projects / project / firewall4.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3eacc97) | patch
fw4: add device iifname/oifname matches to DSCP and MARK rules
authorJo-Philipp Wich <jo@mein.io>
Thu, 10 Feb 2022 18:17:28 +0000 (19:17 +0100)
committerJo-Philipp Wich <jo@mein.io>
Thu, 10 Feb 2022 18:17:28 +0000 (19:17 +0100)
commit5c21714dc503d9cee6a638cb8ab06fb40ae473cc
treea6c432fc78b215ae5a6c9e2b28c2d9c09f50b54btree | snapshot
parent3eacc97415f877f3a20d1fd9771318041c6d6f8acommit | diff
fw4: add device iifname/oifname matches to DSCP and MARK rules

Mirror firewall3 logic and do ingress/egress device matches for MARK
and DSCP rules. Also complete support option `device` and `option direction`
to allow overriding the automatic device matches.

Fixes: #5061
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
root/usr/share/firewall4/templates/rule.uc diff | blob | history
root/usr/share/ucode/fw4.uc diff | blob | history
tests/03_rules/05_mangle diff | blob | history
OpenWrt nftables firewall