firewall: implement selective conntrack flushing (#10225)

Utilize the new selective conntrack flushing facility to clear
out active conntrack entries referring to old IP addresses after
a firewall reload.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
Backport of r42114

SVN-Revision: 42353

diff --git a/package/network/config/firewall/Makefile b/package/network/config/firewall/Makefile
index 41c9f42abb0e7c4197be2b877b96303bd90db2e2..8ba0e7f03d8aa1a95ea9a490dbf8150479d3d693 100644 (file)
--- a/package/network/config/firewall/Makefile
+++ b/package/network/config/firewall/Makefile
@@ -8,13 +8,13 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=firewall
-PKG_VERSION:=2014-07-19
+PKG_VERSION:=2014-08-11
 PKG_RELEASE:=$(PKG_SOURCE_VERSION)
 
 PKG_SOURCE_PROTO:=git
 PKG_SOURCE_URL:=git://nbd.name/firewall3.git
 PKG_SOURCE_SUBDIR:=$(PKG_NAME)-$(PKG_VERSION)
-PKG_SOURCE_VERSION:=8dd290b85ee8d57026581891e9a34945d077fa3b
+PKG_SOURCE_VERSION:=2807cc26b8e46eef5f23c06534a853dd48183331
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-$(PKG_SOURCE_VERSION).tar.gz
 PKG_MAINTAINER:=Jo-Philipp Wich <jow@openwrt.org>