Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- config defaults
- option syn_flood '1'
- option input 'ACCEPT'
- option output 'ACCEPT'
- option forward 'REJECT'
- config zone
- option name 'lan'
- option network 'lan'
- option input 'ACCEPT'
- option output 'ACCEPT'
- option forward 'REJECT'
- config zone
- option name 'wan'
- option network 'wan'
- option input 'DROP'
- option output 'ACCEPT'
- option forward 'REJECT'
- option masq '1'
- option mtu_fix '1'
- config forwarding
- option src 'lan'
- option dest 'wan'
- config rule
- option src 'wan'
- option proto 'udp'
- option dest_port '68'
- option target 'ACCEPT'
- option family 'ipv4'
- config rule
- option src 'wan'
- option proto 'icmp'
- option icmp_type 'echo-request'
- option family 'ipv4'
- option target 'ACCEPT'
- config rule
- option src 'wan'
- option proto 'udp'
- option src_ip 'fe80::/10'
- option src_port '547'
- option dest_ip 'fe80::/10'
- option dest_port '546'
- option family 'ipv6'
- option target 'ACCEPT'
- config rule
- option src 'wan'
- option proto 'icmp'
- list icmp_type 'echo-request'
- list icmp_type 'destination-unreachable'
- list icmp_type 'packet-too-big'
- list icmp_type 'time-exceeded'
- list icmp_type 'bad-header'
- list icmp_type 'unknown-header-type'
- option limit '1000/sec'
- option family 'ipv6'
- option target 'ACCEPT'
- config rule
- option name 'Enforce-ULA-Border-Src'
- option src '*'
- option dest 'wan'
- option proto 'all'
- option src_ip 'fc00::/7'
- option family 'ipv6'
- option target 'REJECT'
- config rule
- option name 'Enforce-ULA-Border-Dest'
- option src '*'
- option dest 'wan'
- option proto 'all'
- option dest_ip 'fc00::/7'
- option family 'ipv6'
- option target 'REJECT'
- config include
- option path '/etc/firewall.user'
- config rule
- option target 'ACCEPT'
- option _name 'ssh_WAN'
- option src 'wan'
- option proto 'tcp'
- option dest_ip '192.168.1.1'
- option dest_port '22'
- config rule
- option target 'ACCEPT'
- option _name 'ftp_WAN'
- option src 'wan'
- option proto 'tcp'
- option dest_ip '192.168.1.1'
- option dest_port '21'
- config rule
- option target 'ACCEPT'
- option _name 'Luci_HTTPS'
- option src 'wan'
- option proto 'tcp'
- option dest_port '443'
- config rule
- option src 'lan'
- option name 'block_internet_access_IP'
- option src_ip '192.168.1.181'
- option target 'DROP'
- option dest 'wan'
- option extra '-m time --weekdays Mon,Tue,Wed,Thu,Fri --timestart 10:00 --timestop 22:00'
- option enabled '0'
- config include 'miniupnpd'
- option type 'script'
- option path '/usr/share/miniupnpd/firewall.include'
- option family 'IPv4'
- option reload '1'
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement