mirror of
https://github.com/openwrt/packages.git
synced 2025-10-14 22:45:47 +00:00
de224a5587
Makefile:
* stop shipping/dealing with the firewall hotplug (obsolete)
* install a third user-script (dnsprefetch) by @betonmischer
Config:
* remove obsolete options
* include the new user script
Init-script:
* start much earlier so that on boot, the procd_add_raw_trigger works on all systems
* create a ubus() helper function so that service delete does not produce "Command not found"
* rename options to better reflect their function:
* procd_lan_device to lan_device
* procd_wan_interface to uplink_interface
* procd_wan6_interface to uplink_interface6
* procd_wan6_metric to uplink_interface6_metric
* wan_ip_rules_priority to uplink_ip_rules_priority
* wan_mark to uplink_mark
* visually separate run-time variables from variables loaded from config options
* use ${IPKG_INSTROOT} when sourcing files
* fix typo in str_to_dnsmasq_nftset()
* use pidof to kill dnsmasq in dnsmasq_kill()
* add helper function uci_add_list_if_new()
* add helper function uci_changes()
* add helper function ubus() so that service delete does not produce "Command not found"
* implement the dnsmasq features check similar to dnsmasq init script
* add get_url() function similar to luci package
* add/modify error and warning messages
* change how mktemp is used for more reliable file creation
* unset non-true boolean package config options on load for easier checks later
* improve handling of nft/nft set options
* fewer calls to resolver() and resolver() optimization to speed up the service
* use softlinks instead of duplicating dnsmasq nftset files into each instance
* prevent duplication of dnsmasq nftset elements
* option to target a specific dest dns port in DNS policies
* bugfix: more reliable interface reloads
* display README links to errors/warnings sections if any errors/warnings discovered
Uci-defaults:
* transition from old options to new ones
Signed-off-by: Stan Grishin <stangri@melmac.ca>
62 lines
1.6 KiB
Plaintext
62 lines
1.6 KiB
Plaintext
config pbr 'config'
|
|
option enabled '0'
|
|
option verbosity '2'
|
|
option strict_enforcement '1'
|
|
option resolver_set 'dnsmasq.nftset'
|
|
list resolver_instance '*'
|
|
option ipv6_enabled '0'
|
|
list ignored_interface 'vpnserver'
|
|
option rule_create_option 'add'
|
|
option procd_boot_trigger_delay '5000'
|
|
option procd_reload_delay '1'
|
|
option webui_show_ignore_target '0'
|
|
option nft_rule_counter '0'
|
|
option nft_set_auto_merge '1'
|
|
option nft_set_counter '0'
|
|
option nft_set_flags_interval '1'
|
|
option nft_set_flags_timeout '0'
|
|
option nft_set_gc_interval ''
|
|
option nft_set_policy 'performance'
|
|
option nft_set_timeout ''
|
|
list webui_supported_protocol 'all'
|
|
list webui_supported_protocol 'tcp'
|
|
list webui_supported_protocol 'udp'
|
|
list webui_supported_protocol 'tcp udp'
|
|
list webui_supported_protocol 'icmp'
|
|
|
|
config include
|
|
option path '/usr/share/pbr/pbr.user.dnsprefetch'
|
|
option enabled '0'
|
|
|
|
config include
|
|
option path '/usr/share/pbr/pbr.user.aws'
|
|
option enabled '0'
|
|
|
|
config include
|
|
option path '/usr/share/pbr/pbr.user.netflix'
|
|
option enabled '0'
|
|
|
|
config dns_policy
|
|
option name 'Redirect Local IP DNS'
|
|
option src_addr '192.168.1.5'
|
|
option dest_dns '1.1.1.1'
|
|
option enabled '0'
|
|
|
|
config policy
|
|
option name 'Ignore Local Requests'
|
|
option interface 'ignore'
|
|
option dest_addr '10.0.0.0/24 10.0.1.0/24 192.168.100.0/24 192.168.1.0/24'
|
|
option enabled '0'
|
|
|
|
config policy
|
|
option name 'Plex/Emby Local Server'
|
|
option interface 'wan'
|
|
option src_port '8096 8920 32400'
|
|
option enabled '0'
|
|
|
|
config policy
|
|
option name 'Plex/Emby Remote Servers'
|
|
option interface 'wan'
|
|
option dest_addr 'plex.tv my.plexapp.com emby.media app.emby.media tv.emby.media'
|
|
option enabled '0'
|