2 # The options available here are an adaptation of the settings used in nodogsplash.conf.
3 # See https://github.com/nodogsplash/nodogsplash/blob/master/resources/nodogsplash.conf
6 # Set to 1 to enable nodogsplash
9 # Use plain configuration file
10 #option config '/etc/nodogsplash/nodogsplash.conf'
12 # The network the users are connected to
14 option gatewayname 'OpenWrt Nodogsplash'
15 option maxclients '250'
16 option idletimeout '1200'
18 # Your router may have several interfaces, and you
19 # probably want to keep them private from the network/gatewayinterface.
20 # If so, you should block the entire subnets on those interfaces, e.g.:
21 list authenticated_users 'block to 192.168.0.0/16'
22 list authenticated_users 'block to 10.0.0.0/8'
24 # Typical ports you will probably want to open up.
25 list authenticated_users 'allow tcp port 22'
26 list authenticated_users 'allow tcp port 53'
27 list authenticated_users 'allow udp port 53'
28 list authenticated_users 'allow tcp port 80'
29 list authenticated_users 'allow tcp port 443'
31 # For preauthenticated users to resolve IP addresses in their
32 # initial request not using the router itself as a DNS server,
33 list preauthenticated_users 'allow tcp port 53'
34 list preauthenticated_users 'allow udp port 53'
36 # Allow ports for SSH/Telnet/DNS/DHCP/HTTP/HTTPS
37 list users_to_router 'allow tcp port 22'
38 list users_to_router 'allow tcp port 23'
39 list users_to_router 'allow tcp port 53'
40 list users_to_router 'allow udp port 53'
41 list users_to_router 'allow udp port 67'
42 list users_to_router 'allow tcp port 80'
43 list users_to_router 'allow tcp port 443'
45 # MAC addresses that are / are not allowed to access the splash page
46 # Value is either 'allow' or 'block'. The allowedmac or blockedmac list is used.
47 #option macmechanism 'allow'
48 #list allowedmac '00:00:C0:01:D0:0D'
49 #list allowedmac '00:00:C0:01:D0:1D'
50 #list blockedmac '00:00:C0:01:D0:2D'
52 #MAC addresses that do not need to authenticate
53 #list trustedmac '00:00:C0:01:D0:1D'