Hello anomeome,
thank you for taking time to provide an example.
I totally understood the general procedure of how to achieve it. The problem simply is, that these (=netfilter-ssh or for example your netfilter-banip) triggers are not available for any LED.
Please see the following example output for one LED:
root@OpenWrt:/sys/devices/platform/gpio-leds/leds/rango:white:sata# cat trigger
none usbport mmc0 timer disk-activity [ide-disk] default-on netdev heartbeat phy0rx phy0tx phy0assoc phy0radio phy1rx phy1tx phy1assoc phy1radio
root@OpenWrt:/sys/devices/platform/gpio-leds/leds/rango:white:sata# echo 'netfilter-banip' > trigger
ash: write error: Invalid argument
root@OpenWrt:/sys/devices/platform/gpio-leds/leds/rango:white:sata# cat trigger
none usbport mmc0 timer disk-activity [ide-disk] default-on netdev heartbeat phy0rx phy0tx phy0assoc phy0radio phy1rx phy1tx phy1assoc phy1radio
root@OpenWrt:/sys/devices/platform/gpio-leds/leds/rango:white:sata# echo 'netfilter-ssh' > trigger
ash: write error: Invalid argument
root@OpenWrt:/sys/devices/platform/gpio-leds/leds/rango:white:sata# cat trigger
none usbport mmc0 timer disk-activity [ide-disk] default-on netdev heartbeat phy0rx phy0tx phy0assoc phy0radio phy1rx phy1tx phy1assoc phy1radio
So, using actually available triggers:
root@OpenWrt:/sys/devices/platform/gpio-leds/leds/rango:white:sata# echo 'heartbeat' > trigger
root@OpenWrt:/sys/devices/platform/gpio-leds/leds/rango:white:sata# cat trigger
none usbport mmc0 timer disk-activity ide-disk default-on netdev [heartbeat] phy0rx phy0tx phy0assoc phy0radio phy1rx phy1tx phy1assoc phy1radio
root@OpenWrt:/sys/devices/platform/gpio-leds/leds/rango:white:sata# echo 'ide-disk' > trigger
root@OpenWrt:/sys/devices/platform/gpio-leds/leds/rango:white:sata# cat trigger
none usbport mmc0 timer disk-activity [ide-disk] default-on netdev heartbeat phy0rx phy0tx phy0assoc phy0radio phy1rx phy1tx phy1assoc phy1radio
As you can see manually setting the LED to a trigger, which is available for the LED, works perfectly fine.
My problem is basically, that I am missing these netfilter-* triggers and I don't understand whether it is possible to have them (or whether it is actually depended on anything particular [like hardware model or whatever - which I wouldn't assume however]) and if so, how to "get" them.
I hope I could make my point now.