[PATCH v2 2/3] realtek: Use firewall4

Hauke Mehrtens hauke at hauke-m.de
Fri Mar 25 06:38:44 PDT 2022


The realtek target is not a router, but basic device, see DEVICE_TYPE.
The basic device type does not come with firewall by default, see
include/target.mk for details. The realtek target extended
DEFAULT_PACKAGES manually with firewall.

This changes the defaults to take firewall4 and nftables instead of
firewall and iptables. This also adds the additional package
kmod-nft-offload.

The only difference to the router type is the missing ppp,
ppp-mod-pppoe, dnsmasq and odhcpd-ipv6only package.

This increases the compressed image size by about 422KBytes.

Signed-off-by: Hauke Mehrtens <hauke at hauke-m.de>
---
 target/linux/realtek/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/target/linux/realtek/Makefile b/target/linux/realtek/Makefile
index 1fd9a870cdb4..8bed3d8a7232 100644
--- a/target/linux/realtek/Makefile
+++ b/target/linux/realtek/Makefile
@@ -18,7 +18,7 @@ endef
 include $(INCLUDE_DIR)/target.mk
 
 DEFAULT_PACKAGES += uboot-envtools ethtool kmod-gpio-button-hotplug \
-	firewall ip6tables iptables odhcp6c \
+	firewall4 nftables kmod-nft-offload odhcp6c \
 	ip-full ip-bridge tc
 
 $(eval $(call BuildTarget))
-- 
2.30.2




More information about the openwrt-devel mailing list