# Configura il firewall per la rete hotspot

## Configura la zona hotspot
uci delete firewall.hotspot_zone
uci set firewall.hotspot_zone=zone
uci set firewall.hotspot_zone.name=hotspot
uci set firewall.hotspot_zone.network=hotspot
uci set firewall.hotspot_zone.input=REJECT
uci set firewall.hotspot_zone.forward=REJECT
uci set firewall.hotspot_zone.output=ACCEPT

## Abilita hotspot -> Internet
uci delete firewall.hotspot_forwarding
uci set firewall.hotspot_forwarding=forwarding
uci set firewall.hotspot_forwarding.src=hotspot
uci set firewall.hotspot_forwarding.dest=wan

## Abilita DNS hotspot -> Router
uci delete firewall.hotspot_rule_dns
uci set firewall.hotspot_rule_dns=rule
uci set firewall.hotspot_rule_dns.name='Allow DNS Queries'
uci set firewall.hotspot_rule_dns.src=hotspot
uci set firewall.hotspot_rule_dns.dest_port=53
uci set firewall.hotspot_rule_dns.proto=udp
uci set firewall.hotspot_rule_dns.target=ACCEPT

## Abilita DHCP hotspot -> Router
uci delete firewall.hotspot_rule_dhcp
uci set firewall.hotspot_rule_dhcp=rule
uci set firewall.hotspot_rule_dhcp.name='Allow DHCP request'
uci set firewall.hotspot_rule_dhcp.src=hotspot
uci set firewall.hotspot_rule_dhcp.src_port=68
uci set firewall.hotspot_rule_dhcp.dest_port=67
uci set firewall.hotspot_rule_dhcp.proto=udp
uci set firewall.hotspot_rule_dhcp.target=ACCEPT

## Abilita hotspot -> Internet HTTP
uci delete firewall.hotspot_rule_http
uci set firewall.hotspot_rule_http=rule
uci set firewall.hotspot_rule_http.name='Allow HTTP request'
uci set firewall.hotspot_rule_http.src=hotspot
uci set firewall.hotspot_rule_http.dest_port=80
uci set firewall.hotspot_rule_http.proto=tcp
uci set firewall.hotspot_rule_http.target=ACCEPT

## Abilita hotspot -> Internet HTTPs
uci delete firewall.hotspot_rule_https
uci set firewall.hotspot_rule_https=rule
uci set firewall.hotspot_rule_https.name='Allow HTTPs request'
uci set firewall.hotspot_rule_https.src=hotspot
uci set firewall.hotspot_rule_https.dest_port=443
uci set firewall.hotspot_rule_https.proto=tcp
uci set firewall.hotspot_rule_https.target=ACCEPT

## Abilita hotspot -> Internet SMTP
uci delete firewall.hotspot_rule_smtp
uci set firewall.hotspot_rule_smtp=rule
uci set firewall.hotspot_rule_smtp.name='Allow SMTP request'
uci set firewall.hotspot_rule_smtp.src=hotspot
uci set firewall.hotspot_rule_smtp.dest_port=25
uci set firewall.hotspot_rule_smtp.proto=tcp
uci set firewall.hotspot_rule_smtp.target=ACCEPT

## Abilita hotspot -> Internet SMTPs
uci delete firewall.hotspot_rule_smtps
uci set firewall.hotspot_rule_smtps=rule
uci set firewall.hotspot_rule_smtps.name='Allow SMTPs request'
uci set firewall.hotspot_rule_smtps.src=hotspot
uci set firewall.hotspot_rule_smtps.dest_port=25
uci set firewall.hotspot_rule_smtps.proto=tcp
uci set firewall.hotspot_rule_smtps.target=ACCEPT

## Abilita hotspot -> Internet SMTP-TLS
uci delete firewall.hotspot_rule_smtptls
uci set firewall.hotspot_rule_smtptls=rule
uci set firewall.hotspot_rule_smtptls.name='Allow SMTP-TLS request'
uci set firewall.hotspot_rule_smtptls.src=hotspot
uci set firewall.hotspot_rule_smtptls.dest_port=587
uci set firewall.hotspot_rule_smtptls.proto=tcp
uci set firewall.hotspot_rule_smtptls.target=ACCEPT

## Abilita hotspot -> Internet SMTPs
uci delete firewall.hotspot_rule_smtps
uci set firewall.hotspot_rule_smtps=rule
uci set firewall.hotspot_rule_smtps.name='Allow SMTP-SSL request'
uci set firewall.hotspot_rule_smtps.src=hotspot
uci set firewall.hotspot_rule_smtps.dest_port=465
uci set firewall.hotspot_rule_smtps.proto=tcp
uci set firewall.hotspot_rule_smtps.target=ACCEPT

## Abilita hotspot -> Internet POP3
uci delete firewall.hotspot_rule_pop3
uci set firewall.hotspot_rule_pop3=rule
uci set firewall.hotspot_rule_pop3.name='Allow POP3 request'
uci set firewall.hotspot_rule_pop3.src=hotspot
uci set firewall.hotspot_rule_pop3.dest_port=110
uci set firewall.hotspot_rule_pop3.proto=tcp
uci set firewall.hotspot_rule_pop3.target=ACCEPT

## Abilita hotspot -> Internet POP3s
uci delete firewall.hotspot_rule_pop3s
uci set firewall.hotspot_rule_pop3s=rule
uci set firewall.hotspot_rule_pop3s.name='Allow POP3s request'
uci set firewall.hotspot_rule_pop3s.src=hotspot
uci set firewall.hotspot_rule_pop3s.dest_port=995
uci set firewall.hotspot_rule_pop3s.proto=tcp
uci set firewall.hotspot_rule_pop3s.target=ACCEPT

## Abilita hotspot -> Internet IMAP e IMAP TLS
uci delete firewall.hotspot_rule_imap
uci set firewall.hotspot_rule_imap=rule
uci set firewall.hotspot_rule_imap.name='Allow IMAP request'
uci set firewall.hotspot_rule_imap.src=hotspot
uci set firewall.hotspot_rule_imap.dest_port=143
uci set firewall.hotspot_rule_imap.proto=tcp
uci set firewall.hotspot_rule_imap.target=ACCEPT

## Abilita hotspot -> Internet IMAP-SSL
uci delete firewall.hotspot_rule_imaps
uci set firewall.hotspot_rule_imaps=rule
uci set firewall.hotspot_rule_imaps.name='Allow IMAP-SSL request'
uci set firewall.hotspot_rule_imaps.src=hotspot
uci set firewall.hotspot_rule_imaps.dest_port=993
uci set firewall.hotspot_rule_imaps.proto=tcp
uci set firewall.hotspot_rule_imaps.target=ACCEPT