2023-10-11 08:57:33 +02:00
|
|
|
#/bin/sh
|
|
|
|
|
|
|
|
|
|
set -e
|
|
|
|
|
|
|
|
|
|
main() {
|
|
|
|
|
# Update default firewall ruleset
|
|
|
|
|
uci add firewall rule
|
|
|
|
|
uci set firewall.@rule[-1].name='Allow SSH on WAN'
|
|
|
|
|
uci set firewall.@rule[-1].src='wan'
|
|
|
|
|
uci set firewall.@rule[-1].proto='tcp'
|
|
|
|
|
uci set firewall.@rule[-1].dest_port='22'
|
|
|
|
|
uci set firewall.@rule[-1].target='ACCEPT'
|
|
|
|
|
|
|
|
|
|
uci add firewall rule
|
|
|
|
|
uci set firewall.@rule[-1].name='Allow HTTP on WAN'
|
|
|
|
|
uci set firewall.@rule[-1].src='wan'
|
|
|
|
|
uci set firewall.@rule[-1].proto='tcp'
|
|
|
|
|
uci set firewall.@rule[-1].dest_port='80'
|
|
|
|
|
uci set firewall.@rule[-1].target='ACCEPT'
|
|
|
|
|
|
|
|
|
|
uci add firewall rule
|
|
|
|
|
uci set firewall.@rule[-1].name='Allow HTTPS on WAN'
|
|
|
|
|
uci set firewall.@rule[-1].src='wan'
|
|
|
|
|
uci set firewall.@rule[-1].proto='tcp'
|
|
|
|
|
uci set firewall.@rule[-1].dest_port='443'
|
|
|
|
|
uci set firewall.@rule[-1].target='ACCEPT'
|
|
|
|
|
|
2024-03-13 10:42:53 +01:00
|
|
|
uci add firewall rule
|
|
|
|
|
uci set firewall.@rule[-1].name='Allow 42521 on WAN'
|
|
|
|
|
uci set firewall.@rule[-1].src='wan'
|
|
|
|
|
uci set firewall.@rule[-1].proto='tcp'
|
|
|
|
|
uci set firewall.@rule[-1].dest_port='42521'
|
|
|
|
|
uci set firewall.@rule[-1].target='ACCEPT'
|
|
|
|
|
|
2023-10-11 08:57:33 +02:00
|
|
|
uci commit firewall
|
|
|
|
|
|
|
|
|
|
# Disable DNS-rebind protection
|
|
|
|
|
uci set dhcp.@dnsmasq[0].rebind_protection='0'
|
|
|
|
|
uci commit dhcp
|
|
|
|
|
|
|
|
|
|
reload_config
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
main
|
