On 20 March 2014 18:38:17 CET, Dave Taht <[email protected]> wrote: > I have tested this, made one small modification, and it will be in > cerowrt-3.10.32-12 and on by default. Nice work!
Thanks! :) > One possible problem with pushing this up to openwrt is that arguably > it needs to apply this to the "wan" abstraction in the firewall rules > rather than a specific interface, and hook into that chain instead. > (on the other hand, using an actual interface is also good) Well, having the configuration option be for a firewall zone rather than an interface shouldn't be that difficult. More of a policy question of how to handle upstream detection etc for potentially multiple interfaces. But then I suppose having the option of adding the filter to multiple interfaces might be useful too... Either way, I can look into it at some later date if it becomes an issue. :) > The ipset facility has great potential for other uses, for example: Yeah, it seems to be pretty cool. How is it related to nftables? -Toke _______________________________________________ Cerowrt-devel mailing list [email protected] https://lists.bufferbloat.net/listinfo/cerowrt-devel
