Issues

• NOTRACK ignores destination zone (dest) and applies to traffic from source zone to ANY

  openwrt/firewall4#106 · Filter by author tkkost opened on Oct 13, 2026
  15

• ipset should be a list

  openwrt/firewall4#105 · Filter by author andred opened on Oct 4, 2026

• software offloading ignores pppoe-wan interface

  openwrt/firewall4#100 · Filter by author justinian-tomegea opened on Jul 8, 2026
  3

• Maintenance?

  openwrt/firewall4#94 · Filter by author brada4 opened on May 3, 2026
  3

• firewall4: should enforce "strong host" model

  openwrt/firewall4#93 · Filter by author pprindeville opened on Apr 10, 2026
  73

• add Anti-spoof rules

  openwrt/firewall4#90 · Filter by author Mile-Lile opened on Mar 20, 2026
  4

• Apostrophe in single quotes causes silent failure

  openwrt/firewall4#88 · Filter by author brianjmurrell opened on Jan 22, 2026
  3

• Unwanted mangle-rule.uc template

  openwrt/firewall4#86 · Filter by author dave14305 opened on Jan 13, 2026
  3

• Could firewall4 use iif/oif instead of iifname/oifname?

  openwrt/firewall4#84 · Filter by author rany2 opened on Nov 27, 2025
  13

• /usr/share/nftables.d/chain-post will not get included if corresponding chain is not used in /etc/config/firewall

  openwrt/firewall4#82 · Filter by author lowjoel opened on Nov 12, 2025
  6

• option 'src' must not be a list

  openwrt/firewall4#75 · Filter by author brianjmurrell opened on Oct 12, 2025
  8

• !dest_port with src_mac ipset

  openwrt/firewall4#73 · Filter by author brianjmurrell opened on Sep 26, 2025

• DNAT reflection rules check ioifname where it should have been iifname.

  openwrt/firewall4#72 · Filter by author brada4 opened on Sep 20, 2025

• SNAT rewrite ip Pooling support

  openwrt/firewall4#71 · Filter by author lrizzi opened on Sep 8, 2025
  4

• Software offload and PPPoE over DSL

  openwrt/firewall4#67 · Filter by author whiskerp opened on Jun 25, 2025
  9

• fw4 generates incorrect NAT leakage rule (ct state invalid instead of new) in accept_to_wan

  openwrt/firewall4#66 · Filter by author fonoirs opened on Jun 25, 2025
  8

• Allow use of option src '!wan'

  openwrt/firewall4#57 · Filter by author brianjmurrell opened on Apr 13, 2025
  6

• Firewall is not working for IPSec NAT-T

  openwrt/firewall4#53 · Filter by author kouhj opened on Mar 2, 2025
  9

• Use of both src_ip and ipset in a rule is unclear

  openwrt/firewall4#48 · Filter by author brianjmurrell opened on Feb 13, 2025
  4

• option log '0' doesn't seem to work

  openwrt/firewall4#47 · Filter by author brianjmurrell opened on Feb 11, 2025
  5

• Unfortunate chain ordering side effect and potential security vulnerability

  openwrt/firewall4#46 · Filter by author brianjmurrell opened on Feb 10, 2025
  10

• MAC address ipsets should not be limited to a single family

  openwrt/firewall4#45 · Filter by author brianjmurrell opened on Feb 8, 2025
  1

• [feature request] support DNAT on the NAT output chain

  openwrt/firewall4#24 · Filter by author moetayuko opened on Mar 7, 2024
  10

• creating NOTRACK firewall rules are bogus

  openwrt/firewall4#14 · Filter by author ErwanMAS opened on Oct 18, 2023
  3