mirror of
git://projects.qi-hardware.com/openwrt-xburst.git
synced 2025-04-21 12:27:27 +03:00
firewall changes:
- implement a REJECT policy and enable it by default, reject packets with approriate response (closes: #3970) - cleanup syn_flood and remove logging git-svn-id: svn://svn.openwrt.org/openwrt/trunk@12688 3c298f89-4303-0410-b956-a3cf2f4a3e73
This commit is contained in:
@@ -1,20 +1,20 @@
|
||||
config defaults
|
||||
option syn_flood 1
|
||||
option input DROP
|
||||
option input REJECT
|
||||
option output ACCEPT
|
||||
option forward DROP
|
||||
option forward REJECT
|
||||
|
||||
config zone
|
||||
option name lan
|
||||
option input ACCEPT
|
||||
option output ACCEPT
|
||||
option forward DROP
|
||||
option forward REJECT
|
||||
|
||||
config zone
|
||||
option name wan
|
||||
option input DROP
|
||||
option input REJECT
|
||||
option output ACCEPT
|
||||
option forward DROP
|
||||
option forward REJECT
|
||||
option masq 1
|
||||
|
||||
config forwarding
|
||||
|
||||
Reference in New Issue
Block a user