option input ACCEPT
option output ACCEPT
option forward REJECT
+# Uncomment this line to disable ipv6 rules
+# option disable_ipv6 1
config zone
option name lan
+ option network 'lan'
option input ACCEPT
option output ACCEPT
option forward REJECT
config zone
option name wan
+ option network 'wan'
option input REJECT
option output ACCEPT
option forward REJECT
option proto udp
option dest_port 68
option target ACCEPT
+ option family ipv4
+
+#Allow ping
+config rule
+ option src wan
+ option proto icmp
+ option icmp_type echo-request
+ option target ACCEPT
# include a file with users custom iptables rules
config include