mirror of
https://github.com/openwrt/openwrt.git
synced 2024-12-23 23:42:43 +00:00
edb41fea66
16a1070 fw4.uc: handle zone masq6 option 5f61dbf ruleset: fix chain selection for mark and dscp targets 0bc844b ruleset: properly deal with wildcards in zone device selectors 101988d fw4: fix family comparisons 127dbc0 ruleset: emit AF specific rules for DSCP matches d63cb89 fw4: fix parsing inverted numeric DSCP values 8c8a867 fw4: fix wrong `parse_network()` return value on `parse_subnet()` failure f85bb2d ruleset: consolidate zone matches for raw_prerouting and raw_output chains 5669bc7 fw4: consolidate device grouping logic 94f03e0 ruleset: properly render redirect targets without port fff9779 fw4: fix family selection logic for redirect rules ca88fcd tests: update interface dump mock data e60bb4b ruleset: support non-contiguous address masks 8fec51a fw4: fix potential crashes when parsing invalid redirect sections c08eb44 fw4: fix redirect destination zone resolving 0df6ba0 fw4: fix address selection logic for DNAT reflection rules 60a2518 tests: add test coverage for redirect rules e479eff fw4: add RFC-8622 'Least Effort' (LE) DSCP mark ac8a737 ruleset: remove redundant syn check bd5dc4b tests: run testcases in strict mode 3ee6a5c ruleset: fix undeclared variable access uncovered by strict mode Signed-off-by: Jo-Philipp Wich <jo@mein.io>
51 lines
1.2 KiB
Makefile
51 lines
1.2 KiB
Makefile
#
|
|
# Copyright (C) 2021 Jo-Philipp Wich <jo@mein.io>
|
|
#
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=firewall4
|
|
PKG_RELEASE:=$(AUTORELEASE)
|
|
|
|
PKG_SOURCE_PROTO:=git
|
|
PKG_SOURCE_URL=$(PROJECT_GIT)/project/firewall4.git
|
|
PKG_SOURCE_DATE:=2022-01-28
|
|
PKG_SOURCE_VERSION:=3ee6a5c54d5c32a635870fae402420d8c653476c
|
|
PKG_MIRROR_HASH:=73523e6d118733d48dc9e068181caa31fedbcafb8850bd43421b7d5d169bf088
|
|
PKG_MAINTAINER:=Jo-Philipp Wich <jo@mein.io>
|
|
PKG_LICENSE:=ISC
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
define Package/firewall4
|
|
SECTION:=net
|
|
CATEGORY:=Base system
|
|
TITLE:=OpenWrt 4th gen firewall
|
|
DEPENDS:= \
|
|
+kmod-nft-core +kmod-nft-fib +kmod-nft-offload \
|
|
+kmod-nft-nat +kmod-nft-nat6 \
|
|
+nftables-json \
|
|
+ucode +ucode-mod-fs +ucode-mod-ubus +ucode-mod-uci
|
|
EXTRA_DEPENDS:=ucode (>= 2022-01-26)
|
|
PROVIDES:=uci-firewall
|
|
endef
|
|
|
|
define Package/firewall4/description
|
|
This package provides an nftables-based implementation of the UCI firewall
|
|
sharing the same configuration format.
|
|
endef
|
|
|
|
define Package/firewall4/conffiles
|
|
/etc/config/firewall
|
|
/etc/nftables.d/
|
|
endef
|
|
|
|
define Package/firewall4/install
|
|
$(CP) -a $(PKG_BUILD_DIR)/root/* $(1)/
|
|
endef
|
|
|
|
define Build/Compile
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,firewall4))
|