Hi folks,
in the context of my diploma thesis I'm currently working on an IPv6 gateway
based on OpenWrt. I wrote quite a lengthy synopsis but later found out that
my idea is already well summarized in RFC 4864 [1], chapter 4.2:
To implement simple security for IPv6 in, for example, a DSL
Signed-off-by: Malte S. Stretz m...@apache.org
---
ipv6/aiccu/files/aiccu.init |2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/ipv6/aiccu/files/aiccu.init b/ipv6/aiccu/files/aiccu.init
index 40c3bc6..56de87d 100644
--- a/ipv6/aiccu/files/aiccu.init
+++ b/ipv6/aiccu/files
name instead but I didn't find a clean way to implement this.
Signed-off-by: Malte S. Stretz m...@apache.org
---
ipv6/aiccu/files/aiccu.conf | 10 ++--
ipv6/aiccu/files/aiccu.init | 93 +-
2 files changed, 60 insertions(+), 43 deletions(-)
diff --git
On Monday 08 June 2009 22:10:27 I wrote:
This patch:
... is wordwrapped. Grmf, it did look good before I sent it out, seems like
KMail wordwraps after closing the composer window :-/
Any comments, shall I send again?
The patch is the base for other stuff I'm working on, coming soon.
Cheers,
On Tuesday 09 June 2009 10:22:27 Matthias Buecher / Germany wrote:
As it seems that the new Wiki won't be available soon, could someone
please fix the redirection for the old Wiki.
Instead of just replacing the domain, at least add .html add the end
of the redirection and replace all slashes /
Hi,
On Wednesday 17 June 2009 03:38:01 Daniel Dickinson wrote:
No one seems to have responded to this, and I'd like to start working
on it next week. If developers could think about this and comment, it
would be appreciated.
I'm not a core OpenWrt developer but was thinking about
Moin,
On Monday 08 June 2009 14:22:32 I wrote:
[stuff]
If anybody's interested, my current work (including history) is available on
GitHub [1]. Current state:
* Works on 8.09.1, should work on trunk as well.
* Moved some stuff around. Only refactoring, not a single firewall rule
changed
Hi JoW,
On Wednesday 17 June 2009 16:14:37 Jo-Philipp Wich wrote:
I like that .tar.gz idea, it would also cover devices like the Fonera
where you have two separate images too.
However, it's planned to introduce a unified image format for OpenWrt
which would solve most of this issues so I
Hi,
On Wednesday 17 June 2009 22:01:24 Peter Korsgaard wrote:
Malte A broken tgz header will be recognized by these tools already.
Malte If we need any logic for flashing, we can also introduce a
Malte sysupgrade dir. Anything in there will go to /lib/upgrade
Malte before flashing. For
On Thursday 18 June 2009 16:22:54 Jo-Philipp Wich wrote:
today I've written a proof-of-concept for
getting rid of oldstyle networking aka 'ifconfig'.
You do realize that this oldstyle networking stuff uses busybox
internals while switching to ip will introduce yet another few
kilobytes of
On Thursday 18 June 2009 21:44:17 kloschi wrote:
On Thu, 2009-06-18 at 21:34 +0200, Matthias Buecher / Germany wrote:
doesn't work for me:
#1
http://wiki.openwrt.org/DropbearPublicKeyAuthenticationHowto
should result in
On Friday 19 June 2009 09:31:59 Bastian Bittorf wrote:
* Vasilis Tsiligiannis b_tsiligian...@silverton.gr [18.06.2009 21:15]:
Try removing 'route' too (-ifconfig-route+ip). 'route' can be replaced by
'ip' also, if this function is implemented in busybox.
-ifconfig -route -arp
+ip
arp is
Hi folks,
last month I wrote to this list [1] with a suggestion on how to extend the
current firewall package (aka uci_firewall) to support IPv6 rules. I got a bit
side tracked in between but after a lot of trying around and refactoring I've
got a working (and I think nice) solution. I dubbed
On Sunday 19 July 2009 13:27:47 Matthias Buecher / Germany wrote:
[...]
I'm done creating the patches for etherwake and busybox's ether-wake to
use br-lan as a default.
But can somebody confirm that br-lan is also a working interface for
other devices or Kamikaze 8.09 in general?
Kamikaze
On Sunday 19 July 2009 14:22:38 Matthias Buecher / Germany wrote:
On 19.07.2009 13:52, Malte S. Stretz wrote:
On Sunday 19 July 2009 13:27:47 Matthias Buecher / Germany wrote:
[...]
And even if eth0 is bridged, etherwake should work on the base device
eth0 as well if I'm not mistaken
On Tuesday 21 July 2009 10:58:28 paolo del bene wrote:
[quoted mail]
Well, somebody should pay a lawyer to find out about GPL/ASL compatibility :)
Short: OpenWrt is a distribution, the build environment is GPLv2 (unless
otherwise stated), LuCI is a third party project like dnsmasq or the
For some reason the share (ie. /usr/share) directory is not included in the
SDK tarball, see bug 5629 [1] for details, a patch is attached to the bug [2].
Maybe somebody familiar with the SDK could also have a quick glance at bug
5417 [3].
Cheers,
Malte
[1]https://dev.openwrt.org/ticket/5629
The command config_get_bool allows a fourth parameter which defines a default
value. At many places it would be very useful if the plain three-parameter
version of config get supported such a parameter as well, that saves a bunch
of [ -z $foo ] checks in my scripts.
In bug 5636 [0] you can
On Friday 07 August 2009 14:59:37 I wrote:
On Friday 07 August 2009 04:12:00 Jo-Philipp Wich wrote:
Applied in r17155-r17160.
Yay, I didn't expect this one to be applied that quick :)
I added a 7th patch to the ticket [7] which updates the tex docs
accordingly.
I attached another doc
On Tuesday 20 October 2009 14:58:49 Ugur DOGRU wrote:
This patch is for firewall/iptables. Most of it is to fix some hush
script problems.
[...]
As most other init/hotplug scripts don't work with hush as well, I wonder why
you went for the firewall only :)
What you fixed are actually not
Moin,
On Wednesday 28 April 2010 16:45:58 Jo-Philipp Wich wrote:
Therefore I believe that the /etc/sysctl.conf file should have
net.ipv6.conf.all.forwarding=1 set by default.
A default firewall solution is needed before it can be made the default.
Even if you or me do not need a
Hi,
On Thursday 29 April 2010 11:31:06 Andrew Byrne wrote:
So I gave it a try now and it works well for me, will do some more ipv6
testing in the next days. I also ported several fixes from the trunk
version of the uci firewall, added some compat code and hotplug events.
Thanks! I tried
Hi,
On Saturday 01 May 2010 21:12:45 Jo-Philipp Wich wrote:
I merged the new firewall + my modifications into trunk now.
thanks. I guess I'll have to write up the documentation now :) And buy a new
device to keep hacking on my project and fix the firewall when it breaks...
Are you also
23 matches
Mail list logo