simple-captive-portal: order nft chains predictably

Adjust simple-captive-portal firewall chain priority to apply before
default chain deterministically

Signed-off-by: Andris PE <redacted>

diff --git a/net/simple-captive-portal/Makefile b/net/simple-captive-portal/Makefile
index 0788fb124a44ba98e4fb37205d7057ee785d2fb3..2574feee9dd8c785ed7357a71e4ee6d5b7271055 100644 (file)
--- a/net/simple-captive-portal/Makefile
+++ b/net/simple-captive-portal/Makefile
@@ -2,7 +2,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=simple-captive-portal
 PKG_VERSION:=2025.06.22
-PKG_RELEASE:=1
+PKG_RELEASE:=2
 
 PKG_MAINTAINER:=Etienne CHAMPETIER <champetier.etienne@gmail.com>
 PKG_LICENSE:=GPL-2.0-or-later

diff --git a/net/simple-captive-portal/files/etc/init.d/simple-captive-portal b/net/simple-captive-portal/files/etc/init.d/simple-captive-portal
index 3980983aacaeeeb815195594e970c6422f9ec964..77cfba0f60635af8ad5e75223be42d597b763c36 100644 (file)
--- a/net/simple-captive-portal/files/etc/init.d/simple-captive-portal
+++ b/net/simple-captive-portal/files/etc/init.d/simple-captive-portal
@@ -21,7 +21,7 @@ table inet simple-captive-portal {
     }
 
     chain prerouting {
-        type nat hook prerouting priority mangle; policy drop;
+        type nat hook prerouting priority mangle - 5; policy drop;
         iif != ${INTF} accept
         ether saddr @guest_macs accept
         tcp dport 80 redirect to ${PORT_REDIRECT}