. maybe it is a good
> idea
On Friday 19 June 2009 09:31:59 Bastian Bittorf wrote:
> * Vasilis Tsiligiannis [18.06.2009 21:15]:
> > Try removing 'route' too (-ifconfig-route+ip). 'route' can be replaced by
> > 'ip' also, if this function is implemented in busybox.
>
> -ifconfig -route -arp
> +ip
arp is already a oneliner in
On Thursday 18 June 2009 21:44:17 kloschi wrote:
> On Thu, 2009-06-18 at 21:34 +0200, Matthias Buecher / Germany wrote:
> > doesn't work for me:
> > #1
> > http://wiki.openwrt.org/DropbearPublicKeyAuthenticationHowto
> > should result in
> > http://oldwiki.openwrt.org/DropbearPublicKeyAuthenticatio
On Thursday 18 June 2009 18:07:49 bud.d...@suisse.org wrote:
> On 18.06.2009 18:00, Malte S. Stretz wrote:
> > On Thursday 18 June 2009 16:22:54 Jo-Philipp Wich wrote:
> >>> today I've written a proof-of-concept for
> >>> getting rid of oldstyle networking ak
On Thursday 18 June 2009 18:20:06 Ferenc Wagner wrote:
> "Malte S. Stretz" writes:
> > On Thursday 18 June 2009 16:22:54 Jo-Philipp Wich wrote:
> >>> today I've written a proof-of-concept for
> >>> getting rid of oldstyle networking aka 'if
On Thursday 18 June 2009 16:22:54 Jo-Philipp Wich wrote:
> > today I've written a proof-of-concept for
> > getting rid of oldstyle networking aka 'ifconfig'.
>
> You do realize that this "oldstyle" networking stuff uses busybox
> internals while switching to "ip" will introduce yet another few
> ki
Hi,
On Wednesday 17 June 2009 20:06:29 Gregers Petersen wrote:
> After long and hard gestation the new OpenWrt community wiki is now
> ready and open for action :-)
Thanks for the work on the shiny new wiki :)
> The OpenWrt developer team is looking for a few individuals who would be
> willing t
Hi,
On Wednesday 17 June 2009 22:01:24 Peter Korsgaard wrote:
> Malte> A broken tgz header will be recognized by these tools already.
>
> Malte> If we need any logic for flashing, we can also introduce a
> Malte> sysupgrade dir. Anything in there will go to /lib/upgrade
> Malte> before flashi
Hi JoW,
On Wednesday 17 June 2009 16:14:37 Jo-Philipp Wich wrote:
> I like that .tar.gz idea, it would also cover devices like the Fonera
> where you have two separate images too.
>
> However, it's planned to introduce a unified image format for OpenWrt
> which would solve most of this issues so I
Moin,
On Monday 08 June 2009 14:22:32 I wrote:
> [stuff]
If anybody's interested, my current work (including history) is available on
GitHub [1]. Current state:
* Works on 8.09.1, should work on trunk as well.
* Moved some stuff around. Only refactoring, not a single firewall rule
changed (
Hi,
On Wednesday 17 June 2009 03:38:01 Daniel Dickinson wrote:
> No one seems to have responded to this, and I'd like to start working
> on it next week. If developers could think about this and comment, it
> would be appreciated.
I'm not a core OpenWrt developer but was thinking about implement
On Tuesday 09 June 2009 10:22:27 Matthias Buecher / Germany wrote:
> As it seems that the new Wiki won't be available soon, could someone
> please fix the redirection for the old Wiki.
> Instead of just replacing the domain, at least add ".html" add the end
> of the redirection and replace all slas
On Monday 08 June 2009 22:10:27 I wrote:
> This patch:
... is wordwrapped. Grmf, it did look good before I sent it out, seems like
KMail wordwraps after closing the composer window :-/
Any comments, shall I send again?
The patch is the base for other stuff I'm working on, coming soon.
Cheers,
nterface name instead but I didn't find a clean way to implement this.
Signed-off-by: Malte S. Stretz
---
ipv6/aiccu/files/aiccu.conf | 10 ++--
ipv6/aiccu/files/aiccu.init | 93 +-
2 files changed, 60 insertions(+), 43 deletions(-)
diff --git
Signed-off-by: Malte S. Stretz
---
ipv6/aiccu/files/aiccu.init |2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/ipv6/aiccu/files/aiccu.init b/ipv6/aiccu/files/aiccu.init
index 40c3bc6..56de87d 100644
--- a/ipv6/aiccu/files/aiccu.init
+++ b/ipv6/aiccu/files/aiccu.init
) need a
working resolver on localhost, they will fail if hotplug is quicker than the
dnsmasq poll interval.
This patch simply introduces a one second delay before any 20+ hotplug scripts
are started.
Signed-off-by: Malte S. Stretz
---
This patch (with less description) is also attached to
On Sunday 07 June 2009 20:20:24 Florian Fainelli wrote:
> Le Sunday 07 June 2009 15:59:20 Malte S. Stretz, vous avez écrit :
>[...]
> > So I guess I've got to change that.
> >
> > [2] suggests to discuss the ideas in advance so double work can be
> > avoi
Hi folks,
in the context of my diploma thesis I'm currently working on an IPv6 gateway
based on OpenWrt. I wrote quite a lengthy synopsis but later found out that
my idea is already well summarized in RFC 4864 [1], chapter 4.2:
To implement simple security for IPv6 in, for example, a DSL or
32 matches
Mail list logo
