fff-firewall: add user-customizable nftables hook #317

Closed
fbl wants to merge 2 commits from fbl/firmware:user-firewall into master

2 Commits

Author SHA1 Message Date
Fabian Bläse 871e80eb35 Consolidate sysupgrade.conf entries
ci/woodpecker/pull_request_closed/woodpecker Pipeline is pending Details
Most of the entries in /etc/sysupgrade.conf are generated by a
uci-defaults script in the fff-sysupgrade package. The only entry
added in a different place is rc.local.fff_userconfig.

Consolidate all entries to be added by the uci-defaults script in
fff-sysupgrade.

Signed-off-by: Fabian Bläse <fabian@blaese.de>
2024-03-11 22:08:55 +01:00
Fabian Bläse 1309eaaf11 fff-firewall: add user-customizable nftables hook
Currently there is no way to persistently configure firewall rules on a
router. This might be desirable as home-use of the Freifunk network is
quite common these days.

To allow for the most flexibility while keeping maintenance efforts low,
add a persistent, user-customizable nftables hook. It is evaluated after
all firewall rules have already been configured, so it is possible to
override them.

Users of this hook are responsible for keeping up with changes to the
firmware and modify it appropriately, before updating the system.

Fixes: #314

Signed-off-by: Fabian Bläse <fabian@blaese.de>
2024-03-11 22:08:49 +01:00