Fw4 /usr/share/nftables.d/ files

For Developers
1

Hello @jow,

Using your miniupnpd PR as a reference, I've created similar files for the nft-compatible version of pbr: https://github.com/stangri/source.openwrt.melmac.net/blob/master/pbr/Makefile#L93.

However, after the package is installed the chains are not created unless fw4 reload is called. What am I doing wrong or, if nothing, what would be the proper place to call fw4 reload -- post-install script?

PS. On a relevant note, a while ago you advised I use the procd_set_param command /bin/true for procd scripts which don't actually use binary/daemon, but it started to produce the Command failed: Not found on stop tho again at some point, any update on what to use now?

Thanks!

2

Yes, that is expected, something has to tell fw4 to re-read those files. Invoking fw4 from postinst is fine imho.

No idea about that, would need to reproduce myself.

3

Any news on the procd_set_param command /bin/true issue?