firewall4/tests/03_rules/15_snat_icmp_range, branch masterOpenWrt nftables firewallhttps://git.openwrt.org/project/firewall4/atom?h=master2026-08-27T16:26:05Zfw4: accept a source rewrite range for ICMP2026-08-27T16:26:05ZDaniel Golle2026-08-22T12:30:31Zurn:sha1:2b55562cdfb294e6baae14fa41f8d2f4b5c30556
A snat_port range on proto icmp maps the ICMP identifier rather than
a port. map.sh emits one per MAP-E portset (RFC 7597) and firewall3
accepted it, while fw4 rejects the section, breaking ICMP source NAT
for MAP. Accept the range for ICMP and infer the IPv6 family for
ipv6-icmp; port match options still require UDP or TCP.
Fixes: 59dbb982b7fe ("Initial commit")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>