mptcp/openmptcprouter-feeds
1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-feeds.git synced 2025-02-12 18:41:51 +00:00
Code Issues Releases Wiki Activity
openmptcprouter-feeds/iptables-mod-fullconenat
History
Ycarus (Yannick Chabanois) 17d5b8d6d9 Fix iptables fullconenat package
2020-04-05 19:09:03 +02:00
..
files Fix iptables fullconenat package 2020-04-05 19:09:03 +02:00
patches Fix iptables fullconenat package 2020-04-05 19:09:03 +02:00
Makefile Fix iptables fullconenat package 2020-04-05 19:09:03 +02:00
README.md Fix iptables fullconenat package 2020-04-05 19:09:03 +02:00

README.md

Netfilter and iptables extension for FULLCONENAT target ported to OpenWrt.

Compile

# cd to OpenWrt source path
# Clone this repo
git clone -b master --single-branch https://github.com/LGA1150/openwrt-fullconenat package/fullconenat
# Select Network -> Firewall -> iptables-mod-fullconenat
make menuconfig
# Compile
make V=s

Usage

You can apply this patch to OpenWrt's Firewall3 (Recommended).

Or manually add the following rules to /etc/firewall.user

iptables -t nat -A zone_wan_prerouting -j FULLCONENAT
iptables -t nat -A zone_wan_postrouting -j FULLCONENAT

Workaround for conflicting with module nf_conntrack_netlink

This module uses conntrack events to register a callback function. In the same netns, only one callback method can be registered, that causes conflicts with nf_conntrack_netlink, which also uses conntrack events. Qualcomm Shortcut FE has introduced a patch to allow multiple callbacks to be registered. To apply, put this patch into target/linux/generic/hack-4.14.