X-Git-Url: http://git.ozo.com/?p=openwrt-10.03%2F.git;a=blobdiff_plain;f=package%2Ffirewall%2Ffiles%2Ffirewall.config;h=f842a970e0aae97aa61d7d3f509b28762d7a1b05;hp=16d688e9935f706c1d8ed22b81be64cd2a470e5f;hb=21b59db865e5adaf40045acca48b54043798fa04;hpb=e8530f33a96015394b3e846f3ac44a900e7e9012

diff --git a/package/firewall/files/firewall.config b/package/firewall/files/firewall.config
old mode 100755
new mode 100644
index 16d688e99..f842a970e
--- a/package/firewall/files/firewall.config
+++ b/package/firewall/files/firewall.config
@@ -3,28 +3,48 @@ config defaults
 	option input		ACCEPT
 	option output		ACCEPT 
 	option forward		REJECT
+# Uncomment this line to disable ipv6 rules
+#	option disable_ipv6	1
 
 config zone
 	option name		lan
+	option network	'lan'
 	option input	ACCEPT 
 	option output	ACCEPT 
 	option forward	REJECT
 
 config zone
 	option name		wan
+	option network	'wan'
 	option input	REJECT
 	option output	ACCEPT 
 	option forward	REJECT
 	option masq		1 
+	option mtu_fix	1
 
 config forwarding 
 	option src      lan
 	option dest     wan
 
-## Enable this option if you encounter any MTU problems
-## e.g. some websites work, others do not, submitting
-## forms causes problems, ...
-#	option mtu_fix	1
+# We need to accept udp packets on port 68,
+# see https://dev.openwrt.org/ticket/4108
+config rule
+	option src		wan
+	option proto		udp
+	option dest_port	68
+	option target		ACCEPT
+	option family	ipv4
+
+#Allow ping
+config rule
+	option src wan
+	option proto icmp
+	option icmp_type echo-request
+	option target ACCEPT
+
+# include a file with users custom iptables rules
+config include
+	option path /etc/firewall.user
 
 
 ### EXAMPLE CONFIG SECTIONS
@@ -57,10 +77,6 @@ config forwarding
 #	option dest_port	80 
 #	option proto		tcp
 
-# include a file with users custom iptables rules
-#config include
-#	option path /etc/firewall.user
-
 
 ### FULL CONFIG SECTIONS
 #config rule