API tools faq
paste
xxorza

DOESNT WORK

xxorza
Sep 7th, 2019
207
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.93 KB | None | 0 0
raw download clone embed print report
  1. root@OpenWrt:~# uci show network; uci show firewall
  2.  
  3. network.loopback=interface
  4. network.loopback.ifname='lo'
  5. network.loopback.proto='static'
  6. network.loopback.ipaddr='127.0.0.1'
  7. network.loopback.netmask='255.0.0.0'
  8. network.globals=globals
  9. network.globals.ula_prefix='fd55:f0a5:8ae9::/48'
  10. network.lan=interface
  11. network.lan.type='bridge'
  12. network.lan.ifname='eth0.1'
  13. network.lan.proto='static'
  14. network.lan.ipaddr='192.168.1.1'
  15. network.lan.netmask='255.255.255.0'
  16. network.lan.ip6assign='60'
  17. network.wan=interface
  18. network.wan.ifname='eth1.2'
  19. network.wan.proto='static'
  20. network.wan.ipaddr='162.211.151.92'
  21. network.wan.netmask='255.255.255.0'
  22. network.wan.gateway='162.211.151.1'
  23. network.wan.dns='192.168.1.3'
  24. network.wan6=interface
  25. network.wan6.ifname='eth1.2'
  26. network.wan6.proto='dhcpv6'
  27. network.@switch[0]=switch
  28. network.@switch[0].name='switch0'
  29. network.@switch[0].reset='1'
  30. network.@switch[0].enable_vlan='1'
  31. network.@switch_vlan[0]=switch_vlan
  32. network.@switch_vlan[0].device='switch0'
  33. network.@switch_vlan[0].vlan='1'
  34. network.@switch_vlan[0].ports='0 1 2 3 5t'
  35. network.@switch_vlan[1]=switch_vlan
  36. network.@switch_vlan[1].device='switch0'
  37. network.@switch_vlan[1].vlan='2'
  38. network.@switch_vlan[1].ports='4 6t'
  39. firewall.@defaults[0]=defaults
  40. firewall.@defaults[0].syn_flood='1'
  41. firewall.@defaults[0].input='ACCEPT'
  42. firewall.@defaults[0].output='ACCEPT'
  43. firewall.@defaults[0].forward='REJECT'
  44. firewall.@zone[0]=zone
  45. firewall.@zone[0].name='lan'
  46. firewall.@zone[0].network='lan'
  47. firewall.@zone[0].input='ACCEPT'
  48. firewall.@zone[0].output='ACCEPT'
  49. firewall.@zone[0].forward='ACCEPT'
  50. firewall.@zone[1]=zone
  51. firewall.@zone[1].name='wan'
  52. firewall.@zone[1].network='wan' 'wan6'
  53. firewall.@zone[1].input='REJECT'
  54. firewall.@zone[1].output='ACCEPT'
  55. firewall.@zone[1].forward='REJECT'
  56. firewall.@zone[1].masq='1'
  57. firewall.@zone[1].mtu_fix='1'
  58. firewall.@forwarding[0]=forwarding
  59. firewall.@forwarding[0].src='lan'
  60. firewall.@forwarding[0].dest='wan'
  61. firewall.@rule[0]=rule
  62. firewall.@rule[0].name='Allow-DHCP-Renew'
  63. firewall.@rule[0].src='wan'
  64. firewall.@rule[0].proto='udp'
  65. firewall.@rule[0].dest_port='68'
  66. firewall.@rule[0].target='ACCEPT'
  67. firewall.@rule[0].family='ipv4'
  68. firewall.@rule[1]=rule
  69. firewall.@rule[1].name='Allow-Ping'
  70. firewall.@rule[1].src='wan'
  71. firewall.@rule[1].proto='icmp'
  72. firewall.@rule[1].icmp_type='echo-request'
  73. firewall.@rule[1].family='ipv4'
  74. firewall.@rule[1].target='ACCEPT'
  75. firewall.@rule[2]=rule
  76. firewall.@rule[2].name='Allow-IGMP'
  77. firewall.@rule[2].src='wan'
  78. firewall.@rule[2].proto='igmp'
  79. firewall.@rule[2].family='ipv4'
  80. firewall.@rule[2].target='ACCEPT'
  81. firewall.@rule[3]=rule
  82. firewall.@rule[3].name='Allow-DHCPv6'
  83. firewall.@rule[3].src='wan'
  84. firewall.@rule[3].proto='udp'
  85. firewall.@rule[3].src_ip='fc00::/6'
  86. firewall.@rule[3].dest_ip='fc00::/6'
  87. firewall.@rule[3].dest_port='546'
  88. firewall.@rule[3].family='ipv6'
  89. firewall.@rule[3].target='ACCEPT'
  90. firewall.@rule[4]=rule
  91. firewall.@rule[4].name='Allow-MLD'
  92. firewall.@rule[4].src='wan'
  93. firewall.@rule[4].proto='icmp'
  94. firewall.@rule[4].src_ip='fe80::/10'
  95. firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
  96. firewall.@rule[4].family='ipv6'
  97. firewall.@rule[4].target='ACCEPT'
  98. firewall.@rule[5]=rule
  99. firewall.@rule[5].name='Allow-ICMPv6-Input'
  100. firewall.@rule[5].src='wan'
  101. firewall.@rule[5].proto='icmp'
  102. firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement'
  103. firewall.@rule[5].limit='1000/sec'
  104. firewall.@rule[5].family='ipv6'
  105. firewall.@rule[5].target='ACCEPT'
  106. firewall.@rule[6]=rule
  107. firewall.@rule[6].name='Allow-ICMPv6-Forward'
  108. firewall.@rule[6].src='wan'
  109. firewall.@rule[6].dest='*'
  110. firewall.@rule[6].proto='icmp'
  111. firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
  112. firewall.@rule[6].limit='1000/sec'
  113. firewall.@rule[6].family='ipv6'
  114. firewall.@rule[6].target='ACCEPT'
  115. firewall.@rule[7]=rule
  116. firewall.@rule[7].name='Allow-IPSec-ESP'
  117. firewall.@rule[7].src='wan'
  118. firewall.@rule[7].dest='lan'
  119. firewall.@rule[7].proto='esp'
  120. firewall.@rule[7].target='ACCEPT'
  121. firewall.@rule[8]=rule
  122. firewall.@rule[8].name='Allow-ISAKMP'
  123. firewall.@rule[8].src='wan'
  124. firewall.@rule[8].dest='lan'
  125. firewall.@rule[8].dest_port='500'
  126. firewall.@rule[8].proto='udp'
  127. firewall.@rule[8].target='ACCEPT'
  128. firewall.@include[0]=include
  129. root@OpenWrt:~# uci show network; uci show firewall
  130. network.loopback=interface
  131. network.loopback.ifname='lo'
  132. network.loopback.proto='static'
  133. network.loopback.ipaddr='127.0.0.1'
  134. network.loopback.netmask='255.0.0.0'
  135. network.globals=globals
  136. network.globals.ula_prefix='fd55:f0a5:8ae9::/48'
  137. network.lan=interface
  138. network.lan.type='bridge'
  139. network.lan.ifname='eth0.1'
  140. network.lan.proto='static'
  141. network.lan.ipaddr='192.168.1.1'
  142. network.lan.netmask='255.255.255.0'
  143. network.lan.ip6assign='60'
  144. network.wan=interface
  145. network.wan.ifname='eth1.2'
  146. network.wan.proto='dhcp'
  147. network.wan.peerdns='0'
  148. network.wan.dns='8.8.8.8'
  149. network.wan.clientid='openwrt'
  150. network.wan.broadcast='1'
  151. network.wan6=interface
  152. network.wan6.ifname='eth1.2'
  153. network.wan6.proto='dhcpv6'
  154. network.@switch[0]=switch
  155. network.@switch[0].name='switch0'
  156. network.@switch[0].reset='1'
  157. network.@switch[0].enable_vlan='1'
  158. network.@switch_vlan[0]=switch_vlan
  159. network.@switch_vlan[0].device='switch0'
  160. network.@switch_vlan[0].vlan='1'
  161. network.@switch_vlan[0].ports='0 1 2 3 5t'
  162. network.@switch_vlan[1]=switch_vlan
  163. network.@switch_vlan[1].device='switch0'
  164. network.@switch_vlan[1].vlan='2'
  165. network.@switch_vlan[1].ports='4 6t'
  166. firewall.@defaults[0]=defaults
  167. firewall.@defaults[0].syn_flood='1'
  168. firewall.@defaults[0].input='ACCEPT'
  169. firewall.@defaults[0].output='ACCEPT'
  170. firewall.@defaults[0].forward='REJECT'
  171. firewall.@zone[0]=zone
  172. firewall.@zone[0].name='lan'
  173. firewall.@zone[0].network='lan'
  174. firewall.@zone[0].input='ACCEPT'
  175. firewall.@zone[0].output='ACCEPT'
  176. firewall.@zone[0].forward='ACCEPT'
  177. firewall.@zone[1]=zone
  178. firewall.@zone[1].name='wan'
  179. firewall.@zone[1].network='wan' 'wan6'
  180. firewall.@zone[1].input='REJECT'
  181. firewall.@zone[1].output='ACCEPT'
  182. firewall.@zone[1].forward='REJECT'
  183. firewall.@zone[1].masq='1'
  184. firewall.@zone[1].mtu_fix='1'
  185. firewall.@forwarding[0]=forwarding
  186. firewall.@forwarding[0].src='lan'
  187. firewall.@forwarding[0].dest='wan'
  188. firewall.@rule[0]=rule
  189. firewall.@rule[0].name='Allow-DHCP-Renew'
  190. firewall.@rule[0].src='wan'
  191. firewall.@rule[0].proto='udp'
  192. firewall.@rule[0].dest_port='68'
  193. firewall.@rule[0].target='ACCEPT'
  194. firewall.@rule[0].family='ipv4'
  195. firewall.@rule[1]=rule
  196. firewall.@rule[1].name='Allow-Ping'
  197. firewall.@rule[1].src='wan'
  198. firewall.@rule[1].proto='icmp'
  199. firewall.@rule[1].icmp_type='echo-request'
  200. firewall.@rule[1].family='ipv4'
  201. firewall.@rule[1].target='ACCEPT'
  202. firewall.@rule[2]=rule
  203. firewall.@rule[2].name='Allow-IGMP'
  204. firewall.@rule[2].src='wan'
  205. firewall.@rule[2].proto='igmp'
  206. firewall.@rule[2].family='ipv4'
  207. firewall.@rule[2].target='ACCEPT'
  208. firewall.@rule[3]=rule
  209. firewall.@rule[3].name='Allow-DHCPv6'
  210. firewall.@rule[3].src='wan'
  211. firewall.@rule[3].proto='udp'
  212. firewall.@rule[3].src_ip='fc00::/6'
  213. firewall.@rule[3].dest_ip='fc00::/6'
  214. firewall.@rule[3].dest_port='546'
  215. firewall.@rule[3].family='ipv6'
  216. firewall.@rule[3].target='ACCEPT'
  217. firewall.@rule[4]=rule
  218. firewall.@rule[4].name='Allow-MLD'
  219. firewall.@rule[4].src='wan'
  220. firewall.@rule[4].proto='icmp'
  221. firewall.@rule[4].src_ip='fe80::/10'
  222. firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
  223. firewall.@rule[4].family='ipv6'
  224. firewall.@rule[4].target='ACCEPT'
  225. firewall.@rule[5]=rule
  226. firewall.@rule[5].name='Allow-ICMPv6-Input'
  227. firewall.@rule[5].src='wan'
  228. firewall.@rule[5].proto='icmp'
  229. firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement'
  230. firewall.@rule[5].limit='1000/sec'
  231. firewall.@rule[5].family='ipv6'
  232. firewall.@rule[5].target='ACCEPT'
  233. firewall.@rule[6]=rule
  234. firewall.@rule[6].name='Allow-ICMPv6-Forward'
  235. firewall.@rule[6].src='wan'
  236. firewall.@rule[6].dest='*'
  237. firewall.@rule[6].proto='icmp'
  238. firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
  239. firewall.@rule[6].limit='1000/sec'
  240. firewall.@rule[6].family='ipv6'
  241. firewall.@rule[6].target='ACCEPT'
  242. firewall.@rule[7]=rule
  243. firewall.@rule[7].name='Allow-IPSec-ESP'
  244. firewall.@rule[7].src='wan'
  245. firewall.@rule[7].dest='lan'
  246. firewall.@rule[7].proto='esp'
  247. firewall.@rule[7].target='ACCEPT'
  248. firewall.@rule[8]=rule
  249. firewall.@rule[8].name='Allow-ISAKMP'
  250. firewall.@rule[8].src='wan'
  251. firewall.@rule[8].dest='lan'
  252. firewall.@rule[8].dest_port='500'
  253. firewall.@rule[8].proto='udp'
  254. firewall.@rule[8].target='ACCEPT'
  255. firewall.@include[0]=include
  256. firewall.@include[0].path='/etc/firewall.user'
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!