OpenWrt 22.03.0 waxay la timid app Firewall cusub, taageero in ka badan 180 qalab iyo in ka badan

Hal sano oo horumar ah ka dib, se ayaa ku dhawaaqay sii deynta nooc cusub oo weyn ee qaybinta FurWrt 22.03.0, lagu bartilmaameedsado codsiyada aaladaha shabakadaha kala duwan, sida router-yada, furayaasha, iyo meelaha laga galo.

FurWrt waxay taageertaa aalado badan iyo qaab dhismeedyo kala duwan oo leh nidaam dhismo kaas oo kuu ogolaanaya inaad si sahlan oo sahlan u sameysid iskudubarid isku dhafan, oo ay ku jiraan qaybo kala duwan oo ka mid ah golaha, taas oo sahlaysa in la abuuro firmware diyaarsan ama sawir disk ah oo ku habboon hawlo gaar ah oo leh xirmooyinka la rabo ee horay loo sii rakibay. .

Wararka ugu muhiimsan ee OpenWrt 22.03.0

Noocan cusub ee OpenWrt 22.03.0 ee la soo bandhigay, default waa la karti codsi cusub oo maamulka firewall, fw4 (Firewall4), ku salaysan shaandhada baakadaha nftables.

Faylasha Habaynta Dab-damiska (/etc/config/firewall) iyo interface uci ma bedelifw4 waxa ay u shaqayn kartaa sidii badal hufan oo hore loo isticmaalay iptables-ku salaysan fw3 Toolkit. Waxa ka reeban xeerar gacanta lagu daray (/etc/firewall.user), kuwaas oo u baahan doona in dib loogu qoro nftables (fw4 waxay kuu ogolaanaysaa inaad ku darto blocks qaanuunkaaga, laakiin qaab nftables).

Isbeddel kale oo muuqda ayaa ah kaas qalabkii hore ee iptables-ku-salaysnaa waa la saaray Laga soo bilaabo sawirada caadiga ah, laakiin waxaa lagu soo celin karaa iyada oo la adeegsanayo maareeyaha xirmada opkg ama Qalabka Dhismaha Sawirka. The iptables-nft, arptables-nft, ebtables-nft, iyo xtables-nft wrappers ayaa sidoo kale la bixiyaa, taas oo kuu ogolaanaysa inaad abuurto xeerar loogu talagalay nftables adoo isticmaalaya syntax iptables.

Intaa waxaa dheer, waxaa sidoo kale la xusay in taageero lagu daray in ka badan 180 qalab cusub, oo ay ku jiraan 15 qalab ku salaysan MediaTek MT7915 chip Wi-Fi 6 ku habboon (IEEE 802.11ax). Tirada guud ee aaladaha la taageeray ayaa gaadhay 1580.

Wareejinta aaladaha ayaa sii socotay qaddarka si loo isticmaalo nidaamka hoosaadka kernel-ka ee DSA (Distributed Switch Architecture), kaas oo siiya qalab lagu habeeyo laguna maareeyo furayaasha furayaasha Ethernet-ka ee isku xidhan, iyadoo la adeegsanayo habab lagu habeeyo isku-xidhka shabakadaha caadiga ah (iproute2, ifconfig).

DSA waxaa loo isticmaali karaa in lagu habeeyo dekedaha iyo VLAN-yada Halkii laga heli lahaa qalabkii hore ee swconfig, laakiin dhammaan darawalada beddelka ma taageeraan DSA weli. Nooca la soo jeediyay, DSA waxa loo sahlay bcm53xx (dareewalada loo turjumay dhammaan looxyada), lantiq (xrx200 iyo vr9 ku salaysan SoCs) iyo sunxi (Bananapi Lamobo R1 taarikada). Markii hore, ath79 (TP-Link TL-WR941ND), bcm4908, gemini, kirkwood, mediatek, mvebu, octeon, ramips (mt7621) iyo aaladaha realtek ayaa loo wareejiyay DSA.

Interface webka LuCI wuxuu leeyahay qaab mugdi ah, Sida caadiga ah, qaabka si toos ah ayaa loo dhaqaajiyaa iyadoo lagu saleynayo goobaha browserka, laakiin sidoo kale waxaa lagu qasbi karaa in lagu furo "System" -> "Nidaamka" -> "Luqadda iyo Qaabka" menu.

Sannadka 2038 dhibaatada la xaliyay oo ay sababtay qulqulka nooca 32-bit time_t (32-bit time time time) ayaa buuxdhaafi doona Jan 19, 2038). Nooca cusub, laanta musl 1.2.x waxaa loo isticmaalaa sidii maktabad caadi ah, taas oo, 32-bit architectures, 32-bit timers-kii hore waxaa lagu beddelay 64-bit (nooca time_t waxaa lagu beddelay time64_t). Nidaamyada 64-bit, nooca time64_t ayaa marka hore la isticmaalaa (miisaanka ayaa buux dhaafi doona 292 bilyan sano). U beddelashada nooca cusub ayaa bedeshay ABI, kaas oo u baahan doona dib u dhiska dhammaan barnaamijyada 32-bit ee la xidhiidha musl libc (dib u dhis uma baahna barnaamijyada 64-bit).

Dhanka kale, waxaan sidoo kale heli karnaa versions xirmo updated, oo ay ka mid yihiin Kernel Linux 5.10.138 oo leh xirmo wireless cfg80211/mac80211 dekedda kernel 5.15.58 (horey u ahaa kernel 5.4 oo leh xirmo wireless oo ka yimid laanta 5.10), musl libc 1.2.3, glibc 2.34, gcc 11.2.0, binutils 2.37, hostapd 2.10, dnsmasq 2.86

Ugu dambeyntii, laakiin ugu yaraan, waxaa la sheegay in wax udhisaya madal arc770 (Synopsys DesignWare ARC 770D) la joojiyay.

Hadaad rabto inaad waxbadan ka ogaato wixii faahfaahin ah ee ku dhex jira sii deynta cusub ee firmware OpenWrt 22.03.0 waxaad ka eegi kartaa macluumaadka daabacaadda asalka ah Xiriirka soo socda.

Soo deji nooca cusub ee OpenWrt 22.03.0

Dhismayaasha noocyadan cusub waxaa loo diyaariyey 35 aagag kala duwan, oo laga heli karo xirmooyinka cusbooneysiinta ka soo xiriir khadkan hoose.