mirror of
https://github.com/openwrt/openwrt.git
synced 2024-12-30 18:47:06 +00:00
1edf306b31
11f5c7b fw4.uc: fix zone helper assignment
b9d35ff fw4.uc: don't skip zone for unavailable helper
e35e26b tests: add test for zone helpers
a063317 ruleset: fix conntrack helpers
e1cb763 ruleset: reuse zone-jump.uc template for notrack and helper chain jumps
11410b8 ruleset: reorder declarations & output tweaks
880dd31 fw4: fix skipping invalid IPv6 ipset entries
5994466 fw4: simplify `is_loopback_dev()`
53886e5 fw4: fix crash in parse_cthelper() if no helpers are present
11256ff fw4: add support for configurable includes
3b5a033 tests: add test coverage for firewall includes
d79911c fw4: support sets with timeout capability but without default expiry
15c3831 fw4: add support for `option log` in rule and redirect sections
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
(cherry picked from commit e8433fb433)
51 lines
1.2 KiB
Makefile
51 lines
1.2 KiB
Makefile
#
|
|
# Copyright (C) 2021 Jo-Philipp Wich <jo@mein.io>
|
|
#
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=firewall4
|
|
PKG_RELEASE:=$(AUTORELEASE)
|
|
|
|
PKG_SOURCE_PROTO:=git
|
|
PKG_SOURCE_URL=$(PROJECT_GIT)/project/firewall4.git
|
|
PKG_SOURCE_DATE:=2022-06-17
|
|
PKG_SOURCE_VERSION:=15c38317eff2bdef963cc3032512ce6cf191dadb
|
|
PKG_MIRROR_HASH:=cff2beca5ef6c337ce8f0e93466509071dc8c614216b974c4adf4848d67f52e0
|
|
PKG_MAINTAINER:=Jo-Philipp Wich <jo@mein.io>
|
|
PKG_LICENSE:=ISC
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
define Package/firewall4
|
|
SECTION:=net
|
|
CATEGORY:=Base system
|
|
TITLE:=OpenWrt 4th gen firewall
|
|
DEPENDS:= \
|
|
+kmod-nft-core +kmod-nft-fib +kmod-nft-offload \
|
|
+kmod-nft-nat +kmod-nft-nat6 \
|
|
+nftables-json \
|
|
+ucode +ucode-mod-fs +ucode-mod-ubus +ucode-mod-uci
|
|
EXTRA_DEPENDS:=ucode (>= 2022-03-22)
|
|
PROVIDES:=uci-firewall
|
|
endef
|
|
|
|
define Package/firewall4/description
|
|
This package provides an nftables-based implementation of the UCI firewall
|
|
sharing the same configuration format.
|
|
endef
|
|
|
|
define Package/firewall4/conffiles
|
|
/etc/config/firewall
|
|
/etc/nftables.d/
|
|
endef
|
|
|
|
define Package/firewall4/install
|
|
$(CP) -a $(PKG_BUILD_DIR)/root/* $(1)/
|
|
endef
|
|
|
|
define Build/Compile
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,firewall4))
|