mirror of
https://github.com/openwrt/packages.git
synced 2025-02-07 05:49:50 +00:00
53e9a3296a
* Change KEY/HMAC_KEY to __CHANGEME__, which is rejected by fwknopd during start-up. The value CHANGEME is used only by LuCI package luci-app-fwknopd - pull request for generating keys directly from LuCI has been created already. * Add sensible defaults for ENABLE_IPT_FORWARDING and ENABLE_NAT_DNS, which both are/were set by luci-app-fwknopd. Move the defaults here. Signed-off-by: Oldřich Jedlička <oldium.pro@gmail.com>
26 lines
805 B
Plaintext
26 lines
805 B
Plaintext
config global
|
|
# option uci_enabled '1'
|
|
|
|
config network
|
|
# Logical network dependency, fully tracked, fwknopd gets restarted when
|
|
# necessary. Specifying network takes precedence over config.PCAP_INTF
|
|
# option network 'wan'
|
|
|
|
config access
|
|
option SOURCE 'ANY'
|
|
option HMAC_KEY '__CHANGEME__'
|
|
option KEY '__CHANGEME__'
|
|
|
|
config config
|
|
# Alternative direct physical interface definition, but untracked - you
|
|
# are on your own to correctly start/stop the service when needed
|
|
# option PCAP_INTF 'eth0'
|
|
|
|
# Allow SPA clients to request access to services through an iptables
|
|
# firewall instead of just to it (i.e. access through the FWKNOP_FORWARD
|
|
# chain instead of the INPUT chain
|
|
option ENABLE_IPT_FORWARDING 'Y'
|
|
|
|
# Allow fwknopd to resolve hostnames in NAT access messages
|
|
option ENABLE_NAT_DNS 'Y'
|