From 77dda8d67ac852b73bf60c8dec0fbb958168b7ea Mon Sep 17 00:00:00 2001 From: Jo-Philipp Wich Date: Tue, 20 Dec 2011 01:10:15 +0000 Subject: firewall: - introduce per-section "option enabled" which defaults to "1" - useful to disable rules or zones without having to delete them - annotate default traffic rules with names - bump version SVN-Revision: 29577 --- package/firewall/files/firewall.config | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'package/firewall/files/firewall.config') diff --git a/package/firewall/files/firewall.config b/package/firewall/files/firewall.config index 4ba165f..77832ff 100644 --- a/package/firewall/files/firewall.config +++ b/package/firewall/files/firewall.config @@ -29,6 +29,7 @@ config forwarding # We need to accept udp packets on port 68, # see https://dev.openwrt.org/ticket/4108 config rule + option name Allow-DHCP-Renew option src wan option proto udp option dest_port 68 @@ -37,6 +38,7 @@ config rule # Allow IPv4 ping config rule + option name Allow-Ping option src wan option proto icmp option icmp_type echo-request @@ -46,6 +48,7 @@ config rule # Allow DHCPv6 replies # see https://dev.openwrt.org/ticket/10381 config rule + option name Allow-DHCPv6 option src wan option proto udp option src_ip fe80::/10 @@ -57,6 +60,7 @@ config rule # Allow essential incoming IPv6 ICMP traffic config rule + option name Allow-ICMPv6-Input option src wan option proto icmp list icmp_type echo-request @@ -73,6 +77,7 @@ config rule # Allow essential forwarded IPv6 ICMP traffic config rule + option name Allow-ICMPv6-Forward option src wan option dest * option proto icmp -- cgit v1.1