Voir la source de Modification de OpenWrt Zone Guest

'''Firewall pour zone guest'''

voir: [Https://openwrt.org/docs/guide-user/network/wifi/guestwifi/extras openwrt guest wifi]

Si politique de rejet sur input de la zone guest
<pre>
config zone
	option name 'GUEST'
	option input 'REJECT
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'GUESTLAN'

config rule
	option name 'GUEST DHCP AND DNS IPV4'
	option src 'GUEST'
	option dest_port '53 67 68'
	option target 'ACCEPT'
	option family 'ipv4'

config rule
	option name 'GUEST DhcpIPV6'
	option family 'ipv6'
	list proto 'udp'
	option src 'GUEST'
	option dest_port '547'
	option target 'ACCEPT'

config rule
	option name 'GUEST ICMP IPV6'
	list proto 'icmp'
	option src 'GUEST'
	option target 'ACCEPT'
	option family 'ipv6'
</pre>

[[Catégorie:OpenWrt Firewall]]