Router B: Firewall

config rule 'cfg0c92bd'
	option dest_ip 'fe80::/10'
	option target 'ACCEPT'
	option dest_port '546'
	option src_port '547'
	option name 'Allow-DHCPv6'
	option src_ip 'fe80::/10'
	option family 'ipv6'
	option proto 'udp'
	option src 'wan'

config forwarding 'cfg1aad58'
	option dest 'ninux'
	option src 'lan'

config forwarding 'cfg16ad58'
	option dest 'wan'
	option src 'lan'

config zone 'cfg04dc81'
	option network 'lan'
	option output 'ACCEPT'
	option name 'lan'
	option input 'ACCEPT'
	option forward 'ACCEPT'

config rule 'cfg0892bd'
	option dest_port '68'
	option name 'Allow-DHCP-Renew'
	option family 'ipv4'
	option target 'ACCEPT'
	option proto 'udp'
	option src 'wan'

config rule 'cfg0e92bd'
	option target 'ACCEPT'
	list icmp_type 'destination-unreachable'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'echo-reply'
	list icmp_type 'neighbour-solicitation'
	list icmp_type 'echo-request'
	list icmp_type 'neighbour-advertisement'
	list icmp_type 'packet-too-big'
	list icmp_type 'router-advertisement'
	list icmp_type 'unknown-header-type'
	list icmp_type 'router-solicitation'
	option name 'Allow-ICMPv6-Input'
	option limit '1000/sec'
	option family 'ipv6'
	option proto 'icmp'
	option src 'wan'

config forwarding 'cfg18ad58'
	option dest 'lan'
	option src 'ninux'

config zone 'cfg14dc81'
	option output 'ACCEPT'
	option name 'ninux'
	option input 'ACCEPT'
	option forward 'ACCEPT'
	option network 'ninux vpnbas Ant1 Ant2 Ant3 Ant4 ANT_1 ANT_2'

config zone 'cfg06dc81'
	option network 'wan wan6'
	option output 'ACCEPT'
	option masq '1'
	option name 'wan'
	option input 'ACCEPT'
	option forward 'REJECT'
	option mtu_fix '1'

config include 'cfg12af89'
	option path '/etc/firewall.user'

config rule 'cfg0a92bd'
	option icmp_type 'echo-request'
	option name 'Allow-Ping'
	option target 'ACCEPT'
	option family 'ipv4'
	option proto 'icmp'
	option src 'wan'

config defaults 'cfg02e63d'
	option syn_flood '1'
	option input 'ACCEPT'
	option forward 'ACCEPT'
	option output 'ACCEPT'

config rule 'cfg1092bd'
	option target 'ACCEPT'
	option family 'ipv6'
	list icmp_type 'destination-unreachable'
	list icmp_type 'echo-request'
	list icmp_type 'packet-too-big'
	list icmp_type 'unknown-header-type'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'echo-reply'
	option name 'Allow-ICMPv6-Forward'
	option limit '1000/sec'
	option dest '*'
	option proto 'icmp'
	option src 'wan'

config zone 'HOTSPOT_zone'
	option name 'HOTSPOT'
	option network 'HOTSPOT'
	option output 'ACCEPT'
	option input 'ACCEPT'
	option forward 'ACCEPT'

config rule 'HOTSPOT_rule_dhcp'
	option name 'Allow DHCP request'
	option src 'HOTSPOT'
	option src_port '68'
	option dest_port '67'
	option proto 'udp'
	option target 'ACCEPT'

config forwarding 'cfg12ad58'
	option dest 'wan'
	option src 'HOTSPOT'

config forwarding 'cfg11ad58'
	option dest 'ninux'
	option src 'HOTSPOT'