
config 'defaults'
	option 'syn_flood' '1'
	option 'forward' 'REJECT'
	option 'input' 'REJECT'
	option 'output' 'REJECT'

config 'zone' 'zone_wan'
	option 'name' 'wan'
	option 'input' 'REJECT'
	option 'output' 'ACCEPT'
	option 'forward' 'REJECT'
	option 'masq' '1'

config 'forwarding'
	option 'src' 'local'
	option 'dest' 'wan'
	option 'mtu_fix' '1'

config 'rule'
	option 'src' 'wan'
	option 'proto' 'udp'
	option 'dest_port' '68'
	option 'target' 'ACCEPT'

config 'include'
	option 'path' '/etc/firewall.opennet'

config 'zone' 'zone_opennet'
	option 'name' 'opennet'
	option 'input' 'ACCEPT'
	option 'output' 'ACCEPT'
	option 'forward' 'REJECT'
	option 'network' 'on_eth on_wifi_0'

config 'zone' 'zone_local'
	option 'name' 'local'
	option 'network' 'lan wifi'
	option 'input' 'ACCEPT'
	option 'output' 'ACCEPT'
	option 'forward' 'REJECT'

config 'zone' 'zone_on_free'
	option 'name' 'on_free'
	option 'network' 'on_free'
	option 'forward' 'REJECT'
	option 'input' 'ACCEPT'
	option 'output' 'ACCEPT'

config 'forwarding'
	option 'src' 'local'
	option 'dest' 'opennet'

config 'forwarding'
	option 'src' 'local'
	option 'dest' 'on_free'

config 'forwarding'
	option 'src' 'on_free'
	option 'dest' 'opennet'

config 'forwarding'
	option 'src' 'opennet'
	option 'dest' 'opennet'

