summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* scripts/feeds: Support feed update with git pull --rebaseHannu Nyman2024-09-081-5/+18
| | | | | | | | | | | Add feed update option '-r' to perform "git pull --rebase" so that possible local commits are rebased on top of the new commits pulled from origin. That enables git pull while there are local development commits. Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> Link: https://github.com/openwrt/openwrt/pull/15377 Signed-off-by: Robert Marko <robimarko@gmail.com>
* rockchip: backport pcie update for rock 5aTianling Shen2024-09-084-2/+112
| | | | | | | | | This enables the M.2 E-key on ROCK 5A board. Reorder rk356x patch while at it. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> Link: https://github.com/openwrt/openwrt/pull/16340 Signed-off-by: Robert Marko <robimarko@gmail.com>
* uboot-rockchip: sort build target alphabeticallyTianling Shen2024-09-081-7/+7
| | | | | | | | | move nanopc-t6 recipes above rock 5b. Fixes: 9482341a4752 ("rockchip: add support for nanopc t6") Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> Link: https://github.com/openwrt/openwrt/pull/16340 Signed-off-by: Robert Marko <robimarko@gmail.com>
* ipq807x: add support for TP-Link EAP660 HD v1George Witt2024-09-088-1/+258
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specifications: * SoC: Qualcomm IPQ8072A (64-bit Quad-core Arm Cortex-A53 @ 2200MHz) * Memory: 2x ESMT M15T4G16256A-DEBG2G (1 GiB DDR3-1866 13-13-13) * Serial Port: 3v3 TTL 115200n8 * Wi-Fi: QCN5054 (4x4 5 GHz 802.11ax) * Wi-Fi: QCN5024 (4x4 2.4 GHz 802.11b/g/n/ax) * Ethernet: QCA8081 (10/100/1000/2.5GBASE-T) * Flash: Winbond W29N01HZSINF (128 MiB) * LEDs: 1x Blue Status (GPIO 42 Active High) * Buttons: 1x Reset (GPIO 50 Active Low) Installation Instructions (Serial+TFTP): 1. Solder 4 pin header to JP1 and bridge pads of R58 and R62. 2. Connect 3V3 TTL port to TX, RX, and GND, which are positions 1, 2, and 3 respectively. Be sure to crossover TX and RX. 3. Copy RAM firmware image openwrt-qualcommax-ipq807x-tplink_eap660hd-v1-initramfs-uImage.itb to TFTP server root, available at 192.168.10.1. 4. Connect PoE ethernet cable to the RJ45 port and hold Ctrl+B in the serial console (115200 baud) until autoboot is halted. 5. Run the following commands in the U-boot prompt: # tftpboot 0x44000000 openwrt-qualcommax-ipq807x-tplink_eap660hd-v1-initramfs-uImage.itb # bootm You may need to type Ctrl+C and Enter before running these commands to clear invisible characters from the buffer. 6. Run the following command in a terminal to copy the sysupgrade image to be installed (check IP address): $ scp openwrt-qualcommax-ipq807x-tplink_eap660hd-v1-squashfs-sysupgrade.bin root@192.168.1.1:/tmp/ 7. Activate the OpenWrt serial console and run the following commands: # cd /tmp # sysupgrade -n openwrt-qualcommax-ipq807x-tplink_eap660hd-v1-squashfs-sysupgrade.bin 8. The AP will reboot and OpenWrt will be successfully installed. Signed-off-by: George Witt <george.witt@nltsproject.org> Link: https://github.com/openwrt/openwrt/pull/15832 Signed-off-by: Robert Marko <robimarko@gmail.com>
* uboot-laniq: fix compilation with GCC14Rosen Penev2024-09-083-5/+5
| | | | | | | | GCC errors on returning int in void function now. Signed-off-by: Rosen Penev <rosenp@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16348 Signed-off-by: Robert Marko <robimarko@gmail.com>
* starfive: 6.6: add serial1 alias for JH7100Zoltan HERPAI2024-09-081-4/+12
| | | | | | | This alias was present in 6.1. Add back to restore a fully working console after sbi0 (earlycon) gets disabled during the boot process. Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
* ramips: pinctrl-aw9523: update to current upstreamRosen Penev2024-09-0714-1200/+1744
| | | | | | | | Various cleanups and bugfixes were applied. Signed-off-by: Rosen Penev <rosenp@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16215 Signed-off-by: Robert Marko <robimarko@gmail.com>
* mpc85xx: add static to init functionsRosen Penev2024-09-0710-10/+10
| | | | | | | | | No reason for them not to be so. Matches various upstream commits for PPC. Signed-off-by: Rosen Penev <rosenp@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16345 Signed-off-by: Robert Marko <robimarko@gmail.com>
* mpc85xx: remove calibrate_decrRosen Penev2024-09-0710-10/+0
| | | | | | | | | With upstream commit 0aafbdf35c75cbfec82636d01e6dc7950bc1507c , this is now default. No need to override. Signed-off-by: Rosen Penev <rosenp@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16345 Signed-off-by: Robert Marko <robimarko@gmail.com>
* mpc85xx: replace probe with compatibleRosen Penev2024-09-0710-120/+10
| | | | | | | | | | Upstream commit does this for simple cases, which all of these are. Commit: 1c96fcdef8c7492ecf34ed70102a1ae5253ef9d1 Signed-off-by: Rosen Penev <rosenp@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16345 Signed-off-by: Robert Marko <robimarko@gmail.com>
* mpc85xx: remove unneeded headersRosen Penev2024-09-071-3/+0
| | | | | | | | | 949e1a0856c4a04ac4a3fee1bd4a0cc69ac187c5 moved this code to DTS. Not needed anymore. Signed-off-by: Rosen Penev <rosenp@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16345 Signed-off-by: Robert Marko <robimarko@gmail.com>
* openssl: update to 3.0.15Ivan Pavlov2024-09-061-3/+4
| | | | | | | | | | | | | | | | OpenSSL 3.0.15 is a security patch release. The most severe CVE fixed in this release is Moderate. This release incorporates the following bug fixes and mitigations: * Fixed possible denial of service in X.509 name checks (CVE-2024-6119) * Fixed possible buffer overread in SSL_select_next_proto() (CVE-2024-5535) Added github releases url as source mirror Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16332 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* uboot-envtools: add u-boot system env config for Xiaomi Redmi AX6SIvan Pavlov2024-09-061-0/+1
| | | | | | | | Adds u-boot config for access to system env variables on this board Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16312 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* wireguard-tools: accept iproute2 as dependencyChristian Svensson2024-09-061-3/+3
| | | | | | | | | If the user has ip-tiny or ip-full installed there is no need to depend on BusyBox having any form of `ip` or `ip link` applets. Signed-off-by: Christian Svensson <blue@cmd.nu> Link: https://github.com/openwrt/openwrt/pull/16062 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: Activate POSIX ACL for f2fs, jffs2 and tmpfsHauke Mehrtens2024-09-061-2/+5
| | | | | | | | | When CONFIG_USE_FS_ACL_ATTR is set we will also activate POSIX ACL support for the f2fs, jffs2 and tmpfs file system. This option is activated on all targets with big flash. Link: https://github.com/openwrt/openwrt/pull/16181 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: activate *_FS_SECURITY and *_FS_ACL_ATTR options for all big flash ↵Leo Barsky2024-09-0624-71/+5
| | | | | | | | | | | | | targets This patch activate *_FS_SECURITY and *_FS_ACL_ATTR options for all big flash memory targets. Fixes docker error: "failed to register layer: lsetxattr security.capability /usr/bin/ping: operation not supported" Forum discussion: https://forum.openwrt.org/t/docker-pull-fails-failed-to-register-layer-operation-not-supported/138253 Signed-off-by: Leo Barsky <leobrsky@proton.me> Link: https://github.com/openwrt/openwrt/pull/16181 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* hostapd: ensure that interface name is not nullGioacchino Mazzurco2024-09-064-8/+16
| | | | | | | | | | Include hotfix suggested by Sebastian Gottschall to fix bug introduced with APuP patchset Signed-off-by: Gioacchino Mazzurco <gio@polymathes.cc> Link: https://github.com/mirror/dd-wrt/commit/0c3001a69e8d8300569e416de856c96e903ad130 Link: https://github.com/openwrt/openwrt/pull/16298 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: bump 6.1 to 6.1.108Zxl hhyccc2024-09-068-13/+13
| | | | | | | | | | | | https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.108 All patches automatically rebased. Build system: bcm53xx octeon Signed-off-by: Zxl hhyccc <zxlhhy@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16325 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: bump 6.6 to 6.6.49John Audia2024-09-067-26/+26
| | | | | | | | | | | | | | Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.49 All patches automatically rebased. Build system: x86/64 Build-tested: x86/64/AMD Cezanne, flogic/xiaomi_redmi-router-ax6000-ubootmod, ramips/tplink_archer-a6-v3 Run-tested: x86/64/AMD Cezanne, flogic/xiaomi_redmi-router-ax6000-ubootmod, ramips/tplink_archer-a6-v3 Signed-off-by: John Audia <therealgraysky@proton.me> Link: https://github.com/openwrt/openwrt/pull/16328 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* ltq-ptm: propagate reset errors to probeRosen Penev2024-09-064-22/+23
| | | | | | | | | Instead of avoiding returning, propagate error so that the kernel infrastructure can handle it. Signed-off-by: Rosen Penev <rosenp@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16262 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* ltq-atm: propagate EPROBE_DEFER to probeRosen Penev2024-09-066-23/+30
| | | | | | | | Instead of ignoring errors, let the linux infrastructure handle it. Signed-off-by: Rosen Penev <rosenp@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16262 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* filogic: add missing 2.5G PHY LEDs configuration for Zyxel EX5700Yan Cangang2024-09-061-0/+2
| | | | | | | | | | | | | | | | | | configure 2.5G PHY LEDs to: 2500/1000: green with blink on TX/RX 100/10: green+yellow with blink on TX/RX which is similar to other 1G PHY LEDs, which are: 1000: green with blink on TX/RX 100/10: green+yellow with blink on TX/RX Fixes: 6cc14bf66aa ("filogic: support Telenor branded ZyXEL EX5700") Signed-off-by: Yan Cangang <nalanzeyu@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16082 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* mt76: update to Git HEAD (2024-09-05)Felix Fietkau2024-09-051-3/+3
| | | | | | | | 5c5e685eb028 wifi: mt76: mt7915: improve hardware recovery a897606f7c26 wifi: mt76: mt76x0: fix locking regression 65cc3daf2a33 wifi: mt76: support per-band MAC addresses from OF child nodes Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: update to Git HEAD (2024-09-05)Felix Fietkau2024-09-051-3/+3
| | | | | | 61c606d6e66b device: simplify external device settings handling Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: bridge: fix switchdev host mdb entry updatesFelix Fietkau2024-09-041-0/+42
| | | | | | Avoid imbalance in host multicast database updates Signed-off-by: Felix Fietkau <nbd@nbd.name>
* bpftool: add host buildEric Long2024-09-041-0/+28
| | | | | | | | | | | | | | | Besides probing BPF information in running system, bpftool is also used in generating skeleton, dumping BTF, etc. that is widely used in modern BPF development. Make it available as a host tool so that we can use it in package build. Tested build targeting malta/le on Arch Linux x86_64. bpftools currently does not support processing cross-endian BPF objects, so big-endian host is needed to build for big-endian targets using bpftools. Signed-off-by: Eric Long <i@hack3r.moe> Link: https://github.com/openwrt/openwrt/pull/16122 Signed-off-by: Robert Marko <robimarko@gmail.com>
* netifd: update to Git HEAD (2024-09-03)Felix Fietkau2024-09-031-3/+3
| | | | | | | | | | | | | 480551a3adc4 interface: add support for disabling renew on topology change b7b294266781 device: add more debugging code 595094f5c213 device: do not pull device present state from hotplug events 4e11e52e9b98 main: add messages to udebug regardless of their log level 091d063f4a9d wireless: handle link updates even if devices are present already a8e90853c936 interface: improve hotplug handling reliability cdb41673ceea device: remove redundant newlines from debug messages cd2a7964f2c0 device: revert to explicit device_set_present calls Signed-off-by: Felix Fietkau <nbd@nbd.name>
* starfive: enable 6.6 testing kernelZoltan HERPAI2024-09-031-0/+1
| | | | | | starfive now supports 6.6 kernel as testing. Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
* starfive: refresh config-6.6Zoltan HERPAI2024-09-031-3/+30
| | | | | | Refresh kernel config for Linux 6.6. Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
* starfive: add patches for 6.6Zoltan HERPAI2024-09-03140-0/+67712
| | | | | | | Add updated patches for 6.6. DMA/cache-handling patches have been reworked / backported from upstream. Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
* kernel/starfive: Restore kernel files for v6.1Zoltan HERPAI2024-09-031-0/+555
| | | | | | | | | | | This is an automatically generated commit which aids following Kernel patch history, as git will see the move and copy as a rename thus defeating the purpose. For the original discussion see: https://lists.openwrt.org/pipermail/openwrt-devel/2023-October/041673.html Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
* kernel/starfive: Create kernel files for v6.6 (from v6.1)Zoltan HERPAI2024-09-031-0/+0
| | | | | | | | This is an automatically generated commit. When doing `git bisect`, consider `git bisect --skip`. Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
* octeon: n821: sysupgrade for Cisco vEdge 1000Christian Svensson2024-09-023-14/+77
| | | | | | | | | | | | | | | | | | | | | | | This commit adds the logic required to install OpenWrt on a Cisco/Viptela vEdge 1000 while nicely integrating with the already present bootloader and making it possible to roll back to stock OS. The vEdge 1000 has a built-in SSD with a ext2 partition from which the stock u-boot boots the Linux kernel from. In order for Linux not to be confused about which partition the root file system is on, there are some tricks needed to ensure the partition is identifiable at boot time. For this we use blkid as part of the scripts, and sfdisk as part of the manual installation process documented on the wiki. Thus, those packages have been added as a platform dependency. Finally, the u-boot environment is updated which requires the use of uboot-envtools. Tested on a Cisco vEdge 1000. Signed-off-by: Christian Svensson <blue@cmd.nu> Link: https://github.com/openwrt/openwrt/pull/16140 Signed-off-by: Robert Marko <robimarko@gmail.com>
* ramips: mt76x8: add support for Yuncore CPE200Daniel Golle2024-09-024-0/+177
| | | | | | | | | | | | | | | | | | | | | | | | | Yuncore CPE200 is an outdoor unit with IEEE 802.11ac radio. Hardware: - SoC: MediaTek MT7628DAN (MIPS 580MHz) - Flash: 8 MiB Spansion S25FL064K - RAM: 64 MiB (built-into SoC) - WLAN: 5 GHz (MT7613AE) - Ethernet: 1x 10/100 Mbps WAN, 1x 10/100 LAN (MT7628) - Buttons: 1 Reset button, 2 buttons for display UI (unsupported) - LEDs: 4x Green (Power, LAN, WAN, WiFi) - Display: 4 digit 7-segment display driven by an additional microcontroller (unsupported) - Serial console: unpopulated header, 57600 8n1 (RX only) - Power: 12 VDC, 1 A Installation: The installation can be done via the recovery HTTP server which is built into the bootloader. Hold down the reset button while connecting the device to power and keep holding a bit more than 3 seconds. Connect to http://192.168.0.100/ and upload sysupgrade.bin file. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* octeon: ubnt-edgerouter: fix sysupgrade config backup/restoreJakob Haufe2024-09-022-1/+3
| | | | | | | | | er is missing from platform_copy_config() and octeon_move_config(), so config is lost on every sysupgrade. Signed-off-by: Jakob Haufe <sur5r@sur5r.net> Link: https://github.com/openwrt/openwrt/pull/16238 Signed-off-by: Robert Marko <robimarko@gmail.com>
* uboot-mediatek: add missing dependency for mt7988_rfb-spim-nandFelix Fietkau2024-09-021-1/+1
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* u-boot.mk: pass CROSS_COMPILE during configFelix Fietkau2024-09-021-2/+2
| | | | | | Avoids running into unset architecture specific config symbols Signed-off-by: Felix Fietkau <nbd@nbd.name>
* uboot-mediatek: fix build error on mt7981-rfb and openwrt-oneFelix Fietkau2024-09-023-12/+8
| | | | | | Remove an unnecessary config option that was breaking the build Signed-off-by: Felix Fietkau <nbd@nbd.name>
* uboot-mediatek: fix broken patchFelix Fietkau2024-09-021-0/+1
| | | | | | Add missing --- line Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mediatek: mt7988a-rfb: align order of SFPs with SDK buildDaniel Golle2024-09-021-1/+1
| | | | | | | | MediaTek SDK uses eth2 as additional LAN port and eth1 as WAN. Do the same also in OpenWrt to keep settings aligned with the SDK. Suggested-by: Bc-bocun Chen <bc-bocun.chen@mediatek.com> Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* qoriq: enable 6.6 testing kernelMieczyslaw Nalewaj2024-09-011-0/+1
| | | | | | | | The qoriq now supports 6.6 kernel as testing. Signed-off-by: Mieczyslaw Nalewaj <namiltd@yahoo.com> Link: https://github.com/openwrt/openwrt/pull/16079 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* qoriq: refresh config-6.6Mieczyslaw Nalewaj2024-09-011-14/+24
| | | | | | | | Refresh kernel config for Linux 6.6. Signed-off-by: Mieczyslaw Nalewaj <namiltd@yahoo.com> Link: https://github.com/openwrt/openwrt/pull/16079 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* kernel/qoriq: Restore kernel files for v6.1Mieczyslaw Nalewaj2024-09-011-0/+422
| | | | | | | | | | | | | This is an automatically generated commit which aids following Kernel patch history, as git will see the move and copy as a rename thus defeating the purpose. For the original discussion see: https://lists.openwrt.org/pipermail/openwrt-devel/2023-October/041673.html Signed-off-by: Mieczyslaw Nalewaj <namiltd@yahoo.com> Link: https://github.com/openwrt/openwrt/pull/16079 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* kernel/qoriq: Create kernel files for v6.6 (from v6.1)Mieczyslaw Nalewaj2024-09-011-0/+0
| | | | | | | | | | This is an automatically generated commit. When doing `git bisect`, consider `git bisect --skip`. Signed-off-by: Mieczyslaw Nalewaj <namiltd@yahoo.com> Link: https://github.com/openwrt/openwrt/pull/16079 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* kernel: bump 6.1 to 6.1.107Zxl hhyccc2024-08-3112-30/+30
| | | | | | | | | | | | https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.107 All patches automatically rebased. Build system: bcm53xx octeon Signed-off-by: Zxl hhyccc <zxlhhy@gmail.com> Link: https://github.com/openwrt/openwrt/pull/16283 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: bump 6.6 to 6.6.48John Audia2024-08-3123-181/+45
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.48 Removed upstreamed: generic/backport-6.6/752-04-v6.6-net-ethernet-mtk_wed-check-update_wo_rx_stats-in-mtk.patch[1] generic/pending-6.6/601-udp-fix-receiving-fraglist-GSO_packets.patch[2] mediatek/patches-6.6/951-net-ethernet-mtk_wed-fix-use-after-free-panic-in-mtk.patch[3] rockchip/patches-6.6/302-mmc-allow-probe-to-defer-if-clock-is-not-ready.patch[4] Manually rebased: bcm27xx/patches-6.6/950-0058-Revert-Bluetooth-Always-request-for-user-confirmatio.patch All other patches automatically rebased. 1. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.48&id=7ede6ef04c9ffc466844a297d3d68bea8a06093d 2. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.48&id=cfa692e7e71b22d35174a796d10b9111bafa0686 3. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.48&id=326a89321f9d5fe399fe6f9ff7c0fc766582a6a0 4. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v6.6.48&id=7bbf8f8b8861dd2a6215f1aded425c66e6c376a0 Build system: x86/64 Build-tested: x86/64/AMD Cezanne, flogic/xiaomi_redmi-router-ax6000-ubootmod, ramips/tplink_archer-a6-v3 Run-tested: x86/64/AMD Cezanne, flogic/xiaomi_redmi-router-ax6000-ubootmod, ramips/tplink_archer-a6-v3 Signed-off-by: John Audia <therealgraysky@proton.me> Link: https://github.com/openwrt/openwrt/pull/16282 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* netfilter: add nf_conntrack_sane to kmod-nf-nathelpers-extraFlorian Eckert2024-08-311-0/+1
| | | | | | | | | 'SANE' is a protocol for remote access to scanners as implemented by the 'saned' daemon. Like FTP, it uses separate control and data connections. So let´s enable this in the kernel and add them to 'kmod-nf-nathelper-extra'. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* netfilter: add nf_conntrack_netbios_ns to kmod-nf-nathelper-extraFlorian Eckert2024-08-311-0/+1
| | | | | | | | | | | NetBIOS name service requests are sent as broadcast messages from an unprivileged port and responded to with unicast messages to the same port. This make them hard to firewall properly because connection tracking doesn't deal with broadcasts. So let´s enable this in the kernel and add them to 'kmod-nf-nathelper-extra'. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* ltq-vdsl-vr11-app: perform orderly shutdown on exitJan Hoffmann2024-08-314-3/+77
| | | | | | | | | | | Try to do a clean disconnection via L3 request before the connection is stopped. Because this might take up to 6 seconds (the driver does 3 attempts with a timeout of 2 seconds each), a termination timeout needs to be defined in the init script. Signed-off-by: Jan Hoffmann <jan@3e8.eu>
* ltq-vdsl-vr11-app: always disconnect on exitJan Hoffmann2024-08-313-33/+97
| | | | | | | | | Move the code for disconnection on exit to a separate function, and also call it in the code paths for SIGINT and the "quit" CLI command. While at it, make the patch description a bit clearer. Signed-off-by: Jan Hoffmann <jan@3e8.eu>