Router A: Firewall

config rule 'cfg0c92bd'
	option dest_ip 'fe80::/10'
	option target 'ACCEPT'
	option dest_port '546'
	option src_port '547'
	option name 'Allow-DHCPv6'
	option src_ip 'fe80::/10'
	option family 'ipv6'
	option proto 'udp'
	option src 'wan'

config forwarding 'cfg16ad58'
	option dest 'wan'
	option src 'lan'

config zone 'cfg04dc81'
	option network 'lan'
	option output 'ACCEPT'
	option name 'lan'
	option input 'ACCEPT'
	option forward 'ACCEPT'

config rule 'cfg0892bd'
	option dest_port '68'
	option name 'Allow-DHCP-Renew'
	option family 'ipv4'
	option target 'ACCEPT'
	option proto 'udp'
	option src 'wan'

config rule 'cfg0e92bd'
	option target 'ACCEPT'
	list icmp_type 'destination-unreachable'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'echo-reply'
	list icmp_type 'neighbour-solicitation'
	list icmp_type 'echo-request'
	list icmp_type 'neighbour-advertisement'
	list icmp_type 'packet-too-big'
	list icmp_type 'router-advertisement'
	list icmp_type 'unknown-header-type'
	list icmp_type 'router-solicitation'
	option name 'Allow-ICMPv6-Input'
	option limit '1000/sec'
	option family 'ipv6'
	option proto 'icmp'
	option src 'wan'

config zone 'cfg14dc81'
	option output 'ACCEPT'
	option name 'ninux'
	option input 'ACCEPT'
	option forward 'ACCEPT'
	option network 'ninux vpnbas'

config zone 'cfg06dc81'
	option network 'wan wan6'
	option output 'ACCEPT'
	option masq '1'
	option name 'wan'
	option input 'ACCEPT'
	option forward 'REJECT'
	option mtu_fix '1'

config include 'cfg12af89'
	option path '/etc/firewall.user'

config rule 'cfg0a92bd'
	option icmp_type 'echo-request'
	option name 'Allow-Ping'
	option target 'ACCEPT'
	option family 'ipv4'
	option proto 'icmp'
	option src 'wan'

config defaults 'cfg02e63d'
	option syn_flood '1'
	option input 'ACCEPT'
	option forward 'ACCEPT'
	option output 'ACCEPT'

config rule 'cfg1092bd'
	option target 'ACCEPT'
	option family 'ipv6'
	list icmp_type 'destination-unreachable'
	list icmp_type 'echo-request'
	list icmp_type 'packet-too-big'
	list icmp_type 'unknown-header-type'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'echo-reply'
	option name 'Allow-ICMPv6-Forward'
	option limit '1000/sec'
	option dest '*'
	option proto 'icmp'
	option src 'wan'

config forwarding 'cfg0dad58'
	option dest 'wan'
	option src 'ninux'

config forwarding 'cfg0ead58'
	option dest 'ninux'
	option src 'lan'

config forwarding 'cfg0cad58'
	option dest 'lan'
	option src 'ninux'