🎁 Sync 2026-09-30 10:14:19

firewall/files/firewall.config

@@ -1,10 +1,9 @@
 config defaults
 	option synflood_protect	1
-	option input		REJECT
+	option input		ACCEPT
 	option output		ACCEPT
 	option forward		REJECT
-	option flow_offloading	1
-	option fullcone		1
+	option fullcone		0
 # Uncomment this line to disable ipv6 rules
 #	option disable_ipv6	1
 
@@ -56,12 +55,13 @@ config rule
 	option target		ACCEPT
 
 # Allow DHCPv6 replies
-# see https://github.com/openwrt/openwrt/issues/5066
+# see https://dev.openwrt.org/ticket/10381
 config rule
 	option name		Allow-DHCPv6
 	option src		wan
 	option proto		udp
-	option dest_ip		fe80::/10
+	option src_ip		fc00::/6
+	option dest_ip		fc00::/6
 	option dest_port	546
 	option family		ipv6
 	option target		ACCEPT
@@ -82,7 +82,7 @@ config rule
 config rule
 	option name		Allow-ICMPv6-Input
 	option src		wan
-	option proto	icmp
+	option proto		icmp
 	list icmp_type		echo-request
 	list icmp_type		echo-reply
 	list icmp_type		destination-unreachable
@@ -141,7 +141,7 @@ config rule
 	option proto		udp
 	option family		ipv4
 	option target		REJECT
-	option enabled		0
+	option enabled		false
 
 # include a file with users custom iptables rules
 config include