spacepaste

Paste details

reply | raw

  1.  
  2. /etc/config/dhcp:
  3. -----------------
  5. config dhcp 'lan'
  6. option interface 'lan'
  7. option force '1'
  8. option limit '255'
  9. option leasetime '2h'
  10. option start '190'
  11. option ra 'server'
  12. option dhcpv6 'server'
  13. option ra_management '1'
  15. config dhcp 'wan'
  16. option interface 'wan'
  17. option ignore '1'
  19. config odhcpd 'odhcpd'
  20. option leasefile '/tmp/hosts/odhcpd'
  21. option leasetrigger '/usr/sbin/odhcpd-update'
  22. option maindhcp '0'
  26. /etc/config/firewall:
  27. ---------------------
  29. config defaults
  30. option input 'ACCEPT'
  31. option output 'ACCEPT'
  32. option forward 'REJECT'
  34. config zone
  35. option name 'lan'
  36. option input 'ACCEPT'
  37. option output 'ACCEPT'
  38. option forward 'ACCEPT'
  39. option network 'lan'
  41. config zone
  42. option name 'wan'
  43. option input 'REJECT'
  44. option output 'ACCEPT'
  45. option forward 'REJECT'
  46. option masq '1'
  47. option network 'wan wan6'
  49. config rule
  50. option name 'Allow-DHCPv6'
  51. option src 'wan'
  52. option proto 'udp'
  53. option src_ip 'fe80::/10'
  54. option src_port '547'
  55. option dest_ip 'fe80::/10'
  56. option dest_port '546'
  57. option family 'ipv6'
  58. option target 'ACCEPT'
  60. config rule
  61. option name 'Allow-ICMPv6-Input'
  62. option src 'wan'
  63. option proto 'icmp'
  64. list icmp_type 'echo-request'
  65. list icmp_type 'echo-reply'
  66. list icmp_type 'destination-unreachable'
  67. list icmp_type 'packet-too-big'
  68. list icmp_type 'time-exceeded'
  69. list icmp_type 'bad-header'
  70. list icmp_type 'unknown-header-type'
  71. list icmp_type 'router-solicitation'
  72. list icmp_type 'neighbour-solicitation'
  73. list icmp_type 'router-advertisement'
  74. list icmp_type 'neighbour-advertisement'
  75. option limit '1000/sec'
  76. option family 'ipv6'
  77. option target 'ACCEPT'
  79. config rule
  80. option name 'Allow-ICMPv6-Forward'
  81. option src 'wan'
  82. option dest '*'
  83. option proto 'icmp'
  84. list icmp_type 'echo-request'
  85. list icmp_type 'echo-reply'
  86. list icmp_type 'destination-unreachable'
  87. list icmp_type 'packet-too-big'
  88. list icmp_type 'time-exceeded'
  89. list icmp_type 'bad-header'
  90. list icmp_type 'unknown-header-type'
  91. option limit '1000/sec'
  92. option family 'ipv6'
  93. option target 'ACCEPT'
  95. config forwarding
  96. option dest 'wan'
  97. option src 'lan'
  101. /etc/config/network:
  102. --------------------
  104. config interface 'lan'
  105. option type 'bridge'
  106. option proto 'static'
  107. option ip6hint '0'
  108. option ipaddr '192.168.xx.xx'
  109. option netmask '255.255.254.0'
  110. list ip6class 'wan6'
  111. option ip6assign '64'
  112. option ifname 'eth0 eth2'
  114. config interface 'wan'
  115. option ifname 'eth1'
  116. option proto 'dhcp'
  117. option peerdns '0'
  118. option broadcast '1'
  119. option dns '9.9.9.10 8.8.8.8 8.8.4.4'
  121. config interface 'wan6'
  122. option proto 'dhcpv6'
  123. option peerdns '0'
  124. option dns '2620:fe::10 2001:4860:4860::8888 2001:4860:4860::8844'
  125. option ifname 'eth1'
  126. option metric '1'
  127. option reqaddress 'try'
  128. option reqprefix '60'
  129.  
Powered by spacepaste. Paste removal.