9fb06f2c3c
b6e5157527d3 fw4: fix reading kernel version 42d3b3d4ca21 fw4: allow family any for ipsets not matching IP addresses edfdfc6df484 Revert "fw4: allow family any for ipsets not matching IP addresses" 97962771aa3c config: drop to-be-forwarded-nowhere packets on wans 00fc6943a297 init: remove unnecessary stop logic ad3cba79c192 fw4: allow family any for ipsets not matching IP addresses Signed-off-by: Mieczyslaw Nalewaj <namiltd@yahoo.com> [fix PKG_MIRROR_HASH] Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com> Link: https://github.com/openwrt/openwrt/pull/18283 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
50 lines
1.1 KiB
Makefile
50 lines
1.1 KiB
Makefile
#
|
|
# Copyright (C) 2021 Jo-Philipp Wich <jo@mein.io>
|
|
#
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=firewall4
|
|
PKG_RELEASE:=1
|
|
|
|
PKG_SOURCE_PROTO:=git
|
|
PKG_SOURCE_URL=$(PROJECT_GIT)/project/firewall4.git
|
|
PKG_SOURCE_DATE:=2025-03-17
|
|
PKG_SOURCE_VERSION:=b6e5157527d361f99ad52eaa6da273cb0f2dfd59
|
|
PKG_MIRROR_HASH:=fb563b493411922a8fbddf6a5a6766cffa47f87621e056b8dcf38309091835eb
|
|
PKG_MAINTAINER:=Jo-Philipp Wich <jo@mein.io>
|
|
PKG_LICENSE:=ISC
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
define Package/firewall4
|
|
SECTION:=net
|
|
CATEGORY:=Base system
|
|
TITLE:=OpenWrt 4th gen firewall
|
|
DEPENDS:= \
|
|
+kmod-nft-core +kmod-nft-fib +kmod-nft-offload \
|
|
+kmod-nft-nat \
|
|
+nftables-json \
|
|
+ucode +ucode-mod-fs +ucode-mod-ubus +ucode-mod-uci
|
|
EXTRA_DEPENDS:=ucode (>=2022.03.22)
|
|
PROVIDES:=uci-firewall
|
|
endef
|
|
|
|
define Package/firewall4/description
|
|
This package provides an nftables-based implementation of the UCI firewall
|
|
sharing the same configuration format.
|
|
endef
|
|
|
|
define Package/firewall4/conffiles
|
|
/etc/config/firewall
|
|
/etc/nftables.d/
|
|
endef
|
|
|
|
define Package/firewall4/install
|
|
$(CP) -a $(PKG_BUILD_DIR)/root/* $(1)/
|
|
endef
|
|
|
|
define Build/Compile
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,firewall4))
|