From b9430ce692a944023331ed64ef9e7e8708f3ac66 Mon Sep 17 00:00:00 2001
From: kiddin9 <48883331+kiddin9@users.noreply.github.com>
Date: Wed, 30 Sep 2026 01:00:20 +0800
Subject: [PATCH] Create firewall.patch

---
 .github/diy/patches/firewall.patch | 39 ++++++++++++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100644 .github/diy/patches/firewall.patch

diff --git a/.github/diy/patches/firewall.patch b/.github/diy/patches/firewall.patch
new file mode 100644
index 000000000..19faf7a34
--- /dev/null
+++ b/.github/diy/patches/firewall.patch
@@ -0,0 +1,39 @@
+--- a/firewall4/Makefile
++++ b/firewall4/Makefile
+@@ -25,7 +25,8 @@ define Package/firewall4
+ 	+kmod-nft-core +kmod-nft-fib +kmod-nft-offload \
+ 	+kmod-nft-nat \
+ 	+nftables-json \
+-	+ucode +ucode-mod-fs +ucode-mod-ubus +ucode-mod-uci
++	+ucode +ucode-mod-fs +ucode-mod-ubus +ucode-mod-uci \
++	+iptables +ip6tables +kmod-nft-fullcone +kmod-nft-socket +kmod-nft-tproxy
+   EXTRA_DEPENDS:=ucode (>=2022.03.22)
+   PROVIDES:=uci-firewall
+ endef
+@@ -38,6 +39,7 @@ endef
+ define Package/firewall4/conffiles
+ /etc/config/firewall
+ /etc/nftables.d/
++/etc/firewall.user
+ endef
+ 
+ define Package/firewall4/install
+
+--- a/firewall/Makefile
++++ b/firewall/Makefile
+@@ -30,9 +30,10 @@ define Package/firewall
+   SECTION:=net
+   CATEGORY:=Base system
+   TITLE:=OpenWrt C Firewall
+-  DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libiptext +IPV6:libiptext6 +libxtables +kmod-ipt-core +kmod-ipt-conntrack +IPV6:kmod-nf-conntrack6 +kmod-ipt-nat
++  DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libiptext +IPV6:libiptext6 +libxtables +kmod-ipt-core +kmod-ipt-conntrack +IPV6:kmod-nf-conntrack6 +kmod-ipt-nat \
++	+iptables-mod-fullconenat +ip6tables-mod-fullconenat +iptables-legacy +ip6tables-legacy +kmod-ipt-nat6 +kmod-ipt-offload \
++	+ipset +iptables-mod-conntrack-extra +iptables-mod-iprange +iptables-mod-socket +iptables-mod-tproxy
+   PROVIDES:=uci-firewall
+-  CONFLICTS:=firewall4
+ endef
+ 
+ define Package/firewall/description
+ 
+
+ define Package/package/network/config/firewall/description