Modification de OpenWrt Zone Guest

Firewall pour zone guest

voir: openwrt guest wifi

Si politique de rejet sur input de la zone guest

config zone
	option name 'GUEST'
	option input 'REJECT
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'GUESTLAN'

config rule
	option name 'GUEST DHCP AND DNS IPV4'
	option src 'GUEST'
	option dest_port '53 67 68'
	option target 'ACCEPT'
	option family 'ipv4'

config rule
	option name 'GUEST DhcpIPV6'
	option family 'ipv6'
	list proto 'udp'
	option src 'GUEST'
	option dest_port '547'
	option target 'ACCEPT'

config rule
	option name 'GUEST ICMP IPV6'
	list proto 'icmp'
	option src 'GUEST'
	option target 'ACCEPT'
	option family 'ipv6'