Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- cat /etc/config/network
- config interface 'loopback'
- option ifname 'lo'
- option proto 'static'
- option ipaddr '127.0.0.1'
- option netmask '255.0.0.0'
- config interface 'lan'
- option ifname 'eth0.1'
- option type 'bridge'
- option proto 'static'
- option ipaddr '192.168.1.1'
- option netmask '255.255.255.0'
- config interface 'wan'
- option ifname 'eth0.2'
- option _orig_ifname 'eth0.2'
- option _orig_bridge 'false'
- option proto 'static'
- option ipaddr '192.168.178.2'
- option netmask '255.255.255.0'
- option gateway '192.168.178.1'
- option dns '192.168.178.1 194.150.168.168 213.73.91.35 85.214.20.141'
- config switch
- option name 'rtl8366rb'
- option reset '1'
- option enable_vlan '1'
- config switch_vlan
- option device 'rtl8366rb'
- option vlan '1'
- option ports '1 2 3 4 5t'
- config switch_vlan
- option device 'rtl8366rb'
- option vlan '2'
- option ports '0 5t'
- config interface 'vpn0'
- option ifname 'tun0'
- option proto 'none'
- root@SinthofenOpenWrt:~# cat /etc/config/firewall
- config defaults
- option syn_flood '1'
- option input 'ACCEPT'
- option output 'ACCEPT'
- option forward 'REJECT'
- config zone
- option name 'lan'
- option network 'lan'
- option input 'ACCEPT'
- option output 'ACCEPT'
- option forward 'REJECT'
- config zone
- option name 'wan'
- option network 'wan'
- option input 'REJECT'
- option output 'ACCEPT'
- option forward 'REJECT'
- option masq '1'
- option mtu_fix '1'
- config forwarding
- option src 'lan'
- option dest 'wan'
- config rule
- option name 'Allow-DHCP-Renew'
- option src 'wan'
- option proto 'udp'
- option dest_port '68'
- option target 'ACCEPT'
- option family 'ipv4'
- config rule
- option name 'Allow-Ping'
- option src 'wan'
- option proto 'icmp'
- option icmp_type 'echo-request'
- option family 'ipv4'
- option target 'ACCEPT'
- config rule
- option name 'Allow-DHCPv6'
- option src 'wan'
- option proto 'udp'
- option src_ip 'fe80::/10'
- option src_port '547'
- option dest_ip 'fe80::/10'
- option dest_port '546'
- option family 'ipv6'
- option target 'ACCEPT'
- config rule
- option name 'Allow-ICMPv6-Input'
- option src 'wan'
- option proto 'icmp'
- list icmp_type 'echo-request'
- list icmp_type 'echo-reply'
- list icmp_type 'destination-unreachable'
- list icmp_type 'packet-too-big'
- list icmp_type 'time-exceeded'
- list icmp_type 'bad-header'
- list icmp_type 'unknown-header-type'
- list icmp_type 'router-solicitation'
- list icmp_type 'neighbour-solicitation'
- list icmp_type 'router-advertisement'
- list icmp_type 'neighbour-advertisement'
- option limit '1000/sec'
- option family 'ipv6'
- option target 'ACCEPT'
- config rule
- option name 'Allow-ICMPv6-Forward'
- option src 'wan'
- option dest '*'
- option proto 'icmp'
- list icmp_type 'echo-request'
- list icmp_type 'echo-reply'
- list icmp_type 'destination-unreachable'
- list icmp_type 'packet-too-big'
- list icmp_type 'time-exceeded'
- list icmp_type 'bad-header'
- list icmp_type 'unknown-header-type'
- option limit '1000/sec'
- option family 'ipv6'
- option target 'ACCEPT'
- config include
- option path '/etc/firewall.user'
- config rule
- option name 'Allow-OpenVPN-Inbound'
- option target 'ACCEPT'
- option src '*'
- option proto 'udp'
- option dest_port '3333'
- config zone
- option name 'vpn'
- option input 'ACCEPT'
- option forward 'ACCEPT'
- option output 'ACCEPT'
- option network 'vpn0'
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement