mirror of
https://github.com/openwrt/openwrt.git
synced 2024-12-30 18:47:06 +00:00
80baa60259
c22eeef fw4: support negative CIDR bit notation
628d791 hotplug: reliably handle interfaces with ubus zone hints
d005293 fw4: store zone associations from ubus in statefile as well
b268225 fw4: filter non hw-offload capable devices when resolving lower devices
57984e0 fw4: always resolve lower flowtable devices
7782017 tests: fix mocked `fd.read("line")` api
72b196d config: remove restictions on DHCPv6 allow rule
f0cc317 fw4: refactor family selection for forwarding rules
b0b8122 treewide: use modern syntax
05995f1 fw4: fix emitting device jump rules for family restricted zones
b479815 fw4: fix family auto-selection for config nat rules
2816a82 ruleset: ensure that family-agnostic ICMP rules cover ICMPv6 as well
2379c3d tests: add test coverage for zone family selection logic
Fixes: #5066, #9611, #9765, #9854
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 2df17604a4)
51 lines
1.2 KiB
Makefile
51 lines
1.2 KiB
Makefile
#
|
|
# Copyright (C) 2021 Jo-Philipp Wich <jo@mein.io>
|
|
#
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=firewall4
|
|
PKG_RELEASE:=$(AUTORELEASE)
|
|
|
|
PKG_SOURCE_PROTO:=git
|
|
PKG_SOURCE_URL=$(PROJECT_GIT)/project/firewall4.git
|
|
PKG_SOURCE_DATE:=2022-05-20
|
|
PKG_SOURCE_VERSION:=c22eeeff1ef0884fd3c76f4ff2c72caa9de82fd5
|
|
PKG_MIRROR_HASH:=ccaf776e3b762a2c684aac3adeb2e3a6a651b58253ea03643cc4964172030178
|
|
PKG_MAINTAINER:=Jo-Philipp Wich <jo@mein.io>
|
|
PKG_LICENSE:=ISC
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
define Package/firewall4
|
|
SECTION:=net
|
|
CATEGORY:=Base system
|
|
TITLE:=OpenWrt 4th gen firewall
|
|
DEPENDS:= \
|
|
+kmod-nft-core +kmod-nft-fib +kmod-nft-offload \
|
|
+kmod-nft-nat +kmod-nft-nat6 \
|
|
+nftables-json \
|
|
+ucode +ucode-mod-fs +ucode-mod-ubus +ucode-mod-uci
|
|
EXTRA_DEPENDS:=ucode (>= 2022-03-22)
|
|
PROVIDES:=uci-firewall
|
|
endef
|
|
|
|
define Package/firewall4/description
|
|
This package provides an nftables-based implementation of the UCI firewall
|
|
sharing the same configuration format.
|
|
endef
|
|
|
|
define Package/firewall4/conffiles
|
|
/etc/config/firewall
|
|
/etc/nftables.d/
|
|
endef
|
|
|
|
define Package/firewall4/install
|
|
$(CP) -a $(PKG_BUILD_DIR)/root/* $(1)/
|
|
endef
|
|
|
|
define Build/Compile
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,firewall4))
|