Accueil Explorer Aide
S'inscrire Connexion
wareck
/
luci
1
0
Fork 0
Fichiers Tickets 0 Pull Requests 0 Wiki
Branche: master
Branches Tags
luci
/
contrib
/
uci
/
hostfiles
/
etc
/
config
/
firewall

firewall 1.5 KB
Lien permanent Historique Raw

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980 
  1. config defaults
    2. 

  2. 	option syn_flood	1
    3. 

  3. 	option input		DROP 
    4. 

  4. 	option output		ACCEPT 
    5. 

  5. 	option forward		DROP 
    6. 

  6. 

  7. config zone
    8. 

  8. 	option name		lan
    9. 

  9. 	option input	ACCEPT 
    10. 

  10. 	option output	ACCEPT 
    11. 

  11. 	option forward	DROP 
    12. 

  12. 

  13. config zone
    14. 

  14. 	option name		wan
    15. 

  15. 	option input	DROP 
    16. 

  16. 	option output	ACCEPT 
    17. 

  17. 	option forward	DROP 
    18. 

  18. 	option masq		1 
    19. 

  19. 

  20. config forwarding 
    21. 

  21. 	option src      lan
    22. 

  22. 	option dest     wan
    23. 

  23. 

  24. 

  25. ### EXAMPLE CONFIG SECTIONS
    26. 

  26. # do not allow a specific ip to access wan
    27. 

  27. #config rule
    28. 

  28. #	option src		lan
    29. 

  29. #	option src_ip	192.168.45.2
    30. 

  30. #	option dest		wan
    31. 

  31. #	option proto	tcp
    32. 

  32. #	option target	REJECT 
    33. 

  33. 

  34. # block a specific mac on wan
    35. 

  35. #config rule
    36. 

  36. #	option dest		wan
    37. 

  37. #	option src_mac	00:11:22:33:44:66
    38. 

  38. #	option target	REJECT 
    39. 

  39. 

  40. # block incoming ICMP traffic on a zone
    41. 

  41. #config rule
    42. 

  42. #	option src		lan
    43. 

  43. #	option proto	ICMP
    44. 

  44. #	option target	DROP
    45. 

  45. 

  46. # port redirect port coming in on wan to lan
    47. 

  47. #config redirect
    48. 

  48. #	option src			wan
    49. 

  49. #	option src_dport	80
    50. 

  50. #	option dest			lan
    51. 

  51. #	option dest_ip		192.168.16.235
    52. 

  52. #	option dest_port	80 
    53. 

  53. #	option protocol		tcp
    54. 

  54. 

  55. # include a file with users custom iptables rules
    56. 

  56. #config include
    57. 

  57. #	option path /etc/firewall.user
    58. 

  58. 

  59. 

  60. ### FULL CONFIG SECTIONS
    61. 

  61. #config rule
    62. 

  62. #	option src		lan
    63. 

  63. #	option src_ip	192.168.45.2
    64. 

  64. #	option src_mac	00:11:22:33:44:55
    65. 

  65. #	option src_port	80
    66. 

  66. #	option dest		wan
    67. 

  67. #	option dest_ip	194.25.2.129
    68. 

  68. #	option dest_port	120
    69. 

  69. #	option proto	tcp
    70. 

  70. #	option target	REJECT 
    71. 

  71. 

  72. #config redirect
    73. 

  73. #	option src		lan
    74. 

  74. #	option src_ip	192.168.45.2
    75. 

  75. #	option src_mac	00:11:22:33:44:55
    76. 

  76. #	option src_port		1024
    77. 

  77. #	option src_dport	80
    78. 

  78. #	option dest_ip	194.25.2.129
    79. 

  79. #	option dest_port	120
    80. 

  80. #	option proto	tcp
    81.