[backfire] merge r26961

[openwrt-10.03/.git] / package / firewall / files / firewall.config

diff --git a/package/firewall/files/firewall.config b/package/firewall/files/firewall.config
old mode 100755 (executable)
new mode 100644 (file)
index 16d688e..f842a97
--- a/package/firewall/files/firewall.config
+++ b/package/firewall/files/firewall.config
@@ -3,28 +3,48 @@ config defaults
        option input            ACCEPT
        option output           ACCEPT 
        option forward          REJECT
        option input            ACCEPT
        option output           ACCEPT 
        option forward          REJECT

+# Uncomment this line to disable ipv6 rules
+#      option disable_ipv6     1

 
 config zone
        option name             lan
 
 config zone
        option name             lan

+       option network  'lan'

        option input    ACCEPT 
        option output   ACCEPT 
        option forward  REJECT
 
 config zone
        option name             wan
        option input    ACCEPT 
        option output   ACCEPT 
        option forward  REJECT
 
 config zone
        option name             wan

+       option network  'wan'

        option input    REJECT
        option output   ACCEPT 
        option forward  REJECT
        option masq             1 
        option input    REJECT
        option output   ACCEPT 
        option forward  REJECT
        option masq             1 

+       option mtu_fix  1

 
 config forwarding 
        option src      lan
        option dest     wan
 
 
 config forwarding 
        option src      lan
        option dest     wan
 

-## Enable this option if you encounter any MTU problems
-## e.g. some websites work, others do not, submitting
-## forms causes problems, ...
-#      option mtu_fix  1
+# We need to accept udp packets on port 68,
+# see https://dev.openwrt.org/ticket/4108
+config rule
+       option src              wan
+       option proto            udp
+       option dest_port        68
+       option target           ACCEPT
+       option family   ipv4
+
+#Allow ping
+config rule
+       option src wan
+       option proto icmp
+       option icmp_type echo-request
+       option target ACCEPT
+
+# include a file with users custom iptables rules
+config include
+       option path /etc/firewall.user

 
 
 ### EXAMPLE CONFIG SECTIONS
 
 
 ### EXAMPLE CONFIG SECTIONS


@@ -57,10 +77,6 @@ config forwarding
 #      option dest_port        80 
 #      option proto            tcp
 
 #      option dest_port        80 
 #      option proto            tcp
 

-# include a file with users custom iptables rules
-#config include
-#      option path /etc/firewall.user
-

 
 ### FULL CONFIG SECTIONS
 #config rule
 
 ### FULL CONFIG SECTIONS
 #config rule