X-Git-Url: https://git.rohieb.name/openwrt.git/blobdiff_plain/4ed715651306ba1d3b73d9fa2197a55a3443c1d2..271da7f4e93492f377c0fcf25def4591d60b9fbc:/package/firewall/files/firewall.config?ds=sidebyside diff --git a/package/firewall/files/firewall.config b/package/firewall/files/firewall.config index 464540f99..7904cedb8 100644 --- a/package/firewall/files/firewall.config +++ b/package/firewall/files/firewall.config @@ -3,6 +3,8 @@ config defaults option input ACCEPT option output ACCEPT option forward REJECT +# Uncomment this line to disable ipv6 rules +# option disable_ipv6 1 config zone option name lan @@ -16,11 +18,27 @@ config zone option output ACCEPT option forward REJECT option masq 1 + option mtu_fix 1 config forwarding option src lan option dest wan - option mtu_fix 1 + +# We need to accept udp packets on port 68, +# see https://dev.openwrt.org/ticket/4108 +config rule + option src wan + option proto udp + option dest_port 68 + option target ACCEPT + option family ipv4 + +#Allow ping +config rule + option src wan + option proto icmp + option icmp_type echo-request + option target ACCEPT # include a file with users custom iptables rules config include