search

mister-benjamin / etherwake-nfqueue-openwrt

OpenWrt package feed for etherwake-nfqueue
6 stars 1 forks source link

nftables nfqueue #3

Open ksrvpvl opened 2 months ago

ksrvpvl commented 2 months ago

in the new version of openwrt only nftables works, and user rules have also been removed. I don't understand how to queue a rule, can you help?

mister-benjamin commented 1 month ago

Sorry for the delay... After the switch to nftables, I updated my rules to look like this:

nft insert rule inet fw4 forward_lan iifname "bridge.2" oifname "bridge.1" ip daddr 192.168.0.10 tcp dport 445 ct state new limit rate 3/hour burst 1 packets counter queue num 0 bypass comment \"Wake up NAS on SMB request\"
nft insert rule inet fw4 forward_wan iifname "wan" oifname "bridge.1" ip daddr 192.168.0.10 tcp dport 22 ct state new limit rate 3/hour burst 1 packets counter queue num 0 bypass comment \"Wake up NAS on WAN SSH\"

Even though the user rules have been removed from the WebUI, I think it's still possible to put them in /etc/firewall.user.