Re: Firewalls: Rant

Sylvia Else <sylvia@email.invalid> wrote:

Now apparently, that's not good enough, so I have to get my head around
nftables.
 
On, but wait, this is OpenWrt, which has yet another layer added - fw4.
 
And all I wanted to do was upgrade the OS to get rid of a long-standing
and very annoying race condition that would kill the WiFi at
unpredictable moments.
 
Yes, I know I'm using this router in a rather different way from the
usual, but sometimes people do things like that.

I guess it depends how different your usage is, but if you're using
OpenWrt's fw4 firewall configuration, it's supposed to accept the
same configuration syntax as fw3, so the switch to nftables
shouldn't be causing problems if you were using that
(/etc/config/firewall).

Mind you the increased bloat of current OpenWrt (or its included
software, including the Linux kernel, which have been getting
bigger with each version) has caused me problems. Including,
as it happens, issues with it killing the WiFi when it ran out of
RAM. Oh for a maintained software environment that doesn't have an
obesity problem...

--
__          __
#_ < |\| |< _#