137 lines
2.7 KiB
JSON
137 lines
2.7 KiB
JSON
[
|
|
{
|
|
"action": "passthrough",
|
|
"chain": "forward",
|
|
"comment": "special"
|
|
},
|
|
{
|
|
"action": "fasttrack-connection",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"connection-state": "established,related",
|
|
"hw-offload": "yes",
|
|
"log": "no",
|
|
"log-prefix": ""
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"connection-state": "established,related",
|
|
"log": "no",
|
|
"log-prefix": ""
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"connection-state": "invalid",
|
|
"log": "no",
|
|
"log-prefix": ""
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "Allow",
|
|
"connection-nat-state": "dstnat"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "forward",
|
|
"comment": "allow",
|
|
"connection-state": "new",
|
|
"dst-address": "192.168.88.25",
|
|
"dst-port": "6667",
|
|
"log": "no",
|
|
"log-prefix": "",
|
|
"protocol": "tcp"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "defconf:",
|
|
"connection-nat-state": "!dstnat",
|
|
"connection-state": "new",
|
|
"in-interface-list": "WAN",
|
|
"log": "no",
|
|
"log-prefix": ""
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "allow",
|
|
"log": "no",
|
|
"log-prefix": "",
|
|
"protocol": "icmp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "accept",
|
|
"connection-state": "established",
|
|
"log": "no",
|
|
"log-prefix": ""
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "allow",
|
|
"dst-port": "500",
|
|
"protocol": "udp"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "input",
|
|
"comment": "Block",
|
|
"dst-port": "80,443",
|
|
"in-interface-list": "WAN",
|
|
"protocol": "tcp"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "Allow",
|
|
"dst-port": "80,443",
|
|
"in-interface-list": "LAN",
|
|
"protocol": "tcp",
|
|
"src-address": "192.168.88.0/24"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "Openfactory"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "Cloudflare"
|
|
},
|
|
{
|
|
"action": "accept",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "PaloAlto"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "input",
|
|
"comment": "ids",
|
|
"src-address-list": "Blocked"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "forward",
|
|
"comment": "ids",
|
|
"src-address-list": "Blocked"
|
|
},
|
|
{
|
|
"action": "drop",
|
|
"chain": "input",
|
|
"comment": "drop",
|
|
"in-interface": "pppoe-out1",
|
|
"log": "no",
|
|
"log-prefix": ""
|
|
}
|
|
] |