Moved firewall.user rules to /etc/config/firewall.

Limiting ssh connections from wan zone.
opentechinstitute · Apr 18, 2014 · 40f2882 · 40f2882
1 parent 220027a
commit 40f2882
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 15 deletions.
diff --git a/default-files/etc/config/firewall b/default-files/etc/config/firewall
@@ -60,6 +60,17 @@ config forwarding
 config rule
 	option src 'wan'
 	option dest_port '22'
+	option proto 'tcp'
+	option state 'NEW'
+	option limit '3/min'
+	option limit_burst '2'
+	option target 'LOG'
+
+config rule
+	option src 'wan'
+	option dest_port '22'
+	option state 'RELATED'
+	option state 'ESTABLISHED'
 	option target 'ACCEPT'
 	option proto 'tcp'
 

diff --git a/default-files/etc/firewall.user b/default-files/etc/firewall.user