Replace tarball with un-tarred ImmortalWrt patch tree (package/feeds/files overrides)
This commit is contained in:
@@ -0,0 +1,35 @@
|
||||
config dnsmasq
|
||||
option domainneeded '1'
|
||||
option boguspriv '1'
|
||||
option filterwin2k '0'
|
||||
option localise_queries '1'
|
||||
option rebind_protection '1'
|
||||
option rebind_localhost '1'
|
||||
option local '/lan/'
|
||||
option domain 'lan'
|
||||
option expandhosts '1'
|
||||
option nonegcache '0'
|
||||
option cachesize '1000'
|
||||
option authoritative '1'
|
||||
option readethers '1'
|
||||
option leasefile '/tmp/dhcp.leases'
|
||||
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
|
||||
option nonwildcard '1'
|
||||
option localservice '1'
|
||||
option ednspacket_max '1232'
|
||||
option filter_aaaa '0'
|
||||
option filter_a '0'
|
||||
|
||||
config dhcp 'lan'
|
||||
option interface 'lan'
|
||||
option ignore '1'
|
||||
|
||||
config dhcp 'wan'
|
||||
option interface 'wan'
|
||||
option ignore '1'
|
||||
|
||||
config odhcpd 'odhcpd'
|
||||
option maindhcp '0'
|
||||
option leasefile '/tmp/hosts/odhcpd'
|
||||
option leasetrigger '/usr/sbin/odhcpd-update'
|
||||
option loglevel '4'
|
||||
@@ -0,0 +1,4 @@
|
||||
config dropbear
|
||||
option PasswordAuth 'on'
|
||||
option RootPasswordAuth 'on'
|
||||
option Port '22'
|
||||
@@ -0,0 +1,122 @@
|
||||
config defaults
|
||||
option input 'REJECT'
|
||||
option output 'ACCEPT'
|
||||
option forward 'REJECT'
|
||||
option synflood_protect '1'
|
||||
option fullcone '1'
|
||||
option flow_offloading '0'
|
||||
|
||||
config zone
|
||||
option name 'lan'
|
||||
option input 'ACCEPT'
|
||||
option output 'ACCEPT'
|
||||
option forward 'ACCEPT'
|
||||
list network 'lan'
|
||||
list network 'wg0'
|
||||
|
||||
config zone
|
||||
option name 'wan'
|
||||
option input 'REJECT'
|
||||
option output 'ACCEPT'
|
||||
option forward 'REJECT'
|
||||
option masq '1'
|
||||
option mtu_fix '1'
|
||||
list network 'wan'
|
||||
list network 'wan6'
|
||||
|
||||
config forwarding
|
||||
option src 'lan'
|
||||
option dest 'wan'
|
||||
|
||||
config rule
|
||||
option name 'Allow-DHCP-Renew'
|
||||
option src 'wan'
|
||||
option proto 'udp'
|
||||
option dest_port '68'
|
||||
option target 'ACCEPT'
|
||||
option family 'ipv4'
|
||||
|
||||
config rule
|
||||
option name 'Allow-Ping'
|
||||
option src 'wan'
|
||||
option proto 'icmp'
|
||||
option icmp_type 'echo-request'
|
||||
option family 'ipv4'
|
||||
option target 'ACCEPT'
|
||||
|
||||
config rule
|
||||
option name 'Allow-IGMP'
|
||||
option src 'wan'
|
||||
option proto 'igmp'
|
||||
option family 'ipv4'
|
||||
option target 'ACCEPT'
|
||||
|
||||
config rule
|
||||
option name 'Allow-DHCPv6'
|
||||
option src 'wan'
|
||||
option proto 'udp'
|
||||
option dest_port '546'
|
||||
option family 'ipv6'
|
||||
option target 'ACCEPT'
|
||||
|
||||
config rule
|
||||
option name 'Allow-MLD'
|
||||
option src 'wan'
|
||||
option proto 'icmp'
|
||||
option src_ip 'fe80::/10'
|
||||
list icmp_type '130/0'
|
||||
list icmp_type '131/0'
|
||||
list icmp_type '132/0'
|
||||
list icmp_type '143/0'
|
||||
option family 'ipv6'
|
||||
option target 'ACCEPT'
|
||||
|
||||
config rule
|
||||
option name 'Allow-ICMPv6-Input'
|
||||
option src 'wan'
|
||||
option proto 'icmp'
|
||||
list icmp_type 'echo-request'
|
||||
list icmp_type 'echo-reply'
|
||||
list icmp_type 'destination-unreachable'
|
||||
list icmp_type 'packet-too-big'
|
||||
list icmp_type 'time-exceeded'
|
||||
list icmp_type 'bad-header'
|
||||
list icmp_type 'unknown-header-type'
|
||||
list icmp_type 'router-solicitation'
|
||||
list icmp_type 'neighbour-solicitation'
|
||||
list icmp_type 'router-advertisement'
|
||||
list icmp_type 'neighbour-advertisement'
|
||||
option limit '1000/sec'
|
||||
option family 'ipv6'
|
||||
option target 'ACCEPT'
|
||||
|
||||
config rule
|
||||
option name 'Allow-ICMPv6-Forward'
|
||||
option src 'wan'
|
||||
option dest '*'
|
||||
option proto 'icmp'
|
||||
list icmp_type 'echo-request'
|
||||
list icmp_type 'echo-reply'
|
||||
list icmp_type 'destination-unreachable'
|
||||
list icmp_type 'packet-too-big'
|
||||
list icmp_type 'time-exceeded'
|
||||
list icmp_type 'bad-header'
|
||||
list icmp_type 'unknown-header-type'
|
||||
option limit '1000/sec'
|
||||
option family 'ipv6'
|
||||
option target 'ACCEPT'
|
||||
|
||||
config rule
|
||||
option name 'Allow-IPSec-ESP'
|
||||
option src 'wan'
|
||||
option dest 'lan'
|
||||
option proto 'esp'
|
||||
option target 'ACCEPT'
|
||||
|
||||
config rule
|
||||
option name 'Allow-ISAKMP'
|
||||
option src 'wan'
|
||||
option dest 'lan'
|
||||
option dest_port '500'
|
||||
option proto 'udp'
|
||||
option target 'ACCEPT'
|
||||
@@ -0,0 +1,49 @@
|
||||
config interface 'loopback'
|
||||
option device 'lo'
|
||||
option proto 'static'
|
||||
option ipaddr '127.0.0.1'
|
||||
option netmask '255.0.0.0'
|
||||
|
||||
config globals 'globals'
|
||||
option ula_prefix 'fdab:c3fc:a55d::/48'
|
||||
|
||||
config device
|
||||
option name 'br-lan'
|
||||
option type 'bridge'
|
||||
list ports 'eth1'
|
||||
|
||||
config interface 'lan'
|
||||
option device 'br-lan'
|
||||
option proto 'static'
|
||||
option ipaddr '192.168.1.2'
|
||||
option netmask '255.255.255.0'
|
||||
option ip6assign '60'
|
||||
|
||||
config interface 'wan'
|
||||
option device 'eth0'
|
||||
option proto 'dhcp'
|
||||
|
||||
config interface 'wan6'
|
||||
option device 'eth0'
|
||||
option proto 'dhcpv6'
|
||||
|
||||
config interface 'wg0'
|
||||
option proto 'wireguard'
|
||||
option private_key '<REDACTED-YOUR-WG-PRIVATE-KEY'
|
||||
option listen_port '51820'
|
||||
list addresses '10.99.0.2/32'
|
||||
option mtu '1420'
|
||||
option route_allowed_ips '1'
|
||||
|
||||
config wireguard_wg0 'wgpeer'
|
||||
option public_key 'GPrZqc8t7F3DG/D0ks+GcZQeUYy+3ClFnbSftSqiygQ='
|
||||
option preshared_key '<REDACTED-YOUR-WG-PSK'
|
||||
option endpoint_host '10.200.80.93'
|
||||
option endpoint_port '51820'
|
||||
option persistent_keepalive '25'
|
||||
list allowed_ips '10.99.0.1/32'
|
||||
|
||||
config route
|
||||
option interface 'wg0'
|
||||
option target '10.99.0.1'
|
||||
option netmask '255.255.255.255'
|
||||
@@ -0,0 +1,14 @@
|
||||
config turboacc 'config'
|
||||
option fastpath 'mediatek_hnat'
|
||||
option fastpath_mh_eth_hnat '1'
|
||||
option fastpath_mh_eth_hnat_v6 '1'
|
||||
option fastpath_mh_eth_hnat_bind_rate '30'
|
||||
option fastpath_mh_eth_hnat_bind_trap '0'
|
||||
option fullcone_nat '2'
|
||||
option hal 'none'
|
||||
option sw_flow '0'
|
||||
option hw_flow '0'
|
||||
option sfe_bridge '0'
|
||||
option bbr_cca '1'
|
||||
option dns_caching '0'
|
||||
option dns_caching_dns '223.5.5.5,223.6.6.6'
|
||||
@@ -0,0 +1,43 @@
|
||||
config wifi-device 'MT7981_1_1'
|
||||
option type 'mtwifi'
|
||||
option phy 'ra0'
|
||||
option hwmode '11a'
|
||||
option band '5g'
|
||||
option dbdc_main '1'
|
||||
option channel '36'
|
||||
option txpower '100'
|
||||
option htmode 'HE160'
|
||||
option country 'CN'
|
||||
option mu_beamformer '1'
|
||||
option noscan '0'
|
||||
option serialize '1'
|
||||
|
||||
config wifi-iface 'default_MT7981_1_1'
|
||||
option device 'MT7981_1_1'
|
||||
option network 'lan'
|
||||
option mode 'ap'
|
||||
option ssid 'ImmortalWrt-5G'
|
||||
option encryption 'none'
|
||||
option uapsd '0'
|
||||
|
||||
config wifi-device 'MT7981_1_2'
|
||||
option type 'mtwifi'
|
||||
option phy 'rax0'
|
||||
option hwmode '11g'
|
||||
option band '2g'
|
||||
option dbdc_main '0'
|
||||
option channel 'auto'
|
||||
option txpower '100'
|
||||
option htmode 'HE40'
|
||||
option country 'CN'
|
||||
option mu_beamformer '1'
|
||||
option noscan '1'
|
||||
option serialize '1'
|
||||
|
||||
config wifi-iface 'default_MT7981_1_2'
|
||||
option device 'MT7981_1_2'
|
||||
option network 'lan'
|
||||
option mode 'ap'
|
||||
option ssid 'ImmortalWrt-2.4G'
|
||||
option encryption 'none'
|
||||
option uapsd '0'
|
||||
Reference in New Issue
Block a user