SWFence 0.3.0

SWFence is an OpenWrt firewall with a minimal LuCI panel for Nintendo Switch and Switch 2. It keeps selected IPv4 LAN access while blocking other console traffic by MAC. Optional exact-domain and individual IPv4 internet exceptions are supported; IPv6 remains blocked.

Automated tests and isolated packet checks pass; real-router installation, actual LuCI/rpcd operation, reboot behavior and physical console compatibility still require hardware acceptance.

Install over SSH

Caution

❗ Before installation: disable traffic acceleration. In LuCI, open Network → Firewall and disable Software flow offloading and Hardware flow offloading. On manufacturer firmware, also check Network Acceleration / NAT acceleration. SWFence does not disable these settings automatically; protection with acceleration enabled has not been verified.

Keep the console disconnected from the internet until protection is applied and checked. After changing firewall, VPN, proxy or acceleration modules, check isolation again, including after a router reboot. A correct MAC alone does not prove isolation.

Connect from your computer using the router's actual LAN address:

ssh root@192.168.1.1

Then run on OpenWrt:

wget -O /tmp/swfence-install.sh https://github.com/byizmysh/SWFence/releases/download/v0.3.0/install.sh
sh /tmp/swfence-install.sh byizmysh/SWFence v0.3.0

Supported firmware families: 24.10.x (opkg) and 25.12.x (apk) with firewall4. The script checks the firmware, verifies the selected release packages against SHA256SUMS, installs dependencies and opens the setup wizard. Enter your actual console Wi-Fi/Ethernet MACs, router LAN IPv4 and local subnet. Set both console DNS fields to the router's LAN IPv4, then open LuCI → Services → SWFence.

Downloads

• swfence-0.3.0.tar.gz — install bundle: installer, English README/INSTALL, all four native packages, license, version and internal checksums.
• swfence-0.3.0-source.tar.gz — complete public source archive and documentation.
• install.sh and INSTALL.md — standalone installer and English instructions.
• swfence-24.10.ipk / luci-app-swfence-24.10.ipk — OpenWrt 24.10 packages.
• swfence-25.12.apk / luci-app-swfence-25.12.apk — OpenWrt 25.12 packages.
• SHA256SUMS — checksums for every release asset above.

No screenshots, private router backups, credentials or real console MACs are included. The package footer links to this repository. See the README for capabilities, exceptions, MAC discovery, live status, daily counters, rollback and removal.