projects / project / firewall4.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 101988d) | patch
ruleset: emit AF specific rules for DSCP matches
authorJo-Philipp Wich <jo@mein.io>
Wed, 26 Jan 2022 10:00:44 +0000 (11:00 +0100)
committerJo-Philipp Wich <jo@mein.io>
Wed, 26 Jan 2022 10:13:03 +0000 (11:13 +0100)
commit127dbc0558bc730cdeac37cc2ac70bbe2d7e4117
tree47c41f87b6d9d65d8cb8b7eaccaf345625bd72e6tree | snapshot
parent101988d2ec1fee6d37f57e99e31d37554918447ecommit | diff
ruleset: emit AF specific rules for DSCP matches

Since nftables `dscp` matches are IP family specific we must emit
separate IPv4 and IPv6 rules in case DSCP matches are present.

Ref: https://bugs.openwrt.org/index.php?do=details&task_id=4240
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
root/usr/share/firewall4/templates/rule.uc diff | blob | history
root/usr/share/ucode/fw4.uc diff | blob | history
tests/03_rules/03_constraints diff | blob | history
OpenWrt nftables firewall