packages/net/pbr/files/etc/uci-defaults, branch master

pbr: update to 1.2.2-20

2026-07-19T00:26:28Z

Maintainer: me Compile tested: x86_64, Dell EMC Edge620, OpenWrt 25.12.4 Run tested: x86_64, Dell EMC Edge620, OpenWrt 25.12.4 Description: Update to version 1.2.2-20 - Bump PKG_RELEASE to 20. - Add Erik Conijn as a co-maintainer. files/etc/init.d/pbr: - Update packageCompat to 27. - Standardize gateway warning messages. - Add ubus_get_data helper for improved error/warning handling. - Preserve JSON namespace in json() for better error handling. - Refine device retrieval logic for OpenVPN interfaces. - Improve display of IPv4/IPv6 gateways for consistency. - Adjust service start trigger to only block on errors, not warnings. - Ensure 'error' field is populated in ubus status when no gateways are available. files/etc/uci-defaults/90-pbr: - Remove sed rule for '/etc/pbr/' to '/usr/share/pbr/' path update. Signed-off-by: Stan Grishin

pbr: update to 1.2.1-45

2026-01-09T02:04:37Z

Makefile: * remove traces of variants and simplify * more sensible DEPENDS section (thanks @BKPepe) Init-script: * introduce prefixlength option to speed up tables operations (thanks @egc112) Signed-off-by: Stan Grishin

pbr: update to 1.2.1-r41

2025-12-13T01:20:11Z

Remove many obsolete files. Makefile: * remove netifd-flavour related code * remove trailing white spaces Init-script: * proper deletion of default network rules for IPv{4,6} * fix netifd function error when IPv6 is enabled * remove trailing white spaces Signed-off-by: Stan Grishin

pbr: update to 1.2.1-r35

2025-12-09T01:41:03Z

pbr 1.2.1-r35 Makefile: * split uci-defaults into different purpose files * add handling of netifd integration Config: * update with default values for all options (thanks @betonmischer86) Init-script: * add netifd integration handling * add ip() function to emulate ip rule replace * add netbird intrfaces support (thanks @egc112) * reorganize loading/handling of options in load_package_config() * improve display of interface triggers in service_triggers() * remove chains cleanup from stop_service() due to exclusive use of fw4 nft files * improve status_service() output * drop input and postrouting as valid options for policy chain Uci-defaults files: * 91-pbr-nft: cosmetic improvements Default nft files: * drop use of input and postrouting chanins Custom User files: * dns-prefetch: functional improvements (thanks @betonmischer86) Signed-off-by: Stan Grishin

pbr: update to 1.2.0-r2

2025-10-10T23:34:52Z

Makefile: * stop shipping/dealing with the firewall hotplug (obsolete) * install a third user-script (dnsprefetch) by @betonmischer Config: * remove obsolete options * include the new user script Init-script: * start much earlier so that on boot, the procd_add_raw_trigger works on all systems * create a ubus() helper function so that service delete does not produce "Command not found" * rename options to better reflect their function: * procd_lan_device to lan_device * procd_wan_interface to uplink_interface * procd_wan6_interface to uplink_interface6 * procd_wan6_metric to uplink_interface6_metric * wan_ip_rules_priority to uplink_ip_rules_priority * wan_mark to uplink_mark * visually separate run-time variables from variables loaded from config options * use ${IPKG_INSTROOT} when sourcing files * fix typo in str_to_dnsmasq_nftset() * use pidof to kill dnsmasq in dnsmasq_kill() * add helper function uci_add_list_if_new() * add helper function uci_changes() * add helper function ubus() so that service delete does not produce "Command not found" * implement the dnsmasq features check similar to dnsmasq init script * add get_url() function similar to luci package * add/modify error and warning messages * change how mktemp is used for more reliable file creation * unset non-true boolean package config options on load for easier checks later * improve handling of nft/nft set options * fewer calls to resolver() and resolver() optimization to speed up the service * use softlinks instead of duplicating dnsmasq nftset files into each instance * prevent duplication of dnsmasq nftset elements * option to target a specific dest dns port in DNS policies * bugfix: more reliable interface reloads * display README links to errors/warnings sections if any errors/warnings discovered Uci-defaults: * transition from old options to new ones Signed-off-by: Stan Grishin

pbr: 1.1.7-65 bugfixes and improvements

2024-12-07T02:47:16Z

Maintainer: me Compile tested: x86_64, Dell EMC Edge620, OpenWrt 24.10.0-rc2 Run tested: x86_64, Dell EMC Edge620, OpenWrt 24.10.0-rc2 Description: * stop building netifd flavour until netifd isuees are resolved * improve output() * improve inline_set() * improve is_config_enabled() * bugfix is_domain() * improve is_supported_protocol() * improve is_supported_interface() * bugfix is_tor_running() * improve ipv4_leases_to_nftset() * improve ipv6_leases_to_nftset() * add check for ip-full binary on start * bugfix: load environment on boot * bugfix: hack around dnsmasq confdir instances * bugfix: IPv6-related fixes for internet_routing() and status_service() * improve netifd setup by bringing code into the init script from uci-defaults * bugfix: do not attempt to use IPv6 prefixes in pbr.user.aws if IPv6 support is disabled in pbr config Signed-off-by: Stan Grishin

pbr: update to 1.1.7-47

2024-10-31T17:04:56Z

* bump compat version to accommodate new strings * update dnsmasq-related code to better support separate confdirs for separate instances * remove procd_lan_interface as it didn't reflect that it's a list of devices * introduce procd_lan_device list * improve the output() function (thanks @bigsmile74) * remove duplicate uci_get_device * improve ipv6 detection and interface setup * improve dhcp force detection for interfaces name differently from lan * fix array/element parameters for some json operations * remove unneeded null redirects for `try` calls * remove (iptables-only) capitalized chain names form validation * working pbr-netifd flavor Signed-off-by: Stan Grishin

pbr: update to 1.1.7-10

2024-09-20T20:22:24Z

* allow using WG servers as gateways if explicitly set in supported_interface * automatically execute user scripts in /etc/pbr.d/ * change the dnsmasq restart logic on start/reload/restart * further nft file atomic mode-related code cleanup * fix spelling in error message Signed-off-by: Stan Grishin

pbr: update to 1.1.7-7

2024-09-05T20:26:46Z

Makefile: * remove pbr-iptables flavour Init-script: * improve detection of wireguard server and client instances * integrate wg_server_and_client into init script * remove traffic_killswitch() and trap() and related options/code * remove internal nft_file_support variable as fw4 nft file is the only running mode * improve debug() and is_supported_interface() functions * improve detection of incompatible user script files * double-quote some strings due to shellcheck errors * flush ip rules from pbr tables instead of deleting last one Other files: * remove /usr/share/pbr/pbr.user.wg_server_and_client as obsolete * remove references to the file above in config on update thru uci-defaults * minor updates to netifd uci-defaults script Signed-off-by: Stan Grishin

pbr: update to 1.1.6-20

2024-08-06T01:44:34Z

This version is the final version supporting iptables and: * it separates the old iptables/nft-capable init script from the new nft-only init script * the new nft-script is a significant rewrite of the old recursive calls/policy parsing and tries to create inline nft sets which offers performance improvements Signed-off-by: Stan Grishin