freifunk-franken
/
firmware
9
7
Fork 13
Code Issues 48 Pull Requests 7 Releases 17 Wiki Activity
firmware/src/packages/fff
History
Fabian Bläse 6acdc6efa1 fff-firewall: add user-customizable nftables hook 
Currently there is no way to persistently configure firewall rules on a
router. This might be desirable as home-use of the Freifunk network is
quite common these days.

To allow for the most flexibility while keeping maintenance efforts low,
add a persistent, user-customizable nftables hook. It is evaluated after
all firewall rules have already been configured, so it is possible to
override them.

Users of this hook are responsible for keeping up with changes to the
firmware and modify it appropriately, before updating the system.

Fixes: #314

Signed-off-by: Fabian Bläse <fabian@blaese.de>
 		2024-03-21 21:53:32 +01:00
..
alfred-json treewide: use SPDX license identifiers 2021-03-06 18:53:26 +01:00
fff-alfred treewide: set PKG_RELEASE automatically 2022-01-09 22:03:09 +01:00
fff-alfred-monitoring-proxy treewide: set PKG_RELEASE automatically 2022-01-09 22:03:09 +01:00
fff-babel fff-babel: remove erroneous error messages for absent babel implementation 2024-03-21 14:20:30 +01:00
fff-babel-bird2 fff-babel-bird2: prevent error message on revert 2023-03-13 22:48:25 +01:00
fff-babeld fff-babel: Make implementation runtime switchable 2022-03-23 19:47:02 +01:00
fff-base busybox: quality of life improvements 2024-01-18 21:44:28 +01:00
fff-batman-adv treewide: set PKG_RELEASE automatically 2022-01-09 22:03:09 +01:00
fff-boardname Add support for x86_64 2022-03-11 12:34:59 +01:00
fff-config fff-config: Set panic on OOM 2022-03-05 18:19:13 +01:00
fff-dhcp fff-dhcp: Do not generate dns records for local hostname 2022-11-26 16:47:24 +01:00
fff-extra layer3: add htop and sysstat commands 2024-01-18 21:44:49 +01:00
fff-fastd fff-fastd: fix fastd start/stop 2022-03-23 19:47:38 +01:00
fff-firewall fff-firewall: add user-customizable nftables hook 2024-03-21 21:53:32 +01:00
fff-hoods node-fff-hoods: Make keyserverurl configurable 2024-01-18 21:33:33 +01:00
fff-hoodutils treewide: set PKG_RELEASE automatically 2022-01-09 22:03:09 +01:00
fff-layer3 layer3: move bmon to fff-extra 2024-01-18 21:34:04 +01:00
fff-layer3-config layer3-config: Add DSA migration script for migrated devices 2024-02-16 22:54:44 +01:00
fff-layer3-snat fff-firewall: Switch from ip/ebtables to nftables 2023-12-26 18:51:35 +01:00
fff-macnock OpenWrt: bump to v22.03 2023-02-20 23:32:13 +01:00
fff-mqtt fff-mqtt: Switch from mosquitto-ssl to mosquitto-nossl 2022-03-31 19:31:25 +02:00
fff-mqtt-monitoring treewide: set PKG_RELEASE automatically 2022-01-09 22:03:09 +01:00
fff-network fff-network: adjust network configuration of TP-Link TL-WDR4900 for DSA 2024-02-16 22:54:44 +01:00
fff-node fff-node: apply firewall rules to br-client only 2024-03-21 21:47:10 +01:00
fff-nodewatcher nodewatcher: fix errormessage. 2022-04-13 19:21:25 +02:00
fff-ra fff-ra: set preferred lifetime smaller than valid lifetime 2022-04-13 19:22:27 +02:00
fff-random treewide: set PKG_RELEASE automatically 2022-01-09 22:03:09 +01:00
fff-simple-tc treewide: set PKG_RELEASE automatically 2022-01-09 22:03:09 +01:00
fff-support treewide: remove ETHPORT leftovers 2022-03-31 19:31:25 +02:00
fff-sysupgrade fff-firewall: add user-customizable nftables hook 2024-03-21 21:53:32 +01:00
fff-timeserver treewide: set PKG_RELEASE automatically 2022-01-09 22:03:09 +01:00
fff-uradvd fff-firewall: Switch from ip/ebtables to nftables 2023-12-26 18:51:35 +01:00
fff-vpn-select fff-vpn-select: do not configure peers on vpn-stop 2022-03-23 19:47:22 +01:00
fff-vxlan-node-vpn fff-vxlan-node: disable vxlan by default 2022-03-31 19:31:25 +02:00
fff-web-hood treewide: set PKG_RELEASE automatically 2022-01-09 22:03:09 +01:00
fff-web-mqtt treewide: set PKG_RELEASE automatically 2022-01-09 22:03:09 +01:00
fff-web-ui fff-web-ui: fix port selection for TWO_PORT devices 2022-07-22 12:48:52 +02:00
fff-wireguard Add support for different babel implementations 2022-03-23 19:46:30 +01:00
fff-wireless fff-wireless: add workaround for wifi configuration after update 2024-03-21 21:53:32 +01:00