add a menuconfig option for enabling KALLSYMS for the kernel

[openwrt.git] / package / firewall / files / firewall.config

diff --git a/package/firewall/files/firewall.config b/package/firewall/files/firewall.config
index 0731690..16d688e 100755 (executable)
--- a/package/firewall/files/firewall.config
+++ b/package/firewall/files/firewall.config
@@ -1,26 +1,31 @@
 config defaults
        option syn_flood        1
 config defaults
        option syn_flood        1

-       option input            DROP 
+       option input            ACCEPT

        option output           ACCEPT 
        option output           ACCEPT 

-       option forward          DROP 
+       option forward          REJECT

 
 config zone
        option name             lan
        option input    ACCEPT 
        option output   ACCEPT 
 
 config zone
        option name             lan
        option input    ACCEPT 
        option output   ACCEPT 

-       option forward  DROP 
+       option forward  REJECT

 
 config zone
        option name             wan
 
 config zone
        option name             wan

-       option input    DROP 
+       option input    REJECT

        option output   ACCEPT 
        option output   ACCEPT 

-       option forward  DROP 
+       option forward  REJECT

        option masq             1 
 
 config forwarding 
        option src      lan
        option dest     wan
 
        option masq             1 
 
 config forwarding 
        option src      lan
        option dest     wan
 

+## Enable this option if you encounter any MTU problems
+## e.g. some websites work, others do not, submitting
+## forms causes problems, ...
+#      option mtu_fix  1
+

 
 ### EXAMPLE CONFIG SECTIONS
 # do not allow a specific ip to access wan
 
 ### EXAMPLE CONFIG SECTIONS
 # do not allow a specific ip to access wan


@@ -50,7 +55,7 @@ config forwarding
 #      option dest                     lan
 #      option dest_ip          192.168.16.235
 #      option dest_port        80 
 #      option dest                     lan
 #      option dest_ip          192.168.16.235
 #      option dest_port        80 

-#      option protocol         tcp
+#      option proto            tcp

 
 # include a file with users custom iptables rules
 #config include
 
 # include a file with users custom iptables rules
 #config include