[openwrt] firewall

ゝ一世哀愁。 2022-05-25 14:36 237阅读 0赞

root@OpenWrt:/etc/config# ls
    4g                     dataUsageCfg           network
    8192eeshare            dhcp                   qos
    8192eewpa              dropbear               remoteupgrade
    APNProfiles            easycwmp               signalCfg
    CusAPNCfg              firewall               snmpd
    CusCMCfg               firewallaccessacl      system
    PINBAK                 firewallaccessspecial  ucitrack
    confapp                fstab                  uhttpd
    cusfirewall            l3filter_rule          upnpd
    dataUsage              lte-gw                 wireless
    dataUsageBak           luci
    root@OpenWrt:/etc/config# cat cusfirewall 
    
    config Environment 'l2filter'
            option enable 'enable'
            option strategy 'White'
            option rule_nums '0'
    
    config Environment 'l3filter'
            option enable 'true'
            option strategy 'Black'
            option rule_nums '1'
    
    config Environment 'l7filter'
            option enable 'false'
            option strategy 'black'
            option rule_nums '0'
    
    config Environment 'applications'
            option email 'true'
            option ftp 'true'
            option http 'true'
            option https 'true'
            option telnet 'true'
    
    root@OpenWrt:/etc/config# cat l3filter_rule 
    
    config l3filter
            option enable 'true'
            option rulename 'rule1'
            option strategy 'White'
            option l3srcaddrstart '192.168.0.88'
            option l3srcaddrend '192.168.0.88'
            option l3destaddrstart '192.168.1.115'
            option l3destaddrend '192.168.1.115'
            option l3protocol 'Dummy'
            option l4protocol 'both'
            option l4srcportstart '5'
            option l4srcportend '255'
            option l4destportstart '5'
            option l4destportend '200'
            option interface 'br0'
    
    root@OpenWrt:/etc/config#