Re: [OpenWrt-Devel] IPv6 firewall and Port Control Protocol (Was: Barrier Breaker 14.07-rc1)

2014-07-18 Thread David Lang
On Thu, 17 Jul 2014, Gui Iribarren wrote: On 17/07/14 21:03, David Lang wrote: I know that IPv6 designers pine for the good old days of the Internet when no security was needed. But the reality is that hackers and worms have shown that leaving systems exposed to the Internet is just a Bad

Re: [OpenWrt-Devel] IPv6 firewall and Port Control Protocol (Was: Barrier Breaker 14.07-rc1)

2014-07-18 Thread David Lang
by the way, link local addresses are not going to be used for these devices, because they will all have some 'cloud' feature that will require they have a way to phone home. David Lang On Fri, 18 Jul 2014, David Lang wrote: Every IPv4 home router I have seen defaults to 'block all

Re: [OpenWrt-Devel] IPv6 firewall and Port Control Protocol (Was: Barrier Breaker 14.07-rc1)

2014-07-18 Thread Sebastian Moeller
Hi Karl, On July 17, 2014 11:40:52 PM CEST, Karl P ka...@tweak.net.au wrote: On 07/17/2014 08:26 PM, Sebastian Moeller wrote: I argue that people unable to change the router settings are better of with all unsolicited inbound traffic disabled. I've tried to avoid weighing in on this,

[OpenWrt-Devel] How to clone the barrier-breaker rc1 branch.

2014-07-18 Thread Alive
Hello, Is there any convenient way to clone Barrier Breaker rc1 branch? Is it as simple as cloning trunk branch with `git clone git://git.openwrt.org/openwrt.git`? Does BB-rc1 have a different branch name, for example barrier-breaker.git or similar? Thanks in advance. smime.p7s Description:

[OpenWrt-Devel] [PATCH 2/7] ar71xx: add user-space support for the OpenMesh OM5P

2014-07-18 Thread sven
From: Marek Lindner ma...@open-mesh.com Signed-off-by: Marek Lindner ma...@open-mesh.com [s...@open-mesh.com: Rebased] Signed-off-by: Sven Eckelmann s...@open-mesh.com --- target/linux/ar71xx/base-files/etc/diag.sh | 3 +++ target/linux/ar71xx/base-files/etc/uci-defaults/01_leds | 5

[OpenWrt-Devel] [PATCH 3/7] scripts/om-fwupgradecfg-gen.sh: add support for the OM5P

2014-07-18 Thread sven
From: Marek Lindner ma...@open-mesh.com Signed-off-by: Marek Lindner ma...@open-mesh.com [s...@open-mesh.com: Rebased] Signed-off-by: Sven Eckelmann s...@open-mesh.com --- scripts/om-fwupgradecfg-gen.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git

[OpenWrt-Devel] [PATCH 5/7] package/om-watchdog: add OpenMesh OM5P support

2014-07-18 Thread sven
From: Marek Lindner ma...@open-mesh.com Signed-off-by: Marek Lindner ma...@open-mesh.com [s...@open-mesh.com: Rebased] Signed-off-by: Sven Eckelmann s...@open-mesh.com --- package/kernel/om-watchdog/files/om-watchdog.init | 3 +++ 1 file changed, 3 insertions(+) diff --git

[OpenWrt-Devel] [PATCH 1/7] ar71xx: add kernel support for the OpenMesh OM5P board

2014-07-18 Thread sven
From: Marek Lindner ma...@open-mesh.com Signed-off-by: Marek Lindner ma...@open-mesh.com [s...@open-mesh.com: Rebased] Signed-off-by: Sven Eckelmann s...@open-mesh.com --- target/linux/ar71xx/config-3.10| 1 + .../linux/ar71xx/files/arch/mips/ath79/mach-om5p.c | 122

[OpenWrt-Devel] [PATCH 7/7] ar71xx: create profile and build image for the OpenMesh OM5P board

2014-07-18 Thread sven
From: Marek Lindner ma...@open-mesh.com Signed-off-by: Marek Lindner ma...@open-mesh.com [s...@open-mesh.com: Rebased] Signed-off-by: Sven Eckelmann s...@open-mesh.com --- target/linux/ar71xx/generic/profiles/openmesh.mk | 11 +++ target/linux/ar71xx/image/Makefile | 3 ++-

[OpenWrt-Devel] [PATCH 4/7] ar71xx: enable sysupgrade for the OpenMesh OM5P

2014-07-18 Thread sven
From: Marek Lindner ma...@open-mesh.com Signed-off-by: Marek Lindner ma...@open-mesh.com [s...@open-mesh.com: Rebased] Signed-off-by: Sven Eckelmann s...@open-mesh.com --- target/linux/ar71xx/base-files/lib/upgrade/openmesh.sh | 7 ++- target/linux/ar71xx/base-files/lib/upgrade/platform.sh |

[OpenWrt-Devel] [PATCH 6/7] package/uboot-envtools: add OpenMesh OM5P support

2014-07-18 Thread sven
From: Marek Lindner ma...@open-mesh.com Signed-off-by: Marek Lindner ma...@open-mesh.com [s...@open-mesh.com: Rebased] Signed-off-by: Sven Eckelmann s...@open-mesh.com --- package/boot/uboot-envtools/files/ar71xx | 1 + 1 file changed, 1 insertion(+) diff --git

Re: [OpenWrt-Devel] How to clone the barrier-breaker rc1 branch.

2014-07-18 Thread Gui Iribarren
On 18/07/14 04:48, Alive wrote: Hello, Is there any convenient way to clone Barrier Breaker rc1 branch? Is it as simple as cloning trunk branch with `git clone git://git.openwrt.org/openwrt.git`? Does BB-rc1 have a different branch name, for example barrier-breaker.git or similar?

Re: [OpenWrt-Devel] OpenWRT IPv6 firewall

2014-07-18 Thread Gert Doering
Hi, On Thu, Jul 17, 2014 at 10:20:09AM +0200, Steven Barth wrote: Regarding firewalling: I understand and support your point for end-to-end connectivity though there are still quite a few people (including myself) who have reservations about the security implications. This discussion

Re: [OpenWrt-Devel] OpenWRT IPv6 firewall

2014-07-18 Thread Gert Doering
Hi, On Thu, Jul 17, 2014 at 12:07:57PM -0400, Soren Harward wrote: the worst case scenario is that the user's machine gets compromised. This is an extreme likely case, but it will not happen by a network based attack. Compromises these days on end hosts happen due to garbage the users click

Re: [OpenWrt-Devel] IPv6 firewall and Port Control Protocol (Was: Barrier Breaker 14.07-rc1)

2014-07-18 Thread Benjamin Cama
Le jeudi 17 juillet 2014 à 17:03 -0700, David Lang a écrit : But the reality is that hackers and worms have shown that leaving systems exposed to the Internet is just a Bad Idea. Do you mean, all the hackers and worms we see today despite all these systems being behind blocking firewalls and

Re: [OpenWrt-Devel] IPv6 firewall and Port Control Protocol (Was: Barrier Breaker 14.07-rc1)

2014-07-18 Thread Sebastian Moeller
Hi Gui, hi list,   Gesendet: Freitag, 18. Juli 2014 um 05:56 Uhr Von: Gui Iribarren g...@altermundi.net An: openwrt-devel@lists.openwrt.org Betreff: Re: [OpenWrt-Devel] IPv6 firewall and Port Control Protocol (Was: Barrier Breaker 14.07-rc1) On 17/07/14 21:59, Fernando Frediani wrote: Perfect

[OpenWrt-Devel] [PATCH] [Resend] [kernel] mtd-partial_eraseblock_erase in all kernels folded into original patch

2014-07-18 Thread Maciej Skrzypek
mtd: allow partial block erase This fixes error erasing partial mtd partition which does not start on eraseblock boundary and allows using fconfig to configure redboot on devices such as the Gateworks Cambria. fixed in all kernels and folded in initial mtd-partial_eraseblock_write.patch Maciej

Re: [OpenWrt-Devel] OpenWRT IPv6 firewall

2014-07-18 Thread Bill
Gert Doering wrote: On Thu, Jul 17, 2014 at 10:20:09AM +0200, Steven Barth wrote: Regarding firewalling: I understand and support your point for end-to-end connectivity though there are still quite a few people (including myself) who have reservations about the security implications. This

Re: [OpenWrt-Devel] Sysupgrade to Barrier Breaker on au1000 (MTX-1)

2014-07-18 Thread John Crispin
On 17/07/2014 10:55, Bruno Randolf wrote: I volunteer to maintain au1000. The only devices I have are MTX-1 though, but I believe there are not many other au1000 boards out in the wild anyways. good I don't know how to fix the sysupgrade issue. Basically the name used in AA was wrong

Re: [OpenWrt-Devel] IPv6 firewall and Port Control Protocol (Was: Barrier Breaker 14.07-rc1)

2014-07-18 Thread David Lang
On Fri, 18 Jul 2014, Benjamin Cama wrote: Le jeudi 17 juillet 2014 à 17:03 -0700, David Lang a écrit : But the reality is that hackers and worms have shown that leaving systems exposed to the Internet is just a Bad Idea. Do you mean, all the hackers and worms we see today despite all these

[OpenWrt-Devel] brcm47xx ethernet oopses (Was: AA on brcm47xx: Unhandled kernel unaligned access)

2014-07-18 Thread Nikolai Zhubr
Hello friends, S... it seems everybody ran out of ideas concerning this b44 thing? Of course I know I can just buy another new TL-WDR4300 (that's easy) if I just need something proven stable right now, but, well, it's kind of shamefull surrender... I had WL-500* running Kamikaze for years

Re: [OpenWrt-Devel] brcm47xx ethernet oopses (Was: AA on brcm47xx: Unhandled kernel unaligned access)

2014-07-18 Thread Rafał Miłecki
On 18 July 2014 22:01, Nikolai Zhubr n-a-zh...@yandex.ru wrote: (Maybe even abandoning brcm47xx target in upcoming releases would be better, as long as noone is able to fix it as of yet...) I understand you try to make a pressure, but it really doesn't help and just annoys developers. Please

Re: [OpenWrt-Devel] brcm47xx ethernet oopses (Was: AA on brcm47xx: Unhandled kernel unaligned access)

2014-07-18 Thread Nikolai Zhubr
18.07.2014 23:55, Rafał Miłecki: [...] I understand you try to make a pressure, but it really doesn't help and just annoys developers. Please avoid that. I'm currently hardly working on b43 now, trying to fix a lot of issues in it. That's pretty important too. Be more patient, we have lifes,

Re: [OpenWrt-Devel] OpenWRT IPv6 firewall

2014-07-18 Thread David Lang
On Fri, 18 Jul 2014 10:21:56 -0700, Bill wrote: Gert Doering wrote: On Thu, Jul 17, 2014 at 10:20:09AM +0200, Steven Barth wrote: Regarding firewalling: I understand and support your point for end-to-end connectivity though there are still quite a few people (including myself) who have

[OpenWrt-Devel] [PATCH] ramips: add support for Kingston MLW221

2014-07-18 Thread L. D. Pinney
From: L. D. Pinney ldpin...@gmail.com This patch adds support for the Kingston Mobilelite Wireless (MLW-221) http://wiki.openwrt.org/toh/kingston/mlw221 Signed-off-by: L. D. Pinney ldpin...@gmail.com --- diff --git a/target/linux/ramips/base-files/etc/diag.sh

Re: [OpenWrt-Devel] OpenWRT IPv6 firewall

2014-07-18 Thread Stefan Lippers-Hollmann
Hi On Saturday 19 July 2014, David Lang wrote: On Fri, 18 Jul 2014 10:21:56 -0700, Bill wrote: Gert Doering wrote: On Thu, Jul 17, 2014 at 10:20:09AM +0200, Steven Barth wrote: [...] P.S. No, my printer is not v6-ready, either, but let's assume there are some that are... If you're

Re: [OpenWrt-Devel] [PATCH] [packages] enable openssl's arm asm support

2014-07-18 Thread Daniel Drown
Oops, I guess I was too verbose with including the whole Developer's Certificate. I assume you've all been busy with the new BB rc, but have you had any chance to test it out? Is there anything I can help with for this patch? Quoting John Crispin j...@phrozen.org: ... apart from that it

[OpenWrt-Devel] [PATCH] ramips: add support for Kingston MLW221 [resend]

2014-07-18 Thread L. D. Pinney
From: L. D. Pinney ldpin...@gmail.com This patch adds support for the Kingston Mobilelite Wireless (MLW-221) http://wiki.openwrt.org/toh/kingston/mlw221 Signed-off-by: L. D. Pinney ldpin...@gmail.com --- diff --git a/target/linux/ramips/base-files/etc/diag.sh