Firewall
Appearance
Firewall is currently being implemented in pmbootstrap!2042 and pmaports!2060. This wiki page explains how it will be once both MRs are merged. |
New postmarketOS installations have nftables configured if the device's kernel has support for it.
Default rules
(explain default rules here)
Check if it is running
(explain how to check if it is running or not, and how to start and enable it in that case)
Usage
(explain how to enable / disable it, explain -openusb)
Configuring the kernel to support nftables
- Run
pmbootstrap kconfig check --nftables kernel-name
to get a list of kernel config options that need to be changed - Fix them up with
pmbootstrap kconfig edit
- Add
pmb:kconfigcheck-nftables
tooptions=
in your kernel's APKBUILD - Create a test install with
pmbootstrap install
- Boot it and verify that the firewall works
- Create a merge request to pmaports.git with your changes
See also
- pmbootstrap!2042: add support for firewall
- pmaports!2060: postmarketos-firewall: add package for installing/configuring default fw
- build.postmarketos.org#100: build all main and community devices with firewall enabled