c0nn3ct / x-wrt Goto Github PK

Add more stats to the basicstats.sh page in webif

On the QoS page the table of rules uses the "Protocol" field for tcp, udp
and icmp but also for anything you specify in the Peer-2-Peer section of
the rule. This leads to odd occurances where if you specify a specific
protocol and a Peer-2-Peer application the Peer-2-Peer application will be
entirely invisible but (I think) still active. 

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?


Please use labels and text to provide additional information.

sort the packages by category net/libs/etc... in the ipkg list 

Display the routers time on the info.sh page modified by the users time
zone so they get the local time. 

When using external USB disc it is possible to install packages on that
disc instead of flash. A nice howto is available at
http://www.macsat.com/macsat/content/view/16/3 0/ But the fantastic WEBIF2
does not provide the option.

It would be great it it did. 

Show all graphs on a single page. 

Add advanced dns configuration options

Could there possibly be some options provided to allow access to various
levels of the status pages to anonymous users? Similar to the old web-if
where some status information would display, and clicking on the other tabs
would require a log-in?

Ideally, provide some method, possibly even just a regex that could match
against the various /webif/*.sh URLs, to allow for unauthenticated access
on a page-by-page basis. Some of the 1st 5 tabs from the "Status" section
would be very useful. The "Info" section could be considered, and the
"Graphs" section could be cool...

Thanks! 

Make it work with nbd's qos

We need more CSS themes from talented CSS'ers! There is no reason we can't
have many CSS themes available for the user to choose from.

CSS themes should be immediately plug-in-able to the existing webif code.
No major changes should be required. We should be able to replace the
existing CSS and everything 'just work'. Some very minor webif page changes
are acceptable if they are absolutely necessary.

To test your webif theme:

mv /www/webif.css /www/webif.old cp newtheme.css /www/webif.css

How you transfer the CSS to the router is up to you. I use a network share
that is mapped at boot time. I actually even have the /www folder
sym-linked to the network share so my webif changes are stored on my hard
drive and seen in 'real-time'.

To aid in design, I put together this little package together that has a
static HTML page showing for experimentation:

http://www.bitsum.com/files/xwrt/webif_css.zip

NOTE: Although the above archive has a static HTML page, the webif pages
themselves are dynamically created from shell scripts... do not mistake
that static HTML as meaning you can just go edit the webif pages as if they
were static HTML. 

The all country setting is missing the channels 100-140 (range 5.5-5.7 GHz)
in the network-wlan.sh page. It is not possible to configure these channels
even when enabled by other cards settings. 

The firewall page should offer the predefined rules for common applications.

The only way to really get more people is to document the webif functions.
This is started on
http://wiki.x-wrt.org/index.php/Programmer%27s_Guide_to_the_Webif

The triggers or port knocking configuration page is missing. 

Hi In network-wlan.sh, there is not correct support for $country. - where
is $country set? 

root@oxo-t:/www/cgi-bin/webif# grep -ir '$country' *
network-wlan.sh:        case "$country" in

root@oxo-t:/usr/lib/webif# grep -ir '$country' *
root@oxo-t:/usr/lib/webif#

Instead of crippling the choice of channel, use: 
        # Initialize channels based on country code
        # (--- hardly a switch here ---)
        case "$country" in
                *)
                        BGCHANNELS="1 2 3 4 5 6 7 8 9 10 11 12 13 14";
CHANNEL_MAX=14
                        ACHANNELS="36 40 42 44 48 50 52 56 58 60 64 149 152
153 157 160 161 156";;
#               *)
#                       BGCHANNELS="1 2 3 4 5 6 7 8 9 10 11"; CHANNEL_MAX=11
#                       ACHANNELS="36 40 42 44 48 50 52 56 58 60 64 149 152
153 157 160 161 156";;
        esac

Add a webif page for asterisk setup.

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

The style attributes are currently hard-coded into each svg file. 

a page should be added that allows services/packages to be
Enable/Disable/Start/Stop/Restart 

In System -> Settings:

If you look at the source code of the page, all <option> tags for the
Timezone that have the same value as the one that is set are written as
SELECTED.

That's very confusing, since the user sees a different timezone selected in
the dropdown as the one he just saved.

I recommend changing the dropdown so one row will look like: (GMT+01:00)
Belgrade, Bratislava, Budapest, Ljubljana, Prague...

That is, one row(<option>) per timezone (value).

Jaka 

05/09/07 12:45:18 changed by lubek 

I modified the page to show at least the selected timezone at the occasion
of the US time zones update in r2936 for WR. It is the temporary solution
because i have not decided how many time zones to use or what information
to display so far. I worked on the time zone solution earlier but the
quantity of information is too big for the small webif2 page.

Add a button for put the router in client mode and join to an AP 

For easier config of static dhcp leases, so one doesn't have to go to
status/dhcp to get the MAC address of a client. 

05/09/07 12:22:00 changed by ohardt 

i put a button right next to each lease which, when clicked, adds the IP &
the MAC address to the static leases.

what would be even nicer is a dialog box asking for the desired IP address
and then add it. let's see if we can make that work...

05/09/07 12:22:14 changed by lubek 

The 'add to static leases' function is useless. I would want to add the IP
into Host names, other text to other fields and so on. The DHCP leases are
shown in the page content and the user can copy & paste any text from any
part of the form into an arbitrary field.

Nevertheless manualy adding a line into /etc/config/firewall like
accept:proto=tcp src=212.x.x.x/255.255.255.224 dport=80 works as expected. 

resolv.conf don't contain dns ip addresses from webif form

Hi,

please intergrate Internet Access Restriction (driven by time) to
webif2/xwrt. I think a lot of people would see this feature in webif2/xwrt.

Suggestion:

Allow/deny internet access to a specific IP/MAC (or range) only for a
defined time (time of day / weekday / month....). Maybe the internet access
can especially defined by service (e.g p2p,http, ftp ....)

That would be a reasonable extension for webif2/xwrt 

add dhcp configuration options to webif

/etc/init.d/S90pptp stop deletes the default route on routers using pppoe
as the internet connection 

Ran -hard- into this problem ;)

I was messing around with the pptp page, turning on the pptpd (deamon).
This sets pptp_srv to "1" in nvram.

But pptp_cli was still unset after a clean install, so that got set to "0".
Which caused /etc/init.d/S90pptp to be called from apply.sh: reload_pptp() {

    grep '_cli' config-pptp >&- 2>&- && [ -e /etc/init.d/S??pptp ] && {

        echo_restarting_service "@TR<<apply_pptp#pptp>>"
/etc/init.d/S??pptp stop >&- 2>&- /etc/init.d/S??pptp start >&- 2>&-
echo_action_done

    }

I guess the root problem here is that '/etc/init.d/S90pptp stop' kills
a/any running pppd, which includes the one which is used for the pppoe/pptp
connection (note that a single wan pptp connection may be set up via nvram
variables 'pptp_ifname' etc.).

In my case it dunked the active wan pptp connection, which was kinda funny
since I was connected from the outside from work :D

I think it'd be good to have a look at this and see if it can be fixed ;)

It's a bit tricky, with two possible ways to set up pptp stuff, and the
pppoe thing too, it confuses me :)

5ct :)

Cheers, Jeroen

add a webif page for configuration of a hotspot

http://forum.x-wrt.org/index.php/topic,115.msg860.html

I enabled PPTP connections, set connections and then I disabled PPTP
setting page, but on router start is PPTP dialed, but I can't see status on
PPTP status page.

I prefer on VPN-PPTP page PPTP Client: Disabled, Enabled-do not dial on
boot, Enabled-dial on boot.

In case of enabled should be possible to connect/disconnect from
Status-PPTP page

I think /etc/rc.d/S50pptpd dials this connection.

My PPTP config 

cat users.pptp
pptp20 pptpuser20 password se.rv.er.xx
pptp21 pptpuser21 password se.rv.er.xx

cat peers.pptp
pptp20 se.rv.er.xx pptpuser20
pptp21 se.rv.er.xx pptpuser21

cat peers/pptp\:pptp20
pty "pptp se.rv.er.xx --nolaunchpppd"
mppe required,stateless
name pptpuser20
remotename pptp:pptp20
file /etc/ppp/options.pptp
ipparam pptp:pptp20

Webif page that allows for p2p wds, along with having seperate ssids

logging wireless events, like associations. bcm43xx 

Lightweight wireless access points like those by Meru networks and Aruba
take a dhcp address on whatever VLAN/network they happen to be on and then
tunnel the "radio signal" back to a "radio switch."

One of the benefits sighted to such "switched wireless" systems, is that
you don't have to go around changing VLANs for every AP you put in the field.

While clearly a WRT54GL can't forward the low level "radio" signal, I think
it would be possible to use an OpenVPN or IPSec tunnel to tunnel the
ethernet packets to a central "switch."

Ideally the tunnel would not be encrypted (or encryption would be optional)
as encryption may not be necessary over the wired network and from what
I've read using OpenVPN on a WRT lowers the maximum throughput to far lower
than what it was before the tunnel. 

Power LED don't light up after boot firmware, but AP work good.

That problem I have at Asus WL500g non-deluxe adn Premium

add pages for setting up nfs and samba 

package page currently shows installed and available packages, but there is
no way to see what packages have upgrades available.

implementation details don't matter much, but simply adding another link
for each installed package that has an upgrade would suffice. 

10/08/07 11:20:14 changed by lubek

It is not desired to upgrade packages. There are only several reasons to
upgrade a package and it should be available only to an experienced user
(it can be done using the ipkg on the command line).

The available space in the jffs2 partition would be decreased by upgrading
packages installed in the squashfs partition. It would result in broken
devices for not much experienced users. We do not know the final space
requirements in the jffs2 partition; an additional test for the available
space to enable the feature only for potentially upgradable packages will
enormously increase the load time. The user should use an updated image
when necessary.

The implementation details matter! This page is the slowest page. Adding
only a link to all packages will increase the load time by several seconds
(see http://forum.x-wrt.org/index.php/topic,20.0.html). Moreover the test
for an update or a downgrade would slow it even more. I have already tested
similar features. The load time would be a minute or even several minutes
(to check every package with the standalone ipkg command). The only
solution is to include a special preprocessed report command for webif2
into ipkg or to create an extra program to process ipkg's outputs (or to
process the lists and the status data) and prepare the preprocessed data
for the webif2 page.

Perhaps it could be changed to have an additional option listed after
"Apply Changes" that would be "Commit Changes to Flash". Then "Apply
changes" would only apply them (and re-setup the network devices), and not
actually commit them to NVRAM until the "Commit" button was pressed.

I often am changing my routers to switch between having the wireless radio
enabled and disabled and between client and access point mode. I normally
leave my wireless disabled, and it is annoying that I have to commit it to
nvram when I only want it enabled until the next reboot. Then I have to
remember to go back and change it back to disabled when I'm done, instead
of just powering it off. 

To reduce brute force attacks on the sshd, add an option to configure
iptables so that no more than X connections to the sshd are allowed in an
interval. This needs to be done in such a way that good ssh sessions are
not terminated 

The new webif pages needs proper permissions, should be 755, otherwise you
will get a 404

Add a mode (along side AP, client, client bridged, etc) to act as an access
point but not a router.

The "hack" way to do this is: 1. turn off dhcp server 2. set all
ports+wireless to be on same bridge 3. set up a dhcp client to assign the
ip for the "LAN" network.

I'd like the Access Point mode to act in essentially the same way, except
it need not have a "LAN" and a "WAN" network. 

The firewall.awk is broken and generates wrong forwarding filter rules when
the forwarding target is missing the port or with the multiport extension!

Example 
forward:proto=tcp dport=48711,48712,48713-48719:192.168.1.111

Chain prerouting_wan (1 references)
num     pkts    bytes   target  prot    opt     in  out     source  destination     volby
1   0   0   DNAT    tcp     --  *   *   0.0.0.0/0   0.0.0.0/0   multiport dports
48711,48712,48713:48719 to:192.168.1.111

Chain forwarding_wan (1 references)
num     pkts    bytes   target  prot    opt     in  out     source  destination     volby
1   0   0   ACCEPT  all     --  *   *   0.0.0.0/0   192.168.1.111

The filtering rule in the forwarding_wan chain effectively eats the full
forwarded traffic and disables subsequent rules and breaks the chain policy.

See: Problem with miniupnpd 

Viewing and adding cron jobs should be done in an 'end user friendly' way
by encoding/decoding the cronjob times. An example of their encoding and is
here: http://www.csgnetwork.com/crongen.html , but that page isn't so
applicable to us, just an example. 

Webif Page for Dynamic DNS

The webif should be able to set the wan mac address mainly for cable
internet users

In Dnsmasq there is "Read Ethers".

Can we put "Add Ethers" to Advanced Wireless->Mac Filter List...

/etc/ethers is just a list of:

    mac_address[[:blank:]]*ip_address

so just: 

ETHERS='/etc/ethers'

getmacfilter(){  #doc# return list of mac address in
nvram filter list:-:stdout:
#doc#todo#some magic nvram code that outputs list of
mac addresses
  return ${res} #doc#return result of nvram get
}

setmacfilter(){  #doc# store list of mac address in
nvram filter list:stdin of words:-:
#doc#todo#some magic nvram code
#doc#Uses sort -u to ensure no doubles
  return ${res} #doc#return result of nvram set
}

split(){  #doc#emulates split as none in
busybox:stdin:stdout:
#doc#todo#some shell magic
  return ${res}
}

MAC_ADDS=$(cat ${ETHERS} | tr -s "[[:blank]]" | split
-f 1 -d ' ' ))

MAC_FILTER=$(getmacfilter||echo "Something went wrong")

(setmacfilter "${MAC_ADDS} ${MAC_FILTER}")||echo
"Something went wrong"

What steps will reproduce the problem?
1. view nvram.sh with opera
2.
3.

What is the expected output? What do you see instead?
horizontal size off

Please use labels and text to provide additional information.

Add a option to do a factory reset via the webif. 

The ability to configure the wireless interface as it's own lan

webif page to add static routes

For systems using atheros cards details status can be parsed and displayed
about connected clients or the ap it is connected to. 

root@OpenWrt:/lib/wifi# wlanconfig ath0 list
ADDR               AID CHAN RATE RSSI  DBM IDLE  TXSEQ RXSEQ CAPS ACAPS ERP
   STATE     MODE
00:XX:XX:XX:XX:XX    1    1  54M   62  -33    0   1589 25072 EPs