Commit Graph

199 Commits

Author SHA1 Message Date
Conrad Lara - KG6JEI a57d5cd08c bugfix: olsrd-watchdog false reports
olsrd-watchdog can trigger when the olsrd service is restarted
Such as when a tunnel comes up, or when a config change is
made to olsrd.

procd already monitors olsrd and makes sure it remains running.

With procd we no longer need olsrd-watchdog and can remove it.

fixes AREDN->ticket:215

Change-Id: I5067d380a22bd0ab5e597746478ef3e1ba05d72d
2017-03-31 19:34:49 +00:00
Conrad Lara - KG6JEI 8ee8fbefe0 bugfix: Increase available memory during upgrade/install process
It is possible for the system to run out of memory when dealing
with large file uploads and installs.

As part of the upgrade procedure shutdown services that are not
essential for node operations to allow more memory for install
to take place.

Includes changes to linkled to indicate this new state as it will
be shutdown as part of the cleanup process.

Memory gain (approximate)

dropbear 100kb
linkled  200kb
logd     200kb
odhcp    100kb
snmpd    500kb
xinetd   100kb

Total(approximate): 1200kb (around %4 on 32mb devices)

This is somewhat similar to files/usr/local/bin/upgrade_kill_prep
except that it kills only a select group of services
so that the system can handle the file upload while
upgrade_kill_prep does the final system cleanup to run the full
upgrade.

ref AREDN->ticket:204

Change-Id: Ic6d3aa028725064a97c4723f6d9b36e1e51d87a7
2017-03-08 03:23:52 +00:00
Conrad Lara - KG6JEI c592f44ab0 Sourcecode license text spelling correction.
Inside the source files the word "contained" was mispelled
as "conained"

The website currently lists this correctly as "contained"

This was an error in the intial stamping of the source files in
changeset:5c3ee1d0686c6e6f2907fe4fc393d86d6c5a69b5/aredn_ar71xx

Line is part of "Additional Conditions" permitted by GPLv3.
Line does not impact coders prior to the AREDN setup date
as it was added by the AREDN team.

Change-Id: I3bc09aea548100f35c08aebe8686b8d4808d56d8
Signed-off-by: Conrad Lara - KG6JEI <KG6JEI@amsat.org>
Signed-off-by: Joe Ayers <ae6xe@arrl.net>
Signed-off-by: Darryl Quinn <k5dlq@arrl.net>
Signed-off-by: Trevor Paskett - K7FPV <snoopytjp@gmail.com>
2016-12-30 18:54:05 +00:00
Conrad Lara - KG6JEI 905995eb23 feature: Automate banner file creation Patch 1 of 2
Remove banner from the files set as it will override the build
version of the banner.

Patch 2 will be in arednbase repo.

Change-Id: Iefb8288985b39b8942419f43925d00aaab53d610
2016-12-16 22:47:46 +00:00
Conrad Lara - KG6JEI 27ea95209e bugfix: Have UI keep timezone after OTA
After OTA upgrade the timezone was kept in the system file
but not in the UI so when a user would save the timezone
would be overwritten.

fixes AREDN->ticket:186

Change-Id: I593afab0c3f67ba9d300228e9cbb47d7e3d894d1
2016-12-12 08:39:35 +00:00
Darryl Quinn 25dc984988 security: protect wifi scan page
fixes AREDN->ticket:195

Change-Id: I30f8087aa59483cdbf73cfde8029ccc7bbd42cb5
2016-11-17 14:50:10 -05:00
Darryl Quinn df9c6601be enable leafletjs, leafletcss, and maptiles to be based on uci config vars
fixes AREDN->ticket:174

Change-Id: I0133ab46df95b14d55192e5e47fa4e8f6377b4c9
2016-06-22 08:43:28 -05:00
Conrad Lara - KG6JEI 061ede3488 Merge branch 'ChaosCalmer' into develop
Change-Id: I26a8677595a25aae267b7365f1e5835ea68f49b4
2016-06-19 19:26:12 -07:00
Conrad Lara - KG6JEI 8f91ad1e0e security feature: Enhance HTTPD password security
Move httpd.conf to not store password and instead depend on the shadow password file.

Also tag the 40_aredn_migrate-httpdconf script to be +x. Not strictly necessary but wish to have this standard

Change-Id: I018d9a3294e45af2316b3c3947ef2a7d8081268b
2016-06-10 19:37:57 -07:00
Conrad Lara - KG6JEI 1271db794a Merge 3.16.1.0 as released into develop
Merge branch 'release-3.16.1.0' into develop
2016-05-17 09:50:40 -07:00
Darryl Quinn 6912f69dc8 fixes AREDN->ticket:165 2016-05-15 17:35:43 -05:00
Conrad Lara - KG6JEI 86d17e0998 bugfix: RFC Compliance for DHCP and Classless static routes
RFC requires that the DHCP server include the default gateway (0.0.0.0/0) route as part the Classless network list.

Moved to node-setup so it can be set dynamically at setup run time.

fixes AREDN->ticket:155
2016-03-31 22:54:29 -07:00
Darryl Quinn 35b8278b34 bugfix: traffic generated from the tun client would not forward thru the server 2016-02-23 13:20:19 -06:00
Conrad Lara - KG6JEI 7df4747aff bugfix: Traffic from Lan to DTDLINK not masqueraded when in NAT mode.
Due to a firewall chain name changes in BB when a node was in NAT mode (instead of recommended direct mode) connections that went out over DTDLink as the first hop would not be masqed and as such would not work.
2016-01-23 20:40:01 -08:00
Conrad Lara - KG6JEI b38309bab5 Merge branch 'FixupTunnelFirewall' into release-3.16.1.0
Various fixes around tunnel firewall rules
2016-01-21 20:40:43 -08:00
Conrad Lara - KG6JEI 29ba1c0419 bugfix: Tunnel Firewall: Accept SNMP and default to block on input chain instead of accept 2016-01-21 20:39:59 -08:00
Trevor Paskett - K7FPV 923039fcc0 Merge branch 'release-3.16.1.0' of ssh://git.aredn.org/aredn_ar71xx into release-3.16.1.0 2016-01-20 10:10:34 -07:00
Trevor Paskett - K7FPV 35e05b7dac change uhttpd script_timeout from 60 to 240 to fix uploading firmware on slow links 2016-01-20 10:09:52 -07:00
Conrad Lara - KG6JEI 0f837d601a bugfix: Tunnel firewall rules throw a chain does not exist on firewall restart.
This chain may not exist by design of the check.

Redirect the iptables error to /dev/null so it doesn't clog logs
2016-01-16 21:20:22 -08:00
Conrad Lara - KG6JEI 5663741cb1 bugfix: On firewall reload some tunnel rules were not being inserted into the default chains which are flushed on both reload and restart of firewall by OpenWRT fw scripts. 2016-01-16 21:20:22 -08:00
AE6XE 2be20cbde2 bugfix: Tunnel firewall rule chain names are incorrect.
Based on previously reverted commit 646702aab9
2016-01-16 21:20:16 -08:00
AE6XE 06eb7fa688 bugfix: Remove erroneous reference in license header of 01-tunnels script.
Script is a new file created after the split from BBHN and did not use code from a file BBHN worked on.
2016-01-16 19:58:38 -08:00
Conrad Lara - KG6JEI 921967d5f9 Revert "bugfix: resolve bad chain ref and port from hotplug to a firewall include"
This reverts commit 646702aab9.

Needs to be broken up into separate commits and doesn't cleanly fix issue with tunnel firewall
2016-01-16 19:55:20 -08:00
AE6XE 646702aab9 bugfix: resolve bad chain ref and port from hotplug to a firewall include 2016-01-16 13:26:14 -08:00
Conrad Lara - KG6JEI 243ded9f23 Bump banner to 3.16.1.0 in prep for release 2016-01-13 09:45:36 -08:00
Trevor Paskett - K7FPV 0aca4ce5c7 fix bug with spaces in time zone names 2016-01-12 10:58:06 -07:00
Conrad Lara - KG6JEI bb10ca7faf Merge branch 'FirewallIncludes' into develop 2016-01-09 19:48:18 -08:00
Conrad Lara - KG6JEI 813c4cefcf feature: Decrease WIFI Beacon rate in Mesh mode to around 2 times a second.
This changes the beacon rate from once every 100tu's to once every 500tu's

1tu=1024 microseconds

This will decrease the amount of RF time being used by beacon packets.

This is especially important on 900MHz and 2.4GHz using 5MHz wide channels where 10 nodes beaconing 10x a second at ~256kbit/s can use up around 45% of the RF channel in beacons alone.
Other bands and channels and widths are not expected to see as significant an advantage due to the faster data rates.
2016-01-09 17:39:44 -08:00
Conrad Lara - KG6JEI e8b2ffd7ea feature: FirewallIncludes: Migrate tunnel firewal rules to new include format.
These rules setup chains that may be needed by other firewall rules as such we need to set them up early to be sure includes work.
2016-01-09 16:24:54 -08:00
Conrad Lara - KG6JEI 477a20d55a feature: FirewallIncludes: Add program that will auto include firewall rules that are in a set directory.
This is the basis for allowing packages to contain firewall rules that can be just dropped in a folder at install time.
2016-01-09 16:24:45 -08:00
Trevor Paskett - K7FPV 6f3cb97ea2 fix new lines 2016-01-08 21:09:38 -07:00
Trevor Paskett - K7FPV 44ab46bc87 move new settings to optional area under table, disable ntp server, ntp server fqdn validation 2016-01-08 18:04:25 -07:00
Trevor Paskett - K7FPV c6d02d964a change timezone to time_zone 2016-01-08 11:50:45 -07:00
Trevor Paskett - K7FPV 6f97c52565 add time zone and ntp server to setup page 2016-01-08 10:58:22 -07:00
Darryl Quinn 07f447313f default wifi distance to 0, disallow saving with 0 value, change alert to show on 0 2016-01-05 23:09:34 -06:00
Trevor Paskett - K7FPV 3359c44ca7 feature: add jsoninfo to olsr and open firewall ports 9090 2016-01-05 11:00:22 -07:00
AE6XE 38209b0af2 bugfix: snrlog better handle neighbor references from mac to ip to hostname 2015-12-30 17:57:49 -08:00
Conrad Lara - KG6JEI 2dfc911df7 Merge branch 'release-3.15.1.0' into develop
Conflicts:
	files/www/cgi-bin/mesh
2015-12-22 08:45:09 -08:00
AE6XE f6c134fe7c feature: AREDN banner 2015-12-11 15:38:45 -08:00
Darryl Quinn 24ccfb30bc feature: save location data from admin page 2015-12-07 15:24:39 -06:00
Conrad Lara - KG6JEI 46b49369d4 bugfix: firstboot now requires user interaction or -y flag to approve an overwrite. 2015-11-23 20:08:07 -08:00
Darryl Quinn 51f4bcc550 bugfix: ssh keys not saving across sysupgrade 2015-11-16 14:44:52 -06:00
Conrad Lara - KG6JEI dabd9a4fbc bugfix: 802.11n devices did not use 802.11n datarates
This adds support for 802.11n data rates on the mesh.

This should improve dataspeeds across the board

MIMO devices like Rocket and NanoStation should be able to use dual chains which allows diverse data transmission on each chain increasing throughput

MCS data rates in theory should cut through noise better than legacy modulation and have higher speeds on each step which should allow overall higher datarate between nodes.
2015-11-15 19:50:54 -08:00
Conrad Lara - KG6JEI 48cb37bd05 Merge branch 'release-3.15.1.0' into develop
Merging in latest release-3.15.1.0 changes into develop to provide a foundation with recent release fixes for the develop branch.

This should be 3.15.1.0b03 code.

Conflicts:
	files/etc/crontabs/root
	files/usr/local/bin/wscan
	files/www/cgi-bin/sysinfo.json
2015-11-15 19:28:56 -08:00
AE6XE 8cd8e07885 bugfix: deaf chain workaround 2015-11-01 18:33:05 -08:00
Conrad Lara - KG6JEI af97ce3f49 bugfix: "Disable default route" not kept during OTA upgrade. 2015-07-28 08:49:48 -07:00
Darryl Quinn 3ae86c67ec feature: signal charts 2015-07-26 23:09:34 -05:00
Conrad Lara - KG6JEI 2511f585f0 bugfix: Should not keep /etc/config/* on sysupgrade
We don't really need any files in there,  and keeping the folder can interfere with the programs that populate /etc/aredn_include on firstboot from uci-default.

This will cause the node to boot up in default mode (with an AP on its interface on the default channels) during its first boot, and than very quickly reboot and come up under the mesh.
2015-07-23 11:35:54 -07:00
Conrad Lara - KG6JEI cc74123ad3 bugfix: vtund was missing from arednsysupgrad.conf 2015-07-10 18:56:30 -07:00
Conrad Lara - KG6JEI 442b7e9822 bugfix:
Make sure httpd.conf is up to date on first boot.
2015-07-09 16:10:50 -07:00
Conrad Lara - KG6JEI d7be9104d9 bugfix: We need to only pull a small selection of files over through sysupgrade instead of all config files.
opkg config can cause issues on OS upgrade among others.

ref AREDN->ticket:131
2015-07-09 09:25:00 -07:00
Conrad Lara - KG6JEI 8975c46c67 bugfix: TPLink and similar, fix port_map led mapping 2015-07-02 20:30:27 -07:00
Conrad Lara - KG6JEI 6b404c27ff bugfix: move set eth mac fixup to /etc/init.d/local
Not getting much debug information at moment, would like to put this in uci-defaults but with issues that I can't seem to log at moment (and not having serial cable for this device) I'm going with lets put it in /etc/init.d/local before nvram and similar gets set.

ref AREDN->ticket:115
2015-07-02 19:03:47 -07:00
Conrad Lara - KG6JEI 2482af260c bugfix: re-work the mac change code.
Old code would set mac on the sub-vlan not the master interface which could cause issues.

Rework to be more functional in the future and to work correctly on vlan interfaces.

ref AREDN->ticket:115
2015-07-01 23:03:01 -07:00
Conrad Lara - KG6JEI 794c00c7c6 bugfix: "wifi" network isn't yet defined during firstboot so hard code interface names to eth0 and wlan0
ref AREDN->ticket:115
2015-06-30 22:17:45 -07:00
Conrad Lara - KG6JEI 7985ff6ba3 bugfix: deal with duplicate MAC on LAN and WIFI
ref AREDN->ticket:115
2015-06-29 22:58:08 -07:00
Darryl Quinn 8da9756817 bugfix: removed debugging statements 2015-06-17 22:43:20 -05:00
Darryl Quinn 3d7893fd46 Revert "Revert "fixes AREDN->125""
This reverts commit d917b5b2ec.
2015-06-17 00:40:34 -05:00
Darryl Quinn d917b5b2ec Revert "fixes AREDN->125"
This reverts commit 7a05f76c93.
2015-06-17 00:39:07 -05:00
Darryl Quinn 7a05f76c93 fixes AREDN->125 2015-06-17 00:38:13 -05:00
Darryl Quinn 807f381a04 bugfix: network and firewall tunnel rules reworked 2015-06-14 23:30:06 -05:00
Darryl Quinn 5dc1d0fa02 Revert "bugfix: missing include in firewall config"
This reverts commit 05839715f6.
2015-06-14 22:28:47 -05:00
Darryl Quinn 05839715f6 bugfix: missing include in firewall config 2015-06-11 01:21:30 -05:00
Darryl Quinn 91762973a5 bugfix: tunnel firewall changes 2015-06-11 01:02:55 -05:00
Darryl Quinn 81ac8b7fbe bugfix: losing network interfaces after node-setup 2015-06-11 00:40:14 -05:00
Conrad Lara - KG6JEI 1f2737f0f3 bugfix: tunnels: Unable to route to connections across tunnel
Firewall rules don't get called because vtund is at /usr/sbin/vtund not /usr/bin/vtund

Also make the check if line posix compatible while we are chaning the path to be sure it works in the future too.
2015-05-25 23:04:34 -07:00
Conrad Lara - KG6JEI 3850cbac53 tunnels: Tunnels should only start when in mesh mode
Tunnels are not supported in other modes as such we should only let them start in mesh mode.
2015-05-24 12:59:11 -07:00
Conrad Lara - KG6JEI 5cc53dec88 tunnels: Set tunnel init.d scripts to be executable
Remove the chmod step inside of setup.

Came across one time where this didn't trigger.

In addition this saves us from using additional storage space on the node as a +x creates a duplicate file.
2015-05-24 12:30:23 -07:00
Conrad Lara - KG6JEI 06a46e4d2a bugfix: Radio0Path is unknonw WIFI doesn't start.
wifi detect  is called in /etc/init.d/boot before uci_apply_defaults is called.

Because of this if we don't have the data about the radio0path we need to remove the wifi config file first before calling wifi detect.
2015-05-16 11:32:29 -07:00
Conrad Lara - KG6JEI e69f1e98ba bugfix: Move aredn_include setup to uci-defaults and fix radio0path upgrade flaw
Needs to be in uci-defaults to be sure these data sets execute BEFORE the OS boots

We also need to get radio0 path because its mandatory for wifi to work.

Needed for sysupgrade from 3.0.2 to latest version.
2015-05-15 22:54:16 -07:00
Conrad Lara - KG6JEI dff687eed7 Merge branch 'DefaultChannel' into develop
Allows nodes to default to a common channel that is in the most common bandplan space for Part 97 usage.

Local cordination is still needed by users to make sure the channel matches the local deployment.

Defaults are as follows:

Band   : Channel Freq : Bandwidth
900    : 912MHz       : 5MHz
2400   : 1 2412MHz    : 20MHz
3400   : 3420MHz      : 5MHz
5800   : 149 5745MHz  : 5MHz

2.4GHz keeps channel 1 at 20MHz because it is the standard deployment.
All other bands are still 'new' and no standard exist so we are creating one.

5MHz chosen because it better fits the emcomm goal. Smaller width should be stronger allowing for better networks.

Local networks can change as they see fit.
2015-05-13 22:02:08 -07:00
Conrad Lara - KG6JEI 8761ffc3b8 feature: default rf channel : Remove setting RF channel on first boot.
Remove setting RF channel on first boot in uci-defaults.

This should allow the node to use standard wifi channels when it boots allowing mesh setup to be run from a laptop or mobile device.

We will later move them to a real mesh channel during the mesh setup page.

Should also resolv issue where nodes were booting up on channel -2 and similar and wifi would refuse to start due to regdomain.
2015-05-13 21:50:32 -07:00
Darryl Quinn 1ffa2b69a4 bugfix: tunnel: hot plug monitoring wrong interface name to trigger fw scripts 2015-05-12 19:24:06 -05:00
Conrad Lara - KG6JEI dcb4994cda bugfix: tunnels: Tunnels fail to start after saving.
etc/init.d/vtund needs to be +x
2015-05-10 14:39:03 -07:00
Conrad Lara - KG6JEI 27bf54f2dc Merge branch 'SupportTool' into develop
Add new feature for support information to admin interface

Conflicts:
	files/etc/httpd.conf
2015-05-08 20:03:22 -07:00
Conrad Lara - KG6JEI 8299862b57 feature: support tool: Restrict Access
Restrict access to support tool to logged in admin user
2015-05-08 19:55:09 -07:00
Darryl Quinn 5afde21c9f bugfix: secured vpn and vpnc pages 2015-05-07 22:41:06 -05:00
Darryl Quinn defd944fc1 changed graphics: https://www.iconfinder.com/icons/183208/bin_can_garbage_trash_icon#size=20 (Free for commercial use) 2015-04-28 22:37:33 -07:00
Darryl Quinn 5d6ba0c244 fix client options and disconnect graphic 2015-04-26 23:21:42 -05:00
Darryl Quinn a43ef2827b feature: improved stop methods for client and server. added IPs to uci config 2015-04-20 23:53:57 -05:00
Darryl Quinn dec3eeeb47 Merge commit '88037845309b311901a590ca2a2b91adbd79bfc0' into tunnel_mainline 2015-04-15 21:09:32 -05:00
Darryl Quinn 7371373235 feature: client and server fixes. calculate IP's for dest/gateway 2015-04-15 17:39:45 -05:00
Conrad Lara - KG6JEI 94a803d456 feature: Add initial read-only SNMP support in mesh mode.
Config file is present upon initial start and in mesh mode.

Daemon still starts up in other modes but will not function w/o settings.

Firewall:
Permit access for UDP:161 (SNMPD) on  WIFI and DTDLINK
Lan is permitted by default allow rules.
2015-04-14 22:31:21 -07:00
Darryl Quinn cf1ddb900b bugfix: network/start now resets to default, added icons for pages 2015-04-09 10:14:04 -05:00
Darryl Quinn c40a42562f feature: implement vtundsrv startup script. make 13-vtun vtund aware 2015-04-08 00:15:36 -05:00
Darryl Quinn eeebc9ac09 Merge branch 'develop' into tunnel_mainline 2015-04-07 10:59:06 -05:00
Conrad Lara - KG6JEI 908626336f bugfix: Configuration NOT Saved? Can't open '/etc/ared_include/system_netled'
File wasn't created on boot due to a missing space in if statment.

In addition other services would not start.
2015-04-07 08:51:32 -07:00
Darryl Quinn e6d08f5606 merged from develop 2015-04-07 10:36:42 -05:00
Conrad Lara - KG6JEI e7c3cdc909 bugfix: CPE510: Network activity led's broke after config save
Save the port mapping for link_lan led's for use in the system file so that the link led's will work after save and reboot
2015-04-06 21:03:13 -07:00
Conrad Lara - KG6JEI 6e74aaf0f4 bugfix: CPE510: networking does not function after initial config save
After saving the config the lack of the root level switch entry which enables vlans and resets the switch causes the network to shutdown.
2015-04-06 10:44:05 -07:00
Conrad Lara - KG6JEI 3c07872f06 bugfix: Make sure we create the swconfig file even if it will end up empty.
If we don't create the file the system will have nothing to include later on and the script will run on every boot
2015-04-05 23:05:42 -07:00
Conrad Lara - KG6JEI 79902f0876 hardware: CPE510: Retain device path information and import into configs at save time.
Save the intial path at install and include it each time we save the config
2015-04-05 23:04:32 -07:00
Conrad Lara - KG6JEI 8faab9c11c wireless: Let the OS build the default wireless config
The first wireless config will be built by OpenWRT instead of us.
2015-04-05 22:40:02 -07:00
Conrad Lara - KG6JEI 31bd519266 hardware: AR934x: Pull in stored swconfig information when saving configs 2015-04-05 21:06:39 -07:00
Conrad Lara - KG6JEI dccd1ea42c hardware: AR934x: Store swconfig information for future use 2015-04-05 21:03:50 -07:00
Darryl Quinn 32600d5467 initial deploy 2015-04-01 10:42:53 -05:00
Conrad Lara - KG6JEI a73e459263 Merge branch 'DynamicInterfaceNames' into develop 2015-03-27 23:56:14 -07:00
Conrad Lara - KG6JEI 8df5b5ff49 Merge branch 'cleanupoldfiles' into develop 2015-03-27 19:24:27 -07:00
Conrad Lara - KG6JEI 303c9c264f cleanup: opkg.conf is now built by the BuildRoot and is no longer needed. 2015-03-27 19:20:23 -07:00
Conrad Lara - KG6JEI 0dbe83c61e feature: Make nodes advertised targeted network routes to mesh.
Makes the nodes advertise using DHCP Options 121 and 249 routes to the mesh (10.0.0.0/8) and the reserved (172.16.0.0/12) address ranges.

This change allows directing systems to prefer the mesh node for mesh ranges unless another network rule is more specific (such as a directly connected network)
This is mostly useful where a PC may have multiple network connections active as it improves the desire for the packets to travel via the mesh network.

Currently the:

10.0.0.0/8 range is used by mesh nodes and dtdlinking of mesh nodes.
172.27.0.0/16 is used for default LAN network on NAT nodes.
172.33.0.0/16 is for ad-hoc tunnels

All others in the advertised range are reserved for future network use.
2015-03-27 11:30:52 -07:00