Create firewall.patch

.github/diy/patches/firewall.patch

@@ -0,0 +1,39 @@
+--- a/firewall4/Makefile
++++ b/firewall4/Makefile
+@@ -25,7 +25,8 @@ define Package/firewall4
+ 	+kmod-nft-core +kmod-nft-fib +kmod-nft-offload \
+ 	+kmod-nft-nat \
+ 	+nftables-json \
+-	+ucode +ucode-mod-fs +ucode-mod-ubus +ucode-mod-uci
++	+ucode +ucode-mod-fs +ucode-mod-ubus +ucode-mod-uci \
++	+iptables +ip6tables +kmod-nft-fullcone +kmod-nft-socket +kmod-nft-tproxy
+   EXTRA_DEPENDS:=ucode (>=2022.03.22)
+   PROVIDES:=uci-firewall
+ endef
+@@ -38,6 +39,7 @@ endef
+ define Package/firewall4/conffiles
+ /etc/config/firewall
+ /etc/nftables.d/
++/etc/firewall.user
+ endef
+ 
+ define Package/firewall4/install
+
+--- a/firewall/Makefile
++++ b/firewall/Makefile
+@@ -30,9 +30,10 @@ define Package/firewall
+   SECTION:=net
+   CATEGORY:=Base system
+   TITLE:=OpenWrt C Firewall
+-  DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libiptext +IPV6:libiptext6 +libxtables +kmod-ipt-core +kmod-ipt-conntrack +IPV6:kmod-nf-conntrack6 +kmod-ipt-nat
++  DEPENDS:=+libubox +libubus +libuci +libip4tc +IPV6:libip6tc +libiptext +IPV6:libiptext6 +libxtables +kmod-ipt-core +kmod-ipt-conntrack +IPV6:kmod-nf-conntrack6 +kmod-ipt-nat \
++	+iptables-mod-fullconenat +ip6tables-mod-fullconenat +iptables-legacy +ip6tables-legacy +kmod-ipt-nat6 +kmod-ipt-offload \
++	+ipset +iptables-mod-conntrack-extra +iptables-mod-iprange +iptables-mod-socket +iptables-mod-tproxy
+   PROVIDES:=uci-firewall
+-  CONFLICTS:=firewall4
+ endef
+ 
+ define Package/firewall/description
+ 
+
+ define Package/package/network/config/firewall/description