config interface 'loopback'
        option ifname 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fdc1:584e:726f::/48'

config interface 'lan'
        option ifname 'eth1.1'
        option force_link '1'
        option type 'bridge'
        option proto 'static'
        option ipaddr '172.16.1.254'
        option netmask '255.255.255.0'

config interface 'voip'
        option ifname 'eth1.2'
        option force_link '1'
        option type 'bridge'
        option proto 'static'
        option ipaddr '172.16.2.254'
        option netmask '255.255.255.0'
        option delegate '0'

config interface 'wan'
        option proto 'dhcp'
        option _orig_ifname 'eth0'
        option _orig_bridge 'false'
        option ifname 'eth2'
        option delegate '0'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config switch_vlan
        option device 'switch0'
        option vlan '101'
        option ports '0t 1'
        option vid '101'

config switch_vlan
        option device 'switch0'
        option vlan '1'
        option ports '0t 2 3 4'
        option vid '1'

config switch_vlan             
        option device 'switch0'
        option vlan '2'        
        option ports '5 6'   

config dnsmasq
        option domainneeded '1'
        option boguspriv '1'
        option filterwin2k '0'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option nonegcache '0'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.auto'
        list rebind_domain 'free.aero2.net.pl'

config dhcp 'lan'
        option interface 'lan'
        option start '1'
        option limit '10'
        option leasetime '1h'

config dhcp
        option interface 'voip'
        option start '1'
        option limit '10'
        option leasetime '1h'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'

config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'

config zone
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        option network 'lan'

config zone
        option name 'wan'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        option network 'wan wan6'

config forwarding
        option src 'lan'
        option dest 'wan'

config zone
        option name 'voip'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option network 'voip'

config forwarding
        option dest 'wan'
        option src 'voip'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4config rule                           
        option name 'Allow-Ping'      
        option src 'wan'              
        option proto 'icmp'           
        option icmp_type 'echo-request'
        option family 'ipv4'           
        option target 'ACCEPT'         
                                       
config include                         
        option path '/etc/firewall.user'
                                        
config include 'miniupnpd'              
        option type 'script'            
        option path '/usr/share/miniupnpd/firewall.include'
        option family 'any'                                
        option reload '1'