[OpenWrt-Devel] RFC: Adding IPv6 support to uci_firewall

2009-06-07 Thread Malte S. Stretz
Hi folks, in the context of my diploma thesis I'm currently working on an IPv6 gateway based on OpenWrt. I wrote quite a lengthy synopsis but later found out that my idea is already well summarized in RFC 4864 [1], chapter 4.2: To implement simple security for IPv6 in, for example, a DSL

[OpenWrt-Devel] [PATCH] aiccu: fix heatbeat typo in init script

2009-06-08 Thread Malte S. Stretz
Signed-off-by: Malte S. Stretz m...@apache.org --- ipv6/aiccu/files/aiccu.init |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/ipv6/aiccu/files/aiccu.init b/ipv6/aiccu/files/aiccu.init index 40c3bc6..56de87d 100644 --- a/ipv6/aiccu/files/aiccu.init +++ b/ipv6/aiccu/files

[OpenWrt-Devel] [PATCH] aiccu: revamp the init script

2009-06-08 Thread Malte S. Stretz
name instead but I didn't find a clean way to implement this. Signed-off-by: Malte S. Stretz m...@apache.org --- ipv6/aiccu/files/aiccu.conf | 10 ++-- ipv6/aiccu/files/aiccu.init | 93 +- 2 files changed, 60 insertions(+), 43 deletions(-) diff --git

Re: [OpenWrt-Devel] [PATCH] aiccu: revamp the init script

2009-06-08 Thread Malte S. Stretz
On Monday 08 June 2009 22:10:27 I wrote: This patch: ... is wordwrapped. Grmf, it did look good before I sent it out, seems like KMail wordwraps after closing the composer window :-/ Any comments, shall I send again? The patch is the base for other stuff I'm working on, coming soon. Cheers,

Re: [OpenWrt-Devel] Homepage: Current Wiki redirection is useless

2009-06-09 Thread Malte S. Stretz
On Tuesday 09 June 2009 10:22:27 Matthias Buecher / Germany wrote: As it seems that the new Wiki won't be available soon, could someone please fix the redirection for the old Wiki. Instead of just replacing the domain, at least add .html add the end of the redirection and replace all slashes /

Re: [OpenWrt-Devel] Ping Re: RFC: LuCI Web Interface Image Format

2009-06-17 Thread Malte S. Stretz
Hi, On Wednesday 17 June 2009 03:38:01 Daniel Dickinson wrote: No one seems to have responded to this, and I'd like to start working on it next week. If developers could think about this and comment, it would be appreciated. I'm not a core OpenWrt developer but was thinking about

Re: [OpenWrt-Devel] RFC: Adding IPv6 support to uci_firewall

2009-06-17 Thread Malte S. Stretz
Moin, On Monday 08 June 2009 14:22:32 I wrote: [stuff] If anybody's interested, my current work (including history) is available on GitHub [1]. Current state: * Works on 8.09.1, should work on trunk as well. * Moved some stuff around. Only refactoring, not a single firewall rule changed

Re: [OpenWrt-Devel] Ping Re: RFC: LuCI Web Interface Image Format

2009-06-17 Thread Malte S. Stretz
Hi JoW, On Wednesday 17 June 2009 16:14:37 Jo-Philipp Wich wrote: I like that .tar.gz idea, it would also cover devices like the Fonera where you have two separate images too. However, it's planned to introduce a unified image format for OpenWrt which would solve most of this issues so I

Re: [OpenWrt-Devel] Ping Re: RFC: LuCI Web Interface Image Format

2009-06-17 Thread Malte S. Stretz
Hi, On Wednesday 17 June 2009 22:01:24 Peter Korsgaard wrote: Malte A broken tgz header will be recognized by these tools already. Malte If we need any logic for flashing, we can also introduce a Malte sysupgrade dir. Anything in there will go to /lib/upgrade Malte before flashing. For

Re: [OpenWrt-Devel] opkg remove ifconfig opkg install 'ip'

2009-06-18 Thread Malte S. Stretz
On Thursday 18 June 2009 16:22:54 Jo-Philipp Wich wrote: today I've written a proof-of-concept for getting rid of oldstyle networking aka 'ifconfig'. You do realize that this oldstyle networking stuff uses busybox internals while switching to ip will introduce yet another few kilobytes of

Re: [OpenWrt-Devel] New OpenWrt Community Wiki

2009-06-18 Thread Malte S. Stretz
On Thursday 18 June 2009 21:44:17 kloschi wrote: On Thu, 2009-06-18 at 21:34 +0200, Matthias Buecher / Germany wrote: doesn't work for me: #1 http://wiki.openwrt.org/DropbearPublicKeyAuthenticationHowto should result in

Re: [OpenWrt-Devel] opkg remove ifconfig opkg install 'ip'

2009-06-19 Thread Malte S. Stretz
On Friday 19 June 2009 09:31:59 Bastian Bittorf wrote: * Vasilis Tsiligiannis b_tsiligian...@silverton.gr [18.06.2009 21:15]: Try removing 'route' too (-ifconfig-route+ip). 'route' can be replaced by 'ip' also, if this function is implemented in busybox. -ifconfig -route -arp +ip arp is

[OpenWrt-Devel] [PATCH] A revamped firewall with IPv6 support

2009-07-13 Thread Malte S. Stretz
Hi folks, last month I wrote to this list [1] with a suggestion on how to extend the current firewall package (aka uci_firewall) to support IPv6 rules. I got a bit side tracked in between but after a lot of trying around and refactoring I've got a working (and I think nice) solution. I dubbed

Re: [OpenWrt-Devel] etherwake configuration, not working on eth0

2009-07-19 Thread Malte S. Stretz
On Sunday 19 July 2009 13:27:47 Matthias Buecher / Germany wrote: [...] I'm done creating the patches for etherwake and busybox's ether-wake to use br-lan as a default. But can somebody confirm that br-lan is also a working interface for other devices or Kamikaze 8.09 in general? Kamikaze

Re: [OpenWrt-Devel] etherwake configuration, not working on eth0

2009-07-19 Thread Malte S. Stretz
On Sunday 19 July 2009 14:22:38 Matthias Buecher / Germany wrote: On 19.07.2009 13:52, Malte S. Stretz wrote: On Sunday 19 July 2009 13:27:47 Matthias Buecher / Germany wrote: [...] And even if eth0 is bridged, etherwake should work on the base device eth0 as well if I'm not mistaken

Re: [OpenWrt-Devel] [legal] Compatibility of GPL with Apache

2009-07-21 Thread Malte S. Stretz
On Tuesday 21 July 2009 10:58:28 paolo del bene wrote: [quoted mail] Well, somebody should pay a lawyer to find out about GPL/ASL compatibility :) Short: OpenWrt is a distribution, the build environment is GPLv2 (unless otherwise stated), LuCI is a third party project like dnsmasq or the

[OpenWrt-Devel] [PATCH] sdk: do not exclude share directory or bison and friends break

2009-08-05 Thread Malte S. Stretz
For some reason the share (ie. /usr/share) directory is not included in the SDK tarball, see bug 5629 [1] for details, a patch is attached to the bug [2]. Maybe somebody familiar with the SDK could also have a quick glance at bug 5417 [3]. Cheers, Malte [1]https://dev.openwrt.org/ticket/5629

[OpenWrt-Devel] [PATCH] base-files: set default value for config_get via 4th parameter plus some more (#5636)

2009-08-06 Thread Malte S. Stretz
The command config_get_bool allows a fourth parameter which defines a default value. At many places it would be very useful if the plain three-parameter version of config get supported such a parameter as well, that saves a bunch of [ -z $foo ] checks in my scripts. In bug 5636 [0] you can

Re: [OpenWrt-Devel] [PATCH] base-files: set default value for config_get via 4th parameter plus some more (#5636)

2009-08-07 Thread Malte S. Stretz
On Friday 07 August 2009 14:59:37 I wrote: On Friday 07 August 2009 04:12:00 Jo-Philipp Wich wrote: Applied in r17155-r17160. Yay, I didn't expect this one to be applied that quick :) I added a 7th patch to the ticket [7] which updates the tex docs accordingly. I attached another doc

Re: [OpenWrt-Devel] [PATCH] firewall/iptables

2009-10-20 Thread Malte S. Stretz
On Tuesday 20 October 2009 14:58:49 Ugur DOGRU wrote: This patch is for firewall/iptables. Most of it is to fix some hush script problems. [...] As most other init/hotplug scripts don't work with hush as well, I wonder why you went for the firewall only :) What you fixed are actually not

Re: [OpenWrt-Devel] [PATCH] Disable IPv6 autoconfiguration

2010-04-28 Thread Malte S. Stretz
Moin, On Wednesday 28 April 2010 16:45:58 Jo-Philipp Wich wrote: Therefore I believe that the /etc/sysctl.conf file should have net.ipv6.conf.all.forwarding=1 set by default. A default firewall solution is needed before it can be made the default. Even if you or me do not need a

Re: [OpenWrt-Devel] New firewall (was: [PATCH] Disable IPv6 autoconfiguration)

2010-04-29 Thread Malte S. Stretz
Hi, On Thursday 29 April 2010 11:31:06 Andrew Byrne wrote: So I gave it a try now and it works well for me, will do some more ipv6 testing in the next days. I also ported several fixes from the trunk version of the uci firewall, added some compat code and hotplug events. Thanks! I tried

Re: [OpenWrt-Devel] New firewall (was: [PATCH] Disable IPv6 autoconfiguration)

2010-05-05 Thread Malte S. Stretz
Hi, On Saturday 01 May 2010 21:12:45 Jo-Philipp Wich wrote: I merged the new firewall + my modifications into trunk now. thanks. I guess I'll have to write up the documentation now :) And buy a new device to keep hacking on my project and fix the firewall when it breaks... Are you also