[openwrt/openwrt] realtek: Use firewall4

[LEDE Commits]

hauke pushed a commit to openwrt/openwrt.git, branch master:
https://git.openwrt.org/469030659c5cb140bdbff1b3d8fc9691f98f984b

commit 469030659c5cb140bdbff1b3d8fc9691f98f984b
Author: Hauke Mehrtens <hauke at hauke-m.de>
AuthorDate: Mon Feb 28 21:57:55 2022 +0100

    realtek: Use firewall4
    
    The realtek target is not a router, but basic device, see DEVICE_TYPE.
    The basic device type does not come with firewall by default, see
    include/target.mk for details. The realtek target extended
    DEFAULT_PACKAGES manually with firewall.
    
    This changes the defaults to take firewall4 and nftables instead of
    firewall and iptables. This also adds the additional package
    kmod-nft-offload.
    
    The only difference to the router type is the missing ppp,
    ppp-mod-pppoe, dnsmasq and odhcpd-ipv6only package.
    
    This increases the compressed image size by about 422KBytes.
    
    Tested-by: Stijn Segers <foss at volatilesystems.org>
    Signed-off-by: Hauke Mehrtens <hauke at hauke-m.de>
---
 target/linux/realtek/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/target/linux/realtek/Makefile b/target/linux/realtek/Makefile
index 1fd9a870cd..8bed3d8a72 100644
--- a/target/linux/realtek/Makefile
+++ b/target/linux/realtek/Makefile
@@ -18,7 +18,7 @@ endef
 include $(INCLUDE_DIR)/target.mk
 
 DEFAULT_PACKAGES += uboot-envtools ethtool kmod-gpio-button-hotplug \
-	firewall ip6tables iptables odhcp6c \
+	firewall4 nftables kmod-nft-offload odhcp6c \
 	ip-full ip-bridge tc
 
 $(eval $(call BuildTarget))