1 Odpowiedź przez hiuman

(5 odpowiedzi, napisanych Oprogramowanie / Software)

Zrobiłem to w ten sposób. Dodałem skrypt

#!/bin/sh

LED_WHITE="/sys/class/leds/pca963x:rango:white:wan"
LED_AMBER="/sys/class/leds/pca963x:rango:amber:wan"

# Sprawdzenie internetu
if /bin/ping -c 1 -W 2 8.8.8.8 > /dev/null 2>&1; then
    # JEST INTERNET:
    # 1. Wyłącz czerwoną diodę awarii
    echo none > "$LED_AMBER/trigger"
    echo 0 > "$LED_AMBER/brightness"
    
    # 2. Przywróć systemowe miganie białej diody (netdev)
    echo netdev > "$LED_WHITE/trigger"
    echo wan > "$LED_WHITE/device_name"
    # Włączamy monitorowanie połączenia oraz transmisji danych (TX/RX)
    echo 1 > "$LED_WHITE/link"
    echo 1 > "$LED_WHITE/tx"
    echo 1 > "$LED_WHITE/rx"
else
    # BRAK INTERNETU:
    # 1. Wyłącz całkowicie białą diodę
    echo none > "$LED_WHITE/trigger"
    echo 0 > "$LED_WHITE/brightness"
    
    # 2. Zapal czerwoną diodę awarii na stałe
    echo none > "$LED_AMBER/trigger"
    echo 255 > "$LED_AMBER/brightness"
fi

i wyłączyłem wyzwalacz dla wan w luci. Dodałem to do crona żeby co minutę sprawdzał.Po odłączeniu kabla internet w ciągu minuty zapala się czerwona dioda.

Idź do forum: Oprogramowanie / Software

2 Odpowiedź przez hiuman

(5 odpowiedzi, napisanych Oprogramowanie / Software)

Możesz podpowiedzieć dokładnie jak to zrobić. Proszę

Idź do forum: Oprogramowanie / Software

3 Temat przez hiuman

(5 odpowiedzi, napisanych Oprogramowanie / Software)

Witam. W jaki sposób przypisać czerwoną diodę do działania przy braku internetu w Linksys WRT3200ACM OpenWrt 24.10?

config led 'led_wan'
    option name 'WAN'
    option sysfs 'pca963x:rango:white:wan'
    option trigger 'netdev'
    option mode 'link tx rx'
    option dev 'wan'

config led 'led_usb1'
    option name 'USB 1'
    option sysfs 'pca963x:rango:white:usb2'
    option trigger 'usbport'
    list port 'usb1-port1'

config led 'led_usb2'
    option name 'USB 2'
    option sysfs 'pca963x:rango:white:usb3_1'
    option trigger 'usbport'
    list port 'usb2-port1'
    list port 'usb3-port1'

config led 'led_usb2_ss'
    option name 'USB 2 SS'
    option sysfs 'pca963x:rango:white:usb3_2'
    option trigger 'usbport'
    list port 'usb3-port1'

config led
    option name 'Zasilanie'
    option sysfs 'rango:white:power'
    option trigger 'default-on'

Idź do forum: Oprogramowanie / Software

4 Odpowiedź przez hiuman

(21 odpowiedzi, napisanych Oprogramowanie / Software)

Dziękuję za pomoc i wyjaśnienie.

Idź do forum: Oprogramowanie / Software

5 Odpowiedź przez hiuman

(21 odpowiedzi, napisanych Oprogramowanie / Software)

Tak z ciekawości co to jest ARP?

Idź do forum: Oprogramowanie / Software

6 Odpowiedź przez hiuman

(21 odpowiedzi, napisanych Oprogramowanie / Software)

Faktycznie. Nie wiem czemu mi na początku pokazywało że victus jest na innym mac. Teraz już nie puszcza neta. Jak usunąć z pamięci stare adresy mac (Źródłowy adres MAC) bo mam tam dwa inne adresy ?

Idź do forum: Oprogramowanie / Software

7 Odpowiedź przez hiuman

(21 odpowiedzi, napisanych Oprogramowanie / Software)

 
root@OpenWrt:~# /etc/init.d/firewall restart
Section @rule[10] (E.Lap) is disabled, ignoring section
Section @rule[11] (E.t) is disabled, ignoring section
Section @rule[14] (E.tel) is disabled, ignoring section
Section @rule[15] (T.lap) is disabled, ignoring section
Section @rule[16] (T.tel) is disabled, ignoring section
Automatically including '/usr/share/nftables.d/ruleset-post/30-pbr.nft'
Automatically including '/usr/share/nftables.d/table-post/30-pbr.nft'
Automatically including '/usr/share/nftables.d/chain-pre/dstnat/30-pbr.nft'
Automatically including '/usr/share/nftables.d/chain-post/mangle_forward/30-pbr.nft'
Automatically including '/usr/share/nftables.d/chain-post/mangle_input/30-pbr.nft'
Automatically including '/usr/share/nftables.d/chain-post/mangle_output/30-pbr.nft'
Automatically including '/usr/share/nftables.d/chain-post/mangle_postrouting/30-pbr.nft'
Automatically including '/usr/share/nftables.d/chain-post/mangle_prerouting/30-pbr.nft'
root@OpenWrt:~#
 config rule
    option src 'lan'
    option dest 'wan'
    option target 'REJECT'
    option name 'vic'
    option start_time '20:00:00'
    option stop_time '23:00:00'
    option src_mac '29:B8:D9:27:A8:B1'
    list proto 'all'

Oczywiście net jest w dalszym ciągu.

Idź do forum: Oprogramowanie / Software

8 Odpowiedź przez hiuman

(21 odpowiedzi, napisanych Oprogramowanie / Software)

Dalej jest internet dla 

 config rule
    option src 'lan'
    option dest 'wan'
    option target 'REJECT'
    option name 'vic'
    option start_time '20:59:00'
    option stop_time '21:04:00'
    list proto 'all'
    list src_mac '29:B8:D9:27:A8:B1'

Idź do forum: Oprogramowanie / Software

9 Odpowiedź przez hiuman

(21 odpowiedzi, napisanych Oprogramowanie / Software)

root@OpenWrt:~# date
Mon Aug 25 20:49:21 CEST 2025
root@OpenWrt:~# /etc/init.d/firewall restart
Section @rule[10] (E.Lap) specifies unknown option 'ac_enabled'
Section @rule[10] (E.Lap) is disabled, ignoring section
Section @rule[11] (E.t) specifies unknown option 'ac_enabled'
Section @rule[11] (E.t) is disabled, ignoring section
Section @rule[12] (T.t) specifies unknown option 'ac_enabled'
Section @rule[13] (T.lap) specifies unknown option 'ac_enabled'
Section @rule[14] (E.tel) specifies unknown option 'ac_enabled'
Section @rule[14] (E.tel) is disabled, ignoring section
Section @rule[15] (T.lap) specifies unknown option 'ac_enabled'
Section @rule[15] (T.lap) is disabled, ignoring section
Section @rule[16] (T.tel) specifies unknown option 'ac_enabled'
Section @rule[16] (T.tel) is disabled, ignoring section
Section @rule[18] (tom.lap) specifies unknown option 'ac_enabled'
Section @rule[19] (tom.moto) specifies unknown option 'ac_enabled'
Automatically including '/usr/share/nftables.d/ruleset-post/30-pbr.nft'
Automatically including '/usr/share/nftables.d/table-post/30-pbr.nft'
Automatically including '/usr/share/nftables.d/chain-pre/dstnat/30-pbr.nft'
Automatically including '/usr/share/nftables.d/chain-post/mangle_forward/30-pbr.nft'
Automatically including '/usr/share/nftables.d/chain-post/mangle_input/30-pbr.nft'
Automatically including '/usr/share/nftables.d/chain-post/mangle_output/30-pbr.nft'
Automatically including '/usr/share/nftables.d/chain-post/mangle_postrouting/30-pbr.nft'
Automatically including '/usr/share/nftables.d/chain-post/mangle_prerouting/30-pbr.nft'
root@OpenWrt:~# cat /proc/net/arp
IP address       HW type     Flags       HW address            Mask     Device
192.168.1.102    0x1         0x2         6a:f1:e7:82:c1:1f     *        br-lan
192.168.1.225    0x1         0x2         86:af:ca:31:40:2a     *        br-lan
192.168.1.101    0x1         0x2         00:1d:ec:17:75:e6     *        br-lan
192.168.1.215    0x1         0x2         86:af:ca:31:40:2a     *        br-lan
192.168.1.157    0x1         0x2         02:f5:61:9c:7c:95     *        br-lan
10.9.147.254     0x1         0x2         3c:fd:fe:d4:2c:b8     *        wan
192.168.1.182    0x1         0x2         86:af:ca:31:40:2a     *        br-lan
192.168.1.239    0x1         0x2         86:af:ca:31:40:2a     *        br-lan
192.168.1.115    0x1         0x0         f8:46:1c:79:c6:58     *        br-lan
192.168.1.204    0x1         0x2         b8:ee:65:0d:d5:1c     *        br-lan
192.168.1.203    0x1         0x2         68:14:01:14:56:4f     *        br-lan
192.168.1.247    0x1         0x2         00:90:a9:e8:cf:ab     *        br-lan
192.168.1.124    0x1         0x2         10:6f:d9:24:f1:2f     *        br-lan
192.168.1.238    0x1         0x2         86:af:ca:31:40:2a     *        br-lan
10.105.109.248   0x1         0x2         02:f5:61:9c:7c:95     *        br-lan
192.168.1.105    0x1         0x0         16:b1:a7:24:7a:3f     *        br-lan
192.168.1.122    0x1         0x0         fa:09:db:94:4d:dd     *        br-lan
192.168.1.104    0x1         0x2         86:af:ca:31:40:2a     *        br-lan
192.168.1.188    0x1         0x2         ac:50:de:95:18:85     *        br-lan
192.168.1.209    0x1         0x2         4c:b9:ea:01:60:dc     *        br-lan
root@OpenWrt:~#

Idź do forum: Oprogramowanie / Software

10 Odpowiedź przez hiuman

(21 odpowiedzi, napisanych Oprogramowanie / Software)

Zmieniłem i dalej strony się ładuję. Czas jest prawidłowy.

 config rule
    option src 'lan'
    option dest 'wan'
    option target 'REJECT'
    option name 'vic'
    option start_time '20:35:00'
    option stop_time '20:38:00'
    option proto 'all'
    option src_mac '29:B8:D9:27:A8:B1'

Idź do forum: Oprogramowanie / Software

11 Odpowiedź przez hiuman

(21 odpowiedzi, napisanych Oprogramowanie / Software)

Ładuje interie, wp .

Idź do forum: Oprogramowanie / Software

12 Odpowiedź przez hiuman

(21 odpowiedzi, napisanych Oprogramowanie / Software)

Zrobiłem tak i dalej przepuszcza 

 config rule
    option ac_enabled '1'
    option src 'lan'
    option dest 'wan'
    option target 'REJECT'
    option name 'vic'
    option start_time '20:26:00'
    option stop_time '20:28:00'
    list proto 'all'
    list src_mac '29:B8:D9:27:A8:B1'

Idź do forum: Oprogramowanie / Software

13 Odpowiedź przez hiuman

(21 odpowiedzi, napisanych Oprogramowanie / Software)

Tak używam acces control. To nie mogę korzystać z tego dodatku, bo źle tworzy regułę? Jest coś innego żeby robić to przez luci?

Idź do forum: Oprogramowanie / Software

14 Odpowiedź przez hiuman

(21 odpowiedzi, napisanych Oprogramowanie / Software)

@Cezary pomożesz?

Idź do forum: Oprogramowanie / Software

15 Temat przez hiuman

(21 odpowiedzi, napisanych Oprogramowanie / Software)

Witam. Tak jak w temacie, mam w firewall dodane reguły do blokowania dostępu do internetu, ale internet nadal działa. Na wcześniejszych wersjach działało to bez problemu. Czy coś się zmieniło?
Linksys wrt3200acm - OpenWrt 24.10-SNAPSHOT r28627-0b392b925f

config defaults
    option input 'REJECT'
    option output 'ACCEPT'
    option forward 'REJECT'
    option synflood_protect '1'
    option flow_offloading '1'

config zone
    option name 'lan'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'ACCEPT'
    list network 'lan'

config zone
    option name 'wan'
    option input 'REJECT'
    option output 'ACCEPT'
    option forward 'REJECT'
    option masq '1'
    option mtu_fix '1'
    list network 'wan6'
    list network 'wan'
    list network 'wg0'

config forwarding
    option src 'lan'
    option dest 'wan'

config rule
    option name 'Allow-DHCP-Renew'
    option src 'wan'
    option proto 'udp'
    option dest_port '68'
    option target 'ACCEPT'
    option family 'ipv4'

config rule
    option name 'Allow-Ping'
    option src 'wan'
    option proto 'icmp'
    option icmp_type 'echo-request'
    option family 'ipv4'
    option target 'ACCEPT'

config rule
    option name 'Allow-IGMP'
    option src 'wan'
    option proto 'igmp'
    option family 'ipv4'
    option target 'ACCEPT'

config rule
    option name 'Allow-DHCPv6'
    option src 'wan'
    option proto 'udp'
    option dest_port '546'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-MLD'
    option src 'wan'
    option proto 'icmp'
    option src_ip 'fe80::/10'
    list icmp_type '130/0'
    list icmp_type '131/0'
    list icmp_type '132/0'
    list icmp_type '143/0'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-ICMPv6-Input'
    option src 'wan'
    option proto 'icmp'
    list icmp_type 'echo-request'
    list icmp_type 'echo-reply'
    list icmp_type 'destination-unreachable'
    list icmp_type 'packet-too-big'
    list icmp_type 'time-exceeded'
    list icmp_type 'bad-header'
    list icmp_type 'unknown-header-type'
    list icmp_type 'router-solicitation'
    list icmp_type 'neighbour-solicitation'
    list icmp_type 'router-advertisement'
    list icmp_type 'neighbour-advertisement'
    option limit '1000/sec'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-ICMPv6-Forward'
    option src 'wan'
    option dest '*'
    option proto 'icmp'
    list icmp_type 'echo-request'
    list icmp_type 'echo-reply'
    list icmp_type 'destination-unreachable'
    list icmp_type 'packet-too-big'
    list icmp_type 'time-exceeded'
    list icmp_type 'bad-header'
    list icmp_type 'unknown-header-type'
    option limit '1000/sec'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-IPSec-ESP'
    option src 'wan'
    option dest 'lan'
    option proto 'esp'
    option target 'ACCEPT'

config rule
    option name 'Allow-ISAKMP'
    option src 'wan'
    option dest 'lan'
    option dest_port '500'
    option proto 'udp'
    option target 'ACCEPT'

config zone
    option name 'vpn'
    option input 'ACCEPT'
    option forward 'ACCEPT'
    option output 'ACCEPT'
    option masq '1'
    list network 'vpn'

config forwarding
    option src 'vpn'
    option dest 'wan'

config rule
    option name 'OpenVPN'
    option target 'ACCEPT'
    option src 'wan'
    option proto 'udp'
    option dest_port '1194'

config forwarding
    option src 'vpn'
    option dest 'lan'

config forwarding
    option src 'lan'
    option dest 'vpn'

config rule
    option src '*'
    option dest 'wan'
    option target 'REJECT'
    option name 'E.Lap'
    option stop_time '23:59:00'
    list proto 'all'
    option weekdays ' mon tue wed thu sun'
    option ac_enabled '0'
    option src_mac 'B8:EE:65:0D:D5:1C'
    option start_time '22:00:00'
    option enabled '0'

config rule
    option src '*'
    option dest 'wan'
    option proto '0'
    option target 'REJECT'
    option stop_time '23:59:00'
    option weekdays ' mon tue wed thu sun'
    option name 'E.t'
    option src_mac '02:F5:61:9C:7C:95'
    option start_time '22:00:00'
    option ac_enabled '0'
    option enabled '0'

config rule
    option src '*'
    option dest 'wan'
    option proto '0'
    option target 'REJECT'
    option src_mac '6E:8D:BF:EE:BF:77'
    option ac_enabled '1'
    option stop_time '23:59:00'
    option name 'T.t'
    option start_time '21:30:00'
    option enabled '1'

config rule
    option src '*'
    option dest 'wan'
    option proto '0'
    option target 'REJECT'
    option stop_time '23:59:00'
    option name 'T.lap'
    option src_mac '18:56:80:25:8B:AE'
    option start_time '21:30:00'
    option ac_enabled '1'
    option enabled '1'

config rule
    option ac_enabled '0'
    option src '*'
    option dest 'wan'
    option proto '0'
    option target 'REJECT'
    option name 'E.tel'
    option src_mac '02:F5:61:9C:7C:95'
    option start_time '23:00:00'
    option weekdays ' fri sat'
    option stop_time '23:59:00'
    option enabled '0'

config rule
    option ac_enabled '0'
    option src '*'
    option dest 'wan'
    option proto '0'
    option target 'REJECT'
    option weekdays ' fri sat'
    option name 'T.lap'
    option src_mac '18:56:80:25:8B:AE'
    option start_time '23:00:00'
    option stop_time '23:59:00'
    option enabled '0'

config rule
    option ac_enabled '0'
    option src '*'
    option dest 'wan'
    option proto '0'
    option target 'REJECT'
    option weekdays ' fri sat'
    option name 'T.tel'
    option src_mac '6E:8D:BF:EE:BF:77'
    option start_time '23:00:00'
    option stop_time '23:59:00'
    option enabled '0'

config rule
    option name 'wireguard'
    option src 'wan'
    option dest_port '993'
    option proto 'udp'
    option target 'ACCEPT'

config zone
    option name 'wg'
    option input 'ACCEPT'
    option forward 'ACCEPT'
    option output 'ACCEPT'
    option masq '1'

config forwarding
    option src 'wg'
    option dest 'wan'

config forwarding
    option src 'wan'
    option dest 'wg'

config forwarding
    option src 'wg'
    option dest 'lan'

config forwarding
    option src 'lan'
    option dest 'wg'

config include 'pbr'
    option fw4_compatible '1'
    option type 'script'
    option path '/usr/share/pbr/firewall.include'

config rule
    option ac_enabled '1'
    option enabled '1'
    option src '*'
    option dest 'wan'
    option proto '0'
    option target 'REJECT'
    option name 'tom.lap'
    option src_mac '18:56:80:25:8B:AE'
    option start_time '00:00:00'
    option stop_time '05:00:00'

config rule
    option ac_enabled '1'
    option enabled '1'
    option src '*'
    option dest 'wan'
    option proto '0'
    option target 'REJECT'
    option name 'tom.moto'
    option src_mac '6E:8D:BF:EE:BF:77'
    option start_time '00:00:00'
    option stop_time '05:00:00'

Idź do forum: Oprogramowanie / Software

16 Odpowiedź przez hiuman

(627 odpowiedzi, napisanych Oprogramowanie / Software)

Ok dziękuję.

Idź do forum: Oprogramowanie / Software

17 Odpowiedź przez hiuman

(627 odpowiedzi, napisanych Oprogramowanie / Software)

@Cezary a ten komunikat jest jakiś poważny:

Wed Dec  4 15:07:47 2024 daemon.warn odhcpd[2704]: No default route present, overriding ra_lifetime to 0!
Wed Dec  4 15:15:06 2024 daemon.warn odhcpd[2704]: No default route present, overriding ra_lifetime to 0!
Wed Dec  4 15:19:03 2024 daemon.warn odhcpd[2704]: No default route present, overriding ra_lifetime to 0!
Wed Dec  4 15:25:04 2024 daemon.warn odhcpd[2704]: No default route present, overriding ra_lifetime to 0!
Wed Dec  4 15:25:08 2024 daemon.warn odhcpd[2704]: No default route present, overriding ra_lifetime to 0!
Wed Dec  4 15:31:14 2024 daemon.warn odhcpd[2704]: No default route present, overriding ra_lifetime to 0!

Idź do forum: Oprogramowanie / Software

18 Odpowiedź przez hiuman

(627 odpowiedzi, napisanych Oprogramowanie / Software)

Cezary napisał/a:

Out of memory nie dostał tyle pamięci ile chciał.

Czytaj https://github.com/jow-/nlbwmon/issues/43

Dzięki. Na ciebie można zawsze liczyć.

Idź do forum: Oprogramowanie / Software

19 Odpowiedź przez hiuman

(627 odpowiedzi, napisanych Oprogramowanie / Software)

O co chodzi z tymi logami

Tue Dec  3 17:55:51 2024 daemon.err nlbwmon[4402]: Netlink receive failure: Out of memory
Tue Dec  3 17:55:51 2024 daemon.err nlbwmon[4402]: Unable to dump conntrack: No buffer space available
Tue Dec  3 17:56:39 2024 daemon.notice netifd: wan (19149): udhcpc: sending renew to server 11.8.265.145
Tue Dec  3 17:56:39 2024 daemon.notice netifd: wan (19149): udhcpc: lease of 10.9.146.169 obtained from 11.8.265.145, lease time 3600
Tue Dec  3 17:56:51 2024 daemon.err nlbwmon[4402]: Netlink receive failure: Out of memory
Tue Dec  3 17:56:51 2024 daemon.err nlbwmon[4402]: Unable to dump conntrack: No buffer space available
Tue Dec  3 17:57:51 2024 daemon.err nlbwmon[4402]: Netlink receive failure: Out of memory
Tue Dec  3 17:57:51 2024 daemon.err nlbwmon[4402]: Unable to dump conntrack: No buffer space available
Tue Dec  3 17:58:51 2024 daemon.err nlbwmon[4402]: Netlink receive failure: Out of memory
Tue Dec  3 17:58:51 2024 daemon.err nlbwmon[4402]: Unable to dump conntrack: No buffer space available
Tue Dec  3 17:59:51 2024 daemon.err nlbwmon[4402]: Netlink receive failure: Out of memory
Tue Dec  3 17:59:51 2024 daemon.err nlbwmon[4402]: Unable to dump conntrack: No buffer space available
Tue Dec  3 18:00:51 2024 daemon.err nlbwmon[4402]: Netlink receive failure: Out of memory
Tue Dec  3 18:00:51 2024 daemon.err nlbwmon[4402]: Unable to dump conntrack: No buffer space available
Tue Dec  3 18:01:28 2024 daemon.warn odhcpd[2686]: No default route present, overriding ra_lifetime to 0!
Tue Dec  3 18:01:38 2024 daemon.warn odhcpd[2686]: No default route present, overriding ra_lifetime to 0!
Tue Dec  3 18:01:51 2024 daemon.err nlbwmon[4402]: Netlink receive failure: Out of memory
Tue Dec  3 18:01:51 2024 daemon.err nlbwmon[4402]: Unable to dump conntrack: No buffer space available
Tue Dec  3 18:02:51 2024 daemon.err nlbwmon[4402]: Netlink receive failure: Out of memory

Idź do forum: Oprogramowanie / Software

20 Odpowiedź przez hiuman

(45 odpowiedzi, napisanych Oprogramowanie / Software)

18 przez wan, a przez vpn 1 czasem 2

Idź do forum: Oprogramowanie / Software

21 Odpowiedź przez hiuman

(45 odpowiedzi, napisanych Oprogramowanie / Software)

@Cezary zainstalowałem jeszcze raz Twój obraz 24.10 i z konfigurowałem wszystko od nowa. W końcu wszystko zatrybiło i działa tak jak chciałem.
Możesz jeszcze raz zobaczyć czy wszystko jest dobrze?
Firewall:

config defaults
    option syn_flood '1'
    option input 'REJECT'
    option output 'ACCEPT'
    option forward 'REJECT'

config zone
    option name 'lan'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'ACCEPT'
    list network 'lan'

config zone
    option name 'wan'
    option input 'REJECT'
    option output 'ACCEPT'
    option forward 'REJECT'
    option masq '1'
    option mtu_fix '1'
    list network 'wan'
    list network 'wan6'

config forwarding
    option src 'lan'
    option dest 'wan'

config rule
    option name 'Allow-DHCP-Renew'
    option src 'wan'
    option proto 'udp'
    option dest_port '68'
    option target 'ACCEPT'
    option family 'ipv4'

config rule
    option name 'Allow-Ping'
    option src 'wan'
    option proto 'icmp'
    option icmp_type 'echo-request'
    option family 'ipv4'
    option target 'ACCEPT'

config rule
    option name 'Allow-IGMP'
    option src 'wan'
    option proto 'igmp'
    option family 'ipv4'
    option target 'ACCEPT'

config rule
    option name 'Allow-DHCPv6'
    option src 'wan'
    option proto 'udp'
    option dest_port '546'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-MLD'
    option src 'wan'
    option proto 'icmp'
    option src_ip 'fe80::/10'
    list icmp_type '130/0'
    list icmp_type '131/0'
    list icmp_type '132/0'
    list icmp_type '143/0'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-ICMPv6-Input'
    option src 'wan'
    option proto 'icmp'
    list icmp_type 'echo-request'
    list icmp_type 'echo-reply'
    list icmp_type 'destination-unreachable'
    list icmp_type 'packet-too-big'
    list icmp_type 'time-exceeded'
    list icmp_type 'bad-header'
    list icmp_type 'unknown-header-type'
    list icmp_type 'router-solicitation'
    list icmp_type 'neighbour-solicitation'
    list icmp_type 'router-advertisement'
    list icmp_type 'neighbour-advertisement'
    option limit '1000/sec'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-ICMPv6-Forward'
    option src 'wan'
    option dest '*'
    option proto 'icmp'
    list icmp_type 'echo-request'
    list icmp_type 'echo-reply'
    list icmp_type 'destination-unreachable'
    list icmp_type 'packet-too-big'
    list icmp_type 'time-exceeded'
    list icmp_type 'bad-header'
    list icmp_type 'unknown-header-type'
    option limit '1000/sec'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-IPSec-ESP'
    option src 'wan'
    option dest 'lan'
    option proto 'esp'
    option target 'ACCEPT'

config rule
    option name 'Allow-ISAKMP'
    option src 'wan'
    option dest 'lan'
    option dest_port '500'
    option proto 'udp'
    option target 'ACCEPT'

config zone
    option name 'vpn'
    option input 'ACCEPT'
    option forward 'ACCEPT'
    option output 'ACCEPT'
    option network 'vpn'
    option masq '1'

config forwarding
    option src 'vpn'
    option dest 'wan'

config rule
    option name 'OpenVPN'
    option target 'ACCEPT'
    option src 'wan'
    option proto 'udp'
    option dest_port '1194'

config forwarding
    option src 'vpn'
    option dest 'lan'

config forwarding
    option src 'lan'
    option dest 'vpn'

config include 'pbr'
    option fw4_compatible '1'
    option type 'script'
    option path '/usr/share/pbr/firewall.include'

Network:

config interface 'loopback'
    option device 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config globals 'globals'
    option ula_prefix 'fd2a:84dd:73f9::/48'

config device
    option name 'br-lan'
    option type 'bridge'
    list ports 'lan1'
    list ports 'lan2'
    list ports 'lan3'
    list ports 'lan4'

config interface 'lan'
    option device 'br-lan'
    option proto 'static'
    option ipaddr '192.168.1.1'
    option netmask '255.255.255.0'
    option ip6assign '60'

config device
    option name 'wan'
    option macaddr 'ea:9f:80:1b:5f:f8'

config interface 'wan'
    option device 'wan'
    option proto 'dhcp'
    option dns '8.8.8.8 8.8.4.4'
    option peerdns '0'

config interface 'wan6'
    option device 'wan'
    option proto 'dhcpv6'

config interface 'vpn'
    option device 'tun0'
    option proto 'none'

Pbr:

config pbr 'config'
    option enabled '1'
    option verbosity '2'
    option strict_enforcement '1'
    option resolver_set 'none'
    list resolver_instance '*'
    option ipv6_enabled '0'
    list ignored_interface 'vpnserver'
    option boot_timeout '30'
    option rule_create_option 'add'
    option procd_boot_delay '0'
    option procd_reload_delay '1'
    option webui_show_ignore_target '0'
    option nft_rule_counter '0'
    option nft_set_auto_merge '1'
    option nft_set_counter '0'
    option nft_set_flags_interval '1'
    option nft_set_flags_timeout '0'
    option nft_set_policy 'performance'
    list webui_supported_protocol 'all'
    list webui_supported_protocol 'tcp'
    list webui_supported_protocol 'udp'
    list webui_supported_protocol 'tcp udp'
    list webui_supported_protocol 'icmp'

config include
    option path '/usr/share/pbr/pbr.user.aws'
    option enabled '0'

config include
    option path '/usr/share/pbr/pbr.user.netflix'
    option enabled '0'

config dns_policy
    option name 'Redirect Local IP DNS'
    option src_addr '192.168.1.5'
    option dest_dns '1.1.1.1'
    option enabled '0'

config policy
    option name 'Ignore Local Requests'
    option interface 'ignore'
    option dest_addr '10.0.0.0/24 10.0.1.0/24 192.168.100.0/24 192.168.1.0/24'
    option enabled '0'

config policy
    option name 'Plex/Emby Local Server'
    option interface 'wan'
    option src_port '8096 8920 32400'
    option enabled '0'

config policy
    option name 'Plex/Emby Remote Servers'
    option interface 'wan'
    option dest_addr 'plex.tv my.plexapp.com emby.media app.emby.media tv.emby.media'
    option enabled '0'

config policy
    option name 'WDMyCloud'
    option src_addr '192.168.1.247'
    option interface 'wan'

config policy
    option name 'ElizyTelefon'
    option src_addr '192.168.1.208'
    option interface 'wan'

config policy
    option name 'POCOM3'
    option src_addr '192.168.1.179'
    option interface 'wan'

config policy
    option name 'PS4'
    option src_addr '192.168.1.115'
    option interface 'wan'

config policy
    option name 'ElizaTablet'
    option src_addr '192.168.1.105'
    option interface 'wan'

config policy
    option name 'Drukarka'
    option src_addr '192.168.1.203'
    option interface 'wan'

config policy
    option name 'MojLaptop'
    option src_addr '192.168.1.103'
    option interface 'wan'

config policy
    option name 'iRobot-2FDF77BAABCB4BC5BE245CE3D9508648'
    option src_addr '192.168.1.209'
    option interface 'wan'

config policy
    option name 'TvBRAVIA'
    option src_addr '192.168.1.188'
    option interface 'wan'

config policy
    option name 'rapb'
    option src_addr '192.168.1.176'
    option interface 'wan'

config policy
    option name 'raspberrypi'
    option src_addr '192.168.1.211'
    option interface 'wan'

config policy
    option name 'ElizaIphon'
    option src_addr '192.168.1.157'
    option interface 'wan'

config policy
    option name 'MotoTomek'
    option src_addr '192.168.1.114'
    option interface 'wan'

config policy
    option name 'Laptop-tomek'
    option src_addr '192.168.1.182'
    option interface 'wan'

config policy
    option name 'KasiaMoto'
    option src_addr '192.168.1.173'
    option interface 'wan'

config policy
    option name 'ElizyLaptop'
    option src_addr '192.168.1.164'
    option interface 'wan'

config policy
    option name 'OPPO-Reno5-Lite'
    option src_addr '192.168.1.122'
    option interface 'wan'

config policy
    option name 'adam-Maly-Komputer'
    option src_addr '192.168.1.110'
    option interface 'wan'

Idź do forum: Oprogramowanie / Software

22 Odpowiedź przez hiuman

(45 odpowiedzi, napisanych Oprogramowanie / Software)

Ok rozumiem

Idź do forum: Oprogramowanie / Software

23 Odpowiedź przez hiuman

(45 odpowiedzi, napisanych Oprogramowanie / Software)

A może coś w configach skopałem. Można wgrać configi z wersji 21?

Idź do forum: Oprogramowanie / Software

24 Odpowiedź przez hiuman

(45 odpowiedzi, napisanych Oprogramowanie / Software)

Dobrze rozumiem że mam podmienić u siebie? Jutro to zrobię.

Idź do forum: Oprogramowanie / Software

25 Odpowiedź przez hiuman

(45 odpowiedzi, napisanych Oprogramowanie / Software)

A jak ustalić adres bramy vpn, bo IP vpn jest zmienne.

Idź do forum: Oprogramowanie / Software