http://blog.gmane.org/gmane.comp.embedded.openwrt.devel hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14367 <pre>All, I've bumped dnsmasq to version 2.61. From my analysis, the 101-ipv6.patch is no longer required. I believe this was simplifying the config/build process to make sure IPv6 support was enabled correctly. The associate file, /src/config.h has been cleaned up in the newest version and it seems to work just fine without this patch. I tested two ways. 1. Without IPv6 enabled in menuconfig, specifically I disabled CONFIG_IPV6. When I did that and ran dnsmasq compiled with that flag disabled, it fired up without IPv6 support: May 26 01:06:22 alix daemon.info dnsmasq[18416]: started, version 2.61 cachesize 150 May 26 01:06:22 alix daemon.info dnsmasq[18416]: compile time options: no-IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack May 26 01:06:22 alix daemon.info dnsmasq-dhcp[18416]: DHCP, IP range 172.28.1.220 -- 172.28.1.249, lease time 8h May 26 01:06:22 alix daemon.info dnsmasq[18416]: using local addresses only for domain lan May 26 01:06:22 alix daemon.info dnsm</pre> Adam Gensler 2012-05-26T05:16:56 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14362 <pre>http://blog.snort.org/2012/05/daemonlogger-native-package-now-in.html A humble post on my own lowly blog has found its way to a much larger audience: the Snort community. Big thanks to Philip Prindeville and Outback Dingo for helping me put this together. I really appreciate your patience and advice. I'm trying to bring sexy back to network security monitoring with OpenWRT :-) Cheers, Robert Vineyard </pre> Robert Vineyard 2012-05-25T12:39:15 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14361 <pre>CeroWrt is a platform for experimenting with solutions to the problem, "Daddy, why is the Internet slow today?" CeroWrt has implemented the new CoDel ("Controlling Delay") algorithm for fair queueing and reducing the amount of data buffered by the router. From the Overview page at http://www.bufferbloat.net/projects/cerowrt --- CeroWrt is a project built on the OpenWrt firmware to resolve the endemic problems of bufferbloat in home networking today, and to push forward the state of the art of edge networks and routers. Projects include proper IPv6 support, tighter integration with DNSSEC, and most importantly, reducing bufferbloat in both the wired and wireless components of the stack. --- With CoDel (pronounced "coddle"), we're seeing good responsiveness of small packet traffic through the CeroWrt routers even when doing heavy file transfers. So you don't hose your gaming/VoIP traffic if somebody else uploads or downloads files. Dave Täht has done the lion's share of the work to get this going, and has </pre> Rich Brown 2012-05-25T11:57:06 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14360 <pre>Hello, I am not exactly sure which driver acts up, but the following strange thing happens with this device: Initially (which means both after power-on and reboot with the E1752 already plugged in as well as after hot-plugging in the E1752), only /dev/sda appears in the device directory. However, if I access the block device (e.g. by head -c16 /dev/sda or similar commands reading from it), the partitions (/dev/sda1, etc.) also appear and mountd mounts them, if properly configured. This does not happen with USB pen drives or HDD enclosures. Any ideas what might be going on? P. S.: the modem itself works perfectly. </pre> Daniel A. Nagy 2012-05-25T11:53:59 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14355 <pre>Changes in this patch: * bumps to version 2012.04.01 * adds md5sum * creates a menu so it will look better in "make menuconfig" * adds /etc/fw_env.config to conffile * adds /etc/config/ubootenv to conffile * refresh patches * removes init script because we should be using uci-defaults instead * supports all current targets using this package - ar71xx and lantiq Signed-off-by: Luka Perkov &lt;openwrt&lt; at &gt;lukaperkov.net&gt; --- package/uboot-envtools/Makefile | 54 ++++++++++++++------ package/uboot-envtools/files/ar71xx | 25 +++++++++ package/uboot-envtools/files/lantiq | 25 +++++++++ package/uboot-envtools/files/uboot-envtools.init | 27 ---------- package/uboot-envtools/files/uboot-envtools.sh | 36 +++++++++++++ .../patches/001-crc32_func_signature.patch | 17 ++---- package/uboot-envtools/patches/002-makefile.patch | 39 +++++++------- .../uboot-envtools/patches/003-nor-eraselen.patch | 2 +- .../patches/004-allow_mac_ch</pre> Luka Perkov 2012-05-24T23:22:01 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14353 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, first, dont worry its *not* about asking how to unbrick ;) This is well documented in the wiki and working fine with serial and tftp.. I rather want to understand, what went wrong (or if it's maybe a problem that others might run into and avoid it even if its only by telling about..) What I did: - - full buildoot checked out from trunk, long and last working fine with r31676. The inital checkout was under Ubuntu 10.04 or 10.10, now running 12.04/32bit (if that matters) Didnt change anything (significant) anywhere under target or such, only some small adjustments in feeds/packages and an own feed only providing userland-stuff.. - - did "svn up" today, only in trunk, not packages (if it matters) -&gt; r31845 - - make menuconfig, nothing changed besides "Release version number" and remove some &lt;M&gt;-packages - - make -j 8, the i7 worked for some hours, all looked fine - - flashed openwrt-ar71xx-generic-tl-wr1043nd-v1-squashfs-sysupgrade.bin like many times befor</pre> Michael Markstaller 2012-05-24T22:08:07 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14352 <pre>On the off chance that the root filesystem's /tmp is used directly as a temporary directory instead of having a tmpfs mounted over it, it should have the sticky bit set. Signed-off-by: Mark Mentovai &lt;mark&lt; at &gt;moxienet.com&gt; --- Index: include/image.mk =================================================================== --- include/image.mk(revision 31782) +++ include/image.mk(working copy) &lt; at &gt;&lt; at &gt; -146,7 +146,7 &lt; at &gt;&lt; at &gt; - $(FIND) $(TARGET_DIR) -type f -perm +0100 -print0 | $(XARGS) -0 chmod u+rwx,g+rx,o+rx - $(FIND) $(TARGET_DIR) -type d -print0 | $(XARGS) -0 chmod u+rwx,g+rx,o+rx $(INSTALL_DIR) $(TARGET_DIR)/tmp -chmod 0777 $(TARGET_DIR)/tmp +chmod 1777 $(TARGET_DIR)/tmp endef define Image/mkfs/prepare </pre> Mark Mentovai 2012-05-24T21:37:21 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14351 <pre>Shadow passwords were enabled by default in r28936, but most of the benefit was not realized because the shadow file was allowed to be world-readable. This change sets /etc/shadow's mode to 0600 in the base-files package, and ensures that its permissions are not clobbered when building an image. Signed-off-by: Mark Mentovai &lt;mark&lt; at &gt;moxienet.com&gt; --- Index: include/image.mk =================================================================== --- include/image.mk(revision 31782) +++ include/image.mk(working copy) &lt; at &gt;&lt; at &gt; -142,7 +142,7 &lt; at &gt;&lt; at &gt; define Image/mkfs/prepare/default # Use symbolic permissions to avoid clobbering SUID/SGID/sticky bits -- $(FIND) $(TARGET_DIR) -type f -not -perm +0100 -not -name 'ssh_host*' -print0 | $(XARGS) -0 chmod u+rw,g+r,o+r +- $(FIND) $(TARGET_DIR) -type f -not -perm +0100 -not -name 'ssh_host*' -not -name shadow -print0 | $(XARGS) -0 chmod u+rw,g+r,o+r - $(FIND) $(TARGET_DIR) -type f -perm +0100 -print0 | $(XARGS) -0 chmod u+rwx,g+rx,o+rx - $(FIND) $(TARGET_DIR) -type d -pri</pre> Mark Mentovai 2012-05-24T21:30:23 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14349 <pre>The following patch enables generation of ecdsa keys in OpenSSH at init. Signed-off-by: Oliver Smith &lt;olipro&lt; at &gt;8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa&gt;_______________________________________________ openwrt-devel mailing list openwrt-devel&lt; at &gt;lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel </pre> Oliver 2012-05-24T20:36:50 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14348 <pre>The following patch enables ECDSA support in OpenSSL in order to allow OpenSSH to also make use of it as it is now the primary (preferred) mode of authentication for OpenSSH Signed-off-by: Oliver Smith &lt;olipro&lt; at &gt;8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa&gt;_______________________________________________ openwrt-devel mailing list openwrt-devel&lt; at &gt;lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel </pre> Oliver 2012-05-24T20:34:31 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14347 <pre>The attached patch bumps iptables up to 1.4.13 and adds in support for -m rpfilter (reverse path filtering for both IPv4 and IPv6) implemented since kernel 3.3 This update breaks compatibility with the 2.4 series, if anyone wishes to fix it, feel free. Tested and working on my WNDR3800 - if you use any xtables-addons extensions, ensure you clean out the build dir for it. Signed-off-by: Oliver Smith &lt;olipro&lt; at &gt;8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa&gt;_______________________________________________ openwrt-devel mailing list openwrt-devel&lt; at &gt;lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel </pre> Oliver 2012-05-24T20:12:46 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14345 <pre>Hi, We wanted to let the OpenWrt community know that version 2.2.0 of the CyaSSL embedded SSL library has been released and is now available for download from the yaSSL website. CyaSSL currently supports the OpenWrt project. This release contains bug fixes and feature enhancements, some of which include: - Initial CRL (Certificate Revocation Lists) support with --enable-crl - Initial OCSP (Online Certificate Status Protocol) support with --enable-ocsp - Static ECDH suites including: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA TLS_ECDH_RSA_WITH_AES_128_CBC_SHA TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDH_RSA_WITH_RC4_128_SHA TLS_ECDH_ECDSA_WITH_RC4_128_SHA TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA - SHA-384 support - ECC client certificate support CyaSSL can be downloaded with the open source, GPLv2-license at the yaSSL Download Page (http://yassl.com/yaSSL/download/downloadForm.php). Please let us know if you have any questions or comments</pre> Chris Conlon 2012-05-24T17:56:27 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14343 <pre>Since r31182, dnsmasq is configured by a configuration file at /var/etc/dnsmasq.conf generated by dnsmasq's start script from its UCI configuration. It is no longer configured by command-line arguments. dnsmasq is started by telling it (via the -C option) to use /var/etc/dnsmasq.conf as its configuration file. As such, it never consults /etc/dnsmasq.conf. /etc/dnsmasq.conf was added in r17663 when dnsmasq was still configured by command-line arguments as an example file and location to place options too cumbersome to put on the command line. Because this file will no longer be consulted, it is obsolete and should be removed from the dnsmasq package. Signed-off-by: Mark Mentovai &lt;mark&lt; at &gt;moxienet.com&gt; --- Index: package/dnsmasq/Makefile =================================================================== --- package/dnsmasq/Makefile(revision 31782) +++ package/dnsmasq/Makefile(working copy) &lt; at &gt;&lt; at &gt; -32,7 +32,6 &lt; at &gt;&lt; at &gt; define Package/dnsmasq/conffiles /etc/config/dhcp -/etc/dnsmasq.conf endef TARGET_CFLAGS += </pre> Mark Mentovai 2012-05-24T16:36:30 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14342 <pre>When dnsmasq is configured with a "domain" option in the "config dnsmasq" section of /etc/config/dhcp, it causes a "search" line to be added to /etc/resolv.conf naming the domain specified. For situations where this is undesirable, this can now be bypassed with the "search_domain" boolean option. The default, on, produces the current behavior. Setting it to off avoids adding a "search" line to resolv.conf. "option domain" still retains its other functions such as providing the value for the --domain option to dnsmasq. Signed-off-by: Mark Mentovai &lt;mark&lt; at &gt;moxienet.com&gt; Index: package/dnsmasq/files/dnsmasq.init =================================================================== --- package/dnsmasq/files/dnsmasq.init(revision 31782) +++ package/dnsmasq/files/dnsmasq.init(working copy) &lt; at &gt;&lt; at &gt; -7,6 +7,7 &lt; at &gt;&lt; at &gt; DNS_SERVERS="" DOMAIN="" +SEARCH_DOMAIN=1 INSERT_LANADDR=1 CONFIGFILE="/var/etc/dnsmasq.conf" &lt; at &gt;&lt; at &gt; -110,6 +111,7 &lt; at &gt;&lt; at &gt; append_parm "$cfg" "dhcp_boot" "--dhcp-boot" config_get DOMAIN "$cfg" domain +confi</pre> Mark Mentovai 2012-05-24T16:11:24 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14341 <pre>r29375 added a feature that provides A and PTR records mapping between the device's own hostname (uci get system.&lt; at &gt;system[0].hostname) and LAN IP address (uci get network.lan.ipaddr). For situations where this is undesirable, the new "insert_lanaddr" option in the "config dnsmasq" section of /etc/config/dhcp can be used. The default is on, producing the current behavior. Setting it to off prevents this automatic mapping from being inserted into the dnsmasq configuration. Signed-off-by: Mark Mentovai &lt;mark&lt; at &gt;moxienet.com&gt; Index: package/dnsmasq/files/dnsmasq.init =================================================================== --- package/dnsmasq/files/dnsmasq.init(revision 31782) +++ package/dnsmasq/files/dnsmasq.init(working copy) &lt; at &gt;&lt; at &gt; -7,6 +7,7 &lt; at &gt;&lt; at &gt; DNS_SERVERS="" DOMAIN="" +INSERT_LANADDR=1 CONFIGFILE="/var/etc/dnsmasq.conf" &lt; at &gt;&lt; at &gt; -109,6 +110,7 &lt; at &gt;&lt; at &gt; append_parm "$cfg" "dhcp_boot" "--dhcp-boot" config_get DOMAIN "$cfg" domain +config_get_bool INSERT_LANADDR "$cfg" insert_lanaddr 1 config_get</pre> Mark Mentovai 2012-05-24T16:10:47 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14340 <pre>This adds a new boolean option, fqdn, to the "config dnsmasq" section of /etc/config/dhcp. The default is off. When set on, it enables the dhcp-fqdn option to dnsmasq. dhcp-fqdn causes dnsmasq's DNS server to not resolve unqualifed local hostnames. The "domain" option is required when using "fqdn". Local hostnames will remain available for lookup using fully-qualified names. Signed-off-by: Mark Mentovai &lt;mark&lt; at &gt;moxienet.com&gt; Index: package/dnsmasq/files/dnsmasq.init =================================================================== --- package/dnsmasq/files/dnsmasq.init(revision 31782) +++ package/dnsmasq/files/dnsmasq.init(working copy) &lt; at &gt;&lt; at &gt; -88,6 +88,7 &lt; at &gt;&lt; at &gt; append_bool "$cfg" expandhosts "--expand-hosts" append_bool "$cfg" enable_tftp "--enable-tftp" append_bool "$cfg" nonwildcard "--bind-interfaces" +append_bool "$cfg" fqdn "--dhcp-fqdn" append_parm "$cfg" dhcpscript "--dhcp-script" append_parm "$cfg" cachesize "--cache-size" </pre> Mark Mentovai 2012-05-24T16:10:12 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14339 <pre>dnsmasq currently permits dhcp_options to be specified only in "config dhcp" sections of /etc/config/dhcp. When dnsmasq is providing DHCP service for multiple subnets and there are multiple "config dhcp" sections without "option ignore", it makes sense to allow dhcp_options that should apply globally in the "config dnsmasq" section of /etc/config/dhcp. dhcp_option is a list option. Signed-off-by: Mark Mentovai &lt;mark&lt; at &gt;moxienet.com&gt; Index: package/dnsmasq/files/dnsmasq.init =================================================================== --- package/dnsmasq/files/dnsmasq.init(revision 31782) +++ package/dnsmasq/files/dnsmasq.init(working copy) &lt; at &gt;&lt; at &gt; -143,6 +143,8 &lt; at &gt;&lt; at &gt; config_list_foreach "$cfg" rebind_domain append_rebind_domain } +dhcp_option_add "$cfg" "" + echo &gt;&gt; $CONFIGFILE } &lt; at &gt;&lt; at &gt; -325,9 +327,12 &lt; at &gt;&lt; at &gt; local cfg="$1" local networkid="$2" +local networkid_comma +[ -n "$networkid" ] &amp;&amp; networkid_comma="$networkid", + config_get dhcp_option "$cfg" dhcp_option for o in $dhcp_option; do -</pre> Mark Mentovai 2012-05-24T16:09:32 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14330 <pre>Folks, I've read through the docs and forums on the OpenWrt site, and haven't found a good answer. I'm using a new/clean install of CeroWrt 3.3.6-2 on a WNDR3700v2, which I believe should work exactly the same as OpenWrt. I am having trouble making my Hurricane Electric 6in4 tunnel work with CeroWrt. I have created the script below that uses the suggested configurations from tunnelbroker.net to set up the tunnel. (This is substantially the same script as posted to: http://www.bufferbloat.net/projects/cerowrt/wiki/IPv6_Tunnel ) Here's what I see: a) The script below uses the tunnel's Client IPv6 /64 address, and does establish the tunnel. If I ssh to the router, I can ping ipv6 hosts from the router, traceroute to ipv6 addresses, etc. However, my MacBook on sw10, for example, does not get a global IPv6 address. b) I also used tunnelbroker.net to obtain a routed /48 address. I use the LuCI GUI to set an IPv6 address for the interface from that /48 subnet. For example, if the routed /48 is 2001:470:ABCD::/4</pre> Rich Brown 2012-05-24T10:24:29 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14327 <pre>Could anyone extract this seemslike tar.gz? ------------------ 原始邮件 ------------------ 发件人: "axishero"&lt;axishero&lt; at &gt;foxmail.com&gt;; 发送时间: 2012年5月23日(星期三) 下午5:09 收件人: "openwrt-devel"&lt;openwrt-devel&lt; at &gt;lists.openwrt.org&gt;; 主题: [OpenWrt-Devel] Tp-link has released gpl source code of ar934x,which can not be extracted. http://www.tp-link.com/resources/gpl/ap123_gpl.tar.gz Like before，the suffix is intentionally not matching the archive, but this time I tried altering to different suffixes result in no effect._______________________________________________ openwrt-devel mailing list openwrt-devel&lt; at &gt;lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel </pre> Vince Huang 2012-05-24T01:49:06 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14326 <pre>Changes in this patch: * update to version 1.14.2 * merge 0004-Pulse-dialing-support-into-pjsip.patch into 0002-register-tapi.patch * refresh patches * remove dummy echo foo from Makefile Signed-off-by: Luka Perkov &lt;openwrt&lt; at &gt;lukaperkov.net&gt; --- package/pjsip/Makefile | 10 +-- package/pjsip/patches/0001-configure-fixup.patch | 25 ++----- package/pjsip/patches/0002-register-tapi.patch | 34 +++------ ...DEF-pj_status_t-pjsua_add_snd_port-int-id.patch | 76 +++++++------------- .../0004-Pulse-dialing-support-into-pjsip.patch | 34 --------- 5 files changed, 45 insertions(+), 134 deletions(-) diff --git a/package/pjsip/Makefile b/package/pjsip/Makefile index 97a5771..20fb6fa 100644 --- a/package/pjsip/Makefile +++ b/package/pjsip/Makefile &lt; at &gt;&lt; at &gt; -1,5 +1,5 &lt; at &gt;&lt; at &gt; # -# Copyright (C) 2010-2011 OpenWrt.org +# Copyright (C) 2010-2012 OpenWrt.org # # This is free software, licensed under the GNU General Public License v2. # See /LICENSE for more information. &lt; at &gt;&lt; at &gt; -8,1</pre> Luka Perkov 2012-05-23T23:53:03 http://comments.gmane.org/gmane.comp.embedded.openwrt.devel/14316 <pre> Hello, my name is Pedro, and I'm writing from Portugal. I would like to ask some questions about batman-adv in openwrt backfire 10.03.2. I already wrote to http://www.open-mesh.org/wiki/open-mesh/MailingList (the mailing list of batman-adv routing protocol) but the developers of the batman-adv said to me, after some chat and replies, that this issue could be solved asking in the openwrt forum, because they didn't know how to solve the problem. The problem happens when i build the openwrt image to use in my routers (i'm trying to build a batman-adv mesh network), the definitions of batman-adv protocol don't start when the routers boot, as i wish. In /etc/config/ there are some configuration files, like dhcp, network, wireless, etc... and the file that i'm talking about is the "batman-adv" file configuration. In that "batman-adv" file we can define if this specific router is a gateway server or client... if the visualization mode is server or client... etc... After my definitions ar</pre> Pedro Nuno Costa Rodrigues 2012-05-23T18:22:30 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.comp.embedded.openwrt.devel