staging/mkresin, branch master

dnsmasq: full: disable ipset support by default

2022-05-04T20:13:55Z

OpenWrt ships with nftables. Do not enable ipset support by default any more. Signed-off-by: Mathias Kresin

dnsmasq: nftset: serve from ipset config

2022-05-04T20:13:55Z

Use existing ipset configs as source for nftsets to be compatible with existing configs. As the OS can either have iptables XOR nftables support, it's fine to provide both to dnsmasq. dnsmasq will silently fail for the present one. Depending on the dnsmasq compile time options, the ipsets or nftsets option will not be added to the dnsmasq config file. dnsmasq will try to add the IP addresses to all sets, regardless of the IP version defined for the set. Adding an IPv6 to an IPv4 set and vice versa will silently fail. Signed-off-by: Mathias Kresin

dnsmasq: Enable dnsmasqs new nftables support

2022-05-04T20:13:55Z

Add build option for nftables sets. Signed-off-by: Kevin Darbyshire-Bryant

dnsmasq: bump to 2.87test8

2022-05-04T20:13:55Z

Signed-off-by: Kevin Darbyshire-Bryant

dnsmasq: add uci-defaults script for ipset migration

2022-05-04T20:13:55Z

When running sysupgrade from an existing configuration, move existing ipset definitions to a dedicated config section. Later on, it will allow to server ipset as well as nftable sets from the same configuration. Signed-off-by: Mathias Kresin

packages: nvram: add NVRAM quirks for bcm53xx target

2022-05-04T19:51:20Z

Add NVRAM quirks script for the bcm53xx target. Split NVRAM quirks for the bcm47xx and bcm53xx targets. Move clear partialboot NVRAM quirk for Linksys EA9500 here. Add set wireless LED behaviour quirk for Asus RT-AC88U. Use boot() instead of start() as nvram commands are meant to be executed only once, at boot. Signed-off-by: Arınç ÜNAL

firewall: config: remove restictions on DHCPv6 allow rule

2022-05-04T13:26:16Z

Remove restrictions on source and destination addresses, which aren't specified on RFC8415, and for some reason in openwrt are configured to allow both link-local and ULA addresses. As cleared out in issue #5066 there are some ISPs that use Gloabal Unicast addresses, so fix this rule to allow them. Fixes: #5066 Signed-off-by: Tiago Gaspar [rebase onto firewall3, clarify subject, bump PKG_RELEASE] Signed-off-by: Jo-Philipp Wich

ltq-vdsl-app: disconnect when service is stopped

2022-05-04T00:38:04Z

Stop the connection when the control daemon is terminated. The code is a modified version of the termination routine in version 4.23.1 of the daemon (which doesn't support VR9 modems anymore). This could also be implemented by calling the acos and acs commands via dsl_cpe_pipe.sh in the init script. However, doing it in the daemon itself has the advantage of also working if it is terminated in another way (for example during sysupgrade). Signed-off-by: Jan Hoffmann Tested-by: Martin Blumenstingl

ltq-vdsl/ltq-adsl: fix elapsed time calculation

2022-05-04T00:38:04Z

The driver maintains elapsed times by repeatedly accumulating the time since the previous update in a loop. For the elapsed showtime time, the time difference is truncated to seconds before adding it, leading to a sizable error over time. Move the truncation to before calculation of the time difference in order to remove this error. Also maintain the total elapsed time in the same way in full seconds, to prevent the unsigned 32-bit counter from wrapping around after about 50 days. Testing on a VR9 device shows that the reported line uptime now matches the actual elapsed wall time. The ADSL variant is only compile-tested, but it should also work as the relevant code is identical. Signed-off-by: Jan Hoffmann Tested-by: Martin Blumenstingl

ltq-atm/ltq-ptm: avoid unnecessary build dependencies

2022-05-04T00:38:04Z

Right now, both ltq-adsl-mei and ltq-vdsl-mei are always built, even when they aren't necessary for the selected variant. This can cause the build to fail, for example ltq-vdsl-mei doesn't build successfully here on xway target due to the vectoring callback. Make these dependencies conditional on the specific package variants, so they are only built when actually needed. Signed-off-by: Jan Hoffmann Tested-by: Martin Blumenstingl