-
-
Save darwin/3229599ec8077129661dc3b9e00f75c9 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
root@turris:~# cat /etc/config/firewall | |
config rule | |
option name 'Allow-DHCP-Renew' | |
option src 'wan' | |
option proto 'udp' | |
option dest_port '68' | |
option target 'ACCEPT' | |
option family 'ipv4' | |
config rule | |
option name 'Allow-Ping' | |
option src 'wan' | |
option proto 'icmp' | |
option icmp_type 'echo-request' | |
option family 'ipv4' | |
option target 'ACCEPT' | |
config rule | |
option name 'Allow-IGMP' | |
option src 'wan' | |
option proto 'igmp' | |
option family 'ipv4' | |
option target 'ACCEPT' | |
config rule | |
option name 'Allow-DHCPv6' | |
option src 'wan' | |
option proto 'udp' | |
option src_ip 'fe80::/10' | |
option src_port '547' | |
option dest_ip 'fe80::/10' | |
option dest_port '546' | |
option family 'ipv6' | |
option target 'ACCEPT' | |
config rule | |
option name 'Allow-MLD' | |
option src 'wan' | |
option proto 'icmp' | |
option src_ip 'fe80::/10' | |
list icmp_type '130/0' | |
list icmp_type '131/0' | |
list icmp_type '132/0' | |
list icmp_type '143/0' | |
option family 'ipv6' | |
option target 'ACCEPT' | |
config rule | |
option name 'Allow-ICMPv6-Input' | |
option src 'wan' | |
option proto 'icmp' | |
list icmp_type 'echo-request' | |
list icmp_type 'echo-reply' | |
list icmp_type 'destination-unreachable' | |
list icmp_type 'packet-too-big' | |
list icmp_type 'time-exceeded' | |
list icmp_type 'bad-header' | |
list icmp_type 'unknown-header-type' | |
list icmp_type 'router-solicitation' | |
list icmp_type 'neighbour-solicitation' | |
list icmp_type 'router-advertisement' | |
list icmp_type 'neighbour-advertisement' | |
option limit '1000/sec' | |
option family 'ipv6' | |
option target 'ACCEPT' | |
config rule | |
option name 'Allow-ICMPv6-Forward' | |
option src 'wan' | |
option dest '*' | |
option proto 'icmp' | |
list icmp_type 'echo-request' | |
list icmp_type 'echo-reply' | |
list icmp_type 'destination-unreachable' | |
list icmp_type 'packet-too-big' | |
list icmp_type 'time-exceeded' | |
list icmp_type 'bad-header' | |
list icmp_type 'unknown-header-type' | |
option limit '1000/sec' | |
option family 'ipv6' | |
option target 'ACCEPT' | |
config rule | |
option src 'wan' | |
option dest 'lan' | |
option proto 'esp' | |
option target 'ACCEPT' | |
config rule | |
option src 'wan' | |
option dest 'lan' | |
option dest_port '500' | |
option proto 'udp' | |
option target 'ACCEPT' | |
config defaults | |
option syn_flood '1' | |
option input 'ACCEPT' | |
option output 'ACCEPT' | |
option forward 'REJECT' | |
config zone | |
option name 'lan' | |
option input 'ACCEPT' | |
option output 'ACCEPT' | |
option forward 'ACCEPT' | |
option network 'lan' | |
config zone | |
option name 'wan' | |
option input 'REJECT' | |
option output 'ACCEPT' | |
option forward 'REJECT' | |
option masq '1' | |
option mtu_fix '1' | |
option network 'wan wan6' | |
config forwarding | |
option src 'lan' | |
option dest 'wan' | |
config include | |
option path '/etc/firewall.user' | |
config include | |
option path '/usr/share/firewall/turris' | |
option reload '1' | |
config include | |
option path '/etc/firewall.d/with_reload/firewall.include.sh' | |
option reload '1' | |
config include | |
option path '/etc/firewall.d/without_reload/firewall.include.sh' | |
option reload '0' | |
config include 'miniupnpd' | |
option type 'script' | |
option path '/usr/share/miniupnpd/firewall.include' | |
option family 'any' | |
option reload '1' | |
config zone | |
option input 'ACCEPT' | |
option forward 'REJECT' | |
option output 'ACCEPT' | |
option name 'guest' | |
option network 'guest' | |
config forwarding | |
option dest 'wan' | |
option src 'guest' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
root@turris:~# cat /etc/config/network | |
config interface 'loopback' | |
option ifname 'lo' | |
option proto 'static' | |
option ipaddr '127.0.0.1' | |
option netmask '255.0.0.0' | |
config globals 'globals' | |
option ula_prefix 'fd8e:8a80:3e52::/48' | |
config interface 'lan' | |
option force_link '1' | |
option type 'bridge' | |
option proto 'static' | |
option netmask '255.255.255.0' | |
option ip6assign '60' | |
option ipaddr '192.168.3.254' | |
option ifname 'eth0' | |
config interface 'wan' | |
option ifname 'eth1' | |
option proto 'dhcp' | |
option macaddr 'E4:8D:8C:41:C0:1F' | |
config interface 'wan6' | |
option ifname '@wan' | |
option proto 'dhcpv6' | |
config switch | |
option name 'switch0' | |
option reset '1' | |
option enable_vlan '1' | |
config switch_vlan | |
option device 'switch0' | |
option vlan '1' | |
option vid '1' | |
option ports '0 1 2 3 5' | |
config switch_vlan | |
option device 'switch0' | |
option vlan '2' | |
option ports '4 6' | |
option vid '2' | |
config switch_vlan | |
option device 'switch0' | |
option vlan '3' | |
option ports '0t 1t 2t 3t 5t' | |
option vid '1003' | |
config interface 'guest' | |
option proto 'static' | |
option ipaddr '192.168.4.254' | |
option netmask '255.255.255.0' | |
option ip6assign '64' | |
option ifname 'eth0.1003' | |
option type 'bridge' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
root@turris:~# route | |
Kernel IP routing table | |
Destination Gateway Genmask Flags Metric Ref Use Iface | |
default 10.0.0.254 0.0.0.0 UG 0 0 0 eth1 | |
10.0.0.0 * 255.255.255.0 U 0 0 0 eth1 | |
10.0.0.254 * 255.255.255.255 UH 0 0 0 eth1 | |
192.168.3.0 * 255.255.255.0 U 0 0 0 br-lan | |
192.168.4.0 * 255.255.255.0 U 0 0 0 br-guest |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment