[PATCH 1/2] realtek: Use firewall4

Hauke Mehrtens hauke at hauke-m.de
Mon Feb 28 13:37:29 PST 2022


The realtek target is not a router, but basic device, see DEVICE_TYPE.
The basic device type does not come with firewall by default, see
include/target.mk for details. The realtek target extended
DEFAULT_PACKAGES manually with firewall.

This changes the defaults to take firewall4 and nftables instead of
firewall and iptables. This also adds the additional package
kmod-nft-offload.
The only difference to the router type is the missing ppp and
ppp-mod-pppoe package.

This increases the compressed image size by about 260KBytes.

Signed-off-by: Hauke Mehrtens <hauke at hauke-m.de>
---
 target/linux/realtek/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/target/linux/realtek/Makefile b/target/linux/realtek/Makefile
index 704242a000a0..91af5fbcfce1 100644
--- a/target/linux/realtek/Makefile
+++ b/target/linux/realtek/Makefile
@@ -18,7 +18,7 @@ endef
 include $(INCLUDE_DIR)/target.mk
 
 DEFAULT_PACKAGES += uboot-envtools ethtool kmod-gpio-button-hotplug \
-	dnsmasq firewall ip6tables iptables odhcp6c odhcpd-ipv6only \
+	dnsmasq firewall4 nftables kmod-nft-offload odhcp6c odhcpd-ipv6only \
 	ip-full ip-bridge tc
 
 $(eval $(call BuildTarget))
-- 
2.30.2




More information about the openwrt-devel mailing list