Need help creating a netifd compatible nebula package

jow · May 27, 2021, 3:56pm

So usually, the firewall reload is triggered by hotplug, specifically /etc/hotplug.d/iface/20-firewall

But I think the reason why it might not be working in your case is because your nebula interface is not part of any zone, so that the condition at line 8 causes the hotplug handler to bail out:

github.com

openwrt/openwrt/blob/master/package/network/config/firewall/files/firewall.hotplug#L8

    
      
          #!/bin/sh
          
          
[ "$ACTION" = ifup -o "$ACTION" = ifupdate ] || exit 0
          [ "$ACTION" = ifupdate -a -z "$IFUPDATE_ADDRESSES" -a -z "$IFUPDATE_DATA" ] && exit 0
          
          
/etc/init.d/firewall enabled || exit 0
          
          
fw3 -q network "$INTERFACE" >/dev/null || exit 0
          
          
logger -t firewall "Reloading firewall due to $ACTION of $INTERFACE ($DEVICE)"
          fw3 -q reload