diff --git a/netmode/files/etc/netmodes/bridged/DETAILS b/netmode/files/etc/netmodes/bridged/DETAILS deleted file mode 100644 index 8d0ee9da0..000000000 --- a/netmode/files/etc/netmodes/bridged/DETAILS +++ /dev/null @@ -1,23 +0,0 @@ -{ - "description": [ - { "en" : "Bridged IPTV" }, - { "sv" : "Brygg IPTV" } - ], - "explanation": [ - { "en" : "LAN4 port is bridged with IPTV VLAN" }, - { "sv" : "LAN4 port överbryggas med IPTV VLAN" } - ], - "credentials" : 0, - "excluded_boards" : [ - "CG300", - "CG301", - "EX400", - "SDX810-AP", - "NORRLAND" - ], - "acl" : [ - "admin", - "support" - ] -} - diff --git a/netmode/files/etc/netmodes/bridged/dhcp b/netmode/files/etc/netmodes/bridged/dhcp deleted file mode 100644 index 0e05f79c1..000000000 --- a/netmode/files/etc/netmodes/bridged/dhcp +++ /dev/null @@ -1,22 +0,0 @@ -config dnsmasq - option domainneeded 1 - option boguspriv 1 - option filterwin2k 0 - option localise_queries 1 - option rebind_protection 0 - option rebind_localhost 1 - option local '/lan/' - option domain 'lan' - option expandhosts 1 - option nonegcache 0 - option authoritative 1 - option readethers 1 - option leasefile '/tmp/dhcp.leases' - option resolvfile '/tmp/resolv.conf.auto' - -config dhcp lan - option interface lan - option start 100 - option limit 150 - option leasetime 12h - diff --git a/netmode/files/etc/netmodes/bridged/firewall b/netmode/files/etc/netmodes/bridged/firewall deleted file mode 100644 index 06208b892..000000000 --- a/netmode/files/etc/netmodes/bridged/firewall +++ /dev/null @@ -1,117 +0,0 @@ -config settings 'settings' - option disabled '0' - -config defaults - option syn_flood 1 - option input ACCEPT - option output ACCEPT - option forward REJECT -# Uncomment this line to disable ipv6 rules -# option disable_ipv6 1 - -config zone - option name lan - list network 'lan' - option input ACCEPT - option output ACCEPT - option forward ACCEPT - -config zone - option name wan - list network 'wan' - list network 'wan6' - list network 'iptv' - option input REJECT - option output ACCEPT - option forward REJECT - option masq 1 - option mtu_fix 1 - -config forwarding - option src lan - option dest wan - -# We need to accept udp packets on port 68, -# see https://dev.openwrt.org/ticket/4108 -config rule - option name Allow-DHCP-Renew - option src wan - option proto udp - option dest_port 68 - option target ACCEPT - option family ipv4 - option hidden 1 - -# Allow IPv4 ping -config rule - option name Allow-Ping - option src wan - option proto icmp - option icmp_type echo-request - option family ipv4 - option target ACCEPT - option hidden 1 - -# Allow DHCPv6 replies -# see https://dev.openwrt.org/ticket/10381 -config rule - option name Allow-DHCPv6 - option src wan - option proto udp - option src_ip fe80::/10 - option src_port 547 - option dest_ip fe80::/10 - option dest_port 546 - option family ipv6 - option target ACCEPT - option hidden 1 - -# Allow essential incoming IPv6 ICMP traffic -config rule - option name Allow-ICMPv6-Input - option src wan - option proto icmp - list icmp_type echo-request - list icmp_type echo-reply - list icmp_type destination-unreachable - list icmp_type packet-too-big - list icmp_type time-exceeded - list icmp_type bad-header - list icmp_type unknown-header-type - list icmp_type router-solicitation - list icmp_type neighbour-solicitation - list icmp_type router-advertisement - list icmp_type neighbour-advertisement - option limit 1000/sec - option family ipv6 - option target ACCEPT - option hidden 1 - -# Allow essential forwarded IPv6 ICMP traffic -config rule - option name Allow-ICMPv6-Forward - option src wan - option dest * - option proto icmp - list icmp_type echo-request - list icmp_type echo-reply - list icmp_type destination-unreachable - list icmp_type packet-too-big - list icmp_type time-exceeded - list icmp_type bad-header - list icmp_type unknown-header-type - option limit 1000/sec - option family ipv6 - option target ACCEPT - option hidden 1 - -# include a file with users custom iptables rules -config include - option path /etc/firewall.user - option reload 1 - -# include a file with rules for SIP and RTP traffic -config include - option path /etc/firewall.sip - option reload 1 - diff --git a/netmode/files/etc/netmodes/bridged/mcpd b/netmode/files/etc/netmodes/bridged/mcpd deleted file mode 100644 index 2e00cc735..000000000 --- a/netmode/files/etc/netmodes/bridged/mcpd +++ /dev/null @@ -1,18 +0,0 @@ - -config mcpd 'mcpd' - option igmp_query_response_interval '10' - option igmp_last_member_query_interval '10' - option igmp_robustness_value '2' - option igmp_lan_to_lan_multicast '0' - option igmp_max_groups '25' - option igmp_max_sources '10' - option igmp_max_members '25' - option igmp_fast_leave '1' - option igmp_join_immediate '0' - option igmp_proxy_enable '0' - option igmp_snooping_enable '2' - option igmp_snooping_interfaces 'br-iptv' - option igmp_default_version '2' - option igmp_query_interval '120' - option igmp_proxy_interfaces 'iptv' - diff --git a/netmode/files/etc/netmodes/bridged/network b/netmode/files/etc/netmodes/bridged/network deleted file mode 100644 index 92c784a26..000000000 --- a/netmode/files/etc/netmodes/bridged/network +++ /dev/null @@ -1,66 +0,0 @@ - -config interface 'loopback' - option is_lan '1' - option ifname 'lo' - option proto 'static' - option ipaddr '127.0.0.1' - option netmask '255.0.0.0' - -config interface 'lan' - option is_lan '1' - option type 'bridge' - option proto 'static' - option ipaddr '192.168.1.1' - option netmask '255.255.255.0' - option ifname '$LAN1 $LAN2 $LAN3' - option ip6assign '60' - -config interface 'wan' - option type 'anywan' - option proto 'dhcp' - #option hostname AUTO-CREATED AT FIRST BOOT - #option vendorid AUTO-CREATED AT FIRST BOOT - option ifname 'ptm0.1 atm0.1 $WAN.1' - option ipv6 '1' - -config interface 'iptv' - option type 'bridge' - option proto 'dhcp' - option gateway '0.0.0.0' - option reqopts 'staticroutes' - option ifname 'ptm0.100 $WAN.100 $LAN4' - option defaultroute '0' - -config interface 'wan6' - option proto 'dhcpv6' - option ifname '@wan' - -config device 'atmwan' - option type 'untagged' - option ifname 'atm0' - option name 'atm0.1' - -config device 'ptmwan' - option type 'untagged' - option ifname 'ptm0' - option name 'ptm0.1' - -config device 'ethwan' - option type 'untagged' - option ifname '$WAN' - option name '$WAN.1' - -config device 'ethtv' - option type '8021q' - option name '$WAN.100' - option ifname '$WAN' - option vid '100' - option priority '0' - -config device 'ptmtv' - option type '8021q' - option name 'ptm0.100' - option ifname 'ptm0' - option vid '100' - option priority '0' - diff --git a/netmode/files/etc/netmodes/bridged/wireless b/netmode/files/etc/netmodes/bridged/wireless deleted file mode 100644 index eee887993..000000000 --- a/netmode/files/etc/netmodes/bridged/wireless +++ /dev/null @@ -1,91 +0,0 @@ -config wifi-status 'status' - option wlan '1' - option sched_status '0' - option schedule '0' - -config bandsteering 'bandsteering' - option enabled '0' - option policy '0' - -config wifi-device 'wl0' - option type 'broadcom' - option country 'EU/13' - option band 'a' - option bandwidth '80' - option hwmode 'auto' - option channel 'auto' - option scantimer '60' - option wmm '1' - option wmm_noack '0' - option wmm_apsd '1' - option txpower '100' - option rateset 'default' - option frag '2346' - option rts '2347' - option dtim_period '1' - option beacon_int '100' - option rxchainps '0' - option rxchainps_qt '10' - option rxchainps_pps '10' - option rifs '0' - option rifs_advert '0' - option maxassoc '32' - option beamforming '1' - option doth '1' - option dfsc '1' - -config wifi-iface - option device 'wl0' - option network 'lan' - option mode 'ap' - #option ssid AUTO-CREATED AT FIRST BOOT - option encryption 'psk2' - option cipher 'auto' - #option key AUTO-CREATED AT FIRST BOOT - option gtk_rekey '3600' - option macfilter 'disable' - option wps '1' - option wmf_bss_enable '1' - option maxassoc '32' - option ifname 'wl0' - -config wifi-device 'wl1' - option type 'broadcom' - option country 'EU/13' - option band 'b' - option bandwidth '20' - option hwmode 'auto' - option channel 'auto' - option scantimer '60' - option wmm '1' - option wmm_noack '0' - option wmm_apsd '1' - option txpower '100' - option rateset 'default' - option frag '2346' - option rts '2347' - option dtim_period '1' - option beacon_int '100' - option rxchainps '0' - option rxchainps_qt '10' - option rxchainps_pps '10' - option rifs '0' - option rifs_advert '0' - option maxassoc '32' - option doth '0' - -config wifi-iface - option device 'wl1' - option network 'lan' - option mode 'ap' - #option ssid AUTO-CREATED AT FIRST BOOT - option encryption 'mixed-psk' - option cipher 'auto' - #option key AUTO-CREATED AT FIRST BOOT - option gtk_rekey '3600' - option macfilter 'disable' - option wps '1' - option wmf_bss_enable '1' - option maxassoc '32' - option ifname 'wl1' - diff --git a/netmode/files/etc/netmodes/routed_brcm/DETAILS b/netmode/files/etc/netmodes/routed_brcm/DETAILS deleted file mode 100644 index 411aaa718..000000000 --- a/netmode/files/etc/netmodes/routed_brcm/DETAILS +++ /dev/null @@ -1,17 +0,0 @@ -{ - "description": [ - { "en" : "Fully Routed (NAT)" }, - { "sv" : "Fullt Omdirigerad (NAT)" } - ], - "explanation": [ - { "en" : "" }, - { "sv" : "" } - ], - "excluded_boards" : [ - "EX4*", - "SDX810-AP", - "NORRLAND" - ], - "credentials" : 0 -} - diff --git a/netmode/files/etc/netmodes/routed_brcm/dhcp b/netmode/files/etc/netmodes/routed_brcm/dhcp deleted file mode 100644 index 0e05f79c1..000000000 --- a/netmode/files/etc/netmodes/routed_brcm/dhcp +++ /dev/null @@ -1,22 +0,0 @@ -config dnsmasq - option domainneeded 1 - option boguspriv 1 - option filterwin2k 0 - option localise_queries 1 - option rebind_protection 0 - option rebind_localhost 1 - option local '/lan/' - option domain 'lan' - option expandhosts 1 - option nonegcache 0 - option authoritative 1 - option readethers 1 - option leasefile '/tmp/dhcp.leases' - option resolvfile '/tmp/resolv.conf.auto' - -config dhcp lan - option interface lan - option start 100 - option limit 150 - option leasetime 12h - diff --git a/netmode/files/etc/netmodes/routed_brcm/firewall b/netmode/files/etc/netmodes/routed_brcm/firewall deleted file mode 100644 index 786168194..000000000 --- a/netmode/files/etc/netmodes/routed_brcm/firewall +++ /dev/null @@ -1,153 +0,0 @@ -config settings 'settings' - option disabled '0' - -config defaults - option syn_flood 1 - option input ACCEPT - option output ACCEPT - option forward REJECT -# Uncomment this line to disable ipv6 rules -# option disable_ipv6 1 - -config zone - option name lan - list network 'lan' - option input ACCEPT - option output ACCEPT - option forward ACCEPT - -config zone - option name wan - list network 'wan' - list network 'wan6' - option input REJECT - option output ACCEPT - option forward REJECT - option masq 1 - option mtu_fix 1 - -config forwarding - option src lan - option dest wan - -# We need to accept udp packets on port 68, -# see https://dev.openwrt.org/ticket/4108 -config rule - option name Allow-DHCP-Renew - option src wan - option proto udp - option dest_port 68 - option target ACCEPT - option family ipv4 - -# Allow IPv4 ping -config rule - option name Allow-Ping - option src wan - option proto icmp - option icmp_type echo-request - option family ipv4 - option target ACCEPT - -config rule - option name Allow-IGMP - option src wan - option proto igmp - option family ipv4 - option target ACCEPT - -# Allow DHCPv6 replies -# see https://dev.openwrt.org/ticket/10381 -config rule - option name Allow-DHCPv6 - option src wan - option proto udp - option src_ip fe80::/10 - option src_port 547 - option dest_ip fe80::/10 - option dest_port 546 - option family ipv6 - option target ACCEPT - -config rule - option name Allow-MLD - option src wan - option proto icmp - option src_ip fe80::/10 - list icmp_type '130/0' - list icmp_type '131/0' - list icmp_type '132/0' - list icmp_type '143/0' - option family ipv6 - option target ACCEPT - -# Allow essential incoming IPv6 ICMP traffic -config rule - option name Allow-ICMPv6-Input - option src wan - option proto icmp - list icmp_type echo-request - list icmp_type echo-reply - list icmp_type destination-unreachable - list icmp_type packet-too-big - list icmp_type time-exceeded - list icmp_type bad-header - list icmp_type unknown-header-type - list icmp_type router-solicitation - list icmp_type neighbour-solicitation - list icmp_type router-advertisement - list icmp_type neighbour-advertisement - option limit 1000/sec - option family ipv6 - option target ACCEPT - -# Allow essential forwarded IPv6 ICMP traffic -config rule - option name Allow-ICMPv6-Forward - option src wan - option dest * - option proto icmp - list icmp_type echo-request - list icmp_type echo-reply - list icmp_type destination-unreachable - list icmp_type packet-too-big - list icmp_type time-exceeded - list icmp_type bad-header - list icmp_type unknown-header-type - option limit 1000/sec - option family ipv6 - option target ACCEPT - -# allow IPsec/ESP and ISAKMP passthrough -config rule - option src wan - option dest lan - option proto esp - option target ACCEPT - -config rule - option src wan - option dest lan - option dest_port 500 - option proto udp - option target ACCEPT - -config dmz dmz - option enabled '0' - option exclude_ports '5060 7547' - -# include a file with users custom iptables rules -config include - option path /etc/firewall.user - option reload 1 - -# include a file with rules for prioritizing some specific packets -config include - option path /etc/firewall.qos - option reload 1 - -# include a file with rules for DMZ Host -config include dmzhost - option path /etc/firewall.dmz - option reload 1 - diff --git a/netmode/files/etc/netmodes/routed_brcm/mcpd b/netmode/files/etc/netmodes/routed_brcm/mcpd deleted file mode 100644 index c99e05b36..000000000 --- a/netmode/files/etc/netmodes/routed_brcm/mcpd +++ /dev/null @@ -1,14 +0,0 @@ -config mcpd 'mcpd' - option igmp_proxy_interfaces 'wan' - option igmp_default_version '2' - option igmp_query_interval '125' - option igmp_query_response_interval '100' - option igmp_last_member_query_interval '10' - option igmp_robustness_value '2' - option igmp_max_groups '25' - option igmp_max_sources '10' - option igmp_max_members '25' - option igmp_fast_leave '1' - option igmp_proxy_enable '1' - option igmp_snooping_enable '2' - option igmp_snooping_interfaces 'br-lan' diff --git a/netmode/files/etc/netmodes/routed_brcm/network b/netmode/files/etc/netmodes/routed_brcm/network deleted file mode 100644 index 3aed92a17..000000000 --- a/netmode/files/etc/netmodes/routed_brcm/network +++ /dev/null @@ -1,44 +0,0 @@ - -config interface 'loopback' - option is_lan '1' - option ifname 'lo' - option proto 'static' - option ipaddr '127.0.0.1' - option netmask '255.0.0.0' - -config interface 'lan' - option is_lan '1' - option type 'bridge' - option proto 'static' - option ipaddr '192.168.1.1' - option netmask '255.255.255.0' - option ifname '$LAN1 $LAN2 $LAN3 $LAN4' - option ip6assign '60' - -config interface 'wan' - option type 'anywan' - option proto 'dhcp' - #option hostname AUTO-CREATED AT FIRST BOOT - #option vendorid AUTO-CREATED AT FIRST BOOT - option ifname 'ptm0.1 atm0.1 $WAN.1' - option ipv6 '1' - -config interface 'wan6' - option proto 'dhcpv6' - option ifname '@wan' - -config device 'atmwan' - option type 'untagged' - option ifname 'atm0' - option name 'atm0.1' - -config device 'ptmwan' - option type 'untagged' - option ifname 'ptm0' - option name 'ptm0.1' - -config device 'ethwan' - option type 'untagged' - option ifname '$WAN' - option name '$WAN.1' - diff --git a/netmode/files/etc/netmodes/routed_brcm/wireless b/netmode/files/etc/netmodes/routed_brcm/wireless deleted file mode 100644 index eee887993..000000000 --- a/netmode/files/etc/netmodes/routed_brcm/wireless +++ /dev/null @@ -1,91 +0,0 @@ -config wifi-status 'status' - option wlan '1' - option sched_status '0' - option schedule '0' - -config bandsteering 'bandsteering' - option enabled '0' - option policy '0' - -config wifi-device 'wl0' - option type 'broadcom' - option country 'EU/13' - option band 'a' - option bandwidth '80' - option hwmode 'auto' - option channel 'auto' - option scantimer '60' - option wmm '1' - option wmm_noack '0' - option wmm_apsd '1' - option txpower '100' - option rateset 'default' - option frag '2346' - option rts '2347' - option dtim_period '1' - option beacon_int '100' - option rxchainps '0' - option rxchainps_qt '10' - option rxchainps_pps '10' - option rifs '0' - option rifs_advert '0' - option maxassoc '32' - option beamforming '1' - option doth '1' - option dfsc '1' - -config wifi-iface - option device 'wl0' - option network 'lan' - option mode 'ap' - #option ssid AUTO-CREATED AT FIRST BOOT - option encryption 'psk2' - option cipher 'auto' - #option key AUTO-CREATED AT FIRST BOOT - option gtk_rekey '3600' - option macfilter 'disable' - option wps '1' - option wmf_bss_enable '1' - option maxassoc '32' - option ifname 'wl0' - -config wifi-device 'wl1' - option type 'broadcom' - option country 'EU/13' - option band 'b' - option bandwidth '20' - option hwmode 'auto' - option channel 'auto' - option scantimer '60' - option wmm '1' - option wmm_noack '0' - option wmm_apsd '1' - option txpower '100' - option rateset 'default' - option frag '2346' - option rts '2347' - option dtim_period '1' - option beacon_int '100' - option rxchainps '0' - option rxchainps_qt '10' - option rxchainps_pps '10' - option rifs '0' - option rifs_advert '0' - option maxassoc '32' - option doth '0' - -config wifi-iface - option device 'wl1' - option network 'lan' - option mode 'ap' - #option ssid AUTO-CREATED AT FIRST BOOT - option encryption 'mixed-psk' - option cipher 'auto' - #option key AUTO-CREATED AT FIRST BOOT - option gtk_rekey '3600' - option macfilter 'disable' - option wps '1' - option wmf_bss_enable '1' - option maxassoc '32' - option ifname 'wl1' -