freifunk-franken/firmware
9
7
Fork 14
Code Issues 45 Pull Requests 9 Actions Releases 20 Wiki Activity

fff-firewall: Switch from ip/ebtables to nftables #275

Closed
fbl wants to merge 1 commits from fbl:openwrt22-nftables into master
pull from: fbl:openwrt22-nftables
merge into: freifunk-franken:master
Conversation 5 Commits 1 Files Changed 23 +280 -119
fbl commented 2022-12-18 20:22:14 +01:00
Owner
Copy Link

Include nftables and appropriate modules. Translate ip- and ebtables
rules to their nftables counterparts. Remove ip/ebtables and modules.

This change intentionally tries to keep structural changes at a minimum
to keep the rule translation comprehensible.

kmod-nft-bridge is not required for fff-node, because it was merged into
a single kernel module since Linux 4.17:
[1] 02c7b25e5f
[2] fbaf48387e

Based on #249

Include nftables and appropriate modules. Translate ip- and ebtables rules to their nftables counterparts. Remove ip/ebtables and modules. This change intentionally tries to keep structural changes at a minimum to keep the rule translation comprehensible. kmod-nft-bridge is not required for fff-node, because it was merged into a single kernel module since Linux 4.17: [1] https://github.com/torvalds/linux/commit/02c7b25e5f54321b9063e18d4f52cce07f8e081d [2] https://github.com/openwrt/openwrt/commit/fbaf48387eb5e0e2bdc90d4c6f985a242a9fb0cc Based on #249
fbl added the
RFT
WIP
 labels 2022-12-18 20:22:14 +01:00
fbl commented 2023-03-21 20:39:08 +01:00
Author
Owner
Copy Link

Fixes: #252

Fixes: #252
fbl added this to the 20240119-beta milestone 2023-03-21 20:40:18 +01:00
fbl force-pushed openwrt22-nftables from afd737774f to 003172bd5e 2023-04-05 22:11:54 +02:00 Compare
fbl commented 2023-04-05 22:12:28 +02:00
Author
Owner
Copy Link

Changes:

  • Rebase onto current master
Changes: - Rebase onto current master
fbl force-pushed openwrt22-nftables from 003172bd5e to 8be918ad49 2023-04-06 22:04:32 +02:00 Compare
fbl commented 2023-04-06 22:04:48 +02:00
Author
Owner
Copy Link

Changes:

  • Add "Fixes: #252" to Commit Message
Changes: - Add "Fixes: #252" to Commit Message
fbl changed title from WIP: fff-firewall: Switch from ip/ebtables to nftables to fff-firewall: Switch from ip/ebtables to nftables 2023-04-06 22:05:12 +02:00
fbl removed the
WIP
 label 2023-04-06 22:05:15 +02:00
jkimmel commented 2023-04-11 09:10:59 +02:00
Owner
Copy Link

Bei der commit message gehört noch das WIP: weg.

Bei der commit message gehört noch das `WIP:` weg.
👍 1
fbl added a new dependency 2023-08-06 15:00:14 +02:00
#289 OpenWrt: bump to v23.05
fbl commented 2023-12-26 20:23:16 +01:00
Author
Owner
Copy Link

WIP: aus der commit message entfernt und applied.

`WIP:` aus der commit message entfernt und applied.
fbl closed this pull request 2023-12-26 20:23:16 +01:00
fbl removed the
RFT
 label 2023-12-26 20:23:22 +01:00
All checks were successful
ci/woodpecker/pr/woodpecker Pipeline was successful
Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
RFC

   
RFT

   
WIP

   
blocked

   
bsp

touching bsp files or adding devices

  
bug

Something is not working

  
build/scripts/tools

touching buildscript or other tools

  
duplicate

This issue or pull request already exists

  
feature

New feature

  
fixed

Issue that got resolved

  
layer3

only for layer3 FW

  
mantis

Imported from mantis

  
more details required

Reported information is insufficient to debug the issue

  
needs changes

   
node

only for node FW

  
packages/fff

touching our packages

  
rejected

Rejected or won't fix

  
security

   
trivial

simple non-functional changes that are mostly matter of taste

  
upstream

touching upstream version, build or feed patches

No Label
RFC
RFT
WIP
blocked
bsp
bug
build/scripts/tools
duplicate
feature
fixed
layer3
mantis
more details required
needs changes
node
packages/fff
rejected
security
trivial
upstream
Milestone
Clear milestone
No items
No Milestone
20240119-beta
Assignees
Clear assignees
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Blocks
#284 layer3: add option to enable stateful firewall on client network
freifunk-franken/firmware
#289 OpenWrt: bump to v23.05
freifunk-franken/firmware
Reference: freifunk-franken/firmware#275
No description provided.
Delete Branch "fbl:openwrt22-nftables"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?