6 # Uncomment this line to disable ipv6 rules
7 # option disable_ipv6 1
29 # We need to accept udp packets on port 68,
30 # see https://dev.openwrt.org/ticket/4108
42 option icmp_type echo-request
45 # include a file with users custom iptables rules
47 option path /etc/firewall.user
50 ### EXAMPLE CONFIG SECTIONS
51 # do not allow a specific ip to access wan
54 # option src_ip 192.168.45.2
57 # option target REJECT
59 # block a specific mac on wan
62 # option src_mac 00:11:22:33:44:66
63 # option target REJECT
65 # block incoming ICMP traffic on a zone
71 # port redirect port coming in on wan to lan
76 # option dest_ip 192.168.16.235
81 ### FULL CONFIG SECTIONS
84 # option src_ip 192.168.45.2
85 # option src_mac 00:11:22:33:44:55
88 # option dest_ip 194.25.2.129
89 # option dest_port 120
91 # option target REJECT
95 # option src_ip 192.168.45.2
96 # option src_mac 00:11:22:33:44:55
97 # option src_port 1024
99 # option dest_ip 194.25.2.129
100 # option dest_port 120