nodogsplash/files/nodogsplash.config

   1
   2 # The options available here are an adaptation of the settings used in nodogsplash.conf.
   3 # See https://github.com/nodogsplash/nodogsplash/blob/master/resources/nodogsplash.conf
   4
   5 config nodogsplash
   6   # Set to 1 to enable nodogsplash
   7   option enabled 0
   8
   9   # Use plain configuration file
  10   #option config '/etc/nodogsplash/nodogsplash.conf'
  11
  12   # The network the users are connected to
  13   option network 'lan'
  14   option gatewayname 'OpenWrt Nodogsplash'
  15   option maxclients '250'
  16   option idletimeout '1200'
  17
  18   # Your router may have several interfaces, and you
  19   # probably want to keep them private from the network/gatewayinterface.
  20   # If so, you should block the entire subnets on those interfaces, e.g.:
  21   list authenticated_users 'block to 192.168.0.0/16'
  22   list authenticated_users 'block to 10.0.0.0/8'
  23
  24   # Typical ports you will probably want to open up.
  25   list authenticated_users 'allow tcp port 22'
  26   list authenticated_users 'allow tcp port 53'
  27   list authenticated_users 'allow udp port 53'
  28   list authenticated_users 'allow tcp port 80'
  29   list authenticated_users 'allow tcp port 443'
  30
  31   # For preauthenticated users to resolve IP addresses in their
  32   # initial request not using the router itself as a DNS server,
  33   list preauthenticated_users 'allow tcp port 53'
  34   list preauthenticated_users 'allow udp port 53'
  35
  36   # Allow ports for SSH/Telnet/DNS/DHCP/HTTP/HTTPS
  37   list users_to_router 'allow tcp port 22'
  38   list users_to_router 'allow tcp port 23'
  39   list users_to_router 'allow tcp port 53'
  40   list users_to_router 'allow udp port 53'
  41   list users_to_router 'allow udp port 67'
  42   list users_to_router 'allow tcp port 80'
  43   list users_to_router 'allow tcp port 443'
  44
  45   # MAC addresses that are / are not allowed to access the splash page
  46   # Value is either 'allow' or 'block'. The allowedmac or blockedmac list is used.
  47   #option macmechanism 'allow'
  48   #list allowedmac '00:00:C0:01:D0:0D'
  49   #list allowedmac '00:00:C0:01:D0:1D'
  50   #list blockedmac '00:00:C0:01:D0:2D'
  51
  52   #MAC addresses that do not need to authenticate
  53   #list trustedmac '00:00:C0:01:D0:1D'