1
0
mirror of git://projects.qi-hardware.com/openwrt-xburst.git synced 2024-07-05 00:42:02 +03:00
openwrt-xburst/package/firewall/files
jow 667c11ec82 [PATCH] firewall: provide examples of ssh port relocation on firewall and IPsec passthrough
Two examples of potentially useful configurations (commented out, of course):

(a) map the ssh service running on the firewall to 22001 externally, without modifying the configuration of the daemon itself. this allows port 22 on the WAN side to then be port-forwarded to a 
LAN-based machine if desired, or if not, simply obscures the port from external attack.

(b) allow IPsec/ESP and ISAKMP (UDP-based key exchange) to happen by default. useful for most modern VPN clients you might have on your WAN.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26805 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-05-02 12:54:31 +00:00
..
bin [package] firewall: 2010-05-01 18:22:01 +00:00
lib [PATCH] firewall: provide examples of ssh port relocation on firewall and IPsec passthrough 2011-05-02 12:54:31 +00:00
firewall.config [PATCH] firewall: provide examples of ssh port relocation on firewall and IPsec passthrough 2011-05-02 12:54:31 +00:00
firewall.hotplug [package] firewall: run ifdown hotplug events synchronized, fixes a racecondition on "ifup iface" when ifdown and ifup events are delivered with a small dealy 2010-09-15 01:53:36 +00:00
firewall.init [package] firewall (#7355) 2010-05-19 00:50:14 +00:00
firewall.upgrade Keep firewall.user during sysupgrades 2011-03-20 00:57:47 +00:00
firewall.user [package] firewall: enable /etc/firewall.user by default and install sample firewall.user file 2009-04-12 22:38:34 +00:00
reflection.hotplug [package] firewall: also establish forward rules when setting up nat reflection, back out early if reflection is disabled 2010-10-03 18:11:59 +00:00