Commits on Mar 20, 2024

1. pbr: update to 1.1.4-5 …

   This update includes the following changes:
   1. Makefile
     * update copyright
     * attempt to implement the proper variants to avoid luci-app dependency on both variants
     * quietly stop service on uninstall
   
   2. Config-file
     * add the list of dnsmasq instances to target in supported dnsmasq modes
     * for default pbr variant, set the `resolver_set` to `dnsmasq.nftset`
     * for iptables pbr variant, set the `resolver_set` to `dnsmasq.ipset`
     * add the `nft_file_support` (disabled by default)
     * introduce `procd_boot_delay` to delay service start on boot
     * introduce the following nft set creation options:
       * nft_set_auto_merge
       * nft_set_counter
       * nft_set_flags_interval
       * nft_set_flags_timeout
       * nft_set_gc_interval
       * nft_set_policy
       * nft_set_timeout
     * add the pbr.user.wg_server_and_client custom user script to allow running wg server and
       client at the same time
     * add the "Ignore Local Requests" sample policy
   
   3. Hotplug firewall/interface scripts
     * better logged messages
   
   4. The pbr and pbr-iptables uci defaults script
     * use functions from the init script
     * improve vpn-policy-routing migration
   
   5. The pbr-netifd uci defaults script
     * use functions from the init script
     * improve uci operations
   
   6. Introduce the firewall.include file
   
   7. Improve pbr.user.aws custom user script
   
   8. Improve pbr.user.netflix custom user script
   
   9. Introduce pbr.user.wg_server_and_client custom user script
   
   10. Update the init file:
     * refactor some code to allow the init script file to be sourced by the uci defaults scripts
       and the luci rpcd script for shared functions
     * add support for `nft_file_mode` in which service prepares the fw4-compatible atomic nft/include
       file for faster operations on service reload
     * improve Tor support (nft mode only)
     * implement support for nft set options
     * update validation functions for new options/parameters
   
   Signed-off-by: Stan Grishin <stangri@melmac.ca>

   

   stangri committed Mar 20, 2024
   Copy the full SHA

   790753f View commit details

   Browse the repository at this point in the history