fff-firewall: Switch from ip/ebtables to nftables #275

Closed
fbl wants to merge 1 commits from fbl:openwrt22-nftables into master

1 Commits

Author SHA1 Message Date
Fabian Bläse 8be918ad49 WIP: fff-firewall: Switch from ip/ebtables to nftables
ci/woodpecker/pr/woodpecker Pipeline was successful Details
Include nftables and appropriate modules. Translate ip- and ebtables
rules to their nftables counterparts. Remove ip/ebtables and modules.

This change intentionally tries to keep structural changes at a minimum
to keep the rule translation comprehensible.

kmod-nft-bridge is not required for fff-node, because it was merged into
a single kernel module since Linux 4.17:
[1] 02c7b25e5f
[2] fbaf48387e

Fixes: #252

Signed-off-by: Fabian Bläse <fabian@blaese.de>
Co-authored-by: Johannes Kimmel <fff@bareminimum.eu>
2023-04-06 22:04:20 +02:00