From 07fa3e0edf701140a4db4589acdc336bc5442bfb Mon Sep 17 00:00:00 2001
From: Vincent Li <vincent.mc.li@gmail.com>
Date: Sat, 12 Apr 2025 17:23:13 -0700
Subject: [PATCH] firewall: add firewall bridge netfilter UI

add UI to enable netfilter/firewall function
for firewall in bridge mode

Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
---
 html/cgi-bin/optionsfw.cgi | 15 +++++++++++++++
 langs/en/cgi-bin/en.pl     |  3 +++
 2 files changed, 18 insertions(+)

diff --git a/html/cgi-bin/optionsfw.cgi b/html/cgi-bin/optionsfw.cgi
index 36e592929..37d18ce4f 100644
--- a/html/cgi-bin/optionsfw.cgi
+++ b/html/cgi-bin/optionsfw.cgi
@@ -88,6 +88,9 @@ if (!$settings{'FWBRIDGEIP'}) {
 if (!$settings{'FWBRIDGEMASK'}) {
 	$settings{'FWBRIDGEMASK'} = '0.0.0.0';
 }
+if (!$settings{'BRIDGENETFILTER'}) {
+	$settings{'BRIDGENETFILTER'} = 'off';
+}
 if (!$settings{'MASQUERADE_GREEN'}) {
 	$settings{'MASQUERADE_GREEN'} = 'on';
 }
@@ -182,6 +185,9 @@ $selected{'MASQUERADE_BLUE'}{$settings{'MASQUERADE_BLUE'}} = 'selected="selected
 $selected{'FWBRIDGEMODE'}{'off'} = '';
 $selected{'FWBRIDGEMODE'}{'on'} = '';
 $selected{'FWBRIDGEMODE'}{$settings{'FWBRIDGEMODE'}} = 'selected="selected"';
+$selected{'BRIDGENETFILTER'}{'off'} = '';
+$selected{'BRIDGENETFILTER'}{'on'} = '';
+$selected{'BRIDGENETFILTER'}{$settings{'BRIDGENETFILTER'}} = 'selected="selected"';
 
 &Header::openbox('100%', 'center',);
 print "<form method='post' action='$ENV{'SCRIPT_NAME'}'>";
@@ -213,6 +219,15 @@ print <<END;
 				<input type='text' name='FWBRIDGEMASK' value='$settings{'FWBRIDGEMASK'}'/>
                         </td>
                 </tr>
+                <tr>
+                        <td align='left' width='60%'>$Lang::tr{'fw bridge netfilter'}</td>
+                        <td>
+                                <select name='BRIDGENETFILTER'>
+                                        <option value='off' $selected{'BRIDGENETFILTER'}{'off'}>$Lang::tr{'fw bridge netfilter disabled'}</option>
+                                        <option value='on' $selected{'BRIDGENETFILTER'}{'on'}>$Lang::tr{'fw bridge netfilter enabled'}</option>
+                                </select>
+                        </td>
+                </tr>
 	</table>
 
 	<br>
diff --git a/langs/en/cgi-bin/en.pl b/langs/en/cgi-bin/en.pl
index c932c7414..52aca8a83 100644
--- a/langs/en/cgi-bin/en.pl
+++ b/langs/en/cgi-bin/en.pl
@@ -1164,10 +1164,13 @@
 'from warn email bad' => 'From e-mail address is not valid',
 'fw mode' => 'Firewall Mode',
 'fw bridge mode' => 'Firewall Bridge Mode',
+'fw bridge netfilter' => 'Firewall Bridge Netfilter',
 'fw bridge ip' => 'Firewall Bridge IP',
 'fw bridge mask' => 'Firewall Bridge Netmask',
 'fw bridge mode disabled' => 'disabled',
 'fw bridge mode enabled' => 'enabled',
+'fw bridge netfilter disabled' => 'disabled',
+'fw bridge netfilter enabled' => 'enabled',
 'fw blue' => 'Firewall options for BLUE interface',
 'fw default drop' => 'Firewall policy',
 'fw logging' => 'Firewall logging',