diff --git a/.github/diy/patches/firewall.patch b/.github/diy/patches/firewall.patch
index 8f3f14ba4..41673885a 100644
--- a/.github/diy/patches/firewall.patch
+++ b/.github/diy/patches/firewall.patch
@@ -21,13 +21,14 @@
 
 --- a/firewall/Makefile
 +++ b/firewall/Makefile
-@@ -28,9 +28,9 @@ define Package/firewall
-   SECTION:=net
-   CATEGORY:=Base system
+@@ -32,9 +32,10 @@ define Package/firewall
    TITLE:=OpenWrt C Firewall
--  DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libiptext +IPV6:libiptext6 +libxtables +kmod-ipt-core +kmod-ipt-conntrack +iptables-mod-conntrack-extra +IPV6:kmod-nf-conntrack6 +kmod-ipt-nat +iptables-mod-fullconenat
-+  DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libiptext +IPV6:libiptext6 +libxtables +kmod-ipt-core +kmod-ipt-conntrack +iptables-mod-conntrack-extra +IPV6:kmod-nf-conntrack6 +kmod-ipt-nat +iptables-mod-fullconenat \
-+           +ipset +iptables-mod-conntrack-extra +iptables-mod-iprange +iptables-mod-socket +iptables-mod-tproxy
+   DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libiptext +IPV6:libiptext6 \
+ 	+libxtables +kmod-ipt-core +kmod-ipt-conntrack +IPV6:kmod-nf-conntrack6 +kmod-ipt-nat \
+-	+iptables-mod-fullconenat
++	+iptables-mod-fullconenat \
++	+iptables-mod-fullconenat +ip6tables-mod-fullconenat +iptables-legacy +ip6tables-legacy +kmod-ipt-nat6 +kmod-ipt-offload \
++	+ipset +iptables-mod-conntrack-extra +iptables-mod-iprange +iptables-mod-socket +iptables-mod-tproxy
    PROVIDES:=uci-firewall
 -  CONFLICTS:=firewall4
  endef