API tools faq
paste
Guest User

Untitled

a guest
May 12th, 2025
47
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.87 KB | None | 0 0
raw download clone embed print report
  1. config defaults
  2. option input 'REJECT'
  3. option output 'ACCEPT'
  4. option forward 'REJECT'
  5. option synflood_protect '1'
  6.  
  7. config zone
  8. option name 'lan'
  9. option input 'ACCEPT'
  10. option output 'ACCEPT'
  11. option forward 'ACCEPT'
  12. list network 'lan'
  13.  
  14. config zone
  15. option name 'wan'
  16. option input 'REJECT'
  17. option output 'ACCEPT'
  18. option forward 'REJECT'
  19. option masq '1'
  20. option mtu_fix '1'
  21. list network 'wan'
  22. list network 'wan6'
  23. list network 'wg0'
  24. config forwarding
  25. option src 'lan'
  26. option dest 'wan'
  27.  
  28. config rule
  29. option name 'Allow-DHCP-Renew'
  30. option src 'wan'
  31. option proto 'udp'
  32. option dest_port '68'
  33. option target 'ACCEPT'
  34. option family 'ipv4'
  35.  
  36. config rule
  37. option name 'Allow-Ping'
  38. option src 'wan'
  39. option proto 'icmp'
  40. option icmp_type 'echo-request'
  41. option family 'ipv4'
  42. option target 'ACCEPT'
  43. config rule
  44. option name 'Allow-IGMP'
  45. option src 'wan'
  46. option proto 'igmp'
  47. option family 'ipv4'
  48. option target 'ACCEPT'
  49.  
  50. config rule
  51. option name 'Allow-DHCPv6'
  52. option src 'wan'
  53. option proto 'udp'
  54. option dest_port '546'
  55. option family 'ipv6'
  56. option target 'ACCEPT'
  57. config rule
  58. option name 'Allow-MLD'
  59. option src 'wan'
  60. option proto 'icmp'
  61. option src_ip 'fe80::/10'
  62. list icmp_type '130/0'
  63. list icmp_type '131/0'
  64. list icmp_type '132/0'
  65. list icmp_type '143/0'
  66. option family 'ipv6'
  67. option target 'ACCEPT'
  68. config rule
  69. option name 'Allow-ICMPv6-Input'
  70. option src 'wan'
  71. option proto 'icmp'
  72. list icmp_type 'echo-request'
  73. list icmp_type 'echo-reply'
  74. list icmp_type 'destination-unreachable'
  75. list icmp_type 'packet-too-big'
  76. list icmp_type 'time-exceeded'
  77. list icmp_type 'bad-header'
  78. list icmp_type 'unknown-header-type'
  79. list icmp_type 'router-solicitation'
  80. list icmp_type 'neighbour-solicitation'
  81. list icmp_type 'router-advertisement'
  82. list icmp_type 'neighbour-advertisement'
  83. option limit '1000/sec'
  84. option family 'ipv6'
  85. option target 'ACCEPT'
  86. config rule
  87. option name 'Allow-ICMPv6-Forward'
  88. option src 'wan'
  89. option dest '*'
  90. option proto 'icmp'
  91. list icmp_type 'echo-request'
  92. list icmp_type 'echo-reply'
  93. list icmp_type 'destination-unreachable'
  94. list icmp_type 'packet-too-big'
  95. list icmp_type 'time-exceeded'
  96. list icmp_type 'bad-header'
  97. list icmp_type 'unknown-header-type'
  98. option limit '1000/sec'
  99. option family 'ipv6'
  100. option target 'ACCEPT'
  101. config rule
  102. option name 'Allow-IPSec-ESP'
  103. option src 'wan'
  104. option dest 'lan'
  105. option proto 'esp'
  106. option target 'ACCEPT'
  107.  
  108. config rule
  109. option name 'Allow-ISAKMP'
  110. option src 'wan'
  111. option dest 'lan'
  112. option dest_port '500'
  113. option proto 'udp'
  114. option target 'ACCEPT'
  115.  
  116. config zone
  117. option name 'vpn'
  118. option input 'REJECT'
  119. option output 'ACCEPT'
  120. option forward 'REJECT'
  121. option masq '1'
  122.  
  123. config forwarding
  124. option src 'lan'
  125. option dest 'vpn'
  126.  
  127. config zone 'wg0'
  128. option name 'wg0'
  129. list network 'wg0'
  130. option input 'REJECT'
  131. option output 'ACCEPT'
  132. option forward 'REJECT'
  133. option masq '1'
  134. option mtu_fix '1'
  135.  
  136. config forwarding
  137. option src 'lan'
  138. option dest 'wg0'
  139.  
  140. config forwarding
  141. option dest 'lan'
  142. option src 'wg0'
  143.  
  144. config forwarding
  145. option dest 'wan'
  146. option src 'wg0'
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!