X-Git-Url: https://git.rohieb.name/openwrt.git/blobdiff_plain/759aaf7754a638b3f94a267c9feb888c74181340..a25fe1d267f0e4b7067af69877c1f69592321830:/package/firewall/files/firewall.config

diff --git a/package/firewall/files/firewall.config b/package/firewall/files/firewall.config
old mode 100755
new mode 100644
index 46f7de5d7..bee162549
--- a/package/firewall/files/firewall.config
+++ b/package/firewall/files/firewall.config
@@ -3,6 +3,8 @@ config defaults
 	option input		ACCEPT
 	option output		ACCEPT 
 	option forward		REJECT
+# Uncomment this line to disable ipv6 rules
+#	option disable_ipv6	1
 
 config zone
 	option name		lan
@@ -16,11 +18,31 @@ config zone
 	option output	ACCEPT 
 	option forward	REJECT
 	option masq		1 
+	option mtu_fix	1
 
 config forwarding 
 	option src      lan
 	option dest     wan
-	option mtu_fix	1
+
+# We need to accept udp packets on port 68,
+# see https://dev.openwrt.org/ticket/4108
+config rule
+	option src		wan
+	option proto		udp
+	option dest_port	68
+	option target		ACCEPT
+	option family	ipv4
+
+#Allow ping
+config rule
+	option src wan
+	option proto icmp
+	option icmp_type echo-request
+	option target ACCEPT
+
+# include a file with users custom iptables rules
+config include
+	option path /etc/firewall.user
 
 
 ### EXAMPLE CONFIG SECTIONS
@@ -53,10 +75,28 @@ config forwarding
 #	option dest_port	80 
 #	option proto		tcp
 
-# include a file with users custom iptables rules
-#config include
-#	option path /etc/firewall.user
+# port redirect of remapped ssh port (22001) on wan
+#config redirect
+#	option src		wan
+#	option src_dport	22001
+#	option dest		lan
+#	option dest_port	22
+#	option proto		tcp
 
+# allow IPsec/ESP and ISAKMP passthrough
+#config rule
+#	option src		wan
+#	option dest		lan
+#	option protocol		esp
+#	option target		ACCEPT
+
+#config rule
+#	option src		wan
+#	option dest		lan
+#	option src_port		500
+#	option dest_port	500
+#	option proto		udp
+#	option target		ACCEPT
 
 ### FULL CONFIG SECTIONS
 #config rule