X-Git-Url: https://git.rohieb.name/openwrt.git/blobdiff_plain/10548008244fa1a7b13c623ec18c5e73a83dc83a..a197c0a82c4ac45b332a090257a9acc475807d92:/package/firewall/files/firewall.config

diff --git a/package/firewall/files/firewall.config b/package/firewall/files/firewall.config
index b4aa4595d..c852f4b00 100644
--- a/package/firewall/files/firewall.config
+++ b/package/firewall/files/firewall.config
@@ -3,15 +3,19 @@ config defaults
 	option input		ACCEPT
 	option output		ACCEPT 
 	option forward		REJECT
+# Uncomment this line to disable ipv6 rules
+#	option disable_ipv6	1
 
 config zone
 	option name		lan
+	option network	'lan'
 	option input	ACCEPT 
 	option output	ACCEPT 
 	option forward	REJECT
 
 config zone
 	option name		wan
+	option network	'wan'
 	option input	REJECT
 	option output	ACCEPT 
 	option forward	REJECT
@@ -29,6 +33,7 @@ config rule
 	option proto		udp
 	option dest_port	68
 	option target		ACCEPT
+	option family	ipv4
 
 #Allow ping
 config rule
@@ -72,6 +77,28 @@ config include
 #	option dest_port	80 
 #	option proto		tcp
 
+# port redirect of remapped ssh port (22001) on wan
+#config redirect
+#	option src		wan
+#	option src_dport	22001
+#	option dest		lan
+#	option dest_port	22
+#	option proto		tcp
+
+# allow IPsec/ESP and ISAKMP passthrough
+#config rule
+#	option src		wan
+#	option dest		lan
+#	option protocol		esp
+#	option target		ACCEPT
+
+#config rule
+#	option src		wan
+#	option dest		lan
+#	option src_port		500
+#	option dest_port	500
+#	option proto		udp
+#	option target		ACCEPT
 
 ### FULL CONFIG SECTIONS
 #config rule