pbr-1.2.3: bump PKG_RELEASE from 83 to 85 - #153
Merged
Conversation
Lockstep release bump with luci-app-pbr. Covers the priority-exhaustion guard (#149), the restored Tor policy warnings (#150) and the test.sh -> test-version.sh rename (#152). Compat moved 34 -> 36 across those changes, so both packages have to be released together. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Signed-off-by: Erik Conijn <egc112@msn.com>
Collaborator
Author
|
Co-pilot comment:
All accounted for |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What's new in release 85
Tor policies now tell you when a setting is being ignored.
If you set a source port, destination port, protocol, or a chain other than prerouting on a Tor policy, pbr quietly threw it away — and a source port silently produced a rule the firewall rejects. These warnings existed years ago and were lost in a 2024 refactor. They're back, now one warning per option so each says what actually happens to your setting. Nothing is rejected; you're just told. A domain or
.oniondestination address is still supported and deliberately stays silent.Routers with very many interfaces no longer collide with the kernel's own routing rule.
Once the IP rule priority counter ran out — roughly 98 or more enabled interfaces — pbr would add a rule at priority 0, on top of the kernel's own
from all lookup local, then keep counting into negative numbers. It now skips that interface and reports "interface priority exhausted" in the WebUI, matching how firewall mark overflow already behaved.WebUI cleanup. Leftover strings and code paths from the old iptables backend, gone since pbr 1.1.7, have been removed. Nothing changes on screen — every removed branch was already unreachable.
Packaging. The version-check script was renamed
test.sh→test-version.shto match the OpenWrt packages feed. No effect on the installed package.pbr commits since 83: #149 priority-exhaustion guard · #150 Tor policy warnings · #152
test-version.shrenameluci-app-pbr commits since 83: mossdef-org/luci-app-pbr#37
errorInterfacePriorityExhausted· mossdef-org/luci-app-pbr#39 Tor warning strings + iptables cleanupPairs with the luci-app-pbr bump to 85; both should land together.