forked from Ivasoft/openwrt
firewall changes: - implement a REJECT policy and enable it by default, reject packets with approriate response (closes: #3970) - cleanup syn_flood and remove logging
SVN-Revision: 12688
This commit is contained in:
@@ -1,20 +1,20 @@
|
||||
config defaults
|
||||
option syn_flood 1
|
||||
option input DROP
|
||||
option input REJECT
|
||||
option output ACCEPT
|
||||
option forward DROP
|
||||
option forward REJECT
|
||||
|
||||
config zone
|
||||
option name lan
|
||||
option input ACCEPT
|
||||
option output ACCEPT
|
||||
option forward DROP
|
||||
option forward REJECT
|
||||
|
||||
config zone
|
||||
option name wan
|
||||
option input DROP
|
||||
option input REJECT
|
||||
option output ACCEPT
|
||||
option forward DROP
|
||||
option forward REJECT
|
||||
option masq 1
|
||||
|
||||
config forwarding
|
||||
|
||||
Reference in New Issue
Block a user