openwrt-routing/opennds/Makefile

90 lines
4.5 KiB
Makefile
Raw Normal View History

#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=opennds
PKG_FIXUP:=autoreconf
opennds: Release v9.6.0 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, gl-inet b1300, gl-inet mt300n-v2, Snapshot, 21.02.1, 19.07.8 Description: This version adds new functionality, and fixes some issues * Fix - correctly display return buffer in syslog [bluewavenet] * Add - use heap allocation for library call return buffer [bluewavenet] * Fix - OpenWrt, fhook request for fw3 [bluewavenet] * Add - spider remote urls before downloading [bluewavenet] * Add - OpenWrt, revert uncommitted uci updates at startup and shutdown [bluewavenet] * Fix - remove unneccesary flash writes and fix hosts updates [doctor-ox] [bluewavenet] * Add - Updated splash images [bluewavenet] * Add - OpenWrt makefile for nft or ipt dependencies [bluewavenet] * Fix - grep by word to prevent any ambiguity [doctor-ox] [bluewavenet] * Fix - ensure rate limiting is disabled if rate thresholds are set to zero [bluewavenet] * Add - querystring support for client status page [bluewavenet] * Add - Advanced/standard status page checkbox [bluewavenet] * Add - set default session timeout to 24 hours [bluewavenet] * Fix - potential buffer overflow [bluewavenet] * Fix - Restrict max packet limit to iptables maximum [bluewavenet] * Fix - descriptive labels on ndsctl status output [bluewavenet] * Add - update of README.md [bluewavenet] * Fix - Added required variable to FAS return string example documentation [dorkone] * Add - Default checkinterval set to 15 seconds [bluewavenet] * Fix - incoming and outgoing counters when unlimited bursting is enabled [bluewavenet] * Add - maximum bucket size configuration [bluewavenet] * Add - calculate moving average packet size for rate limiting [bluewavenet] * Add - some operational default values [bluewavenet] * Add - initial rate limits when unrestricted bursting is disabled [bluewavenet] * Add - Require clients to be in the dhcp database [bluewavenet] * Add - dhcpcheck library call [bluewavenet] * Fix - Remove trailing whitespace when getting clientaddress if client not active [bluewavenet] * Fix - Segfault when FAS fails to Return customstring [dorkone] [bluewavenet] * Add - Enable/Disable unrestricted bursting [bluewavenet] * Add - gatewayurl to querystring and use in place of originurl in FAS [bluewavenet] * Fix - more accurate debug message [bluewavenet] * Fix - Show packet rate correctly as packets per minute [bluewavenet] * Add - Report Packet Rate and Bucket Size in ndsctl status and json and status client page [bluewavenet] * Add - rate limit refresh to client limit rules [bluewavenet] * Fix - code readability [bluewavenet] * Fix - Documentation for data sent to Authmon Daemon [bluewavenet] * Add - Show unrestricted burst intervals in ndsctl status [bluewavenet] * Add - Set default bucket ratios to 10 [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2022-02-19 17:31:51 +01:00
PKG_VERSION:=9.6.0
PKG_RELEASE:=2
PKG_SOURCE_URL:=https://codeload.github.com/opennds/opennds/tar.gz/v$(PKG_VERSION)?
PKG_SOURCE:=opennds-$(PKG_VERSION).tar.gz
opennds: Release v9.6.0 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, gl-inet b1300, gl-inet mt300n-v2, Snapshot, 21.02.1, 19.07.8 Description: This version adds new functionality, and fixes some issues * Fix - correctly display return buffer in syslog [bluewavenet] * Add - use heap allocation for library call return buffer [bluewavenet] * Fix - OpenWrt, fhook request for fw3 [bluewavenet] * Add - spider remote urls before downloading [bluewavenet] * Add - OpenWrt, revert uncommitted uci updates at startup and shutdown [bluewavenet] * Fix - remove unneccesary flash writes and fix hosts updates [doctor-ox] [bluewavenet] * Add - Updated splash images [bluewavenet] * Add - OpenWrt makefile for nft or ipt dependencies [bluewavenet] * Fix - grep by word to prevent any ambiguity [doctor-ox] [bluewavenet] * Fix - ensure rate limiting is disabled if rate thresholds are set to zero [bluewavenet] * Add - querystring support for client status page [bluewavenet] * Add - Advanced/standard status page checkbox [bluewavenet] * Add - set default session timeout to 24 hours [bluewavenet] * Fix - potential buffer overflow [bluewavenet] * Fix - Restrict max packet limit to iptables maximum [bluewavenet] * Fix - descriptive labels on ndsctl status output [bluewavenet] * Add - update of README.md [bluewavenet] * Fix - Added required variable to FAS return string example documentation [dorkone] * Add - Default checkinterval set to 15 seconds [bluewavenet] * Fix - incoming and outgoing counters when unlimited bursting is enabled [bluewavenet] * Add - maximum bucket size configuration [bluewavenet] * Add - calculate moving average packet size for rate limiting [bluewavenet] * Add - some operational default values [bluewavenet] * Add - initial rate limits when unrestricted bursting is disabled [bluewavenet] * Add - Require clients to be in the dhcp database [bluewavenet] * Add - dhcpcheck library call [bluewavenet] * Fix - Remove trailing whitespace when getting clientaddress if client not active [bluewavenet] * Fix - Segfault when FAS fails to Return customstring [dorkone] [bluewavenet] * Add - Enable/Disable unrestricted bursting [bluewavenet] * Add - gatewayurl to querystring and use in place of originurl in FAS [bluewavenet] * Fix - more accurate debug message [bluewavenet] * Fix - Show packet rate correctly as packets per minute [bluewavenet] * Add - Report Packet Rate and Bucket Size in ndsctl status and json and status client page [bluewavenet] * Add - rate limit refresh to client limit rules [bluewavenet] * Fix - code readability [bluewavenet] * Fix - Documentation for data sent to Authmon Daemon [bluewavenet] * Add - Show unrestricted burst intervals in ndsctl status [bluewavenet] * Add - Set default bucket ratios to 10 [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2022-02-19 17:31:51 +01:00
PKG_HASH:=90613e636c668a16eb9d6abfe19715f87cea7000383a53ad6719dec80ff966db
PKG_BUILD_DIR:=$(BUILD_DIR)/openNDS-$(PKG_VERSION)
PKG_MAINTAINER:=Rob White <rob@blue-wave.net>
PKG_BUILD_PARALLEL:=1
PKG_LICENSE:=GPL-2.0+
include $(INCLUDE_DIR)/package.mk
define Package/opennds
SUBMENU:=Captive Portals
SECTION:=net
CATEGORY:=Network
opennds: Release v9.6.0 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, gl-inet b1300, gl-inet mt300n-v2, Snapshot, 21.02.1, 19.07.8 Description: This version adds new functionality, and fixes some issues * Fix - correctly display return buffer in syslog [bluewavenet] * Add - use heap allocation for library call return buffer [bluewavenet] * Fix - OpenWrt, fhook request for fw3 [bluewavenet] * Add - spider remote urls before downloading [bluewavenet] * Add - OpenWrt, revert uncommitted uci updates at startup and shutdown [bluewavenet] * Fix - remove unneccesary flash writes and fix hosts updates [doctor-ox] [bluewavenet] * Add - Updated splash images [bluewavenet] * Add - OpenWrt makefile for nft or ipt dependencies [bluewavenet] * Fix - grep by word to prevent any ambiguity [doctor-ox] [bluewavenet] * Fix - ensure rate limiting is disabled if rate thresholds are set to zero [bluewavenet] * Add - querystring support for client status page [bluewavenet] * Add - Advanced/standard status page checkbox [bluewavenet] * Add - set default session timeout to 24 hours [bluewavenet] * Fix - potential buffer overflow [bluewavenet] * Fix - Restrict max packet limit to iptables maximum [bluewavenet] * Fix - descriptive labels on ndsctl status output [bluewavenet] * Add - update of README.md [bluewavenet] * Fix - Added required variable to FAS return string example documentation [dorkone] * Add - Default checkinterval set to 15 seconds [bluewavenet] * Fix - incoming and outgoing counters when unlimited bursting is enabled [bluewavenet] * Add - maximum bucket size configuration [bluewavenet] * Add - calculate moving average packet size for rate limiting [bluewavenet] * Add - some operational default values [bluewavenet] * Add - initial rate limits when unrestricted bursting is disabled [bluewavenet] * Add - Require clients to be in the dhcp database [bluewavenet] * Add - dhcpcheck library call [bluewavenet] * Fix - Remove trailing whitespace when getting clientaddress if client not active [bluewavenet] * Fix - Segfault when FAS fails to Return customstring [dorkone] [bluewavenet] * Add - Enable/Disable unrestricted bursting [bluewavenet] * Add - gatewayurl to querystring and use in place of originurl in FAS [bluewavenet] * Fix - more accurate debug message [bluewavenet] * Fix - Show packet rate correctly as packets per minute [bluewavenet] * Add - Report Packet Rate and Bucket Size in ndsctl status and json and status client page [bluewavenet] * Add - rate limit refresh to client limit rules [bluewavenet] * Fix - code readability [bluewavenet] * Fix - Documentation for data sent to Authmon Daemon [bluewavenet] * Add - Show unrestricted burst intervals in ndsctl status [bluewavenet] * Add - Set default bucket ratios to 10 [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2022-02-19 17:31:51 +01:00
DEPENDS:=+iptables-nft +kmod-ipt-conntrack +kmod-ipt-nat +libmicrohttpd-no-ssl
TITLE:=Open public network gateway daemon
URL:=https://github.com/opennds/opennds
opennds: Release v5.1.0 Maintainer: Rob White <rob@blue-wave.net> Compiled and tested using snapshot SDK for mipsel_24kc, mips_24kc and arm_cortex-a7_neon-vfpv4 OpenNDS v5.1.0 release This release adds major functionality and provides numerous fixes: Data Rate and Data Volume Quotas are implemented. BinAuth / fas_secure_enabled level 3 compatibility is implemented. Page fault and crash when ndsctl auth is called and client not found has been fixed. From the ChangeLog: * Add - Generic Linux - install opennds.service [bluewavenet] * Add - Documentation updates [bluewavenet] * Add - config file updates [bluewavenet] * Add - Install sitewide username/password splash support files [bluewavenet] * Add - quotas to binauth_sitewide [bluewavenet] * Add - Splash page updates [bluewavenet] * Add - Implement Rate Quotas [bluewavenet] * Fix - check if idle preauthenticated [bluewavenet] * Add - support for rate quotas [bluewavenet] * Fix - Correctly compare client counters and clean up debuglevel messages [bluewavenet] * Add - Implement upload/download quotas Update fas-aes-https to support quotas [bluewavenet] * Add - Rename demo-preauth scripts and install all scripts [bluewavenet] * Add - fas-aes-https layout update [bluewavenet] * Add - Set some defaults in fas-aes-https [bluewavenet] * Add - custom data string to ndsctl auth [bluewavenet] * Add - custom data string to fas-hid.php [bluewavenet] * Add - Send custom data field to BinAuth via auth_client method [bluewavenet] * Fix - missing token value in auth_client [bluewavenet] * Add - upload/download quota and rate configuration values [bluewavenet] * Add - Send client token to binauth [bluewavenet] * Add - Rename upload_limit and download_limit to upload_rate and download_rate [bluewavenet] * Fix - Pass correct session end time to binauth [bluewavenet] * Add - some debuglevel 3 messages [bluewavenet] * Add - description of the favicon and page footer images [bluewavenet] * Add - Authmon collect authentication parameters from fas-aes-https [bluewavenet] * Add - sessionlength to ndsctl auth [bluewavenet] * Fix - Page fault when ndsctl auth is called and client not found [bluewavenet] * Add - Enable BinAuth / fas_secure_enabled level 3 compatibility [bluewavenet] * Fix - Correctly set BinAuth session_end [bluewavenet] * Add - Updates to Templated Splash pages [bluewavenet] * Add - Community Testing files [bluewavenet] * Fix - BinAuth error passing client session times [bluewavenet] * Fix - PHP notice - undefined constant [bluewavenet] * Fix - OpenWrt CONFLICTS variable in Makefile [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2020-06-25 21:31:06 +02:00
CONFLICTS:=nodogsplash nodogsplash2
endef
define Package/opennds/description
openNDS is a Captive Portal solution that offers an instant way to provide restricted access to the Internet.
With little or no configuration, a dynamically generated and adaptive splash page sequence is automatically served.
opennds: Release v9.5.1 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, gl-inet b1300, gl-inet mt300n-v2, Snapshot, 21.02.1, 19.07.8 Description: This version adds new functionality, and fixes some issues * Fix - ThemeSpec file downloads when mwan3 is running [bluewavenet] * Fix - Preemptive auth failure after previous deauth [minhng99] [bluewavenet] From v9.5.0 * Add - use average packet size instead of MTU when implementing rate limiting [bluewavenet] * Fix - typo in iptables command and remove a redundant command [bluewavenet] * Add - startdaemon() and stopdaemon() utility functions [bluewavenet] * Add - combined interface/ipaddress external gateway status monitoring [bluewavenet] * Fix - potential online/offline detection problem when mwan3 is running [bluewavenet] * Add - get_debug_level and syslog library calls [bluewavenet] * Fix - correctly reset upload and download rate rules [bluewavenet] * Add - extend upstream gateway checking for use with mwan3 loadbalance/failover [bluewavenet] * Fix - Potential NULL pointer segfault in http_microhttpd on calling authenticated() [bluewavenet] * Fix - Potential NULL pointer segfault in http_microhttpd on calling preauthenticated() [dddaniel] * Add - Calculate Bucket size based on achieved burst rate [bluewavenet] * Fix - prevent parameter parsing if clientip not known [bluewavenet] * Add - disable rate quotas by setting bucket ratio to zero [bluewavenet] * Fix - suppress some debug messages [bluewavenet] * Add - more libraries documentation [bluewavenet] * Add - library calls startdaemon and stopdaemon [bluewavenet] * Fix - Increase buffer length for longer interface names [koivunen] * Add - Update README.md [bluewavenet] * Add - bucket ratio option to config file [bluewavenet] * Add - upload and download bucket ratio config values [bluewavenet] * Fix - flag initial debuglevel to externals [bluewavenet] * Add - limit-burst tuning to rate quotas [bluewavenet] * Fix - add trailing space to defaultip [bluewavenet] * Add - record pre-emptive authentication in local log [bluewavenet] * Add - Write to local log function to libopennds [bluewavenet] * Add - set client_type and custom string for Pre-emptive authentication [bluewavenet] * Fix - Remove trailing newline from library call response [bluewavenet] * Fix - attempt to remove cid file only if client->cid is set [bluewavenet] * Add - a skip option for custom downloads to speed up serving page from themespec [bluewavenet] * Add - put client_type into query string when type is cpd canary [bluewavenet] * Add - set refresh=0 before loading images [bluewavenet] * Fix - Truncated return status [bluewavenet] * Add - Acknowlegement from call to dnsconfig [bluewavenet] * Fix - potential buffer overflow in debug output [bluewavenet] * Add - processing of custom data and client type [bluewavenet] * Add - Client Type for RFC8908 and RFC8910 clients [bluewavenet] * Add - rfc8908 replies for external FAS and refactor memory management for MHD calls [bluewavenet] * Add - send error 403 if client is not on openNDS subnet [bluewavenet] * Fix - remove uneccessary safe_asprint in auth.c [bluewavenet] * Fix - Initialise buffer to prevent receiving spurious characters [bluewavenet] * Add - encoded custom data support to ndsctl json, themespec and binauth [bluewavenet] * Add - advert_1.htm to thankyou page of theme_click-to-continue-custom-placeholders.sh [bluewavenet] * Add - library call get_interface_by_ip [bluewavenet] * Add - function encode_custom() for encoding custom data to be sent to openNDS [bluewavenet] * Fix - error 511, make all html refrences absolute to enforce link to MHD [bluewavenet] * Add - check status_path exists and is executeable [bluewavenet] * Fix - regression causing error 511 to be served from default script [bluewavenet] * Add - venue-info-url and can-extend-session json keys [bluewavenet] * Add - RFC 8908 initial experimental support [bluewavenet] * Add - debug message when resetting client [bluewavenet] * Fix - Ensure the ndscids directory exists before trying to write to it. [bluewavenet] * Fix - use eval in do_ndsctl to allow quoting of arguments [bluewavenet] * Fix - ensure client hid and client cid file is reset correctly [bluewavenet] * Fix - Titles of example ThemeSpec Files [bluewavenet] * Fix - Ensure ThemeSpec Files are executable [bluewavenet] * Remove - deprecated Allowed and Blocked entries in ndsctl status output [bluewavenet] * Add - Deprecate option macmechanism, allowedmaclist and blockedmaclist [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2021-12-18 20:38:30 +01:00
Both client driven Captive Portal Detection (CPD) and gateway driven Captive Portal Identification (CPI - RFC 8910 and RFC 8908) are supported.
opennds: Release v9.4.0 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, gl-inet b1300, gl-inet mt300n-v2, Snapshot, 21.02.0, 19.07.8 Description: This version adds new functionality, and fixes some issues * Add - Error message in fas-aes-https if shared key is mismatched [bluewave.net] * Fix - and refactor error 511 page generation[bluewave.net] * Fix - and refactor dnsmasq configuration [bluewave.net] * Fix - Typographic error preventing RFC8910 disable [bluewave.net] * Add - gateway address and gatewayfqdn to ndsctl json output [bluewave.net] * Add - RFC8910 housekeeping on startup and shutdown [bluewave.net] * Add - correctly apply dhcp option 114 for generic Linux [bluewave.net] * Add - reading of configured ndsctlsocket in ndsctl utility[bluewave.net] * Add - use send_error 200 for MHD watchdog [bluewave.net] * Add - generation of page_511 html by library script [bluewave.net] * Add - extend debuglevel support to library scripts [bluewave.net] * Refactor - fas-aes-https to simplify and make customisation of http easier [bluewave.net] * Add - library script for error 511 page, allowing customisation [bluewave.net] * Add - make authmon report connection error details [bluewave.net] * Fix- remove unwanted debug message in ndsctl [bluewave.net] * Add - RFC8910 support by default [bluewave.net] * Add - display status page when accessing /login when authenticated [bluewave.net] * Add - MHD response to RFC8910 requests [bluewave.net] * Add - Dnsmasq RFC8910 configuration [bluewave.net] * Add - send error 511 in response to unsupported http method [bluewave.net] * Add - Check for ca-bundle on OpenWrt, if not installed, add syslog messages and terminate [bluewave.net] * Add - Make ndsctl use the configured value for socket path if set and deprecate -s option [bluewave.net] * Add - Warning message when Walled Garden port 80 is allowed [bluewave.net] * Fix - remove un-needed pthread_kill in termination_handler() [bluewave.net] [T-X] * Fix - debug messages from authmon.sh [bluewave.net] * Fix - Allow disabling gateway fqdn, facilitating access to router port 80 [bluewave.net] * Fix - Segfault in ndsctl when -s option is used incorrectly [bluewave.net] [T-X] * Fix - Typo making calculation of ul/dl rates incorrect [bluewave.net] * Fix - Allow port 80 to be configured in the Walled Garden [bluewave.net] Signed-off-by: Rob White <rob@blue-wave.net>
2021-09-24 09:08:16 +02:00
Internet access is granted by either a click to continue button, or after credential verification as a result of filling in a login form.
The package incorporates the FAS API allowing many flexible customisation options.
The creation of sophisticated third party authentication applications is fully supported.
opennds: Release v9.5.1 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, gl-inet b1300, gl-inet mt300n-v2, Snapshot, 21.02.1, 19.07.8 Description: This version adds new functionality, and fixes some issues * Fix - ThemeSpec file downloads when mwan3 is running [bluewavenet] * Fix - Preemptive auth failure after previous deauth [minhng99] [bluewavenet] From v9.5.0 * Add - use average packet size instead of MTU when implementing rate limiting [bluewavenet] * Fix - typo in iptables command and remove a redundant command [bluewavenet] * Add - startdaemon() and stopdaemon() utility functions [bluewavenet] * Add - combined interface/ipaddress external gateway status monitoring [bluewavenet] * Fix - potential online/offline detection problem when mwan3 is running [bluewavenet] * Add - get_debug_level and syslog library calls [bluewavenet] * Fix - correctly reset upload and download rate rules [bluewavenet] * Add - extend upstream gateway checking for use with mwan3 loadbalance/failover [bluewavenet] * Fix - Potential NULL pointer segfault in http_microhttpd on calling authenticated() [bluewavenet] * Fix - Potential NULL pointer segfault in http_microhttpd on calling preauthenticated() [dddaniel] * Add - Calculate Bucket size based on achieved burst rate [bluewavenet] * Fix - prevent parameter parsing if clientip not known [bluewavenet] * Add - disable rate quotas by setting bucket ratio to zero [bluewavenet] * Fix - suppress some debug messages [bluewavenet] * Add - more libraries documentation [bluewavenet] * Add - library calls startdaemon and stopdaemon [bluewavenet] * Fix - Increase buffer length for longer interface names [koivunen] * Add - Update README.md [bluewavenet] * Add - bucket ratio option to config file [bluewavenet] * Add - upload and download bucket ratio config values [bluewavenet] * Fix - flag initial debuglevel to externals [bluewavenet] * Add - limit-burst tuning to rate quotas [bluewavenet] * Fix - add trailing space to defaultip [bluewavenet] * Add - record pre-emptive authentication in local log [bluewavenet] * Add - Write to local log function to libopennds [bluewavenet] * Add - set client_type and custom string for Pre-emptive authentication [bluewavenet] * Fix - Remove trailing newline from library call response [bluewavenet] * Fix - attempt to remove cid file only if client->cid is set [bluewavenet] * Add - a skip option for custom downloads to speed up serving page from themespec [bluewavenet] * Add - put client_type into query string when type is cpd canary [bluewavenet] * Add - set refresh=0 before loading images [bluewavenet] * Fix - Truncated return status [bluewavenet] * Add - Acknowlegement from call to dnsconfig [bluewavenet] * Fix - potential buffer overflow in debug output [bluewavenet] * Add - processing of custom data and client type [bluewavenet] * Add - Client Type for RFC8908 and RFC8910 clients [bluewavenet] * Add - rfc8908 replies for external FAS and refactor memory management for MHD calls [bluewavenet] * Add - send error 403 if client is not on openNDS subnet [bluewavenet] * Fix - remove uneccessary safe_asprint in auth.c [bluewavenet] * Fix - Initialise buffer to prevent receiving spurious characters [bluewavenet] * Add - encoded custom data support to ndsctl json, themespec and binauth [bluewavenet] * Add - advert_1.htm to thankyou page of theme_click-to-continue-custom-placeholders.sh [bluewavenet] * Add - library call get_interface_by_ip [bluewavenet] * Add - function encode_custom() for encoding custom data to be sent to openNDS [bluewavenet] * Fix - error 511, make all html refrences absolute to enforce link to MHD [bluewavenet] * Add - check status_path exists and is executeable [bluewavenet] * Fix - regression causing error 511 to be served from default script [bluewavenet] * Add - venue-info-url and can-extend-session json keys [bluewavenet] * Add - RFC 8908 initial experimental support [bluewavenet] * Add - debug message when resetting client [bluewavenet] * Fix - Ensure the ndscids directory exists before trying to write to it. [bluewavenet] * Fix - use eval in do_ndsctl to allow quoting of arguments [bluewavenet] * Fix - ensure client hid and client cid file is reset correctly [bluewavenet] * Fix - Titles of example ThemeSpec Files [bluewavenet] * Fix - Ensure ThemeSpec Files are executable [bluewavenet] * Remove - deprecated Allowed and Blocked entries in ndsctl status output [bluewavenet] * Add - Deprecate option macmechanism, allowedmaclist and blockedmaclist [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2021-12-18 20:38:30 +01:00
Internet hosted https portals can be implemented with no security errors, to inspire maximum user confidence.
opennds: Release v9.6.0 Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, gl-inet b1300, gl-inet mt300n-v2, Snapshot, 21.02.1, 19.07.8 Description: This version adds new functionality, and fixes some issues * Fix - correctly display return buffer in syslog [bluewavenet] * Add - use heap allocation for library call return buffer [bluewavenet] * Fix - OpenWrt, fhook request for fw3 [bluewavenet] * Add - spider remote urls before downloading [bluewavenet] * Add - OpenWrt, revert uncommitted uci updates at startup and shutdown [bluewavenet] * Fix - remove unneccesary flash writes and fix hosts updates [doctor-ox] [bluewavenet] * Add - Updated splash images [bluewavenet] * Add - OpenWrt makefile for nft or ipt dependencies [bluewavenet] * Fix - grep by word to prevent any ambiguity [doctor-ox] [bluewavenet] * Fix - ensure rate limiting is disabled if rate thresholds are set to zero [bluewavenet] * Add - querystring support for client status page [bluewavenet] * Add - Advanced/standard status page checkbox [bluewavenet] * Add - set default session timeout to 24 hours [bluewavenet] * Fix - potential buffer overflow [bluewavenet] * Fix - Restrict max packet limit to iptables maximum [bluewavenet] * Fix - descriptive labels on ndsctl status output [bluewavenet] * Add - update of README.md [bluewavenet] * Fix - Added required variable to FAS return string example documentation [dorkone] * Add - Default checkinterval set to 15 seconds [bluewavenet] * Fix - incoming and outgoing counters when unlimited bursting is enabled [bluewavenet] * Add - maximum bucket size configuration [bluewavenet] * Add - calculate moving average packet size for rate limiting [bluewavenet] * Add - some operational default values [bluewavenet] * Add - initial rate limits when unrestricted bursting is disabled [bluewavenet] * Add - Require clients to be in the dhcp database [bluewavenet] * Add - dhcpcheck library call [bluewavenet] * Fix - Remove trailing whitespace when getting clientaddress if client not active [bluewavenet] * Fix - Segfault when FAS fails to Return customstring [dorkone] [bluewavenet] * Add - Enable/Disable unrestricted bursting [bluewavenet] * Add - gatewayurl to querystring and use in place of originurl in FAS [bluewavenet] * Fix - more accurate debug message [bluewavenet] * Fix - Show packet rate correctly as packets per minute [bluewavenet] * Add - Report Packet Rate and Bucket Size in ndsctl status and json and status client page [bluewavenet] * Add - rate limit refresh to client limit rules [bluewavenet] * Fix - code readability [bluewavenet] * Fix - Documentation for data sent to Authmon Daemon [bluewavenet] * Add - Show unrestricted burst intervals in ndsctl status [bluewavenet] * Add - Set default bucket ratios to 10 [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2022-02-19 17:31:51 +01:00
This version requires iptables-nft.
endef
define Package/opennds/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_BUILD_DIR)/opennds $(1)/usr/bin/
$(INSTALL_BIN) $(PKG_BUILD_DIR)/ndsctl $(1)/usr/bin/
$(INSTALL_DIR) $(1)/etc/opennds/htdocs/images
$(INSTALL_DIR) $(1)/etc/config
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_DIR) $(1)/etc/uci-defaults
$(INSTALL_DIR) $(1)/usr/lib/opennds
$(CP) $(PKG_BUILD_DIR)/resources/splash.css $(1)/etc/opennds/htdocs/
$(CP) $(PKG_BUILD_DIR)/resources/splash.jpg $(1)/etc/opennds/htdocs/images/
opennds: Release 8.0.0 This version introduces major new functionality and some major changes * Rationalisation of support for multiple Linux distributions [bluewavenet] * Refactor login.sh script introducing base64 encoding and hashed token (hid) support [bluewavenet] * Refactor fas-hid script introducing base64 encoding and simplifying customisation of the script [bluewavenet] * Refactor binauth_log.sh and log BinAuth custom data as url encoded [bluewavenet] * Refactor fas-aes, simplifying customisation of the script [bluewavenet] * Refactor fas-aes-https, simplifying customisation of the script [bluewavenet] * Change - Use hid instead of tok when fas_secure_enabled >= 1 [bluewavenet] * Add - base64 encoding to fas_secure_enabled level 1 [bluewavenet] * Add - gatewyname, clientif, session_start, session_end and last_active to ndsctl json [bluewavenet] * Add - support for RFC6585 Status Code 511 - Network Authentication Required [bluewavenet] * Add - Client Status Page UI with Logout [bluewavenet] * Add - GatewayFQDN option [bluewavenet] * Add - client interface to status page query string [bluewavenet] * Add - support using base 64 encoded custom string for BinAuth and replace tok with hid [bluewavenet] * Add - base 64 decode option to ndsctl [bluewavenet] * Add - b64 encoding of querystring for level 1 [bluewavenet] * Add - Improved performance/user-experience on congested/slow systems using php FAS scripts [bluewavenet] * Add - support for ndsctl auth by hid in client_list [bluewavenet] * Add - Ensure faskey is set to default value (always enabled) [bluewavenet] * Add - Display error page on login failure in login.sh [bluewavenet] * Add - splash.html, add deprecation notice [bluewavenet] * Add - authmon, improved lock checking and introduce smaller loopinterval [bluewavenet] * Add - client_params, wait for ndsctl if it is busy [bluewavenet] * Add - fas-aes-https, allow progressive output to improve user experience on slow links [bluewavenet] * Fix - Block access to /opennds_preauth/ if PreAuth not enabled [bluewavenet] * Fix - On startup, call iptables_fw_destroy before doing any other setup [bluewavenet] * Fix - missing final redirect to originurl in fas-hid [bluewavenet] * Fix - ensure gatewayname is always urlencoded [bluewavenet] * Fix - client session end not set by binauth [bluewavenet] * Fix - Session timeout, if client setting is 0, default to global value [bluewavenet] * Fix - missing trailing separator on query and fix some compiler errors [bluewavenet] * Fix - ensure authmon daemon is killed if left running from previous crash [bluewavenet] * Fix - add missing query separator for custom FAS parameters [bluewavenet] * Fix - ndsctl auth, do not set quotas if client is already authenticated [bluewavenet] * Fix - client_params, show "Unlimited" when "null" is received from ndsctl json [bluewavenet] * Update configuration files [bluewavenet] * update documentation [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2021-01-08 22:01:24 +01:00
$(CP) $(PKG_BUILD_DIR)/linux_openwrt/opennds/files/etc/config/opennds $(1)/etc/config/
$(CP) $(PKG_BUILD_DIR)/linux_openwrt/opennds/files/etc/config/opennds $(1)/etc/opennds/config.uci
opennds: Release 8.0.0 This version introduces major new functionality and some major changes * Rationalisation of support for multiple Linux distributions [bluewavenet] * Refactor login.sh script introducing base64 encoding and hashed token (hid) support [bluewavenet] * Refactor fas-hid script introducing base64 encoding and simplifying customisation of the script [bluewavenet] * Refactor binauth_log.sh and log BinAuth custom data as url encoded [bluewavenet] * Refactor fas-aes, simplifying customisation of the script [bluewavenet] * Refactor fas-aes-https, simplifying customisation of the script [bluewavenet] * Change - Use hid instead of tok when fas_secure_enabled >= 1 [bluewavenet] * Add - base64 encoding to fas_secure_enabled level 1 [bluewavenet] * Add - gatewyname, clientif, session_start, session_end and last_active to ndsctl json [bluewavenet] * Add - support for RFC6585 Status Code 511 - Network Authentication Required [bluewavenet] * Add - Client Status Page UI with Logout [bluewavenet] * Add - GatewayFQDN option [bluewavenet] * Add - client interface to status page query string [bluewavenet] * Add - support using base 64 encoded custom string for BinAuth and replace tok with hid [bluewavenet] * Add - base 64 decode option to ndsctl [bluewavenet] * Add - b64 encoding of querystring for level 1 [bluewavenet] * Add - Improved performance/user-experience on congested/slow systems using php FAS scripts [bluewavenet] * Add - support for ndsctl auth by hid in client_list [bluewavenet] * Add - Ensure faskey is set to default value (always enabled) [bluewavenet] * Add - Display error page on login failure in login.sh [bluewavenet] * Add - splash.html, add deprecation notice [bluewavenet] * Add - authmon, improved lock checking and introduce smaller loopinterval [bluewavenet] * Add - client_params, wait for ndsctl if it is busy [bluewavenet] * Add - fas-aes-https, allow progressive output to improve user experience on slow links [bluewavenet] * Fix - Block access to /opennds_preauth/ if PreAuth not enabled [bluewavenet] * Fix - On startup, call iptables_fw_destroy before doing any other setup [bluewavenet] * Fix - missing final redirect to originurl in fas-hid [bluewavenet] * Fix - ensure gatewayname is always urlencoded [bluewavenet] * Fix - client session end not set by binauth [bluewavenet] * Fix - Session timeout, if client setting is 0, default to global value [bluewavenet] * Fix - missing trailing separator on query and fix some compiler errors [bluewavenet] * Fix - ensure authmon daemon is killed if left running from previous crash [bluewavenet] * Fix - add missing query separator for custom FAS parameters [bluewavenet] * Fix - ndsctl auth, do not set quotas if client is already authenticated [bluewavenet] * Fix - client_params, show "Unlimited" when "null" is received from ndsctl json [bluewavenet] * Update configuration files [bluewavenet] * update documentation [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2021-01-08 22:01:24 +01:00
$(CP) $(PKG_BUILD_DIR)/linux_openwrt/opennds/files/etc/init.d/opennds $(1)/etc/init.d/
$(CP) $(PKG_BUILD_DIR)/linux_openwrt/opennds/files/etc/uci-defaults/40_opennds $(1)/etc/uci-defaults/
$(CP) $(PKG_BUILD_DIR)/linux_openwrt/opennds/files/usr/lib/opennds/restart.sh $(1)/usr/lib/opennds/
opennds: Release v5.1.0 Maintainer: Rob White <rob@blue-wave.net> Compiled and tested using snapshot SDK for mipsel_24kc, mips_24kc and arm_cortex-a7_neon-vfpv4 OpenNDS v5.1.0 release This release adds major functionality and provides numerous fixes: Data Rate and Data Volume Quotas are implemented. BinAuth / fas_secure_enabled level 3 compatibility is implemented. Page fault and crash when ndsctl auth is called and client not found has been fixed. From the ChangeLog: * Add - Generic Linux - install opennds.service [bluewavenet] * Add - Documentation updates [bluewavenet] * Add - config file updates [bluewavenet] * Add - Install sitewide username/password splash support files [bluewavenet] * Add - quotas to binauth_sitewide [bluewavenet] * Add - Splash page updates [bluewavenet] * Add - Implement Rate Quotas [bluewavenet] * Fix - check if idle preauthenticated [bluewavenet] * Add - support for rate quotas [bluewavenet] * Fix - Correctly compare client counters and clean up debuglevel messages [bluewavenet] * Add - Implement upload/download quotas Update fas-aes-https to support quotas [bluewavenet] * Add - Rename demo-preauth scripts and install all scripts [bluewavenet] * Add - fas-aes-https layout update [bluewavenet] * Add - Set some defaults in fas-aes-https [bluewavenet] * Add - custom data string to ndsctl auth [bluewavenet] * Add - custom data string to fas-hid.php [bluewavenet] * Add - Send custom data field to BinAuth via auth_client method [bluewavenet] * Fix - missing token value in auth_client [bluewavenet] * Add - upload/download quota and rate configuration values [bluewavenet] * Add - Send client token to binauth [bluewavenet] * Add - Rename upload_limit and download_limit to upload_rate and download_rate [bluewavenet] * Fix - Pass correct session end time to binauth [bluewavenet] * Add - some debuglevel 3 messages [bluewavenet] * Add - description of the favicon and page footer images [bluewavenet] * Add - Authmon collect authentication parameters from fas-aes-https [bluewavenet] * Add - sessionlength to ndsctl auth [bluewavenet] * Fix - Page fault when ndsctl auth is called and client not found [bluewavenet] * Add - Enable BinAuth / fas_secure_enabled level 3 compatibility [bluewavenet] * Fix - Correctly set BinAuth session_end [bluewavenet] * Add - Updates to Templated Splash pages [bluewavenet] * Add - Community Testing files [bluewavenet] * Fix - BinAuth error passing client session times [bluewavenet] * Fix - PHP notice - undefined constant [bluewavenet] * Fix - OpenWrt CONFLICTS variable in Makefile [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2020-06-25 21:31:06 +02:00
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/binauth/binauth_log.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/libopennds.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/PreAuth/theme_click-to-continue-basic.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/PreAuth/theme_click-to-continue-custom-placeholders.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/PreAuth/theme_user-email-login-basic.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/PreAuth/theme_user-email-login-custom-placeholders.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/get_client_interface.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/get_client_token.sh $(1)/usr/lib/opennds/
opennds: Release 8.0.0 This version introduces major new functionality and some major changes * Rationalisation of support for multiple Linux distributions [bluewavenet] * Refactor login.sh script introducing base64 encoding and hashed token (hid) support [bluewavenet] * Refactor fas-hid script introducing base64 encoding and simplifying customisation of the script [bluewavenet] * Refactor binauth_log.sh and log BinAuth custom data as url encoded [bluewavenet] * Refactor fas-aes, simplifying customisation of the script [bluewavenet] * Refactor fas-aes-https, simplifying customisation of the script [bluewavenet] * Change - Use hid instead of tok when fas_secure_enabled >= 1 [bluewavenet] * Add - base64 encoding to fas_secure_enabled level 1 [bluewavenet] * Add - gatewyname, clientif, session_start, session_end and last_active to ndsctl json [bluewavenet] * Add - support for RFC6585 Status Code 511 - Network Authentication Required [bluewavenet] * Add - Client Status Page UI with Logout [bluewavenet] * Add - GatewayFQDN option [bluewavenet] * Add - client interface to status page query string [bluewavenet] * Add - support using base 64 encoded custom string for BinAuth and replace tok with hid [bluewavenet] * Add - base 64 decode option to ndsctl [bluewavenet] * Add - b64 encoding of querystring for level 1 [bluewavenet] * Add - Improved performance/user-experience on congested/slow systems using php FAS scripts [bluewavenet] * Add - support for ndsctl auth by hid in client_list [bluewavenet] * Add - Ensure faskey is set to default value (always enabled) [bluewavenet] * Add - Display error page on login failure in login.sh [bluewavenet] * Add - splash.html, add deprecation notice [bluewavenet] * Add - authmon, improved lock checking and introduce smaller loopinterval [bluewavenet] * Add - client_params, wait for ndsctl if it is busy [bluewavenet] * Add - fas-aes-https, allow progressive output to improve user experience on slow links [bluewavenet] * Fix - Block access to /opennds_preauth/ if PreAuth not enabled [bluewavenet] * Fix - On startup, call iptables_fw_destroy before doing any other setup [bluewavenet] * Fix - missing final redirect to originurl in fas-hid [bluewavenet] * Fix - ensure gatewayname is always urlencoded [bluewavenet] * Fix - client session end not set by binauth [bluewavenet] * Fix - Session timeout, if client setting is 0, default to global value [bluewavenet] * Fix - missing trailing separator on query and fix some compiler errors [bluewavenet] * Fix - ensure authmon daemon is killed if left running from previous crash [bluewavenet] * Fix - add missing query separator for custom FAS parameters [bluewavenet] * Fix - ndsctl auth, do not set quotas if client is already authenticated [bluewavenet] * Fix - client_params, show "Unlimited" when "null" is received from ndsctl json [bluewavenet] * Update configuration files [bluewavenet] * update documentation [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2021-01-08 22:01:24 +01:00
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/client_params.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/unescape.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/authmon.sh $(1)/usr/lib/opennds/
opennds: Release 8.0.0 This version introduces major new functionality and some major changes * Rationalisation of support for multiple Linux distributions [bluewavenet] * Refactor login.sh script introducing base64 encoding and hashed token (hid) support [bluewavenet] * Refactor fas-hid script introducing base64 encoding and simplifying customisation of the script [bluewavenet] * Refactor binauth_log.sh and log BinAuth custom data as url encoded [bluewavenet] * Refactor fas-aes, simplifying customisation of the script [bluewavenet] * Refactor fas-aes-https, simplifying customisation of the script [bluewavenet] * Change - Use hid instead of tok when fas_secure_enabled >= 1 [bluewavenet] * Add - base64 encoding to fas_secure_enabled level 1 [bluewavenet] * Add - gatewyname, clientif, session_start, session_end and last_active to ndsctl json [bluewavenet] * Add - support for RFC6585 Status Code 511 - Network Authentication Required [bluewavenet] * Add - Client Status Page UI with Logout [bluewavenet] * Add - GatewayFQDN option [bluewavenet] * Add - client interface to status page query string [bluewavenet] * Add - support using base 64 encoded custom string for BinAuth and replace tok with hid [bluewavenet] * Add - base 64 decode option to ndsctl [bluewavenet] * Add - b64 encoding of querystring for level 1 [bluewavenet] * Add - Improved performance/user-experience on congested/slow systems using php FAS scripts [bluewavenet] * Add - support for ndsctl auth by hid in client_list [bluewavenet] * Add - Ensure faskey is set to default value (always enabled) [bluewavenet] * Add - Display error page on login failure in login.sh [bluewavenet] * Add - splash.html, add deprecation notice [bluewavenet] * Add - authmon, improved lock checking and introduce smaller loopinterval [bluewavenet] * Add - client_params, wait for ndsctl if it is busy [bluewavenet] * Add - fas-aes-https, allow progressive output to improve user experience on slow links [bluewavenet] * Fix - Block access to /opennds_preauth/ if PreAuth not enabled [bluewavenet] * Fix - On startup, call iptables_fw_destroy before doing any other setup [bluewavenet] * Fix - missing final redirect to originurl in fas-hid [bluewavenet] * Fix - ensure gatewayname is always urlencoded [bluewavenet] * Fix - client session end not set by binauth [bluewavenet] * Fix - Session timeout, if client setting is 0, default to global value [bluewavenet] * Fix - missing trailing separator on query and fix some compiler errors [bluewavenet] * Fix - ensure authmon daemon is killed if left running from previous crash [bluewavenet] * Fix - add missing query separator for custom FAS parameters [bluewavenet] * Fix - ndsctl auth, do not set quotas if client is already authenticated [bluewavenet] * Fix - client_params, show "Unlimited" when "null" is received from ndsctl json [bluewavenet] * Update configuration files [bluewavenet] * update documentation [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2021-01-08 22:01:24 +01:00
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/dnsconfig.sh $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/libs/post-request.php $(1)/usr/lib/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/fas-aes/fas-aes.php $(1)/etc/opennds/
opennds: Release v5.1.0 Maintainer: Rob White <rob@blue-wave.net> Compiled and tested using snapshot SDK for mipsel_24kc, mips_24kc and arm_cortex-a7_neon-vfpv4 OpenNDS v5.1.0 release This release adds major functionality and provides numerous fixes: Data Rate and Data Volume Quotas are implemented. BinAuth / fas_secure_enabled level 3 compatibility is implemented. Page fault and crash when ndsctl auth is called and client not found has been fixed. From the ChangeLog: * Add - Generic Linux - install opennds.service [bluewavenet] * Add - Documentation updates [bluewavenet] * Add - config file updates [bluewavenet] * Add - Install sitewide username/password splash support files [bluewavenet] * Add - quotas to binauth_sitewide [bluewavenet] * Add - Splash page updates [bluewavenet] * Add - Implement Rate Quotas [bluewavenet] * Fix - check if idle preauthenticated [bluewavenet] * Add - support for rate quotas [bluewavenet] * Fix - Correctly compare client counters and clean up debuglevel messages [bluewavenet] * Add - Implement upload/download quotas Update fas-aes-https to support quotas [bluewavenet] * Add - Rename demo-preauth scripts and install all scripts [bluewavenet] * Add - fas-aes-https layout update [bluewavenet] * Add - Set some defaults in fas-aes-https [bluewavenet] * Add - custom data string to ndsctl auth [bluewavenet] * Add - custom data string to fas-hid.php [bluewavenet] * Add - Send custom data field to BinAuth via auth_client method [bluewavenet] * Fix - missing token value in auth_client [bluewavenet] * Add - upload/download quota and rate configuration values [bluewavenet] * Add - Send client token to binauth [bluewavenet] * Add - Rename upload_limit and download_limit to upload_rate and download_rate [bluewavenet] * Fix - Pass correct session end time to binauth [bluewavenet] * Add - some debuglevel 3 messages [bluewavenet] * Add - description of the favicon and page footer images [bluewavenet] * Add - Authmon collect authentication parameters from fas-aes-https [bluewavenet] * Add - sessionlength to ndsctl auth [bluewavenet] * Fix - Page fault when ndsctl auth is called and client not found [bluewavenet] * Add - Enable BinAuth / fas_secure_enabled level 3 compatibility [bluewavenet] * Fix - Correctly set BinAuth session_end [bluewavenet] * Add - Updates to Templated Splash pages [bluewavenet] * Add - Community Testing files [bluewavenet] * Fix - BinAuth error passing client session times [bluewavenet] * Fix - PHP notice - undefined constant [bluewavenet] * Fix - OpenWrt CONFLICTS variable in Makefile [bluewavenet] Signed-off-by: Rob White <rob@blue-wave.net>
2020-06-25 21:31:06 +02:00
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/fas-hid/fas-hid.php $(1)/etc/opennds/
$(CP) $(PKG_BUILD_DIR)/forward_authentication_service/fas-aes/fas-aes-https.php $(1)/etc/opennds/
endef
define Package/opennds/postrm
#!/bin/sh
uci delete firewall.opennds
uci commit firewall
endef
define Package/opennds/conffiles
/etc/config/opennds
endef
$(eval $(call BuildPackage,opennds))