1825a99077b786cc1318a099706a2658ee3d99f4
[feed/routing.git] / nodogsplash / files / nodogsplash.config
1
2 config nodogsplash
3 # Set to 1 to enable nodogsplash
4 option enabled 0
5
6 # Use plain configuration file
7 #option config '/etc/nodogsplash/nodogsplash.conf'
8
9 # The network the users are connected to
10 option network 'lan'
11 option gatewayname 'OpenWrt Nodogsplash'
12 option maxclients '250'
13 option idletimeout '1200'
14
15 # Your router may have several interfaces, and you
16 # probably want to keep them private from the network/gatewayinterface.
17 # If so, you should block the entire subnets on those interfaces, e.g.:
18 list authenticated_users 'block to 192.168.0.0/16'
19 list authenticated_users 'block to 10.0.0.0/8'
20
21 # Typical ports you will probably want to open up.
22 list authenticated_users 'allow tcp port 22'
23 list authenticated_users 'allow tcp port 53'
24 list authenticated_users 'allow udp port 53'
25 list authenticated_users 'allow tcp port 80'
26 list authenticated_users 'allow tcp port 443'
27
28 # For preauthenticated users to resolve IP addresses in their
29 # initial request not using the router itself as a DNS server,
30 list preauthenticated_users 'allow tcp port 53'
31 list preauthenticated_users 'allow udp port 53'
32
33 # Allow ports for SSH/Telnet/DNS/DHCP/HTTP/HTTPS
34 list users_to_router 'allow tcp port 22'
35 list users_to_router 'allow tcp port 23'
36 list users_to_router 'allow tcp port 53'
37 list users_to_router 'allow udp port 53'
38 list users_to_router 'allow udp port 67'
39 list users_to_router 'allow tcp port 80'
40 list users_to_router 'allow tcp port 443'
41
42 # See https://github.com/nodogsplash for a full list of available options.