Mirrors
/
aredn
mirror of https://github.com/aredn/aredn.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
aredn/files/etc/config.mesh/firewall

264 lines
6.6 KiB
Plaintext
Raw Normal View History

Merge SDWG Mesh progress with 1.0.0 BBHN Includes removing files that are provided by packages instead of being embedded as binaries. Changes made for UBNT hardware AND for newer base openwrt (Backfire)
2013-12-02 13:04:54 -07:00
config defaults
option syn_flood 1
option input ACCEPT
option output ACCEPT
option forward REJECT
config zone
option name lan
option network 'lan'
option input ACCEPT
option output ACCEPT
option forward REJECT
config zone
option name wan
option network 'wan'
option input REJECT
option output ACCEPT
option forward REJECT
option masq 1
option mtu_fix 1
config zone
option name wifi
option network 'wifi'
option input REJECT
option output ACCEPT
option forward REJECT
option masq 1
option mtu_fix 1
Add new feature device-to-device linking (dtdlink) The dtdlink interface is vlan 2 on eth0 and is used for linking two or more devices together. This will allow for band-to-band repeaters, sector antenna setups, etc. see BBHN->ticket:28
2014-04-09 00:19:45 -06:00
config zone
option name dtdlink
Rework the firewall for tunnels and xlinks to allow port forwarding. (#1220)
2024-05-26 17:41:18 -06:00
<dtdlink_interfaces>
option input REJECT
option output ACCEPT
option forward REJECT
option mtu_fix 1
config zone
option name vpn
<vpn_interfaces>
Add new feature device-to-device linking (dtdlink) The dtdlink interface is vlan 2 on eth0 and is used for linking two or more devices together. This will allow for band-to-band repeaters, sector antenna setups, etc. see BBHN->ticket:28
2014-04-09 00:19:45 -06:00
option input REJECT
option output ACCEPT
option forward REJECT
option mtu_fix 1
Merge SDWG Mesh progress with 1.0.0 BBHN Includes removing files that are provided by packages instead of being embedded as binaries. Changes made for UBNT hardware AND for newer base openwrt (Backfire)
2013-12-02 13:04:54 -07:00
config forwarding
option src lan
option dest wan
config forwarding
option src lan
option dest wifi
Add rule to allow wifi to forward traffic to wifi Previous rules would of not allowed mesh traffic to be forwarded out.
2013-12-04 20:29:42 -07:00
config forwarding
option src wifi
option dest wifi
Merge SDWG Mesh progress with 1.0.0 BBHN Includes removing files that are provided by packages instead of being embedded as binaries. Changes made for UBNT hardware AND for newer base openwrt (Backfire)
2013-12-02 13:04:54 -07:00
Add new feature device-to-device linking (dtdlink) The dtdlink interface is vlan 2 on eth0 and is used for linking two or more devices together. This will allow for band-to-band repeaters, sector antenna setups, etc. see BBHN->ticket:28
2014-04-09 00:19:45 -06:00
config forwarding
option src lan
option dest dtdlink
config forwarding
option src wifi
option dest dtdlink
config forwarding
option src dtdlink
option dest wifi
Merge SDWG Mesh progress with 1.0.0 BBHN Includes removing files that are provided by packages instead of being embedded as binaries. Changes made for UBNT hardware AND for newer base openwrt (Backfire)
2013-12-02 13:04:54 -07:00
Rework the firewall for tunnels and xlinks to allow port forwarding. (#1220)
2024-05-26 17:41:18 -06:00
config forwarding
option src vpn
option dest wifi
config forwarding
option src wifi
option dest vpn
config forwarding
option src lan
option dest vpn
config forwarding
option src vpn
option dest dtdlink
config forwarding
option src dtdlink
option dest vpn
config forwarding
option src vpn
option dest vpn
Merge SDWG Mesh progress with 1.0.0 BBHN Includes removing files that are provided by packages instead of being embedded as binaries. Changes made for UBNT hardware AND for newer base openwrt (Backfire)
2013-12-02 13:04:54 -07:00
# Allow IPv4 ping
config rule
option name Allow-Ping
option src wifi
option proto icmp
option icmp_type echo-request
option family ipv4
option target ACCEPT
Add new feature device-to-device linking (dtdlink) The dtdlink interface is vlan 2 on eth0 and is used for linking two or more devices together. This will allow for band-to-band repeaters, sector antenna setups, etc. see BBHN->ticket:28
2014-04-09 00:19:45 -06:00
config rule
option name Allow-Ping
option src dtdlink
option proto icmp
option icmp_type echo-request
option family ipv4
option target ACCEPT
Rework the firewall for tunnels and xlinks to allow port forwarding. (#1220)
2024-05-26 17:41:18 -06:00
config rule
option name Allow-Ping
option src vpn
option proto icmp
option icmp_type echo-request
option family ipv4
option target ACCEPT
feature: FirewallIncludes: Add program that will auto include firewall rules that are in a set directory. This is the basis for allowing packages to contain firewall rules that can be just dropped in a folder at install time.
2016-01-09 16:01:30 -07:00
config include
Update AREDN to OpenWRT 22.3.2 (Major Upgrade) (#574) * Update to Openwrt 21.02 and add support for the CPE710 v1 Update scripts to change references to ifname to device due to a change in Openwrt naming reverse-wpad-basic-wolfssl and disable SSL on Curl NOTE: The compile host must have python3-distutils installed for gpsd to build * aredn: initial working upgrade to openwrt 21.02.1 * aredn: update 1 to working upgrade to openwrt 21.02.1 * aredn: add cpe710v1 to build config * Andrew's patches * Remove duplicates + display perl * Temp disable wifi extension patch * ifname/ports support * Add spectrum patch back in * Generic function to extra interfaces * New api to get wifi ifname * Disables jails * Style link * aredn: partial upgrade to openwrt 22.0.3.0 added AC device images and partial migration to 22.0.3.0 firewall upgrade pending * aredn: update mesh-release and revert config.mk * Unused * NFT firewall rewrite * Common-isze configs * Fix network layout for hap2 * Use local packages dev (new firewall rules) * Add HAP2 * Add pause after network restart to let bridge reinitialize * Various lua fixes for new lua version * Tweak config * Re-fix networking (lost patch change) * Add new radio names * Tolerate missing wifi * Fix hap-lite switch setup * More devices * New radio id * Build Rocket 5AC lite * Remove need for luci.sys * Remove need for luci.sys * Explicitly name wlan interfaces * Handle different compatibility verisoning * Update networking for switches * ipref version bump * Extra flag for curl * Better compat_version fix * Remove wolfssl * Fix dns server * Fix device name * Unused * Remove things we dont need * Remove unused packages * Generic macaddr overrides * Fix uci commit * Fix luci.template.parser to avoid luci.http loading the real thing * Rocket-M build * Add search-domain dhcp option * Turn of ipv6 * No IPV6 in dnsmasq * Override mac addresses if devices all the same * Working from master (for now) * Put back hostap * Disable old ethmac fixup * Tweak configs * Move back to v22.03.2 Leave ipq4019 builds to master * Need IPV6 to compile nft firewall * Rocket-M fixes * Before we start * WIP * Working snapshot * Cleaned patches * Merged patch * Single patch to support HAP2 * Fix typo * Add nanostation-m * 5/10Mhz patch * 5+10MHz patch for ath10k-ct driver * Extend 2Ghz channel check to include -4 to -1 * Add chanbw setup for ath10k (like ath9k) * Added TP-Link CPE710 v1 * Override firmwares * Missing patch * Dropbear config like 3.22.8.0 * Add Ubiquiti Rocket 5AC Lite * Fix c6 * Update * Need more scan channels * Remove IPV6 * Improve mac fixups * Put back missing nft app * IPv6 removed so dont have to disable it * Fix rocket-m flash bug * Fix nanostation-m * Nanobridge is tiny * Fix wifi order for ar750 * Rocket M5 XW support * New rates * Fix firewall4 so we don't need IPv6 * Allow channel width to be restricted * Move channel list into library * Fix naming * Mechanism to block specific channels on specific radios * Refresh buttons * routerboard-sxt-5nd * CPE605 v1.0 * Improve rocket m xw * tpink * Update patch * Update to remove disable * Remove BW restrictions on cpe710 * Restrict to what has been tested * Remove test BW restrictions * sxtsq-5-ac * Update * Update * powerbeam-m5-300 support * Fix * Fix hap2 * Tidy unused patches * Remove limit * Add ubnt_bullet-m-ar7241 * Added ubnt_nanobeam-ac-gen2 * Fix typo * Tolerate missing dtd ip * Explicitly gix hap2 mac addresses * Fix some broken patches * Hap2 wont work at 5MHz * Ubiquiti LiteBeam 5AC Gen2 * Fix compat_version for sxt 5ac * Update patch * Unused * Fix lan configuration for some devices * Rolling average of noise level * Unused * Split out the ath10k rssi monitor (its very simple at the moment) * Ignore .DS_Store * Reboot if ethernet doesnt come up (but only once!) * reboot returns - add exit * Add some logging info * Fix ] * Check all possibly ethernet bridges * Improve mac fixing * Remove HostAP on small memory devices * Reduce dropbear footprint * Add setsid * Kill hostap when upgrading to save memory * Different way to detect hostapd unavailable * New build steps * Improve manager logging * Fix name conflict for the two monitors * Try to improve test mesh name resolve problem * Migrate tiny to generic (tiny doesnt work properly) * Typo * Another attempt to fix macs for Mikrotik * Protect against missing trackers * Fix wpad for ipq40xx * Remove old tunnel check code * Enable ZRAM swap to aid low memory devices * ath10k noise can something be out of range - protect against that * Updated with current devices and status * Update firmware which has been tested * Updated with more builds * More binary/README * Fix css error * Start noise at sensible base level * Unfix the css so it looks how it use to. * Save as much memory as we can on lowmem nodes * Hide some options on low memory devices * Add "eol" to 32MB devices * Restart network rather than reboot node if it seems to be broken * Fixes * Revert network reset * Fix ar750 networking * Continue to trim tiny configs * More devices * Dump IW output messages * Fix Rocket 5AC intermittent ethernet issue * Ethernet fix for PowerBeam 5AC 500 * More tiny size reduction * More support data * Fixed POE and USB power features * Add Ubiquiti NanoBeam AC (gen1) * NanoStation (not NanoBeam) * Add mii-tool package * Device updates * Bump update time to 5 minutes * Fix ethernet negotiation for rocker-5ac and nanobeam * Fix iplookup * Config changes based on call feedback * Radio listing fixes * Update with more untested builds * Fallback TxMbps extracted from iw station dump * Fix tunnel detection for low memory nodes * Remove unused feed packages * snapshot build * Update stability info * Add powerbeam-5ac-500 * Typo * Add missing 3.22.1.0 * Add MikroTik LHG 5 AC * Fix permissions * Fix permissions * AirGrid's take Bullet builds * Mikrotik AC3 * Improve supportdata structure a little to make it easier to find things * Restore WAN VLAN overrides * Fix vlan regex for hap2 and hap3 * Support old and new style poe controls * hap-ac3 is version 1.1 * Handle typo in some openwrt config files * Fix HAP AC3 install * Update hap ac3 status * Support user overrides for network ports (non-swconfig devices) * LHG 5AC support * Remove -nand * Remove non-working platform.sh change * tunnel weight override * Omit LinkQualityMult when value is 1 * Add mANTBox 19s and 15s * Support ath79 mikrotik devices which require ath10k in the initramfs Co-authored-by: apcameron <apcameron@softhome.net> Co-authored-by: Joe AE6XE <ae6xe@arrl.net> Co-authored-by: Joe Ayers <joe@arrl.net>
2022-12-22 13:22:49 -07:00
option path /usr/local/bin/mesh-firewall
option fw4_compatible 1
feature: FirewallIncludes: Add program that will auto include firewall rules that are in a set directory. This is the basis for allowing packages to contain firewall rules that can be just dropped in a folder at install time.
2016-01-09 16:01:30 -07:00
Merge SDWG Mesh progress with 1.0.0 BBHN Includes removing files that are provided by packages instead of being embedded as binaries. Changes made for UBNT hardware AND for newer base openwrt (Backfire)
2013-12-02 13:04:54 -07:00
config include
Update AREDN to OpenWRT 22.3.2 (Major Upgrade) (#574) * Update to Openwrt 21.02 and add support for the CPE710 v1 Update scripts to change references to ifname to device due to a change in Openwrt naming reverse-wpad-basic-wolfssl and disable SSL on Curl NOTE: The compile host must have python3-distutils installed for gpsd to build * aredn: initial working upgrade to openwrt 21.02.1 * aredn: update 1 to working upgrade to openwrt 21.02.1 * aredn: add cpe710v1 to build config * Andrew's patches * Remove duplicates + display perl * Temp disable wifi extension patch * ifname/ports support * Add spectrum patch back in * Generic function to extra interfaces * New api to get wifi ifname * Disables jails * Style link * aredn: partial upgrade to openwrt 22.0.3.0 added AC device images and partial migration to 22.0.3.0 firewall upgrade pending * aredn: update mesh-release and revert config.mk * Unused * NFT firewall rewrite * Common-isze configs * Fix network layout for hap2 * Use local packages dev (new firewall rules) * Add HAP2 * Add pause after network restart to let bridge reinitialize * Various lua fixes for new lua version * Tweak config * Re-fix networking (lost patch change) * Add new radio names * Tolerate missing wifi * Fix hap-lite switch setup * More devices * New radio id * Build Rocket 5AC lite * Remove need for luci.sys * Remove need for luci.sys * Explicitly name wlan interfaces * Handle different compatibility verisoning * Update networking for switches * ipref version bump * Extra flag for curl * Better compat_version fix * Remove wolfssl * Fix dns server * Fix device name * Unused * Remove things we dont need * Remove unused packages * Generic macaddr overrides * Fix uci commit * Fix luci.template.parser to avoid luci.http loading the real thing * Rocket-M build * Add search-domain dhcp option * Turn of ipv6 * No IPV6 in dnsmasq * Override mac addresses if devices all the same * Working from master (for now) * Put back hostap * Disable old ethmac fixup * Tweak configs * Move back to v22.03.2 Leave ipq4019 builds to master * Need IPV6 to compile nft firewall * Rocket-M fixes * Before we start * WIP * Working snapshot * Cleaned patches * Merged patch * Single patch to support HAP2 * Fix typo * Add nanostation-m * 5/10Mhz patch * 5+10MHz patch for ath10k-ct driver * Extend 2Ghz channel check to include -4 to -1 * Add chanbw setup for ath10k (like ath9k) * Added TP-Link CPE710 v1 * Override firmwares * Missing patch * Dropbear config like 3.22.8.0 * Add Ubiquiti Rocket 5AC Lite * Fix c6 * Update * Need more scan channels * Remove IPV6 * Improve mac fixups * Put back missing nft app * IPv6 removed so dont have to disable it * Fix rocket-m flash bug * Fix nanostation-m * Nanobridge is tiny * Fix wifi order for ar750 * Rocket M5 XW support * New rates * Fix firewall4 so we don't need IPv6 * Allow channel width to be restricted * Move channel list into library * Fix naming * Mechanism to block specific channels on specific radios * Refresh buttons * routerboard-sxt-5nd * CPE605 v1.0 * Improve rocket m xw * tpink * Update patch * Update to remove disable * Remove BW restrictions on cpe710 * Restrict to what has been tested * Remove test BW restrictions * sxtsq-5-ac * Update * Update * powerbeam-m5-300 support * Fix * Fix hap2 * Tidy unused patches * Remove limit * Add ubnt_bullet-m-ar7241 * Added ubnt_nanobeam-ac-gen2 * Fix typo * Tolerate missing dtd ip * Explicitly gix hap2 mac addresses * Fix some broken patches * Hap2 wont work at 5MHz * Ubiquiti LiteBeam 5AC Gen2 * Fix compat_version for sxt 5ac * Update patch * Unused * Fix lan configuration for some devices * Rolling average of noise level * Unused * Split out the ath10k rssi monitor (its very simple at the moment) * Ignore .DS_Store * Reboot if ethernet doesnt come up (but only once!) * reboot returns - add exit * Add some logging info * Fix ] * Check all possibly ethernet bridges * Improve mac fixing * Remove HostAP on small memory devices * Reduce dropbear footprint * Add setsid * Kill hostap when upgrading to save memory * Different way to detect hostapd unavailable * New build steps * Improve manager logging * Fix name conflict for the two monitors * Try to improve test mesh name resolve problem * Migrate tiny to generic (tiny doesnt work properly) * Typo * Another attempt to fix macs for Mikrotik * Protect against missing trackers * Fix wpad for ipq40xx * Remove old tunnel check code * Enable ZRAM swap to aid low memory devices * ath10k noise can something be out of range - protect against that * Updated with current devices and status * Update firmware which has been tested * Updated with more builds * More binary/README * Fix css error * Start noise at sensible base level * Unfix the css so it looks how it use to. * Save as much memory as we can on lowmem nodes * Hide some options on low memory devices * Add "eol" to 32MB devices * Restart network rather than reboot node if it seems to be broken * Fixes * Revert network reset * Fix ar750 networking * Continue to trim tiny configs * More devices * Dump IW output messages * Fix Rocket 5AC intermittent ethernet issue * Ethernet fix for PowerBeam 5AC 500 * More tiny size reduction * More support data * Fixed POE and USB power features * Add Ubiquiti NanoBeam AC (gen1) * NanoStation (not NanoBeam) * Add mii-tool package * Device updates * Bump update time to 5 minutes * Fix ethernet negotiation for rocker-5ac and nanobeam * Fix iplookup * Config changes based on call feedback * Radio listing fixes * Update with more untested builds * Fallback TxMbps extracted from iw station dump * Fix tunnel detection for low memory nodes * Remove unused feed packages * snapshot build * Update stability info * Add powerbeam-5ac-500 * Typo * Add missing 3.22.1.0 * Add MikroTik LHG 5 AC * Fix permissions * Fix permissions * AirGrid's take Bullet builds * Mikrotik AC3 * Improve supportdata structure a little to make it easier to find things * Restore WAN VLAN overrides * Fix vlan regex for hap2 and hap3 * Support old and new style poe controls * hap-ac3 is version 1.1 * Handle typo in some openwrt config files * Fix HAP AC3 install * Update hap ac3 status * Support user overrides for network ports (non-swconfig devices) * LHG 5AC support * Remove -nand * Remove non-working platform.sh change * tunnel weight override * Omit LinkQualityMult when value is 1 * Add mANTBox 19s and 15s * Support ath79 mikrotik devices which require ath10k in the initramfs Co-authored-by: apcameron <apcameron@softhome.net> Co-authored-by: Joe AE6XE <ae6xe@arrl.net> Co-authored-by: Joe Ayers <joe@arrl.net>
2022-12-22 13:22:49 -07:00
option path /etc/firewall.user
option fw4_compatible 1
Merge SDWG Mesh progress with 1.0.0 BBHN Includes removing files that are provided by packages instead of being embedded as binaries. Changes made for UBNT hardware AND for newer base openwrt (Backfire)
2013-12-02 13:04:54 -07:00
aredn: allow wan ping (#544) fixes: #509
2020-06-24 20:08:06 -06:00
config rule
option name Allow-Ping
option src wan
option proto icmp
option icmp_type echo-request
option family ipv4
option target ACCEPT
Merge SDWG Mesh progress with 1.0.0 BBHN Includes removing files that are provided by packages instead of being embedded as binaries. Changes made for UBNT hardware AND for newer base openwrt (Backfire)
2013-12-02 13:04:54 -07:00
config rule
option src wifi
option dest_port 2222
option proto tcp
Prepwork for dealing with the common encrypted ports. In order to maintain compatibility with existing deployed nodes, known common encrypted ports will NOT be blocked by default. Users will receive a message during first setup encouraging them to review the rules that apply to how they intend to use their node and that laws very by country and frequency. A package blockknownencrypted has been created in changeset:123a521df2b63ba1c5bdd6ad94ac402b86394579/bbhn_packages to be used in blocking known encrypted ports if the user feels it is necessary. As developers we are not stating an opinion as to what the rules say or do not say in relationship to the traffic this deals with. Each user will need to make their own determination of the rules. This has been the current case since day one. New file fwinfo page shows if the package is installed AND displays the active firewall rules at the time of the access. This allows future grown to help test (because of the adhoc nature of the mesh) if packet filtering is the cause of a connection not working. see BBHN->ticket:3
2014-01-28 14:05:58 -07:00
option target ACCEPT
Merge SDWG Mesh progress with 1.0.0 BBHN Includes removing files that are provided by packages instead of being embedded as binaries. Changes made for UBNT hardware AND for newer base openwrt (Backfire)
2013-12-02 13:04:54 -07:00
config rule
option src wifi
option dest_port 8080
option proto tcp
option target ACCEPT
config change to make uhttpd listen on port 80 and 8080 (#142) * config change to make uhttpd listen on port 80 and 8080 * add port 80 to tunnel firewall rules * add port 80 to tunnel firewall rules in config, update help * firewall rules for wan + dtdlink
2018-08-20 13:09:47 -06:00
config rule
option src wifi
option dest_port 80
option proto tcp
option target ACCEPT
Merge SDWG Mesh progress with 1.0.0 BBHN Includes removing files that are provided by packages instead of being embedded as binaries. Changes made for UBNT hardware AND for newer base openwrt (Backfire)
2013-12-02 13:04:54 -07:00
config rule
option src wifi
option dest_port 698
option proto udp
option target ACCEPT
Open firewall to port 23 on WIFI in config=mesh ref ticket: #2 Open firewall to allow telnet to the routers WIFI interface in mesh mode. closes #2
2013-12-07 19:38:47 -07:00
config rule
option src wifi
option dest_port 23
option proto tcp
option target ACCEPT
Add new feature device-to-device linking (dtdlink) The dtdlink interface is vlan 2 on eth0 and is used for linking two or more devices together. This will allow for band-to-band repeaters, sector antenna setups, etc. see BBHN->ticket:28
2014-04-09 00:19:45 -06:00
config rule
option src dtdlink
option dest_port 2222
option proto tcp
option target ACCEPT
config rule
option src dtdlink
option dest_port 8080
option proto tcp
option target ACCEPT
config change to make uhttpd listen on port 80 and 8080 (#142) * config change to make uhttpd listen on port 80 and 8080 * add port 80 to tunnel firewall rules * add port 80 to tunnel firewall rules in config, update help * firewall rules for wan + dtdlink
2018-08-20 13:09:47 -06:00
config rule
option src dtdlink
option dest_port 80
option proto tcp
option target ACCEPT
Add new feature device-to-device linking (dtdlink) The dtdlink interface is vlan 2 on eth0 and is used for linking two or more devices together. This will allow for band-to-band repeaters, sector antenna setups, etc. see BBHN->ticket:28
2014-04-09 00:19:45 -06:00
config rule
option src dtdlink
option dest_port 698
option proto udp
option target ACCEPT
config rule
option src dtdlink
option dest_port 23
option proto tcp
option target ACCEPT
feature: Add initial read-only SNMP support in mesh mode. Config file is present upon initial start and in mesh mode. Daemon still starts up in other modes but will not function w/o settings. Firewall: Permit access for UDP:161 (SNMPD) on WIFI and DTDLINK Lan is permitted by default allow rules.
2015-04-14 23:31:21 -06:00
Rework the firewall for tunnels and xlinks to allow port forwarding. (#1220)
2024-05-26 17:41:18 -06:00
config rule
option src vpn
option dest_port 2222
option proto tcp
option target ACCEPT
config rule
option src vpn
option dest_port 8080
option proto tcp
option target ACCEPT
config rule
option src vpn
option dest_port 80
option proto tcp
option target ACCEPT
config rule
option src vpn
option dest_port 698
option proto udp
option target ACCEPT
config rule
option src vpn
option dest_port 23
option proto tcp
option target ACCEPT
feature: Add initial read-only SNMP support in mesh mode. Config file is present upon initial start and in mesh mode. Daemon still starts up in other modes but will not function w/o settings. Firewall: Permit access for UDP:161 (SNMPD) on WIFI and DTDLINK Lan is permitted by default allow rules.
2015-04-14 23:31:21 -06:00
#SNMPD
config rule
option src wifi
option dest_port 161
option proto udp
option target ACCEPT
config rule
option src dtdlink
option dest_port 161
option proto udp
option target ACCEPT
feature: add jsoninfo to olsr and open firewall ports 9090
2016-01-05 11:00:22 -07:00
Rework the firewall for tunnels and xlinks to allow port forwarding. (#1220)
2024-05-26 17:41:18 -06:00
config rule
option src vpn
option dest_port 161
option proto udp
option target ACCEPT
feature: add jsoninfo to olsr and open firewall ports 9090
2016-01-05 11:00:22 -07:00
# olsr jsoninfo
config rule
option src wifi
option dest_port 9090
option proto tcp
option target ACCEPT
config rule
option src dtdlink
option dest_port 9090
option proto tcp
option target ACCEPT
Rework the firewall for tunnels and xlinks to allow port forwarding. (#1220)
2024-05-26 17:41:18 -06:00
config rule
option src vpn
option dest_port 9090
option proto tcp
option target ACCEPT