API tools faq
paste
Guest User

Untitled

a guest
May 12th, 2025
50
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.49 KB | None | 0 0
raw download clone embed print report
  1. config defaults
  2. option input 'REJECT'
  3. option output 'ACCEPT'
  4. option forward 'REJECT'
  5. option synflood_protect '1'
  6.  
  7. config zone
  8. option name 'lan'
  9. option input 'ACCEPT'
  10. option output 'ACCEPT'
  11. option forward 'ACCEPT'
  12. list network 'lan'
  13.  
  14. config zone
  15. option name 'wan'
  16. option input 'REJECT'
  17. option output 'ACCEPT'
  18. option forward 'REJECT'
  19. option masq '1'
  20. option mtu_fix '1'
  21. list network 'wan'
  22. list network 'wan6'
  23. list network 'wg0'
  24.  
  25. config forwarding
  26. option src 'lan'
  27. option dest 'wan'
  28.  
  29. config rule
  30. option name 'Allow-DHCP-Renew'
  31. option src 'wan'
  32. option proto 'udp'
  33. option dest_port '68'
  34. option target 'ACCEPT'
  35. option family 'ipv4'
  36. config rule
  37. option name 'Allow-Ping'
  38. option src 'wan'
  39. option proto 'icmp'
  40. option icmp_type 'echo-request'
  41. option family 'ipv4'
  42. option target 'ACCEPT'
  43.  
  44. config rule
  45. option name 'Allow-IGMP'
  46. option src 'wan'
  47. option proto 'igmp'
  48. option family 'ipv4'
  49. option target 'ACCEPT'
  50.  
  51. config rule
  52. option name 'Allow-DHCPv6'
  53. option src 'wan'
  54. option proto 'udp'
  55. option dest_port '546'
  56. option family 'ipv6'
  57. option target 'ACCEPT'
  58.  
  59. config rule
  60. option name 'Allow-MLD'
  61. option src 'wan'
  62. option proto 'icmp'
  63. option src_ip 'fe80::/10'
  64. list icmp_type '130/0'
  65. list icmp_type '131/0'
  66. list icmp_type '132/0'
  67. list icmp_type '143/0'
  68. option family 'ipv6'
  69. option target 'ACCEPT'
  70. config rule
  71. option name 'Allow-ICMPv6-Input'
  72. option src 'wan'
  73. option proto 'icmp'
  74. list icmp_type 'echo-request'
  75. list icmp_type 'echo-reply'
  76. list icmp_type 'destination-unreachable'
  77. list icmp_type 'packet-too-big'
  78. list icmp_type 'time-exceeded'
  79. list icmp_type 'bad-header'
  80. list icmp_type 'unknown-header-type'
  81. list icmp_type 'router-solicitation'
  82. list icmp_type 'neighbour-solicitation'
  83. list icmp_type 'router-advertisement'
  84. list icmp_type 'neighbour-advertisement'
  85. option limit '1000/sec'
  86. option family 'ipv6'
  87. option target 'ACCEPT'
  88.  
  89. config rule
  90. option name 'Allow-ICMPv6-Forward'
  91. option src 'wan'
  92. option dest '*'
  93. option proto 'icmp'
  94. list icmp_type 'echo-request'
  95. list icmp_type 'echo-reply'
  96. list icmp_type 'destination-unreachable'
  97. list icmp_type 'packet-too-big'
  98. list icmp_type 'time-exceeded'
  99. list icmp_type 'bad-header'
  100. list icmp_type 'unknown-header-type'
  101. option limit '1000/sec'
  102. option family 'ipv6'
  103. option target 'ACCEPT'
  104.  
  105. config rule
  106. option name 'Allow-IPSec-ESP'
  107. option src 'wan'
  108. option dest 'lan'
  109. option proto 'esp'
  110. option target 'ACCEPT'
  111. config rule
  112. option name 'Allow-ISAKMP'
  113. option src 'wan'
  114. option dest 'lan'
  115. option dest_port '500'
  116. option proto 'udp'
  117. option target 'ACCEPT'
  118.  
  119. config zone
  120. option name 'vpn'
  121. option input 'REJECT'
  122. option output 'ACCEPT'
  123. option forward 'REJECT'
  124. option masq '1'
  125.  
  126. config forwarding
  127. option src 'lan'
  128. option dest 'vpn'
  129.  
  130.  
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!