From 5bb8dc6f0b7e2f8a8603cec1f13ff86e9a32b82c Mon Sep 17 00:00:00 2001
From: fujr <fjrcn@outlook.com>
Date: Fri, 1 Nov 2024 04:07:14 +0800
Subject: [PATCH] use openwrt fw3 framework

---
 .../root/etc/init.d/qmodem_ttl                | 21 ++++++++++++-------
 .../root/etc/uci-defaults/add-fw-include      | 17 +++++++++++++++
 .../root/usr/share/qmodem/modem_dial.sh       |  1 +
 3 files changed, 32 insertions(+), 7 deletions(-)
 create mode 100755 luci/luci-app-qmodem-ttl/root/etc/uci-defaults/add-fw-include

diff --git a/luci/luci-app-qmodem-ttl/root/etc/init.d/qmodem_ttl b/luci/luci-app-qmodem-ttl/root/etc/init.d/qmodem_ttl
index d0313de..f7c4b37 100755
--- a/luci/luci-app-qmodem-ttl/root/etc/init.d/qmodem_ttl
+++ b/luci/luci-app-qmodem-ttl/root/etc/init.d/qmodem_ttl
@@ -26,13 +26,8 @@ set_if_ttl()
     IPT6="ip6tables"
     logger -t modem_ttl "Setting TTL for $device to $ttl"
     comment="modem_ttl"
-    $IPT -t mangle -A PREROUTING -i $device -j TTL --ttl-set $ttl -m comment --comment $comment
-    $IPT -t mangle -A POSTROUTING -o $device -j TTL --ttl-set $ttl -m comment --comment $comment
-    $IPT6 -t mangle -A PREROUTING -i $device -j HL --hl-set $ttl -m comment --comment $comment
-    $IPT6 -t mangle -A POSTROUTING -o $device -j HL --hl-set $ttl -m comment --comment $comment
-}
-
-stop_service(){
+    touch /etc/firewall.d/qmodem_ttl
+    chmod +x /etc/firewall.d/qmodem_ttl
     IPT_PREROUTING=$(iptables -t mangle -L PREROUTING -n --line-numbers | grep modem_ttl | awk '{print $1}')
     IPT_POSTROUTING=$(iptables -t mangle -L POSTROUTING -n --line-numbers | grep modem_ttl | awk '{print $1}')
     IPT6_PREROUTING=$(ip6tables -t mangle -L PREROUTING -n --line-numbers | grep modem_ttl | awk '{print $1}')
@@ -49,6 +44,18 @@ stop_service(){
     if [ -n "$IPT6_POSTROUTING" ]; then
         ip6tables -t mangle -D POSTROUTING $IPT6_POSTROUTING
     fi
+    echo "$IPT -t mangle -A PREROUTING -i $device -j TTL --ttl-set $ttl -m comment --comment $comment" >> /etc/firewall.d/qmodem_ttl
+    echo "$IPT -t mangle -A POSTROUTING -o $device -j TTL --ttl-set $ttl -m comment --comment $comment" >> /etc/firewall.d/qmodem_ttl
+    echo "$IPT6 -t mangle -A PREROUTING -i $device -j HL --hl-set $ttl -m comment --comment $comment" >> /etc/firewall.d/qmodem_ttl
+    echo "$IPT6 -t mangle -A POSTROUTING -o $device -j HL --hl-set $ttl -m comment --comment $comment" >> /etc/firewall.d/qmodem_ttl
+    /etc/firewall.d/qmodem_ttl
+    chmod -x /etc/firewall.d/qmodem_ttl
+    [ -d /sys/kernel/debug/ecm/ ] && /etc/init.d/qca-nss-ecm stop # disable nss offload
+}
+
+stop_service(){
+    rm -f /etc/firewall.d/qmodem_ttl
+    /etc/init.d/firewall reload
 }
 
 service_triggers()
diff --git a/luci/luci-app-qmodem-ttl/root/etc/uci-defaults/add-fw-include b/luci/luci-app-qmodem-ttl/root/etc/uci-defaults/add-fw-include
new file mode 100755
index 0000000..7da3f6c
--- /dev/null
+++ b/luci/luci-app-qmodem-ttl/root/etc/uci-defaults/add-fw-include
@@ -0,0 +1,17 @@
+#!/bin/sh
+uci -q batch << EOF
+	delete firewall.qmodem_ttl
+	set firewall.qmodem_ttl=include
+	set firewall.qmodem_ttl.type=script
+	set firewall.qmodem_ttl.path=/etc/firewall.d/qmodem_ttl
+	set firewall.qmodem_ttl.family=any
+	set firewall.qmodem_ttl.reload=1
+	commit firewall
+EOF
+uci -q batch <<-EOF >/dev/null
+	add ucitrack qmodem_ttl
+	set ucitrack.@qmodem_ttl[-1].init=qmodem_ttl
+	commit ucitrack
+EOF
+
+exit 0
diff --git a/luci/luci-app-qmodem/root/usr/share/qmodem/modem_dial.sh b/luci/luci-app-qmodem/root/usr/share/qmodem/modem_dial.sh
index 810ee14..02658c6 100755
--- a/luci/luci-app-qmodem/root/usr/share/qmodem/modem_dial.sh
+++ b/luci/luci-app-qmodem/root/usr/share/qmodem/modem_dial.sh
@@ -449,6 +449,7 @@ set_if()
         ifdown ${interface6_name}
         ifup ${interface_name}
         ifup ${interface6_name}
+        /etc/init.d/qmodem_ttl start
     fi
     if [ "$firewall_reload_flag" -eq 1 ];then
         uci commit firewall