mirror of
https://github.com/openwrt/packages.git
synced 2025-10-10 20:51:25 +00:00
790753f6a6
This update includes the following changes:
1. Makefile
* update copyright
* attempt to implement the proper variants to avoid luci-app dependency on both variants
* quietly stop service on uninstall
2. Config-file
* add the list of dnsmasq instances to target in supported dnsmasq modes
* for default pbr variant, set the `resolver_set` to `dnsmasq.nftset`
* for iptables pbr variant, set the `resolver_set` to `dnsmasq.ipset`
* add the `nft_file_support` (disabled by default)
* introduce `procd_boot_delay` to delay service start on boot
* introduce the following nft set creation options:
* nft_set_auto_merge
* nft_set_counter
* nft_set_flags_interval
* nft_set_flags_timeout
* nft_set_gc_interval
* nft_set_policy
* nft_set_timeout
* add the pbr.user.wg_server_and_client custom user script to allow running wg server and
client at the same time
* add the "Ignore Local Requests" sample policy
3. Hotplug firewall/interface scripts
* better logged messages
4. The pbr and pbr-iptables uci defaults script
* use functions from the init script
* improve vpn-policy-routing migration
5. The pbr-netifd uci defaults script
* use functions from the init script
* improve uci operations
6. Introduce the firewall.include file
7. Improve pbr.user.aws custom user script
8. Improve pbr.user.netflix custom user script
9. Introduce pbr.user.wg_server_and_client custom user script
10. Update the init file:
* refactor some code to allow the init script file to be sourced by the uci defaults scripts
and the luci rpcd script for shared functions
* add support for `nft_file_mode` in which service prepares the fw4-compatible atomic nft/include
file for faster operations on service reload
* improve Tor support (nft mode only)
* implement support for nft set options
* update validation functions for new options/parameters
Signed-off-by: Stan Grishin <stangri@melmac.ca>
51 lines
1.3 KiB
Plaintext
51 lines
1.3 KiB
Plaintext
config pbr 'config'
|
|
option enabled '0'
|
|
option verbosity '2'
|
|
option strict_enforcement '1'
|
|
option resolver_set 'dnsmasq.ipset'
|
|
list resolver_instance '*'
|
|
option ipv6_enabled '0'
|
|
list ignored_interface 'vpnserver'
|
|
option boot_timeout '30'
|
|
option rule_create_option 'add'
|
|
option procd_boot_delay '0'
|
|
option procd_reload_delay '1'
|
|
option webui_show_ignore_target '0'
|
|
list webui_supported_protocol 'all'
|
|
list webui_supported_protocol 'tcp'
|
|
list webui_supported_protocol 'udp'
|
|
list webui_supported_protocol 'tcp udp'
|
|
list webui_supported_protocol 'icmp'
|
|
|
|
config include
|
|
option path '/usr/share/pbr/pbr.user.aws'
|
|
option enabled 0
|
|
|
|
config include
|
|
option path '/usr/share/pbr/pbr.user.netflix'
|
|
option enabled 0
|
|
|
|
config include
|
|
option path '/usr/share/pbr/pbr.user.wg_server_and_client'
|
|
option enabled 0
|
|
|
|
config policy
|
|
option name 'Plex/Emby Local Server'
|
|
option interface 'wan'
|
|
option src_port '8096 8920 32400'
|
|
option enabled '0'
|
|
|
|
config policy
|
|
option name 'Plex/Emby Remote Servers'
|
|
option interface 'wan'
|
|
option dest_addr 'plex.tv my.plexapp.com emby.media app.emby.media tv.emby.media'
|
|
option enabled '0'
|
|
|
|
config policy
|
|
option name 'WireGuard Server'
|
|
option interface 'wan'
|
|
option src_port '51820'
|
|
option chain 'OUTPUT'
|
|
option proto 'udp'
|
|
option enabled '0'
|