Keresés

Új hozzászólás Aktív témák

  • andr1s

    csendes tag

    válasz vargalex #3567 üzenetére

    Közben létrehoztam az uhttpd configot ezekkel a beállításokkal:

    config 'uhttpd' 'main' option 'listen_http' '80' option 'home' '/www'

    Újraindítottam a service-t és mostmár elérhető a böngészőben.

    Köszönöm a segítséged!

  • andr1s

    csendes tag

    válasz vargalex #3567 üzenetére

    Nincs az etc-ben uhttpd, sem firewall.user.

    ---NETWORK---

    config interface 'loopback'
    option ifname 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

    config interface 'lan'
    option ifname 'eth0.1'
    option type 'bridge'
    option proto 'static'
    option ipaddr '192.168.1.1'
    option netmask '255.255.255.0'

    config interface 'wan'
    option ifname 'eth0.2'
    option proto 'dhcp'

    config switch
    option name 'eth0'
    option reset '1'
    option enable_vlan '1'

    config switch_vlan
    option device 'eth0'
    option vlan '2'
    option ports '0t 1'

    ---FIREWALL---

    config defaults
    option syn_flood 1
    option input ACCEPT
    option output ACCEPT
    option forward REJECT
    # Uncomment this line to disable ipv6 rules
    # option disable_ipv6 1

    config zone
    option name lan
    option network 'lan'
    option input ACCEPT
    option output ACCEPT
    option forward REJECT

    config zone
    option name wan
    option network 'wan'
    option input REJECT
    option output ACCEPT
    option forward REJECT
    option masq 1
    option mtu_fix 1

    config forwarding
    option src lan
    option dest wan

    # We need to accept udp packets on port 68,
    # see https://dev.openwrt.org/ticket/4108
    config rule
    option name Allow-DHCP-Renew
    option src wan
    option proto udp
    option dest_port 68
    option target ACCEPT
    option family ipv4

    # Allow IPv4 ping
    config rule
    option name Allow-Ping
    option src wan
    option proto icmp
    option icmp_type echo-request
    option family ipv4
    option target ACCEPT

    # Allow DHCPv6 replies
    # see https://dev.openwrt.org/ticket/10381
    config rule
    option name Allow-DHCPv6
    option src wan
    option proto udp
    option src_ip fe80::/10
    option src_port 547
    option dest_ip fe80::/10
    option dest_port 546
    option family ipv6
    option target ACCEPT

    # Allow essential incoming IPv6 ICMP traffic
    config rule
    option name Allow-ICMPv6-Input
    option src wan
    option proto icmp
    list icmp_type echo-request
    list icmp_type echo-reply
    list icmp_type destination-unreachable
    list icmp_type packet-too-big
    list icmp_type time-exceeded
    list icmp_type bad-header
    list icmp_type unknown-header-type
    list icmp_type router-solicitation
    list icmp_type neighbour-solicitation
    list icmp_type router-advertisement
    list icmp_type neighbour-advertisement
    option limit 1000/sec
    option family ipv6
    option target ACCEPT

    # Allow essential forwarded IPv6 ICMP traffic
    config rule
    option name Allow-ICMPv6-Forward
    option src wan
    option dest *
    option proto icmp
    list icmp_type echo-request
    list icmp_type echo-reply
    list icmp_type destination-unreachable
    list icmp_type packet-too-big
    list icmp_type time-exceeded
    list icmp_type bad-header
    list icmp_type unknown-header-type
    option limit 1000/sec
    option family ipv6
    option target ACCEPT

    /utána pedig a kikommentelt example-k/

Új hozzászólás Aktív témák