Don't like ads? PRO users don't see any ads ;-)
Public Pastes
Guest

Untitled

By: a guest on May 24th, 2012  |  syntax: None  |  size: 2.56 KB  |  hits: 10  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. root@MyRouter:/# uci show firewall
  2. firewall.@defaults[0]=defaults
  3. firewall.@defaults[0].syn_flood=1
  4. firewall.@defaults[0].input=ACCEPT
  5. firewall.@defaults[0].output=ACCEPT
  6. firewall.@defaults[0].drop_invalid=1
  7. firewall.@defaults[0].forward=ACCEPT
  8. firewall.@zone[0]=zone
  9. firewall.@zone[0].name=lan
  10. firewall.@zone[0].network=lan
  11. firewall.@zone[0].input=ACCEPT
  12. firewall.@zone[0].output=ACCEPT
  13. firewall.@zone[0].forward=ACCEPT
  14. firewall.@zone[0].masq=1
  15. firewall.@zone[1]=zone
  16. firewall.@zone[1].name=wan
  17. firewall.@zone[1].network=wan
  18. firewall.@zone[1].input=REJECT
  19. firewall.@zone[1].output=ACCEPT
  20. firewall.@zone[1].masq=1
  21. firewall.@zone[1].mtu_fix=1
  22. firewall.@zone[1].forward=REJECT
  23. firewall.@forwarding[0]=forwarding
  24. firewall.@forwarding[0].src=lan
  25. firewall.@forwarding[0].dest=wan
  26. firewall.@rule[0]=rule
  27. firewall.@rule[0].name=Allow-DHCP-Renew
  28. firewall.@rule[0].src=wan
  29. firewall.@rule[0].proto=udp
  30. firewall.@rule[0].dest_port=68
  31. firewall.@rule[0].target=ACCEPT
  32. firewall.@rule[0].family=ipv4
  33. firewall.@rule[1]=rule
  34. firewall.@rule[1].name=Allow-Ping
  35. firewall.@rule[1].src=wan
  36. firewall.@rule[1].proto=icmp
  37. firewall.@rule[1].icmp_type=echo-request
  38. firewall.@rule[1].family=ipv4
  39. firewall.@rule[1].target=ACCEPT
  40. firewall.@rule[2]=rule
  41. firewall.@rule[2].name=Allow-DHCPv6
  42. firewall.@rule[2].src=wan
  43. firewall.@rule[2].proto=udp
  44. firewall.@rule[2].src_ip=fe80::/10
  45. firewall.@rule[2].src_port=547
  46. firewall.@rule[2].dest_ip=fe80::/10
  47. firewall.@rule[2].dest_port=546
  48. firewall.@rule[2].family=ipv6
  49. firewall.@rule[2].target=ACCEPT
  50. firewall.@rule[3]=rule
  51. firewall.@rule[3].name=Allow-ICMPv6-Input
  52. firewall.@rule[3].src=wan
  53. firewall.@rule[3].proto=icmp
  54. firewall.@rule[3].icmp_type=echo-request destination-unreachable packet-too-big time-exceeded bad-header unknown-header-type router-solicitation neighbour-solicitation
  55. firewall.@rule[3].limit=1000/sec
  56. firewall.@rule[3].family=ipv6
  57. firewall.@rule[3].target=ACCEPT
  58. firewall.@rule[4]=rule
  59. firewall.@rule[4].name=Allow-ICMPv6-Forward
  60. firewall.@rule[4].src=wan
  61. firewall.@rule[4].dest=*
  62. firewall.@rule[4].proto=icmp
  63. firewall.@rule[4].icmp_type=echo-request destination-unreachable packet-too-big time-exceeded bad-header unknown-header-type
  64. firewall.@rule[4].limit=1000/sec
  65. firewall.@rule[4].family=ipv6
  66. firewall.@rule[4].target=ACCEPT
  67. firewall.@include[0]=include
  68. firewall.@include[0].path=/etc/firewall.user
  69. root@MyRouter:/#
  70. root@MyRouter:/#
  71. root@MyRouter:/# cat /etc/firewall.user
  72. # This file is interpreted as shell script.
  73. # Put your custom iptables rules here, they will
  74. # be executed with each firewall (re-)start.
create a new version of this paste RAW Paste Data