X-Git-Url: http://git.ozo.com/?a=blobdiff_plain;f=package%2Ffirewall%2Ffiles%2Ffirewall.config;h=7904cedb879140804a8afa1f7f76258538a05516;hb=b9256ceaf5e36f68f1000ce1e841c685dab7a529;hp=464540f9901cab71e2a49bc3fdbb72d14446ff6c;hpb=4ed715651306ba1d3b73d9fa2197a55a3443c1d2;p=openwrt-10.03%2F.git

diff --git a/package/firewall/files/firewall.config b/package/firewall/files/firewall.config
index 464540f99..7904cedb8 100644
--- a/package/firewall/files/firewall.config
+++ b/package/firewall/files/firewall.config
@@ -3,6 +3,8 @@ config defaults
 	option input		ACCEPT
 	option output		ACCEPT 
 	option forward		REJECT
+# Uncomment this line to disable ipv6 rules
+#	option disable_ipv6	1
 
 config zone
 	option name		lan
@@ -16,11 +18,27 @@ config zone
 	option output	ACCEPT 
 	option forward	REJECT
 	option masq		1 
+	option mtu_fix	1
 
 config forwarding 
 	option src      lan
 	option dest     wan
-	option mtu_fix	1
+
+# We need to accept udp packets on port 68,
+# see https://dev.openwrt.org/ticket/4108
+config rule
+	option src		wan
+	option proto		udp
+	option dest_port	68
+	option target		ACCEPT
+	option family	ipv4
+
+#Allow ping
+config rule
+	option src wan
+	option proto icmp
+	option icmp_type echo-request
+	option target ACCEPT
 
 # include a file with users custom iptables rules
 config include