firewall.@defaults[0]=defaults
firewall.@defaults[0].syn_flood='1'
firewall.@defaults[0].input='REJECT'
firewall.@defaults[0].output='REJECT'
firewall.@defaults[0].forward='REJECT'
firewall.@defaults[0].fullcone='0'
firewall.zone_lan=zone
firewall.zone_lan.name='lan'
firewall.zone_lan.input='ACCEPT'
firewall.zone_lan.output='ACCEPT'
firewall.zone_lan.forward='ACCEPT'
firewall.zone_lan.mtu_fix='1'
firewall.zone_lan.network='lan'
firewall.zone_lan.log='1'
firewall.zone_lan.auto_helper='1'
firewall.zone_wan=zone
firewall.zone_wan.name='wan'
firewall.zone_wan.input='REJECT'
firewall.zone_wan.output='ACCEPT'
firewall.zone_wan.forward='REJECT'
firewall.zone_wan.fullcone4='0'
firewall.zone_wan.mtu_fix='1'
firewall.zone_wan.masq='1'
firewall.zone_wan.auto_helper='1'
firewall.zone_wan.network='wan1' 'wan2'
firewall.@forwarding[0]=forwarding
firewall.@forwarding[0].src='lan'
firewall.@forwarding[0].dest='wan'
firewall.@rule[0]=rule
firewall.@rule[0].name='Allow-DHCP-Renew'
firewall.@rule[0].src='wan'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_port='68'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[0].family='ipv4'
firewall.@rule[1]=rule
firewall.@rule[1].name='Allow-Ping'
firewall.@rule[1].src='wan'
firewall.@rule[1].proto='icmp'
firewall.@rule[1].icmp_type='echo-request'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='Allow-IGMP'
firewall.@rule[2].src='wan'
firewall.@rule[2].proto='igmp'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].target='ACCEPT'
firewall.@rule[3]=rule
firewall.@rule[3].name='Allow-DHCPv6'
firewall.@rule[3].src='wan'
firewall.@rule[3].proto='udp'
firewall.@rule[3].dest_port='546'
firewall.@rule[3].family='ipv6'
firewall.@rule[3].target='ACCEPT'
firewall.@rule[4]=rule
firewall.@rule[4].name='Allow-MLD'
firewall.@rule[4].src='wan'
firewall.@rule[4].proto='icmp'
firewall.@rule[4].src_ip='fe80::/10'
firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
firewall.@rule[4].family='ipv6'
firewall.@rule[4].target='ACCEPT'
firewall.@rule[5]=rule
firewall.@rule[5].name='Allow-ICMPv6-Forward'
firewall.@rule[5].src='wan'
firewall.@rule[5].dest='*'
firewall.@rule[5].proto='icmp'
firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
firewall.@rule[5].limit='1000/sec'
firewall.@rule[5].family='ipv6'
firewall.@rule[5].target='ACCEPT'
firewall.@rule[6]=rule
firewall.@rule[6].name='Allow-IPSec-ESP'
firewall.@rule[6].src='wan'
firewall.@rule[6].dest='lan'
firewall.@rule[6].proto='esp'
firewall.@rule[6].target='ACCEPT'
firewall.@rule[7]=rule
firewall.@rule[7].name='Allow-ISAKMP'
firewall.@rule[7].src='wan'
firewall.@rule[7].dest='lan'
firewall.@rule[7].dest_port='500'
firewall.@rule[7].proto='udp'
firewall.@rule[7].target='ACCEPT'
firewall.@rule[8]=rule
firewall.@rule[8].target='ACCEPT'
firewall.@rule[8].name='Allow-All-LAN-to-VPN'
firewall.@rule[8].dest='vpn'
firewall.@rule[8].src='lan'
firewall.@rule[8].proto='all'
firewall.zone_vpn=zone
firewall.zone_vpn.name='vpn'
firewall.zone_vpn.masq='1'
firewall.zone_vpn.input='REJECT'
firewall.zone_vpn.forward='ACCEPT'
firewall.zone_vpn.output='ACCEPT'
firewall.zone_vpn.mtu_fix='1'
firewall.zone_vpn.network='omr6in4' 'omrvpn'
firewall.zone_vpn.auto_helper='1'
firewall.@rule[9]=rule
firewall.@rule[9].target='ACCEPT'
firewall.@rule[9].name='Allow-All-Ping'
firewall.@rule[9].proto='icmp'
firewall.@rule[9].dest='*'
firewall.@rule[9].src='*'
firewall.@rule[9].icmp_type='echo-request'
firewall.@rule[9].limit='1000/sec'
firewall.@rule[10]=rule
firewall.@rule[10].target='ACCEPT'
firewall.@rule[10].name='Allow-VPN-ICMP'
firewall.@rule[10].proto='icmp'
firewall.@rule[10].src='vpn'
firewall.@rule[11]=rule
firewall.@rule[11].target='ACCEPT'
firewall.@rule[11].name='Allow-Lan-to-Wan'
firewall.@rule[11].dest='wan'
firewall.@rule[11].src='lan'
firewall.@rule[11].proto='all'
firewall.@rule[12]=rule
firewall.@rule[12].target='ACCEPT'
firewall.@rule[12].name='ICMPv6-Lan-to-OMR'
firewall.@rule[12].src='lan'
firewall.@rule[12].family='ipv6'
firewall.@rule[12].proto='icmp'
firewall.@rule[12].limit='1000/sec'
firewall.@rule[12].icmp_type='echo-reply destination-unreachable echo-request router-advertisement router-solicitation time-exceeded'
firewall.omr_server=include
firewall.omr_server.path='/etc/firewall.omr-server'
firewall.omr_server.reload='1'
firewall.gre_tunnel=include
firewall.gre_tunnel.path='/etc/firewall.gre-tunnel'
firewall.gre_tunnel.reload='0'
firewall.ttl=include
firewall.ttl.path='/etc/firewall.ttl'
firewall.ttl.reload='1'
firewall.fwlantovpn=forwarding
firewall.fwlantovpn.src='lan'
firewall.fwlantovpn.dest='vpn'
firewall.blockquicproxy=rule
firewall.blockquicproxy.name='Block QUIC Proxy'
firewall.blockquicproxy.proto='udp'
firewall.blockquicproxy.dest_port='443'
firewall.blockquicproxy.target='DROP'
firewall.blockquicproxy.src='lan'
firewall.blockquicproxy.enabled='0'
firewall.blockquicall=rule
firewall.blockquicall.name='Block QUIC All'
firewall.blockquicall.proto='udp'
firewall.blockquicall.src='*'
firewall.blockquicall.dest='*'
firewall.blockquicall.dest_port='443'
firewall.blockquicall.target='DROP'
firewall.blockquicall.enabled='0'
firewall.allowicmpipv6=rule
firewall.allowicmpipv6.proto='icmp'
firewall.allowicmpipv6.target='ACCEPT'
firewall.allowicmpipv6.src='wan'
firewall.allowicmpipv6.name='Allow IPv6 ICMP'
firewall.allowicmpipv6.family='ipv6'
firewall.allowicmpipv6.limit='1000/sec'
firewall.allowicmpipv6.icmp_type='neighbour-advertisement neighbour-solicitation router-advertisement router-solicitation'
firewall.allowdhcpv6546=rule
firewall.allowdhcpv6546.target='ACCEPT'
firewall.allowdhcpv6546.src='wan'
firewall.allowdhcpv6546.proto='udp'
firewall.allowdhcpv6546.dest_port='547'
firewall.allowdhcpv6546.name='Allow DHCPv6 (546-to-547)'
firewall.allowdhcpv6546.family='ipv6'
firewall.allowdhcpv6546.src_port='546'
firewall.allowdhcpv6547=rule
firewall.allowdhcpv6547.target='ACCEPT'
firewall.allowdhcpv6547.src='wan'
firewall.allowdhcpv6547.proto='udp'
firewall.allowdhcpv6547.dest_port='546'
firewall.allowdhcpv6547.name='Allow DHCPv6 (547-to-546)'
firewall.allowdhcpv6547.family='ipv6'
firewall.allowdhcpv6547.src_port='547'
firewall.omr_bypass=include
firewall.omr_bypass.path='/etc/firewall.omr-bypass'
firewall.omr_bypass.reload='0'
firewall.omr_bypass.enabled='1'
firewall.omr_bypass.type='script'
firewall.omr_bypass.fw4_compatible='1'
firewall.omr_dscp_cs0_4=ipset
firewall.omr_dscp_cs0_4.name='omr_dscp_cs0_4'
firewall.omr_dscp_cs0_4.match='dest_ip'
firewall.omr_dscp_rule_cs0_4=rule
firewall.omr_dscp_rule_cs0_4.name='omr_dscp_cs0_4'
firewall.omr_dscp_rule_cs0_4.ipset='omr_dscp_cs0_4'
firewall.omr_dscp_rule_cs0_4.set_dscp='CS0'
firewall.omr_dscp_rule_cs0_4.target='DSCP'
firewall.omr_dscp_rule_cs0_4.src='lan'
firewall.omr_dscp_rule_cs0_4.dest='*'
firewall.omr_dscp_cs1_4=ipset
firewall.omr_dscp_cs1_4.name='omr_dscp_cs1_4'
firewall.omr_dscp_cs1_4.match='dest_ip'
firewall.omr_dscp_rule_cs1_4=rule
firewall.omr_dscp_rule_cs1_4.name='omr_dscp_cs1_4'
firewall.omr_dscp_rule_cs1_4.ipset='omr_dscp_cs1_4'
firewall.omr_dscp_rule_cs1_4.set_dscp='CS1'
firewall.omr_dscp_rule_cs1_4.target='DSCP'
firewall.omr_dscp_rule_cs1_4.src='lan'
firewall.omr_dscp_rule_cs1_4.dest='*'
firewall.omr_dscp_cs2_4=ipset
firewall.omr_dscp_cs2_4.name='omr_dscp_cs2_4'
firewall.omr_dscp_cs2_4.match='dest_ip'
firewall.omr_dscp_rule_cs2_4=rule
firewall.omr_dscp_rule_cs2_4.name='omr_dscp_cs2_4'
firewall.omr_dscp_rule_cs2_4.ipset='omr_dscp_cs2_4'
firewall.omr_dscp_rule_cs2_4.set_dscp='CS2'
firewall.omr_dscp_rule_cs2_4.target='DSCP'
firewall.omr_dscp_rule_cs2_4.src='lan'
firewall.omr_dscp_rule_cs2_4.dest='*'
firewall.omr_dscp_cs3_4=ipset
firewall.omr_dscp_cs3_4.name='omr_dscp_cs3_4'
firewall.omr_dscp_cs3_4.match='dest_ip'
firewall.omr_dscp_rule_cs3_4=rule
firewall.omr_dscp_rule_cs3_4.name='omr_dscp_cs3_4'
firewall.omr_dscp_rule_cs3_4.ipset='omr_dscp_cs3_4'
firewall.omr_dscp_rule_cs3_4.set_dscp='CS3'
firewall.omr_dscp_rule_cs3_4.target='DSCP'
firewall.omr_dscp_rule_cs3_4.src='lan'
firewall.omr_dscp_rule_cs3_4.dest='*'
firewall.omr_dscp_cs4_4=ipset
firewall.omr_dscp_cs4_4.name='omr_dscp_cs4_4'
firewall.omr_dscp_cs4_4.match='dest_ip'
firewall.omr_dscp_rule_cs4_4=rule
firewall.omr_dscp_rule_cs4_4.name='omr_dscp_cs4_4'
firewall.omr_dscp_rule_cs4_4.ipset='omr_dscp_cs4_4'
firewall.omr_dscp_rule_cs4_4.set_dscp='CS4'
firewall.omr_dscp_rule_cs4_4.target='DSCP'
firewall.omr_dscp_rule_cs4_4.src='lan'
firewall.omr_dscp_rule_cs4_4.dest='*'
firewall.omr_dscp_cs5_4=ipset
firewall.omr_dscp_cs5_4.name='omr_dscp_cs5_4'
firewall.omr_dscp_cs5_4.match='dest_ip'
firewall.omr_dscp_rule_cs5_4=rule
firewall.omr_dscp_rule_cs5_4.name='omr_dscp_cs5_4'
firewall.omr_dscp_rule_cs5_4.ipset='omr_dscp_cs5_4'
firewall.omr_dscp_rule_cs5_4.set_dscp='CS5'
firewall.omr_dscp_rule_cs5_4.target='DSCP'
firewall.omr_dscp_rule_cs5_4.src='lan'
firewall.omr_dscp_rule_cs5_4.dest='*'
firewall.omr_dscp_cs6_4=ipset
firewall.omr_dscp_cs6_4.name='omr_dscp_cs6_4'
firewall.omr_dscp_cs6_4.match='dest_ip'
firewall.omr_dscp_rule_cs6_4=rule
firewall.omr_dscp_rule_cs6_4.name='omr_dscp_cs6_4'
firewall.omr_dscp_rule_cs6_4.ipset='omr_dscp_cs6_4'
firewall.omr_dscp_rule_cs6_4.set_dscp='CS6'
firewall.omr_dscp_rule_cs6_4.target='DSCP'
firewall.omr_dscp_rule_cs6_4.src='lan'
firewall.omr_dscp_rule_cs6_4.dest='*'
firewall.omr_dscp_cs7_4=ipset
firewall.omr_dscp_cs7_4.name='omr_dscp_cs7_4'
firewall.omr_dscp_cs7_4.match='dest_ip'
firewall.omr_dscp_rule_cs7_4=rule
firewall.omr_dscp_rule_cs7_4.name='omr_dscp_cs7_4'
firewall.omr_dscp_rule_cs7_4.ipset='omr_dscp_cs7_4'
firewall.omr_dscp_rule_cs7_4.set_dscp='CS7'
firewall.omr_dscp_rule_cs7_4.target='DSCP'
firewall.omr_dscp_rule_cs7_4.src='lan'
firewall.omr_dscp_rule_cs7_4.dest='*'
firewall.omr_dscp_ef_4=ipset
firewall.omr_dscp_ef_4.name='omr_dscp_ef_4'
firewall.omr_dscp_ef_4.match='dest_ip'
firewall.omr_dscp_rule_ef_4=rule
firewall.omr_dscp_rule_ef_4.name='omr_dscp_ef_4'
firewall.omr_dscp_rule_ef_4.ipset='omr_dscp_ef_4'
firewall.omr_dscp_rule_ef_4.set_dscp='EF'
firewall.omr_dscp_rule_ef_4.target='DSCP'
firewall.omr_dscp_rule_ef_4.src='lan'
firewall.omr_dscp_rule_ef_4.dest='*'
firewall.omr_dscp_rule1=rule
firewall.omr_dscp_rule1.name='omr_dscp_rule1'
firewall.omr_dscp_rule1.target='DSCP'
firewall.omr_dscp_rule1.set_dscp='CS7'
firewall.omr_dscp_rule1.src='lan'
firewall.omr_dscp_rule1.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule1.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule1.proto='icmp'
firewall.omr_dscp_rule1.src_port='0-65535'
firewall.omr_dscp_rule1.dest_port='0-65535'
firewall.omr_dscp_rule2=rule
firewall.omr_dscp_rule2.name='omr_dscp_rule2'
firewall.omr_dscp_rule2.target='DSCP'
firewall.omr_dscp_rule2.set_dscp='CS4'
firewall.omr_dscp_rule2.src='lan'
firewall.omr_dscp_rule2.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule2.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule2.proto='udp'
firewall.omr_dscp_rule2.src_port='53 123 5353'
firewall.omr_dscp_rule2.dest_port='0-65535'
firewall.omr_dscp_rule3=rule
firewall.omr_dscp_rule3.name='omr_dscp_rule3'
firewall.omr_dscp_rule3.target='DSCP'
firewall.omr_dscp_rule3.set_dscp='CS4'
firewall.omr_dscp_rule3.src='lan'
firewall.omr_dscp_rule3.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule3.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule3.proto='tcp'
firewall.omr_dscp_rule3.src_port='53 5353'
firewall.omr_dscp_rule3.dest_port='0-65535'
firewall.omr_dscp_rule4=rule
firewall.omr_dscp_rule4.name='omr_dscp_rule4'
firewall.omr_dscp_rule4.target='DSCP'
firewall.omr_dscp_rule4.set_dscp='CS4'
firewall.omr_dscp_rule4.src='lan'
firewall.omr_dscp_rule4.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule4.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule4.proto='tcp'
firewall.omr_dscp_rule4.src_port='0-65535'
firewall.omr_dscp_rule4.dest_port='65500'
firewall.omr_dscp_rule5=rule
firewall.omr_dscp_rule5.name='omr_dscp_rule5'
firewall.omr_dscp_rule5.target='DSCP'
firewall.omr_dscp_rule5.set_dscp='CS7'
firewall.omr_dscp_rule5.src='lan'
firewall.omr_dscp_rule5.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule5.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule5.proto='tcp'
firewall.omr_dscp_rule5.src_port='0-65535'
firewall.omr_dscp_rule5.dest_port='65001 65301 65401 65011'
firewall.omr_dscp_rule6=rule
firewall.omr_dscp_rule6.name='omr_dscp_rule6'
firewall.omr_dscp_rule6.target='DSCP'
firewall.omr_dscp_rule6.set_dscp='CS7'
firewall.omr_dscp_rule6.src='lan'
firewall.omr_dscp_rule6.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule6.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule6.proto='udp'
firewall.omr_dscp_rule6.src_port='0-65535'
firewall.omr_dscp_rule6.dest_port='65001 65301'
firewall.omr_dscp_rule7=rule
firewall.omr_dscp_rule7.name='omr_dscp_rule7'
firewall.omr_dscp_rule7.target='DSCP'
firewall.omr_dscp_rule7.set_dscp='CS6'
firewall.omr_dscp_rule7.src='lan'
firewall.omr_dscp_rule7.src_ip='0.0.0.0/0'
firewall.omr_dscp_rule7.dest_ip='0.0.0.0/0'
firewall.omr_dscp_rule7.proto='tcp'
firewall.omr_dscp_rule7.src_port='0-65535'
firewall.omr_dscp_rule7.dest_port='65101 65228'
firewall.omr_dst_bypass_eth0_4=ipset
firewall.omr_dst_bypass_eth0_4.name='omr_dst_bypass_eth0_4'
firewall.omr_dst_bypass_eth0_4.match='dest_ip'
firewall.omr_dst_bypass_eth0_4.family='ipv4'
firewall.omr_dst_bypass_eth0_4.enabled='1'
firewall.omr_dst_bypass_eth0_6=ipset
firewall.omr_dst_bypass_eth0_6.name='omr_dst_bypass_eth0_6'
firewall.omr_dst_bypass_eth0_6.match='dest_ip'
firewall.omr_dst_bypass_eth0_6.family='ipv6'
firewall.omr_dst_bypass_eth0_6.enabled='1'
firewall.omr_dst_bypass_eth0_dstip_4=rule
firewall.omr_dst_bypass_eth0_dstip_4.name='omr_dst_bypass_eth0_rule'
firewall.omr_dst_bypass_eth0_dstip_4.ipset='omr_dst_bypass_eth0_4'
firewall.omr_dst_bypass_eth0_dstip_4.target='MARK'
firewall.omr_dst_bypass_eth0_dstip_4.src='lan'
firewall.omr_dst_bypass_eth0_dstip_4.dest='*'
firewall.omr_dst_bypass_eth0_dstip_4.family='ipv4'
firewall.omr_dst_bypass_eth0_dstip_4.enabled='0'
firewall.omr_dst_bypass_eth0_dstip_4.set_mark='0x45399999'
firewall.omr_dst_bypass_eth0_dstip_4_accept=rule
firewall.omr_dst_bypass_eth0_dstip_4_accept.name='omr_dst_bypass_eth0_rule_accept'
firewall.omr_dst_bypass_eth0_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_eth0_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_eth0_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_eth0_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_eth0_dstip_4_accept.mark='0x45399999'
firewall.omr_dst_bypass_eth0_srcip_4=rule
firewall.omr_dst_bypass_eth0_srcip_4.name='omr_dst_bypass_eth0_srcip'
firewall.omr_dst_bypass_eth0_srcip_4.ipset='omr_dst_bypass_eth0_4'
firewall.omr_dst_bypass_eth0_srcip_4.src='lan'
firewall.omr_dst_bypass_eth0_srcip_4.dest='*'
firewall.omr_dst_bypass_eth0_srcip_4.family='ipv4'
firewall.omr_dst_bypass_eth0_srcip_4.target='MARK'
firewall.omr_dst_bypass_eth0_srcip_4.enabled='0'
firewall.omr_dst_bypass_eth0_srcip_4.set_xmark='0x45399999'
firewall.omr_dst_bypass_eth0_mac_4=rule
firewall.omr_dst_bypass_eth0_mac_4.name='omr_dst_bypass_eth0_mac'
firewall.omr_dst_bypass_eth0_mac_4.src='lan'
firewall.omr_dst_bypass_eth0_mac_4.dest='*'
firewall.omr_dst_bypass_eth0_mac_4.target='MARK'
firewall.omr_dst_bypass_eth0_mac_4.enabled='0'
firewall.omr_dst_bypass_eth0_mac_4.set_xmark='0x45399999'
firewall.omr_dst_bypass_eth0_srcport_tcp_4=rule
firewall.omr_dst_bypass_eth0_srcport_tcp_4.name='omr_dst_bypass_eth0_srcport'
firewall.omr_dst_bypass_eth0_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_eth0_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_eth0_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_eth0_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_eth0_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_eth0_srcport_tcp_4.set_xmark='0x45399999'
firewall.omr_dst_bypass_eth0_srcport_udp_4=rule
firewall.omr_dst_bypass_eth0_srcport_udp_4.name='omr_dst_bypass_eth0_srcport'
firewall.omr_dst_bypass_eth0_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_eth0_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_eth0_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_eth0_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_eth0_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_eth0_srcport_udp_4.set_xmark='0x45399999'
firewall.omr_dst_bypass_eth0_dstport_tcp_4=rule
firewall.omr_dst_bypass_eth0_dstport_tcp_4.name='omr_dst_bypass_eth0_dstport'
firewall.omr_dst_bypass_eth0_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_eth0_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_eth0_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_eth0_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_eth0_dstport_tcp_4.set_xmark='0x45399999'
firewall.omr_dst_bypass_eth0_dstport_udp_4=rule
firewall.omr_dst_bypass_eth0_dstport_udp_4.name='omr_dst_bypass_eth0_dstport'
firewall.omr_dst_bypass_eth0_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_eth0_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_eth0_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_eth0_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_eth0_dstport_udp_4.set_xmark='0x45399999'
firewall.omr_dst_bypass_wan1_4=ipset
firewall.omr_dst_bypass_wan1_4.name='omr_dst_bypass_wan1_4'
firewall.omr_dst_bypass_wan1_4.match='dest_ip'
firewall.omr_dst_bypass_wan1_4.family='ipv4'
firewall.omr_dst_bypass_wan1_4.enabled='1'
firewall.omr_dst_bypass_wan1_6=ipset
firewall.omr_dst_bypass_wan1_6.name='omr_dst_bypass_wan1_6'
firewall.omr_dst_bypass_wan1_6.match='dest_ip'
firewall.omr_dst_bypass_wan1_6.family='ipv6'
firewall.omr_dst_bypass_wan1_6.enabled='1'
firewall.omr_dst_bypass_wan1_dstip_4=rule
firewall.omr_dst_bypass_wan1_dstip_4.name='omr_dst_bypass_wan1_rule'
firewall.omr_dst_bypass_wan1_dstip_4.ipset='omr_dst_bypass_wan1_4'
firewall.omr_dst_bypass_wan1_dstip_4.target='MARK'
firewall.omr_dst_bypass_wan1_dstip_4.src='lan'
firewall.omr_dst_bypass_wan1_dstip_4.dest='*'
firewall.omr_dst_bypass_wan1_dstip_4.family='ipv4'
firewall.omr_dst_bypass_wan1_dstip_4.enabled='0'
firewall.omr_dst_bypass_wan1_dstip_4.set_mark='0x45398'
firewall.omr_dst_bypass_wan1_dstip_4_accept=rule
firewall.omr_dst_bypass_wan1_dstip_4_accept.name='omr_dst_bypass_wan1_rule_accept'
firewall.omr_dst_bypass_wan1_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_wan1_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_wan1_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_wan1_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_wan1_dstip_4_accept.mark='0x45398'
firewall.omr_dst_bypass_wan1_srcip_4=rule
firewall.omr_dst_bypass_wan1_srcip_4.name='omr_dst_bypass_wan1_srcip'
firewall.omr_dst_bypass_wan1_srcip_4.ipset='omr_dst_bypass_wan1_4'
firewall.omr_dst_bypass_wan1_srcip_4.src='lan'
firewall.omr_dst_bypass_wan1_srcip_4.dest='*'
firewall.omr_dst_bypass_wan1_srcip_4.family='ipv4'
firewall.omr_dst_bypass_wan1_srcip_4.target='MARK'
firewall.omr_dst_bypass_wan1_srcip_4.enabled='0'
firewall.omr_dst_bypass_wan1_srcip_4.set_xmark='0x45398'
firewall.omr_dst_bypass_wan1_mac_4=rule
firewall.omr_dst_bypass_wan1_mac_4.name='omr_dst_bypass_wan1_mac'
firewall.omr_dst_bypass_wan1_mac_4.src='lan'
firewall.omr_dst_bypass_wan1_mac_4.dest='*'
firewall.omr_dst_bypass_wan1_mac_4.target='MARK'
firewall.omr_dst_bypass_wan1_mac_4.enabled='0'
firewall.omr_dst_bypass_wan1_mac_4.set_xmark='0x45398'
firewall.omr_dst_bypass_wan1_srcport_tcp_4=rule
firewall.omr_dst_bypass_wan1_srcport_tcp_4.name='omr_dst_bypass_wan1_srcport'
firewall.omr_dst_bypass_wan1_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_wan1_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_wan1_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_wan1_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_wan1_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_wan1_srcport_tcp_4.set_xmark='0x45398'
firewall.omr_dst_bypass_wan1_srcport_udp_4=rule
firewall.omr_dst_bypass_wan1_srcport_udp_4.name='omr_dst_bypass_wan1_srcport'
firewall.omr_dst_bypass_wan1_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_wan1_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_wan1_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_wan1_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_wan1_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_wan1_srcport_udp_4.set_xmark='0x45398'
firewall.omr_dst_bypass_wan1_dstport_tcp_4=rule
firewall.omr_dst_bypass_wan1_dstport_tcp_4.name='omr_dst_bypass_wan1_dstport'
firewall.omr_dst_bypass_wan1_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_wan1_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_wan1_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_wan1_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_wan1_dstport_tcp_4.set_xmark='0x45398'
firewall.omr_dst_bypass_wan1_dstport_udp_4=rule
firewall.omr_dst_bypass_wan1_dstport_udp_4.name='omr_dst_bypass_wan1_dstport'
firewall.omr_dst_bypass_wan1_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_wan1_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_wan1_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_wan1_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_wan1_dstport_udp_4.set_xmark='0x45398'
firewall.omr_dst_bypass_wan2_4=ipset
firewall.omr_dst_bypass_wan2_4.name='omr_dst_bypass_wan2_4'
firewall.omr_dst_bypass_wan2_4.match='dest_ip'
firewall.omr_dst_bypass_wan2_4.family='ipv4'
firewall.omr_dst_bypass_wan2_4.enabled='1'
firewall.omr_dst_bypass_wan2_6=ipset
firewall.omr_dst_bypass_wan2_6.name='omr_dst_bypass_wan2_6'
firewall.omr_dst_bypass_wan2_6.match='dest_ip'
firewall.omr_dst_bypass_wan2_6.family='ipv6'
firewall.omr_dst_bypass_wan2_6.enabled='1'
firewall.omr_dst_bypass_wan2_dstip_4=rule
firewall.omr_dst_bypass_wan2_dstip_4.name='omr_dst_bypass_wan2_rule'
firewall.omr_dst_bypass_wan2_dstip_4.ipset='omr_dst_bypass_wan2_4'
firewall.omr_dst_bypass_wan2_dstip_4.target='MARK'
firewall.omr_dst_bypass_wan2_dstip_4.src='lan'
firewall.omr_dst_bypass_wan2_dstip_4.dest='*'
firewall.omr_dst_bypass_wan2_dstip_4.family='ipv4'
firewall.omr_dst_bypass_wan2_dstip_4.enabled='0'
firewall.omr_dst_bypass_wan2_dstip_4.set_mark='0x45399'
firewall.omr_dst_bypass_wan2_dstip_4_accept=rule
firewall.omr_dst_bypass_wan2_dstip_4_accept.name='omr_dst_bypass_wan2_rule_accept'
firewall.omr_dst_bypass_wan2_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_wan2_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_wan2_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_wan2_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_wan2_dstip_4_accept.mark='0x45399'
firewall.omr_dst_bypass_wan2_srcip_4=rule
firewall.omr_dst_bypass_wan2_srcip_4.name='omr_dst_bypass_wan2_srcip'
firewall.omr_dst_bypass_wan2_srcip_4.ipset='omr_dst_bypass_wan2_4'
firewall.omr_dst_bypass_wan2_srcip_4.src='lan'
firewall.omr_dst_bypass_wan2_srcip_4.dest='*'
firewall.omr_dst_bypass_wan2_srcip_4.family='ipv4'
firewall.omr_dst_bypass_wan2_srcip_4.target='MARK'
firewall.omr_dst_bypass_wan2_srcip_4.enabled='0'
firewall.omr_dst_bypass_wan2_srcip_4.set_xmark='0x45399'
firewall.omr_dst_bypass_wan2_mac_4=rule
firewall.omr_dst_bypass_wan2_mac_4.name='omr_dst_bypass_wan2_mac'
firewall.omr_dst_bypass_wan2_mac_4.src='lan'
firewall.omr_dst_bypass_wan2_mac_4.dest='*'
firewall.omr_dst_bypass_wan2_mac_4.target='MARK'
firewall.omr_dst_bypass_wan2_mac_4.enabled='1'
firewall.omr_dst_bypass_wan2_mac_4.set_xmark='0x45399'
firewall.omr_dst_bypass_wan2_mac_4.src_mac='**redacted**'
firewall.omr_dst_bypass_wan2_srcport_tcp_4=rule
firewall.omr_dst_bypass_wan2_srcport_tcp_4.name='omr_dst_bypass_wan2_srcport'
firewall.omr_dst_bypass_wan2_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_wan2_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_wan2_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_wan2_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_wan2_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_wan2_srcport_tcp_4.set_xmark='0x45399'
firewall.omr_dst_bypass_wan2_srcport_udp_4=rule
firewall.omr_dst_bypass_wan2_srcport_udp_4.name='omr_dst_bypass_wan2_srcport'
firewall.omr_dst_bypass_wan2_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_wan2_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_wan2_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_wan2_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_wan2_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_wan2_srcport_udp_4.set_xmark='0x45399'
firewall.omr_dst_bypass_wan2_dstport_tcp_4=rule
firewall.omr_dst_bypass_wan2_dstport_tcp_4.name='omr_dst_bypass_wan2_dstport'
firewall.omr_dst_bypass_wan2_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_wan2_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_wan2_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_wan2_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_wan2_dstport_tcp_4.set_xmark='0x45399'
firewall.omr_dst_bypass_wan2_dstport_udp_4=rule
firewall.omr_dst_bypass_wan2_dstport_udp_4.name='omr_dst_bypass_wan2_dstport'
firewall.omr_dst_bypass_wan2_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_wan2_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_wan2_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_wan2_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_wan2_dstport_udp_4.set_xmark='0x45399'
firewall.omr_dst_bypass_tun0_4=ipset
firewall.omr_dst_bypass_tun0_4.name='omr_dst_bypass_tun0_4'
firewall.omr_dst_bypass_tun0_4.match='dest_ip'
firewall.omr_dst_bypass_tun0_4.family='ipv4'
firewall.omr_dst_bypass_tun0_4.enabled='1'
firewall.omr_dst_bypass_tun0_6=ipset
firewall.omr_dst_bypass_tun0_6.name='omr_dst_bypass_tun0_6'
firewall.omr_dst_bypass_tun0_6.match='dest_ip'
firewall.omr_dst_bypass_tun0_6.family='ipv6'
firewall.omr_dst_bypass_tun0_6.enabled='1'
firewall.omr_dst_bypass_tun0_dstip_4=rule
firewall.omr_dst_bypass_tun0_dstip_4.name='omr_dst_bypass_tun0_rule'
firewall.omr_dst_bypass_tun0_dstip_4.ipset='omr_dst_bypass_tun0_4'
firewall.omr_dst_bypass_tun0_dstip_4.target='MARK'
firewall.omr_dst_bypass_tun0_dstip_4.src='lan'
firewall.omr_dst_bypass_tun0_dstip_4.dest='*'
firewall.omr_dst_bypass_tun0_dstip_4.family='ipv4'
firewall.omr_dst_bypass_tun0_dstip_4.enabled='0'
firewall.omr_dst_bypass_tun0_dstip_4.set_mark='0x45391500'
firewall.omr_dst_bypass_tun0_dstip_4_accept=rule
firewall.omr_dst_bypass_tun0_dstip_4_accept.name='omr_dst_bypass_tun0_rule_accept'
firewall.omr_dst_bypass_tun0_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_tun0_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_tun0_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_tun0_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_tun0_dstip_4_accept.mark='0x45391500'
firewall.omr_dst_bypass_tun0_srcip_4=rule
firewall.omr_dst_bypass_tun0_srcip_4.name='omr_dst_bypass_tun0_srcip'
firewall.omr_dst_bypass_tun0_srcip_4.ipset='omr_dst_bypass_tun0_4'
firewall.omr_dst_bypass_tun0_srcip_4.src='lan'
firewall.omr_dst_bypass_tun0_srcip_4.dest='*'
firewall.omr_dst_bypass_tun0_srcip_4.family='ipv4'
firewall.omr_dst_bypass_tun0_srcip_4.target='MARK'
firewall.omr_dst_bypass_tun0_srcip_4.enabled='0'
firewall.omr_dst_bypass_tun0_srcip_4.set_xmark='0x45391500'
firewall.omr_dst_bypass_tun0_mac_4=rule
firewall.omr_dst_bypass_tun0_mac_4.name='omr_dst_bypass_tun0_mac'
firewall.omr_dst_bypass_tun0_mac_4.src='lan'
firewall.omr_dst_bypass_tun0_mac_4.dest='*'
firewall.omr_dst_bypass_tun0_mac_4.target='MARK'
firewall.omr_dst_bypass_tun0_mac_4.enabled='0'
firewall.omr_dst_bypass_tun0_mac_4.set_xmark='0x45391500'
firewall.omr_dst_bypass_tun0_srcport_tcp_4=rule
firewall.omr_dst_bypass_tun0_srcport_tcp_4.name='omr_dst_bypass_tun0_srcport'
firewall.omr_dst_bypass_tun0_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_tun0_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_tun0_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_tun0_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_tun0_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_tun0_srcport_tcp_4.set_xmark='0x45391500'
firewall.omr_dst_bypass_tun0_srcport_udp_4=rule
firewall.omr_dst_bypass_tun0_srcport_udp_4.name='omr_dst_bypass_tun0_srcport'
firewall.omr_dst_bypass_tun0_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_tun0_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_tun0_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_tun0_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_tun0_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_tun0_srcport_udp_4.set_xmark='0x45391500'
firewall.omr_dst_bypass_tun0_dstport_tcp_4=rule
firewall.omr_dst_bypass_tun0_dstport_tcp_4.name='omr_dst_bypass_tun0_dstport'
firewall.omr_dst_bypass_tun0_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_tun0_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_tun0_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_tun0_dstport_tcp_4.enabled='0'
firewall.omr_dst_bypass_tun0_dstport_tcp_4.set_xmark='0x45391500'
firewall.omr_dst_bypass_tun0_dstport_udp_4=rule
firewall.omr_dst_bypass_tun0_dstport_udp_4.name='omr_dst_bypass_tun0_dstport'
firewall.omr_dst_bypass_tun0_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_tun0_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_tun0_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_tun0_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_tun0_dstport_udp_4.set_xmark='0x45391500'
firewall.omr_dst_bypass_all_4=ipset
firewall.omr_dst_bypass_all_4.name='omr_dst_bypass_all_4'
firewall.omr_dst_bypass_all_4.match='dest_ip'
firewall.omr_dst_bypass_all_4.family='ipv4'
firewall.omr_dst_bypass_all_4.enabled='1'
firewall.omr_dst_bypass_all_4.entry='199.232.192.193' '199.232.196.193' '104.18.29.7' '104.18.28.7' '217.160.0.152' '173.222.14.62' '23.53.173.12' '90.216.128.5'
firewall.omr_dst_bypass_all_6=ipset
firewall.omr_dst_bypass_all_6.name='omr_dst_bypass_all_6'
firewall.omr_dst_bypass_all_6.match='dest_ip'
firewall.omr_dst_bypass_all_6.family='ipv6'
firewall.omr_dst_bypass_all_6.enabled='1'
firewall.omr_dst_bypass_all_dstip_4=rule
firewall.omr_dst_bypass_all_dstip_4.name='omr_dst_bypass_all_rule'
firewall.omr_dst_bypass_all_dstip_4.ipset='omr_dst_bypass_all_4'
firewall.omr_dst_bypass_all_dstip_4.target='MARK'
firewall.omr_dst_bypass_all_dstip_4.src='lan'
firewall.omr_dst_bypass_all_dstip_4.dest='*'
firewall.omr_dst_bypass_all_dstip_4.family='ipv4'
firewall.omr_dst_bypass_all_dstip_4.enabled='1'
firewall.omr_dst_bypass_all_dstip_4.set_mark='0x4539'
firewall.omr_dst_bypass_all_dstip_4_accept=rule
firewall.omr_dst_bypass_all_dstip_4_accept.name='omr_dst_bypass_all_rule_accept'
firewall.omr_dst_bypass_all_dstip_4_accept.target='ACCEPT'
firewall.omr_dst_bypass_all_dstip_4_accept.dest='*'
firewall.omr_dst_bypass_all_dstip_4_accept.family='ipv4'
firewall.omr_dst_bypass_all_dstip_4_accept.enabled='0'
firewall.omr_dst_bypass_all_dstip_4_accept.mark='0x4539'
firewall.omr_dst_bypass_all_srcip_4=rule
firewall.omr_dst_bypass_all_srcip_4.name='omr_dst_bypass_all_srcip'
firewall.omr_dst_bypass_all_srcip_4.ipset='omr_dst_bypass_all_4'
firewall.omr_dst_bypass_all_srcip_4.src='lan'
firewall.omr_dst_bypass_all_srcip_4.dest='*'
firewall.omr_dst_bypass_all_srcip_4.family='ipv4'
firewall.omr_dst_bypass_all_srcip_4.target='MARK'
firewall.omr_dst_bypass_all_srcip_4.enabled='0'
firewall.omr_dst_bypass_all_srcip_4.set_xmark='0x4539'
firewall.omr_dst_bypass_all_mac_4=rule
firewall.omr_dst_bypass_all_mac_4.name='omr_dst_bypass_all_mac'
firewall.omr_dst_bypass_all_mac_4.src='lan'
firewall.omr_dst_bypass_all_mac_4.dest='*'
firewall.omr_dst_bypass_all_mac_4.target='MARK'
firewall.omr_dst_bypass_all_mac_4.enabled='0'
firewall.omr_dst_bypass_all_mac_4.set_xmark='0x4539'
firewall.omr_dst_bypass_all_srcport_tcp_4=rule
firewall.omr_dst_bypass_all_srcport_tcp_4.name='omr_dst_bypass_all_srcport'
firewall.omr_dst_bypass_all_srcport_tcp_4.proto='tcp'
firewall.omr_dst_bypass_all_srcport_tcp_4.src='lan'
firewall.omr_dst_bypass_all_srcport_tcp_4.dest='*'
firewall.omr_dst_bypass_all_srcport_tcp_4.target='MARK'
firewall.omr_dst_bypass_all_srcport_tcp_4.enabled='0'
firewall.omr_dst_bypass_all_srcport_tcp_4.set_xmark='0x4539'
firewall.omr_dst_bypass_all_srcport_udp_4=rule
firewall.omr_dst_bypass_all_srcport_udp_4.name='omr_dst_bypass_all_srcport'
firewall.omr_dst_bypass_all_srcport_udp_4.proto='udp'
firewall.omr_dst_bypass_all_srcport_udp_4.src='lan'
firewall.omr_dst_bypass_all_srcport_udp_4.dest='*'
firewall.omr_dst_bypass_all_srcport_udp_4.target='MARK'
firewall.omr_dst_bypass_all_srcport_udp_4.enabled='0'
firewall.omr_dst_bypass_all_srcport_udp_4.set_xmark='0x4539'
firewall.omr_dst_bypass_all_dstport_tcp_4=rule
firewall.omr_dst_bypass_all_dstport_tcp_4.name='omr_dst_bypass_all_dstport'
firewall.omr_dst_bypass_all_dstport_tcp_4.src='lan'
firewall.omr_dst_bypass_all_dstport_tcp_4.dest='*'
firewall.omr_dst_bypass_all_dstport_tcp_4.target='MARK'
firewall.omr_dst_bypass_all_dstport_tcp_4.enabled='1'
firewall.omr_dst_bypass_all_dstport_tcp_4.set_xmark='0x4539'
firewall.omr_dst_bypass_all_dstport_tcp_4.dest_port='22'
firewall.omr_dst_bypass_all_dstport_udp_4=rule
firewall.omr_dst_bypass_all_dstport_udp_4.name='omr_dst_bypass_all_dstport'
firewall.omr_dst_bypass_all_dstport_udp_4.src='lan'
firewall.omr_dst_bypass_all_dstport_udp_4.dest='*'
firewall.omr_dst_bypass_all_dstport_udp_4.target='MARK'
firewall.omr_dst_bypass_all_dstport_udp_4.enabled='0'
firewall.omr_dst_bypass_all_dstport_udp_4.set_xmark='0x4539'