gmane.comp.embedded.openwrt.devel

Re: OpenWRT front page article on blog.snort.org

Gregers Petersen — 2012-05-25T18:54:25

Dear Robert

Thank you, this is good work :-)

On 25/05/12 14:39, Robert Vineyard wrote:

Re: 回复： Tp-link has released gpl source code of ar934x,which can not be extracted.

Samuel Sieb — 2012-05-25T16:54:10

No, it looks like it's corrupted in some way.

Re: Bricked WR1043ND

Michael Markstaller — 2012-05-25T12:48:29

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 25.05.2012 01:48, Conor O'Gorman wrote:

Thanks, found it. Somehow due to a problem applying
404-mtd-wrt160nl-trx-parser.patch a while back I messed it up!
The platform-specific drivers weren't built at all anymore, after a
target/linux/clean it seems fine again.

Michael
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEUEARECAAYFAk+/f50ACgkQaWRHV2kMuAJHcQCY9uu1dB5I8FhHBYtZvOYUkfuh
sQCdHw93ej068uw/S0wL7/ov9F3ctnE=
=93MB
-----END PGP SIGNATURE-----

OpenWRT front page article on blog.snort.org

Robert Vineyard — 2012-05-25T12:39:15

http://blog.snort.org/2012/05/daemonlogger-native-package-now-in.html

A humble post on my own lowly blog has found its way to a much larger 
audience: the Snort community.

Big thanks to Philip Prindeville and Outback Dingo for helping me put 
this together. I really appreciate your patience and advice.

I'm trying to bring sexy back to network security monitoring with 
OpenWRT :-)

Cheers,
Robert Vineyard

What is CeroWrt? (was: Not quite getting IPv6tunnel to work)

Rich Brown — 2012-05-25T11:57:06

CeroWrt is a platform for experimenting with solutions to the problem,
"Daddy, why is the Internet slow today?" CeroWrt has implemented the new
CoDel ("Controlling Delay") algorithm for fair queueing and reducing the
amount of data buffered by the router. From the Overview page at
http://www.bufferbloat.net/projects/cerowrt

---
CeroWrt is a project built on the OpenWrt firmware to resolve the endemic
problems of bufferbloat in home networking today, and to push forward the
state of the art of edge networks and routers. Projects include proper IPv6
support, tighter integration with DNSSEC, and most importantly, reducing
bufferbloat in both the wired and wireless components of the stack.
---

With CoDel (pronounced "coddle"), we're seeing good responsiveness of small
packet traffic through the CeroWrt routers even when doing heavy file
transfers. So you don't hose your gaming/VoIP traffic if somebody else
uploads or downloads files.

Dave Täht has done the lion's share of the work to get this going, and has

Huawei E1752 built-in microSD card reader

Daniel A. Nagy — 2012-05-25T11:53:59

Hello,

I am not exactly sure which driver acts up, but the following strange
thing happens with this device:
Initially (which means both after power-on and reboot with the E1752
already plugged in as well as after hot-plugging in the E1752), only
/dev/sda appears in the device directory. However, if I access the block
device (e.g. by head -c16 /dev/sda or similar commands reading from it),
the partitions (/dev/sda1, etc.) also appear and mountd mounts them, if
properly configured.

This does not happen with USB pen drives or HDD enclosures.

Any ideas what might be going on?

P. S.: the modem itself works perfectly.

Re: Not quite getting IPv6 tunnel to work

Rich Brown — 2012-05-25T11:43:49

I'm sorry that I didn't make my question clear. The script has all bogus
values (including the user id).

I *do* have the tunnel working - I can ping/traceroute v6 hosts from the
router.

I think there's a problem routing from a device on an interface through the
router. Any ideas what I should check next? Thanks.

Rich Brown
Hanover, NH USA


_______________________________________________
openwrt-devel mailing list
openwrt-devel< at >lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel

Re: LANTIQ- EASY5072- xDSL interface problems

Spyridon Tompros — 2012-05-25T11:10:27

Hi, thanks for the input. We will try it on our board.

However let me make a significant observation:
We had the same problem with USB: Our SW was working on an EASY board 
but not on our HW. We thought it was hardware problem (but found 
everything OK). After getting a patch from you it worked on our board 
too!!! Now we are in the same situation with DSL. Our SW works on the 
EASY board (v1.24) but not on our board. We hope that this patch will 
make it work. However we will also probe the DSL API and send you the 
logs reported by our board and the EASY. We've checked our HW 
intensively. There is no error (voltage levels, signals, everything seem 
perfect)!!.

To me it seems as a short of mismatch in the Danube versions. Our EASY 
has Danube v1.3, while our board has Danube v1.4. In your logs I see 
that you have Danube v1.5!!! It may be a source of incompatibility 
problems. Also our EASY board is v1.24, while today there are v3.1 
available!!!

Spiros

On 24/05/2012 14:45, Conor O'Gorman wrote:

Re: Bricked WR1043ND

Conor O'Gorman — 2012-05-24T23:48:02


It appears that the kernel cannot correctly determine your board. It
therefore doesn't load the SPI flash driver, and there is no rootfs.

This trace is the expected

https://forum.openwrt.org/viewtopic.php?id=35537

I'm not completely familiar with the ar71xx builds. You either didn't
select the exact target in the menus, or the kernel command line param
is being ignored.

Conor

Re: ramips/rt305x: nfsroot troubles on trunk(kernel 3.3.5)

Tobias Diedrich — 2012-05-24T23:39:51

There is a pending patch to add better support for the rt305x
builtin-switch.  Right now that doesn't immediately rid you of the
need to use that patch though, since I avoided changing current
behaviour.

However a second step would be to move the different boards to not
setup vlans on boot and rather rely on userspace/swconfig to do
this. 

Then nfs should work fine I think.

http://patchwork.openwrt.org/patch/2159/

HTH,

[PATCH] upgrade and improve uboot-env package

Luka Perkov — 2012-05-24T23:22:01

Changes in this patch:

 * bumps to version 2012.04.01
 * adds md5sum
 * creates a menu so it will look better in "make menuconfig"
 * adds /etc/fw_env.config to conffile
 * adds /etc/config/ubootenv to conffile
 * refresh patches
 * removes init script because we should be using uci-defaults instead
 * supports all current targets using this package - ar71xx and lantiq

Signed-off-by: Luka Perkov <openwrt< at >lukaperkov.net>
---

 package/uboot-envtools/Makefile                    |   54 ++++++++++++++------
 package/uboot-envtools/files/ar71xx                |   25 +++++++++
 package/uboot-envtools/files/lantiq                |   25 +++++++++
 package/uboot-envtools/files/uboot-envtools.init   |   27 ----------
 package/uboot-envtools/files/uboot-envtools.sh     |   36 +++++++++++++
 .../patches/001-crc32_func_signature.patch         |   17 ++----
 package/uboot-envtools/patches/002-makefile.patch  |   39 +++++++-------
 .../uboot-envtools/patches/003-nor-eraselen.patch  |    2 +-
 .../patches/004-allow_mac_ch

Re: openwrt backfire 10.03.2 + batman-adv

Gioacchino Mazzurco — 2012-05-24T22:13:30

Everything is there http://eigenlab.org/~gioacchino/openwrt/

you will find feed.conf and .config inside the meta folder

On 05/24/12 22:41, Pedro Nuno Costa Rodrigues wrote:

Bricked WR1043ND

Michael Markstaller — 2012-05-24T22:08:07

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

first, dont worry its *not* about asking how to unbrick ;) This is
well documented in the wiki and working fine with serial and tftp..

I rather want to understand, what went wrong (or if it's maybe a
problem that others might run into and avoid it even if its only by
telling about..)


What I did:
- - full buildoot checked out from trunk, long and last working fine
with r31676.
The inital checkout was under Ubuntu 10.04 or 10.10, now running
12.04/32bit (if that matters)
Didnt change anything (significant) anywhere under target or such,
only some small adjustments in feeds/packages and an own feed only
providing userland-stuff..
- - did "svn up" today, only in trunk, not packages (if it matters) ->
r31845
- - make menuconfig, nothing changed besides "Release version number"
and remove some <M>-packages
- - make -j 8, the i7 worked for some hours, all looked fine
- - flashed
openwrt-ar71xx-generic-tl-wr1043nd-v1-squashfs-sysupgrade.bin like
many times befor

[PATCH] include/image.mk: /tmp should have mode 1777

Mark Mentovai — 2012-05-24T21:37:21

On the off chance that the root filesystem's /tmp is used directly as a
temporary directory instead of having a tmpfs mounted over it, it should have
the sticky bit set.

Signed-off-by: Mark Mentovai <mark< at >moxienet.com>

---

Index: include/image.mk
===================================================================
--- include/image.mk(revision 31782)
+++ include/image.mk(working copy)
< at >< at > -146,7 +146,7 < at >< at >
 - $(FIND) $(TARGET_DIR) -type f -perm +0100 -print0 | $(XARGS) -0 chmod u+rwx,g+rx,o+rx
 - $(FIND) $(TARGET_DIR) -type d -print0 | $(XARGS) -0 chmod u+rwx,g+rx,o+rx
 $(INSTALL_DIR) $(TARGET_DIR)/tmp
-chmod 0777 $(TARGET_DIR)/tmp
+chmod 1777 $(TARGET_DIR)/tmp
 endef
 
 define Image/mkfs/prepare

[PATCH] base-files: /etc/shadow should have mode0600

Mark Mentovai — 2012-05-24T21:30:23

Shadow passwords were enabled by default in r28936, but most of the benefit
was not realized because the shadow file was allowed to be world-readable.
This change sets /etc/shadow's mode to 0600 in the base-files package, and
ensures that its permissions are not clobbered when building an image.

Signed-off-by: Mark Mentovai <mark< at >moxienet.com>

---

Index: include/image.mk
===================================================================
--- include/image.mk(revision 31782)
+++ include/image.mk(working copy)
< at >< at > -142,7 +142,7 < at >< at >
 
 define Image/mkfs/prepare/default
 # Use symbolic permissions to avoid clobbering SUID/SGID/sticky bits
-- $(FIND) $(TARGET_DIR) -type f -not -perm +0100 -not -name 'ssh_host*' -print0 | $(XARGS) -0 chmod u+rw,g+r,o+r
+- $(FIND) $(TARGET_DIR) -type f -not -perm +0100 -not -name 'ssh_host*' -not -name shadow -print0 | $(XARGS) -0 chmod u+rw,g+r,o+r
 - $(FIND) $(TARGET_DIR) -type f -perm +0100 -print0 | $(XARGS) -0 chmod u+rwx,g+rx,o+rx
 - $(FIND) $(TARGET_DIR) -type d -pri

Re: openwrt backfire 10.03.2 + batman-adv

Pedro Nuno Costa Rodrigues — 2012-05-24T20:41:44

Hello.

Could you please say the feeds that you use in the trunk build. I mean  
the feeds located in /trunk/feeds.conf.default?

I already tryed to build, but i'm not getting it right...
Or it gives me error in the build, or i can make the build, but don't  
work the batman-adv...

Thank's!!



Citando Gioacchino Mazzurco <gmazzurco89< at >gmail.com>:

[PATCH] package/openssh enable ECDSA (see also:patch for package/openssl to enable ECDSA)

Oliver — 2012-05-24T20:36:50

The following patch enables generation of ecdsa keys in OpenSSH at init.

Signed-off-by: Oliver Smith <olipro< at >8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>_______________________________________________
openwrt-devel mailing list
openwrt-devel< at >lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel

[PATCH] package/openssl enable ECDSA (see also:patch for package/openssh to enable ECDSA)

Oliver — 2012-05-24T20:34:31

The following patch enables ECDSA support in OpenSSL in order to allow 
OpenSSH to also make use of it as it is now the primary (preferred) mode of 
authentication for OpenSSH

Signed-off-by: Oliver Smith <olipro< at >8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>_______________________________________________
openwrt-devel mailing list
openwrt-devel< at >lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel

[PATCH] update iptables to 1.4.13 and add supportfor -m rpfilter

Oliver — 2012-05-24T20:12:46

The attached patch bumps iptables up to 1.4.13 and adds in support for -m 
rpfilter (reverse path filtering for both IPv4 and IPv6) implemented since 
kernel 3.3

This update breaks compatibility with the 2.4 series, if anyone wishes to 
fix it, feel free.

Tested and working on my WNDR3800 - if you use any xtables-addons 
extensions, ensure you clean out the build dir for it.

Signed-off-by: Oliver Smith <olipro< at >8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa>_______________________________________________
openwrt-devel mailing list
openwrt-devel< at >lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel

Re: [PATCH] package/dnsmasq: remove obsolete/etc/dnsmasq.conf

Mark Mentovai — 2012-05-24T17:56:43

Very well, I'll drop this. I missed the conf-file=/etc/dnsmasq.conf at
the top of /var/etc/dnsmasq.conf.

I'm still proposing the other four dnsmasq patches I sent to the list
in a series earlier today.

CyaSSL 2.2.0 Released

Chris Conlon — 2012-05-24T17:56:27

Hi,

We wanted to let the OpenWrt community know that version 2.2.0 of the CyaSSL embedded SSL library has been released and is now available for download from the yaSSL website.  CyaSSL currently supports the OpenWrt project.  This release contains bug fixes and feature enhancements, some of which include:

- Initial CRL (Certificate Revocation Lists) support with --enable-crl
- Initial OCSP (Online Certificate Status Protocol) support with --enable-ocsp
- Static ECDH suites including:
TLS_ECDH_RSA_WITH_AES_256_CBC_SHA
TLS_ECDH_RSA_WITH_AES_128_CBC_SHA
TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA
TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA
TLS_ECDH_RSA_WITH_RC4_128_SHA
TLS_ECDH_ECDSA_WITH_RC4_128_SHA
TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA
- SHA-384 support
- ECC client certificate support

CyaSSL can be downloaded with the open source, GPLv2-license at the yaSSL Download Page (http://yassl.com/yaSSL/download/downloadForm.php).  Please let us know if you have any questions or comments