Commit Graph

9 Commits

Author SHA1 Message Date
Sven Eckelmann bbb1ea7345 treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>
2019-09-10 07:45:15 +02:00
Deng Qingfang 17496030e2 treewide: add missing PKGARCH:=all to non-binary packages
Packages such as Perl, Lua, shell scripts don't generate binary files.
Add PKGARCH:=all to them.

Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
2019-03-30 17:11:50 +08:00
Dave Taht e5910b9834 bcp38: Allow class-e through bcp38
It is increasingly likely 240/4 and 0/8 netblocks will be allocated as
unicast globally rout-able and reachable address space
240/4 is already enabled throughout linux and openwrt.

Permit these address blocks under bcp38 address validation, ie. remove
those ranges from the block list:

list match '0.0.0.0/8'       # RFC 1700
list match '240.0.0.0/4'     # RFC 5745

Signed-off-by: Dave Taht <dave.taht@gmail.com>
[bump package - minor tweaks to commit message - remove commented lines]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2019-02-03 15:38:32 +00:00
Jo-Philipp Wich a6ea246cb2 bcp38: add init script
This commit adds a simple procd init script for bcp38 with the sole purpose
to register a configuration change trigger for /etc/config/bcp38.

The change will allow for automatic firewall reloads triggered by invoking
/sbin/reload_config or through ubus config change events emitted by LuCI.

With the init script in place and started, calling

  ubus call service event '{"type":"config.change","data":{"package":"bcp38"}}'

or

  /sbin/reload_config

will issue an /etc/init.d/firewall reload if /etc/config/bcp38 has been
modified since the last reload_config call.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-04-19 11:02:10 +02:00
Kevin Darbyshire-Bryant d30e249d4c bcp38: iptables 1.6.1 compatibility (#4248)
-m state has been removed, now use -m conntrack --ctstate

Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2017-04-12 10:34:02 +02:00
Toke Høiland-Jørgensen 3b73eb19b0 bcp38: Add note about IPv6 to package description and help text
Fixes #3793.
2017-01-08 19:50:50 +01:00
Török Edwin 0b2b462ae0 BCP38: don't slow down established connections (#2838)
Enabling BCP38 causes an iptables rule to be inserted before this rule:
ACCEPT     all  --  anywhere             anywhere             ID:66773300 ctstate RELATED,ESTABLISHED

This makes all forwarded packets go through the BCP38 ipset match, which slows
down download speed from 440 Mbit/s to 340 Mbit/s.

Only apply BCP38 match rules if state is NEW.

Bump package version.

Signed-off-by: Török Edwin <edwin@skylable.com>
2016-06-12 15:09:05 +02:00
Toke Høiland-Jørgensen bcc2ffc5e1 Make PKG_LICENSE for BCP38 SPDX compatible. 2014-11-05 08:27:56 +01:00
Toke Høiland-Jørgensen 0a38785592 Add BCP38 implementation package (from CeroWrt).
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2014-11-05 00:17:53 +01:00