mirror of
https://github.com/openwrt/openwrt.git
synced 2024-12-30 18:47:06 +00:00
9a599fee93
4fbf6d7 ruleset.uc: log forwarded traffic not matched by zone policies c7201a3 main.uc: reintroduce set reload restriction 756f1e2 ruleset: fix emitting set_mark/set_xmark rules with masks 3db4741 ruleset: properly handle zone names starting with a digit 43d8ef5 fw4: fix formatting of default log prefix 592ba45 main.uc: remove uneeded/wrong set reload restrictions b0a6bff tests: fix testcases 145e159 fw4: recognize `option log` and `option counter` in `config nat` sections ce050a8 fw4: fall back to device if l3_device is not available in ifstatus Fixes: #10639, #10965 Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit fdfa9d8f7469626d2dc8e4b46a6ad56a3b27c16b)
51 lines
1.2 KiB
Makefile
51 lines
1.2 KiB
Makefile
#
|
|
# Copyright (C) 2021 Jo-Philipp Wich <jo@mein.io>
|
|
#
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=firewall4
|
|
PKG_RELEASE:=$(AUTORELEASE)
|
|
|
|
PKG_SOURCE_PROTO:=git
|
|
PKG_SOURCE_URL=$(PROJECT_GIT)/project/firewall4.git
|
|
PKG_SOURCE_DATE:=2022-10-14
|
|
PKG_SOURCE_VERSION:=4fbf6d75a4a9e523d1848a28d8a3ea095e870195
|
|
PKG_MIRROR_HASH:=d8ffb01baf0c8412962aaaf504ad05387f3fef5bd709f7b7840ddd4e8311b4bb
|
|
PKG_MAINTAINER:=Jo-Philipp Wich <jo@mein.io>
|
|
PKG_LICENSE:=ISC
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
define Package/firewall4
|
|
SECTION:=net
|
|
CATEGORY:=Base system
|
|
TITLE:=OpenWrt 4th gen firewall
|
|
DEPENDS:= \
|
|
+kmod-nft-core +kmod-nft-fib +kmod-nft-offload \
|
|
+kmod-nft-nat \
|
|
+nftables-json \
|
|
+ucode +ucode-mod-fs +ucode-mod-ubus +ucode-mod-uci
|
|
EXTRA_DEPENDS:=ucode (>= 2022-03-22)
|
|
PROVIDES:=uci-firewall
|
|
endef
|
|
|
|
define Package/firewall4/description
|
|
This package provides an nftables-based implementation of the UCI firewall
|
|
sharing the same configuration format.
|
|
endef
|
|
|
|
define Package/firewall4/conffiles
|
|
/etc/config/firewall
|
|
/etc/nftables.d/
|
|
endef
|
|
|
|
define Package/firewall4/install
|
|
$(CP) -a $(PKG_BUILD_DIR)/root/* $(1)/
|
|
endef
|
|
|
|
define Build/Compile
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,firewall4))
|