<feed xmlns='http://www.w3.org/2005/Atom'>
<title>mtk-20170518/package/network/services/igmpproxy/files, branch master</title>
<subtitle>MTK 20170518 : Mediatek SDK based on OpenWRT Barrier Breaker</subtitle>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/'/>
<entry>
<title>igmpproxy: drop SSDP packets</title>
<updated>2018-07-30T08:43:36+00:00</updated>
<author>
<name>Dmitry Tunin</name>
<email>hanipouspilot@gmail.com</email>
</author>
<published>2018-07-28T14:48:42+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=c128371124ce4d197a5fbc00e42b58e9d82c571e'/>
<id>c128371124ce4d197a5fbc00e42b58e9d82c571e</id>
<content type='text'>
It is insecure to let this type of packets inside
They can e.g. open ports on some other routers with UPnP, etc

Signed-off-by: Dmitry Tunin &lt;hanipouspilot@gmail.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
It is insecure to let this type of packets inside
They can e.g. open ports on some other routers with UPnP, etc

Signed-off-by: Dmitry Tunin &lt;hanipouspilot@gmail.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>igmpproxy: add a silent logging option</title>
<updated>2018-07-28T14:20:39+00:00</updated>
<author>
<name>Dmitry Tunin</name>
<email>hanipouspilot@gmail.com</email>
</author>
<published>2018-07-28T14:06:28+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=7a6b2badfa56cfd833d64f113398198f71fd896e'/>
<id>7a6b2badfa56cfd833d64f113398198f71fd896e</id>
<content type='text'>
[0-3](none, minimal[default], more, maximum)

It is not 100% backward compatible, because now 0 disables logging

Signed-off-by: Dmitry Tunin &lt;hanipouspilot@gmail.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
[0-3](none, minimal[default], more, maximum)

It is not 100% backward compatible, because now 0 disables logging

Signed-off-by: Dmitry Tunin &lt;hanipouspilot@gmail.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>igmpproxy: run in foreground for procd</title>
<updated>2018-07-18T17:00:42+00:00</updated>
<author>
<name>Kevin Darbyshire-Bryant</name>
<email>ldir@darbyshire-bryant.me.uk</email>
</author>
<published>2018-07-18T16:51:59+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=9d5a2469304eb23b6d09432a6d9b6a57d0019d2a'/>
<id>9d5a2469304eb23b6d09432a6d9b6a57d0019d2a</id>
<content type='text'>
procd needs processes to stay in foreground to remain under its gaze and
control.  Failure to do so means service stop commands fail to actually
stop the process (procd doesn't think it's running 'cos the process has
exited already as part of its forking routing)

Signed-off-by: Kevin Darbyshire-Bryant &lt;ldir@darbyshire-bryant.me.uk&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
procd needs processes to stay in foreground to remain under its gaze and
control.  Failure to do so means service stop commands fail to actually
stop the process (procd doesn't think it's running 'cos the process has
exited already as part of its forking routing)

Signed-off-by: Kevin Darbyshire-Bryant &lt;ldir@darbyshire-bryant.me.uk&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>igmpproxy: fix creation of firewall rules</title>
<updated>2018-05-07T09:01:04+00:00</updated>
<author>
<name>Jaap Buurman</name>
<email>jaapbuurman@gmail.com</email>
</author>
<published>2018-05-01T09:53:53+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=0b04926433b60ac1ec448f9dfa8a36dfe5bdcae9'/>
<id>0b04926433b60ac1ec448f9dfa8a36dfe5bdcae9</id>
<content type='text'>
The init sccript for igmpproxy uses the option 'network' both as an interface name for fetching the l3_device name and for creating the firewall rules. This only works if the name of the network and firewall zone are identical.

This commit introduces a new option 'zone' for configuring the upstream and downstream firewall zones in order for the init script to create the required firewall rules automatically. When no such options are given, the init script falls back to not creating the firewall rules and the user can opt to create these manually.

Signed-off-by: Jaap Buurman &lt;jaapbuurman@gmail.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The init sccript for igmpproxy uses the option 'network' both as an interface name for fetching the l3_device name and for creating the firewall rules. This only works if the name of the network and firewall zone are identical.

This commit introduces a new option 'zone' for configuring the upstream and downstream firewall zones in order for the init script to create the required firewall rules automatically. When no such options are given, the init script falls back to not creating the firewall rules and the user can opt to create these manually.

Signed-off-by: Jaap Buurman &lt;jaapbuurman@gmail.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>igmpproxy: remove firewall rules when service is stopped</title>
<updated>2017-11-14T21:01:44+00:00</updated>
<author>
<name>Hans Dedecker</name>
<email>dedeckeh@gmail.com</email>
</author>
<published>2017-11-13T21:33:48+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=31ebbe34ccc066c212ef20de0856ab3a428fb801'/>
<id>31ebbe34ccc066c212ef20de0856ab3a428fb801</id>
<content type='text'>
Remove multicast routing firewall rules when the igmpproxy is stopped by
triggering a firewall config change.
Keeping the firewall open from the wan for igmp and udp multicast is not
desired when the igmpproxy service is inactive.

Signed-off-by: Hans Dedecker &lt;dedeckeh@gmail.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Remove multicast routing firewall rules when the igmpproxy is stopped by
triggering a firewall config change.
Keeping the firewall open from the wan for igmp and udp multicast is not
desired when the igmpproxy service is inactive.

Signed-off-by: Hans Dedecker &lt;dedeckeh@gmail.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>igmpproxy: remove procd_open_trigger/procd_close_trigger calls</title>
<updated>2016-07-29T14:41:09+00:00</updated>
<author>
<name>Felix Fietkau</name>
<email>nbd@nbd.name</email>
</author>
<published>2016-07-29T11:07:08+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=c02f41c1d2f2626de551da01c800938066e564c6'/>
<id>c02f41c1d2f2626de551da01c800938066e564c6</id>
<content type='text'>
Signed-off-by: Felix Fietkau &lt;nbd@nbd.name&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Felix Fietkau &lt;nbd@nbd.name&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>igmpproxy: logging options - make work &amp; improve</title>
<updated>2016-07-11T12:19:47+00:00</updated>
<author>
<name>Kevin Darbyshire-Bryant</name>
<email>kevin@darbyshire-bryant.me.uk</email>
</author>
<published>2016-07-04T15:15:24+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=527696674a336731b6bd029748a7b5f0a17803cb'/>
<id>527696674a336731b6bd029748a7b5f0a17803cb</id>
<content type='text'>
Move logging command line option to uci:
option verbose [0]/1/2 - mono-syllabic/verbose/noisy

Previously handled as 'OPTIONS' in .init script however variable
was ignored so never worked.

Signed-off-by: Kevin Darbyshire-Bryant &lt;kevin@darbyshire-bryant.me.uk&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Move logging command line option to uci:
option verbose [0]/1/2 - mono-syllabic/verbose/noisy

Previously handled as 'OPTIONS' in .init script however variable
was ignored so never worked.

Signed-off-by: Kevin Darbyshire-Bryant &lt;kevin@darbyshire-bryant.me.uk&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>igmpproxy: fix spurious restarts on interface events, pass used netdevs to procd instead</title>
<updated>2015-09-26T23:27:23+00:00</updated>
<author>
<name>Felix Fietkau</name>
<email>nbd@openwrt.org</email>
</author>
<published>2015-09-26T23:27:23+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=4e4b4c8cb5d510e26debf47e6ea5db6970038111'/>
<id>4e4b4c8cb5d510e26debf47e6ea5db6970038111</id>
<content type='text'>
Signed-off-by: Felix Fietkau &lt;nbd@openwrt.org&gt;

SVN-Revision: 47055
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Felix Fietkau &lt;nbd@openwrt.org&gt;

SVN-Revision: 47055
</pre>
</div>
</content>
</entry>
<entry>
<title>igmpproxy: add names for default config lan/wan phyint sections to make it easier to refer to them from scripts</title>
<updated>2015-03-19T20:37:40+00:00</updated>
<author>
<name>Felix Fietkau</name>
<email>nbd@openwrt.org</email>
</author>
<published>2015-03-19T20:37:40+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=f88687aaf9603e422ccda609a60a96c55912af9c'/>
<id>f88687aaf9603e422ccda609a60a96c55912af9c</id>
<content type='text'>
Signed-off-by: Felix Fietkau &lt;nbd@openwrt.org&gt;

SVN-Revision: 44896
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Felix Fietkau &lt;nbd@openwrt.org&gt;

SVN-Revision: 44896
</pre>
</div>
</content>
</entry>
<entry>
<title>igmpproxy: do not attempt to ifstatus error messages as json</title>
<updated>2014-12-12T14:52:29+00:00</updated>
<author>
<name>Felix Fietkau</name>
<email>nbd@openwrt.org</email>
</author>
<published>2014-12-12T14:52:29+00:00</published>
<link rel='alternate' type='text/html' href='http://www.chd.sx/cgit/mtk-20170518/commit/?id=8afce572b7849c040812892eec2a8cd0d1e34b4c'/>
<id>8afce572b7849c040812892eec2a8cd0d1e34b4c</id>
<content type='text'>
Signed-off-by: Felix Fietkau &lt;nbd@openwrt.org&gt;

SVN-Revision: 43660
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Felix Fietkau &lt;nbd@openwrt.org&gt;

SVN-Revision: 43660
</pre>
</div>
</content>
</entry>
</feed>
