Make rc-update service enabling idempotent - #2

Merged

roemer2201 merged 14 commits into

claude/loving-cerf-EupP3from

claude/repository-review-arod2d

Jul 6, 2026

Commits on Jul 6, 2026

Make rc-update service enabling idempotent
claude
committed
1f718ff
Bring up internal interface before starting dnsmasq
claude
committed
056b8ef
Do not abort setup when sysctl rejects individual keys
claude
committed
1e3dbaf
Restrict FORWARD accept and MASQUERADE to the LAN source network
claude
committed
9fceca8
Block all reserved/bogon destination ranges, not just RFC 1918
claude
committed
2f5d5a4
Enable DNS rebind protection in dnsmasq
claude
committed
bc214fb
Add conf.default.* counterparts to hardening sysctls
claude
committed
9a0c917
Flush ip6tables nat and mangle tables like their IPv4 counterparts
claude
committed
9a7df0c
Reject blocked private destinations instead of silently dropping
claude
committed
4a6f2c4
Use iptables -w to wait for the xtables lock
claude
committed
2064cfa
Anchor sed substitutions for the interfaces template
claude
committed
d8f6c85
Clarify configuration summary log message
claude
committed
c785159
Add MIT license
claude
committed
a543a2b
Add CI workflow: shellcheck (POSIX sh) and dnsmasq config test
claude
committed
77d5c12