Mirrors
/
aredn
mirror of https://github.com/aredn/aredn.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
aredn/files/etc/config.mesh_ap/firewall

86 lines
2.2 KiB
Plaintext
Raw Normal View History

Merge SDWG Mesh progress with 1.0.0 BBHN Includes removing files that are provided by packages instead of being embedded as binaries. Changes made for UBNT hardware AND for newer base openwrt (Backfire)
2013-12-02 13:04:54 -07:00
config defaults
option syn_flood 1
option input ACCEPT
option output ACCEPT
option forward REJECT
# Uncomment this line to disable ipv6 rules
# option disable_ipv6 1
config zone
option name lan
option network 'lan'
option input ACCEPT
option output ACCEPT
option forward REJECT
config zone
option name wan
option network 'wan'
option input REJECT
option output ACCEPT
option forward REJECT
option masq 1
option mtu_fix 1
config zone
option name wifi
option network 'wifi'
option input REJECT
option output ACCEPT
option forward REJECT
option masq 1
option mtu_fix 1
config forwarding
option src lan
Allow forwarding between wifi and ethernet port in config=mesh_ap fixes BBHN->ticket:26
2014-01-19 19:36:09 -07:00
option dest lan
Merge SDWG Mesh progress with 1.0.0 BBHN Includes removing files that are provided by packages instead of being embedded as binaries. Changes made for UBNT hardware AND for newer base openwrt (Backfire)
2013-12-02 13:04:54 -07:00
# Allow IPv4 ping
config rule
option name Allow-Ping
option src wifi
option proto icmp
option icmp_type echo-request
option family ipv4
option target ACCEPT
config include
option path /etc/firewall.user
config rule
option src wan
option dest_port 2222
option proto tcp
option target ACCEPT
config rule
option src wan
option dest_port 8080
option proto tcp
option target ACCEPT
config rule
option src wifi
option dest_port 2222
option proto tcp
option target ACCEPT
config rule
option src wifi
option dest_port 8080
option proto tcp
option target ACCEPT
config rule
option src wifi
option dest_port 698
option proto udp
option target ACCEPT
config rule
option src wifi
option dest_port 1978
option proto tcp
option target ACCEPT