webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-09 18:45:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

firewall: replace echo initial optionsfw settings

Browse Source 
use echo initial optionsfw settings seems creating
duplicated optionsfw settings.

Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
This commit is contained in:
Vincent Li
2025-04-12 07:14:54 -07:00
parent 6eef7f8535
commit 04f60a6291
2 changed files with 24 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
config/cfgroot/optionsfw-settings Normal file
View File

@@ -0,0 +1,23 @@
FWBRIDGEMODE=off
BRIDGENETFILTER=off
DROPNEWNOTSYN=on
DROPINPUT=on
DROPFORWARD=on
FWPOLICY=DROP
FWPOLICY1=DROP
FWPOLICY2=DROP
DROPPORTSCAN=on
DROPOUTGOING=on
DROPSAMBA=off
DROPPROXY=off
SHOWREMARK=on
SHOWCOLORS=on
SHOWTABLES=off
SHOWDROPDOWN=off
DROPWIRELESSINPUT=on
DROPWIRELESSFORWARD=on
DROPSPOOFEDMARTIAN=on
DROPHOSTILE=on
LOGDROPHOSTILEIN=on
LOGDROPHOSTILEOUT=on
LOGDROPCTINVALID=on

24
lfs/configroot
View File

@@ -119,29 +119,7 @@ $(TARGET) :
echo "ENABLED=off" > $(CONFIG_ROOT)/vpn/settings
echo "01" > $(CONFIG_ROOT)/certs/serial
echo "nameserver 1.2.3.4" > $(CONFIG_ROOT)/ppp/fake-resolv.conf
echo "FWBRIDGEMODE=off" >> $(CONFIG_ROOT)/optionsfw/settings
echo "BRIDGENETFILTER=off" >> $(CONFIG_ROOT)/optionsfw/settings
echo "DROPNEWNOTSYN=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "DROPINPUT=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "DROPFORWARD=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "FWPOLICY=DROP" >> $(CONFIG_ROOT)/optionsfw/settings
echo "FWPOLICY1=DROP" >> $(CONFIG_ROOT)/optionsfw/settings
echo "FWPOLICY2=DROP" >> $(CONFIG_ROOT)/optionsfw/settings
echo "DROPPORTSCAN=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "DROPOUTGOING=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "DROPSAMBA=off" >> $(CONFIG_ROOT)/optionsfw/settings
echo "DROPPROXY=off" >> $(CONFIG_ROOT)/optionsfw/settings
echo "SHOWREMARK=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "SHOWCOLORS=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "SHOWTABLES=off" >> $(CONFIG_ROOT)/optionsfw/settings
echo "SHOWDROPDOWN=off" >> $(CONFIG_ROOT)/optionsfw/settings
echo "DROPWIRELESSINPUT=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "DROPWIRELESSFORWARD=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "DROPSPOOFEDMARTIAN=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "DROPHOSTILE=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "LOGDROPHOSTILEIN=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "LOGDROPHOSTILEOUT=on" >> $(CONFIG_ROOT)/optionsfw/settings
echo "LOGDROPCTINVALID=on" >> $(CONFIG_ROOT)/optionsfw/settings
cp $(DIR_SRC)/config/cfgroot/optionsfw-settings $(CONFIG_ROOT)/optionsfw/settings
echo "POLICY=MODE2" >> $(CONFIG_ROOT)/firewall/settings
echo "POLICY1=MODE2" >> $(CONFIG_ROOT)/firewall/settings
echo "USE_ISP_NAMESERVERS=on" >> $(CONFIG_ROOT)/dns/settings