fw4: add device iifname/oifname matches to DSCP and MARK rules
authorJo-Philipp Wich <jo@mein.io>
Thu, 10 Feb 2022 18:17:28 +0000 (19:17 +0100)
committerJo-Philipp Wich <jo@mein.io>
Thu, 10 Feb 2022 18:17:28 +0000 (19:17 +0100)
commit5c21714dc503d9cee6a638cb8ab06fb40ae473cc
treea6c432fc78b215ae5a6c9e2b28c2d9c09f50b54b
parent3eacc97415f877f3a20d1fd9771318041c6d6f8a
fw4: add device iifname/oifname matches to DSCP and MARK rules

Mirror firewall3 logic and do ingress/egress device matches for MARK
and DSCP rules. Also complete support option `device` and `option direction`
to allow overriding the automatic device matches.

Fixes: #5061
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
root/usr/share/firewall4/templates/rule.uc
root/usr/share/ucode/fw4.uc
tests/03_rules/05_mangle