new file mode 100644
@@ -0,0 +1,66 @@
+#!/bin/sh
+
+DAEMON="nftables"
+
+# Main ruleset file, override in /etc/default/nftables if you want a
+# different location. The file should include a "flush ruleset"
+# command to atomically replace any previous rules on reload (instead
+# of adding to them).
+NFTABLES_CONFIG="/etc/nftables.conf"
+
+# shellcheck source=/dev/null
+[ -r "/etc/default/$DAEMON" ] && . "/etc/default/$DAEMON"
+
+start() {
+ printf "Loading nftables rules: "
+ # Run only if the ruleset file exists.
+ if [ ! -f "${NFTABLES_CONFIG}" ]; then
+ echo "${NFTABLES_CONFIG} does not exist, nothing to do."
+ return 0
+ fi
+ /usr/sbin/nft --file "${NFTABLES_CONFIG}"
+ status=$?
+ if [ "$status" -eq 0 ]; then
+ echo "OK"
+ else
+ echo "FAIL"
+ fi
+ return "$status"
+}
+
+stop() {
+ printf "Clearing nftables rules: "
+ /usr/sbin/nft flush ruleset
+ status=$?
+ if [ "$status" -eq 0 ]; then
+ echo "OK"
+ else
+ echo "FAIL"
+ fi
+ return "$status"
+}
+
+restart() {
+ stop
+ start
+}
+
+reload() {
+ FLUSH='flush ruleset'
+ if ! grep -q -x "$FLUSH" "${NFTABLES_CONFIG}"; then
+ printf 'WARNING: no "%s" in %s, duplicated rules likely\n' \
+ "$FLUSH" "${NFTABLES_CONFIG}"
+ fi
+ start
+}
+
+case "$1" in
+ start|stop|restart|reload)
+ "$1"
+ ;;
+ *)
+ echo "Usage: $0 {start|stop|restart|reload}"
+ exit 1
+esac
+
+exit $?
@@ -57,6 +57,11 @@ define NFTABLES_LINUX_CONFIG_FIXUPS
$(call KCONFIG_ENABLE_OPT,CONFIG_NF_TABLES_INET)
endef
+define NFTABLES_INSTALL_INIT_SYSV
+ $(INSTALL) -m 0755 -D package/nftables/S35nftables \
+ $(TARGET_DIR)/etc/init.d/S35nftables
+endef
+
$(eval $(autotools-package))
# Legacy: we used to handle it in this .mk