Hello si je comprends bien depuis la 25.12 on peut remplacer cela:
/etc/nftables.d/nft-prio6-rules.include
oifname "eth0.832" counter meta priority set 0:1
oifname "eth0.832" ip protocol icmp counter meta priority set 0:6
oifname "eth0.832" ip protocol igmp counter meta priority set 0:6
oifname "eth0.832" udp dport 67 counter meta priority set 0:6
oifname "eth0.832" udp dport 547 counter meta priority set 0:6
oifname "eth0.832" ip protocol icmpv6 counter meta priority set 0:6
/etc/config/firewall
config include 'orange_rules'
option enabled '1'
option type 'nftables'
option path '/etc/nftables.d/nft-prio6-rules.include'
option position 'chain-append'
option chain 'mangle_postrouting'
par
/etc/nftables.d/orange-prio.include
table netdev orange-rules
flush table netdev orange-rules
table netdev orange-rules {
chain orange-rules-chain {
type filter hook egress device "eth0" priority 0; policy accept;
vlan id 832 ip6 udp dport 547 vlan pcp set 6 ip6 dscp set cs6 counter accept
vlan id 832 ip6 icmpv6 type { echo-request, echo-reply, nd-neighbor-solicit, nd-neighbor-advert, nd-router-solicit } vlan pcp set 6 ip6 dscp set cs6 counter accept
vlan id 832 ip6 ip6 dscp set cs0 counter accept
vlan id 832 ip udp dport 67 vlan pcp set 6 ip dscp set cs6 counter accept
vlan id 832 ip ip dscp set cs0 counter accept
vlan id 832 arp vlan pcp set 6 counter accept
}
}
/etc/config/firewall
config include 'orange_rules'
option enabled '1'
option type 'nftables'
option path '/etc/nftables.d/orange-prio.include'
option position 'ruleset-post'
Avec les options
option dscp '6'
option skpriority '6'
sur le wan6 ?
Remplacer la LiveBox par un routeur