OpenWrt/TP-Link TL-MR3020: Difference between revisions
< OpenWrt
No edit summary |
|||
Line 16: | Line 16: | ||
</pre> | </pre> | ||
</blockquote> | </blockquote> | ||
== /config/firewall == | |||
<blockquote> | |||
<pre> | |||
config defaults | |||
option input 'ACCEPT' | |||
option output 'ACCEPT' | |||
option forward 'ACCEPT' | |||
option disable_ipv6 '1' | |||
config zone | |||
option name 'lan' | |||
option input 'ACCEPT' | |||
option output 'ACCEPT' | |||
option forward 'ACCEPT' | |||
option network 'lan' | |||
config zone | |||
option name 'wan' | |||
option input 'ACCEPT' | |||
option output 'ACCEPT' | |||
option forward 'ACCEPT' | |||
option network 'wifi' | |||
config rule | |||
option src 'wan' | |||
option proto 'tcp' | |||
option dest_port 'ssh' | |||
option target 'ACCEPT' | |||
config rule | |||
option name 'Allow-DHCP-Renew' | |||
option src 'wan' | |||
option proto 'udp' | |||
option dest_port '68' | |||
option target 'ACCEPT' | |||
option family 'ipv4' | |||
config rule | |||
option name 'Allow-Ping' | |||
option src 'wan' | |||
option proto 'icmp' | |||
option icmp_type 'echo-request' | |||
option family 'ipv4' | |||
option target 'ACCEPT' | |||
config rule | |||
option name 'Allow-DHCPv6' | |||
option src 'wan' | |||
option proto 'udp' | |||
option src_ip 'fe80::/10' | |||
option src_port '547' | |||
option dest_ip 'fe80::/10' | |||
option dest_port '546' | |||
option family 'ipv6' | |||
option target 'ACCEPT' | |||
config rule | |||
option name 'Allow-ICMPv6-Input' | |||
option src 'wan' | |||
option proto 'icmp' | |||
list icmp_type 'echo-request' | |||
list icmp_type 'echo-reply' | |||
list icmp_type 'destination-unreachable' | |||
list icmp_type 'packet-too-big' | |||
list icmp_type 'time-exceeded' | |||
list icmp_type 'bad-header' | |||
list icmp_type 'unknown-header-type' | |||
list icmp_type 'router-solicitation' | |||
list icmp_type 'neighbour-solicitation' | |||
option limit '1000/sec' | |||
option family 'ipv6' | |||
option target 'ACCEPT' | |||
config rule | |||
option name 'Allow-ICMPv6-Forward' | |||
option src 'wan' | |||
option dest '*' | |||
option proto 'icmp' | |||
list icmp_type 'echo-request' | |||
list icmp_type 'echo-reply' | |||
list icmp_type 'destination-unreachable' | |||
list icmp_type 'packet-too-big' | |||
list icmp_type 'time-exceeded' | |||
list icmp_type 'bad-header' | |||
list icmp_type 'unknown-header-type' | |||
option limit '1000/sec' | |||
option family 'ipv6' | |||
option target 'ACCEPT' | |||
config include | |||
option path '/etc/firewall.user' | |||
config forwarding | |||
option dest 'lan' | |||
option src 'wan' | |||
config forwarding | |||
option dest 'wan' | |||
option src 'lan' | |||
</pre> | |||
</blockquote> | |||
== /config/firewall == | |||
<blockquote> | |||
<pre> | |||
</pre> | |||
</blockquote> | |||
== /config/firewall == | |||
<blockquote> | |||
<pre> | |||
</pre> | |||
</blockquote> | |||
== /config/firewall == | |||
<blockquote> | |||
<pre> | |||
</pre> | |||
</blockquote> | |||
== /config/dhcp == | == /config/dhcp == |
Revision as of 13:12, 1 August 2012
/config/network
config interface 'loopback' option ifname 'lo' option proto 'static' option ipaddr '127.0.0.1' option netmask '255.0.0.0' config interface 'lan' option proto 'static' option ipaddr '192.168.111.20' option netmask '255.255.255.0' option gateway '192.168.111.1' list dns '192.168.111.1'
/config/firewall
config defaults option input 'ACCEPT' option output 'ACCEPT' option forward 'ACCEPT' option disable_ipv6 '1' config zone option name 'lan' option input 'ACCEPT' option output 'ACCEPT' option forward 'ACCEPT' option network 'lan' config zone option name 'wan' option input 'ACCEPT' option output 'ACCEPT' option forward 'ACCEPT' option network 'wifi' config rule option src 'wan' option proto 'tcp' option dest_port 'ssh' option target 'ACCEPT' config rule option name 'Allow-DHCP-Renew' option src 'wan' option proto 'udp' option dest_port '68' option target 'ACCEPT' option family 'ipv4' config rule option name 'Allow-Ping' option src 'wan' option proto 'icmp' option icmp_type 'echo-request' option family 'ipv4' option target 'ACCEPT' config rule option name 'Allow-DHCPv6' option src 'wan' option proto 'udp' option src_ip 'fe80::/10' option src_port '547' option dest_ip 'fe80::/10' option dest_port '546' option family 'ipv6' option target 'ACCEPT' config rule option name 'Allow-ICMPv6-Input' option src 'wan' option proto 'icmp' list icmp_type 'echo-request' list icmp_type 'echo-reply' list icmp_type 'destination-unreachable' list icmp_type 'packet-too-big' list icmp_type 'time-exceeded' list icmp_type 'bad-header' list icmp_type 'unknown-header-type' list icmp_type 'router-solicitation' list icmp_type 'neighbour-solicitation' option limit '1000/sec' option family 'ipv6' option target 'ACCEPT' config rule option name 'Allow-ICMPv6-Forward' option src 'wan' option dest '*' option proto 'icmp' list icmp_type 'echo-request' list icmp_type 'echo-reply' list icmp_type 'destination-unreachable' list icmp_type 'packet-too-big' list icmp_type 'time-exceeded' list icmp_type 'bad-header' list icmp_type 'unknown-header-type' option limit '1000/sec' option family 'ipv6' option target 'ACCEPT' config include option path '/etc/firewall.user' config forwarding option dest 'lan' option src 'wan' config forwarding option dest 'wan' option src 'lan'
/config/firewall
/config/firewall
/config/firewall
/config/dhcp
config dnsmasq option domainneeded '1' option boguspriv '1' option filterwin2k '0' option localise_queries '1' option rebind_protection '1' option rebind_localhost '1' option local '/lan/' option domain 'lan' option expandhosts '1' option nonegcache '0' option authoritative '1' option readethers '1' option leasefile '/tmp/dhcp.leases' option resolvfile '/tmp/resolv.conf.auto' config dhcp 'lan' option interface 'lan' option ignore '1' config dhcp 'wan' option interface 'wan' option ignore '1' config dhcp option start '100' option leasetime '12h' option limit '150' option interface 'eth'
Block Device
(root from usb stick)
opkg update opkg install kmod-usb-uhci insmod uhci opkg install kmod-usb-ohci insmod usb-ohci opkg install kmod-usb-storage block-mount kmod-fs-ext4 kmod-nls-cp437 kmod-nls-cp850 kmod-nls-iso8859-1 kmod-nls-iso8859-15 kmod-scsi-core e2fsprogs fdisk
USB-Sound
opkg update opkg install kmod-usb-audio kmod-sound-core madplay usbutils alsa-utils
Clear Flash
mtd -r erase rootfs_data