/*
* /var/flash/ar7.cfg
* Fri Apr 29 22:04:11 2005
*/
ar7cfg {
mode = dsldmode_both;
tsdisabled = no;
igddenabled = yes;
igdd_control_enabled = yes;
wan_bridge_with_dhcpc = yes;
wan_bridge_gateway = 192.168.99.100;
dhcpc_use_static_dns = yes;
ethmode = ethmode_bridge;
ethinterfaces {
name = "eth0";
dhcp = no;
ipaddr = 192.168.99.1;
netmask = 255.255.255.0;
dstipaddr = 0.0.0.0;
dhcpenabled = no;
dhcpstart = 0.0.0.0;
dhcpend = 0.0.0.0;
} {
name = "eth0:0";
dhcp = no;
ipaddr = 192.168.178.254;
netmask = 255.255.255.0;
dstipaddr = 0.0.0.0;
dhcpenabled = yes;
dhcpstart = 0.0.0.0;
dhcpend = 0.0.0.0;
} {
name = "usbrndis";
dhcp = no;
ipaddr = 192.168.179.1;
netmask = 255.255.255.0;
dstipaddr = 0.0.0.0;
dhcpenabled = yes;
dhcpstart = 0.0.0.0;
dhcpend = 0.0.0.0;
} {
name = "tiwlan0";
dhcp = no;
ipaddr = 192.168.182.1;
netmask = 255.255.255.0;
dstipaddr = 0.0.0.0;
dhcpenabled = yes;
dhcpstart = 0.0.0.0;
dhcpend = 0.0.0.0;
}
brinterfaces {
name = "lan";
dhcp = no;
ipaddr = 192.168.99.1;
netmask = 255.255.255.0;
dstipaddr = 0.0.0.0;
interfaces = "eth0", "usbrndis", "tiwlan0";
dhcpenabled = no;
dhcpstart = 0.0.0.0;
dhcpend = 0.0.0.0;
} {
name = "lan:0";
dhcp = no;
ipaddr = 192.168.178.254;
netmask = 255.255.255.0;
dstipaddr = 0.0.0.0;
dhcpenabled = yes;
dhcpstart = 0.0.0.0;
dhcpend = 0.0.0.0;
}
dslinterface {
name = "dsl";
dhcp = no;
ipaddr = 192.168.179.1;
netmask = 255.255.255.255;
dstipaddr = 192.168.179.1;
dhcpenabled = yes;
dhcpstart = 0.0.0.0;
dhcpend = 0.0.0.0;
}
dslinterface_metric = 2;
pppoefw {
interfaces = "usbrndis", "eth0", "tiwlan0";
nofirewall = yes;
ipnetbiosfilter = yes;
dnsfilter_for_active_directory = yes;
hostuniq_filter = "";
dpconfig {
security = dpsec_host;
lowinput {
policy = "reject";
accesslist =
"permit ip any any connection outgoing-related",
"permit ip any any connection incoming-related",
"permit icmp any any";
}
lowoutput {
policy = "permit";
}
highinput {
policy = "permit";
}
highoutput {
policy = "permit";
accesslist =
"reject ip any 242.0.0.0 255.0.0.0",
"deny ip any host 255.255.255.255",
"reject ip any 10.0.0.0 255.0.0.0",
"reject ip any 169.254.0.0 255.255.0.0",
"reject udp any any eq 135",
"reject tcp any any eq 135",
"reject udp any any range 137 139",
"reject tcp any any range 137 139",
"reject udp any any range 161 162",
"reject udp any any eq 520",
"reject udp any any eq 111",
"reject udp any any eq 22289",
"reject udp any any eq 1710",
"reject udp any any eq 1048",
"reject udp any any eq 158",
"reject udp any any eq 515",
"reject icmp any 149.1.1.0 255.255.255.0",
"reject tcp any host 202.106.185.127 eq 25";
}
}
}
dslconfig {
autodetect = yes;
templates {
VPI = 1;
VCI = 32;
manu = 0;
encap = dslencap_pppoe;
} {
VPI = 8;
VCI = 35;
manu = 0;
encap = dslencap_pppoe;
} {
VPI = 8;
VCI = 48;
manu = 0;
encap = dslencap_pppoa;
} {
VPI = 8;
VCI = 48;
manu = 0;
encap = dslencap_pppoa_llc;
} {
VPI = 8;
VCI = 67;
manu = 0;
encap = dslencap_pppoa;
} {
VPI = 8;
VCI = 67;
manu = 0;
encap = dslencap_pppoa_llc;
} {
VPI = 8;
VCI = 64;
manu = 0;
encap = dslencap_pppoa;
} {
VPI = 8;
VCI = 36;
manu = 0;
encap = dslencap_pppoe;
} {
VPI = 0;
VCI = 35;
manu = 0;
encap = dslencap_pppoa;
} {
VPI = 0;
VCI = 35;
manu = 0;
encap = dslencap_pppoa_llc;
} {
VPI = 9;
VCI = 35;
manu = 0;
encap = dslencap_pppoe;
} {
VPI = 0;
VCI = 32;
manu = 0;
encap = dslencap_pppoe;
} {
VPI = 0;
VCI = 32;
manu = 0;
encap = dslencap_pppoa;
} {
VPI = 0;
VCI = 32;
manu = 0;
encap = dslencap_pppoa_llc;
} {
VPI = 0;
VCI = 34;
manu = 0;
encap = dslencap_pppoe;
} {
VPI = 0;
VCI = 34;
manu = 0;
encap = dslencap_pppoa;
} {
VPI = 0;
VCI = 34;
manu = 0;
encap = dslencap_pppoa_llc;
}
VPI = 1;
VCI = 32;
dsl_encap = dslencap_pppoe;
connect_delay_when_synced = 3s;
pppoeiface = "eth0";
speed_in_netto = 1024;
speed_out_netto = 256;
etherencapcfg {
use_dhcp = yes;
ipaddr = 0.0.0.0;
netmask = 0.0.0.0;
gateway = 0.0.0.0;
dns1 = 0.0.0.0;
dns2 = 0.0.0.0;
}
}
default_dsliface {
ppptarget = "internet";
stay_always_online = yes;
redial_delay_after_auth_failure = 1m;
redial_limit = 3;
username_prefix_after_auth_failure = "";
dsldpconfig {
security = dpsec_firewall;
lowinput {
policy = "permit";
accesslist =
"deny ip any 242.0.0.0 255.0.0.0",
"deny ip any host 255.255.255.255",
"deny udp any any eq 135",
"deny tcp any any eq 135",
"deny udp any any range 137 139",
"deny tcp any any range 137 139",
"deny udp any any range 161 162",
"deny udp any any eq 520",
"deny udp any any eq 111",
"deny udp any any eq 22289",
"deny udp any any eq 1710",
"deny udp any any eq 1048",
"deny udp any any eq 158",
"deny udp any any eq 515";
}
lowoutput {
policy = "permit";
}
highinput {
policy = "permit";
}
highoutput {
policy = "permit";
accesslist =
"reject ip any 242.0.0.0 255.0.0.0",
"deny ip any host 255.255.255.255",
"reject ip any 10.0.0.0 255.0.0.0",
"reject ip any 169.254.0.0 255.255.0.0",
"reject udp any any eq 135",
"reject tcp any any eq 135",
"reject udp any any range 137 139",
"reject tcp any any range 137 139",
"reject udp any any range 161 162",
"reject udp any any eq 520",
"reject udp any any eq 111",
"reject udp any any eq 22289",
"reject udp any any eq 1710",
"reject udp any any eq 1048",
"reject udp any any eq 158",
"reject udp any any eq 515",
"reject icmp any 149.1.1.0 255.255.255.0",
"reject tcp any host 202.106.185.127 eq 25";
}
forwardrules = "tcp 0.0.0.0:0 0.0.0.0:0 1 out",
"udp 0.0.0.0:0 0.0.0.0:0 1 out",
"udp 0.0.0.0:5060 0.0.0.0:5060",
"udp 0.0.0.0:7078 0.0.0.0:7078",
"udp 0.0.0.0:7079 0.0.0.0:7079",
"udp 0.0.0.0:7080 0.0.0.0:7080",
"udp 0.0.0.0:7081 0.0.0.0:7081",
"# tcp 0.0.0.0:21 192.168.178.20:21 0 # FTP-Server",
"# tcp 0.0.0.0:80 192.168.178.20:80 0 # HTTP-Server",
"# tcp 0.0.0.0:4662 192.168.178.20:4662 0 # eMule",
"# udp 0.0.0.0:4672 192.168.178.20:4672 0 # eMule",
"# tcp 0.0.0.0:3389 192.168.178.20:3389 0 # MS Remote Desktop",
"tcp 0.0.0.0:81 192.168.99.101:81 0 # E-Mule";
shaperconnection {
enabled = yes;
targets = "";
name = "Fritz!Box";
limiters {
name = "default-out";
bps_limit {
limit_total = 100;
limit_p0 = 0;
limit_p1 = 95;
limit_p2 = 95;
limit_p3 = 0;
}
pps_limit {
limit_total = 0;
limit_p0 = 0;
limit_p1 = 0;
limit_p2 = 0;
limit_p3 = 0;
}
min_priority = 0;
max_priority = 2;
grouping_by_source_ip = no;
grouping_by_dest_ip = no;
grouping_by_source_port = no;
grouping_by_dest_port = no;
dynamic_balancing = no;
bps_child_limit {
limit_total = 0;
limit_p0 = 0;
limit_p1 = 0;
limit_p2 = 0;
limit_p3 = 0;
}
pps_child_limit {
limit_total = 0;
limit_p0 = 0;
limit_p1 = 0;
limit_p2 = 0;
limit_p3 = 0;
}
shapeOutgoingOnIncomingCounters = no;
} {
name = "default-in";
bps_limit {
limit_total = 0;
limit_p0 = 0;
limit_p1 = 0;
limit_p2 = 0;
limit_p3 = 0;
}
pps_limit {
limit_total = 0;
limit_p0 = 0;
limit_p1 = 0;
limit_p2 = 0;
limit_p3 = 0;
}
min_priority = 0;
max_priority = 0;
grouping_by_source_ip = no;
grouping_by_dest_ip = no;
grouping_by_source_port = no;
grouping_by_dest_port = no;
dynamic_balancing = no;
bps_child_limit {
limit_total = 0;
limit_p0 = 0;
limit_p1 = 0;
limit_p2 = 0;
limit_p3 = 0;
}
pps_child_limit {
limit_total = 0;
limit_p0 = 0;
limit_p1 = 0;
limit_p2 = 0;
limit_p3 = 0;
}
shapeOutgoingOnIncomingCounters = no;
}
out_rules {
name = "download-tcp-ack";
filter = "tcp and len <= 64";
priority = 2;
limiters = "default-out";
} {
name = "dns";
filter = "udp port 53";
priority = 1;
limiters = "default-out";
} {
name = "fon-rtp";
filter = "udp[8] = 0x80 or udp port 5060";
priority = 2;
limiters = "default-out";
} {
name = "http-requests";
filter = "(tcp dst port 80 or dst port 8080 or dst port 3128) and (len <= 800)";
priority = 1;
limiters = "default-out";
} {
name = "pri-out";
filter = "icmp";
priority = 1;
limiters = "default-out";
} {
name = "default";
filter = "";
priority = 0;
limiters = "default-out";
}
in_rules {
name = "default";
filter = "";
priority = 0;
limiters = "default-in";
}
demasquerade = no;
}
}
budget {
Enabled = no;
Period = 2;
VolumeLow = 0;
VolumeHigh = 0;
ConnectionTime = 0;
WarnOnly = yes;
}
}
targets {
type = pppcfg_target_internet;
name = "internet";
only_crypt_auth = no;
local {
username = "USER";
passwd = "PWD";
}
remoteauth = pppcfg_authtype_chap;
remoteauth_only_on_incoming = yes;
remote {
}
inactivity_timeout = 0w;
bUseChargeInterval = no;
nChargeInterval = 1m;
logicaldisconnect_with_physical = yes;
disconnect_timeout = 0w;
finaldisconnectcall = no;
ipnetbiosspoofing = no;
ipnetbiosfilter = yes;
dnsfilter_for_active_directory = yes;
no_outgoing_calls = no;
coso = pppcfg_coso_caller;
callback_delay = 1s;
icbmode = pppcfg_icbmode_none;
ocbmode = pppcfg_ocbmode_none;
mscbprefered = no;
multilink {
extra_static_channels = 0;
max_channels = 1;
automatic = no;
automatic_param {
window = 20s;
add_percent = 85;
drop_percent = 70;
sportlich = no;
}
}
header_compression = yes;
data_compression = pppcfg_datacomp_auto;
stac_reset_with_history_number = no;
encryption = pppcfg_crypt_none;
inactivity_prevention_interval = 0w;
new_ipaddr_on_connect = no;
my_ipaddr = 0.0.0.0;
his_ipaddr = 0.0.0.0;
bVolumeRoundUp = no;
VolumeRoundUpBytes = 0;
bProviderDisconnectPrevention = yes;
ProviderDisconnectPreventionInterval = 1d;
ProviderDisconnectPreventionHour = 3;
}
StatisticStartOfMonth = 1;
}
servercfg {
dns1 = 192.168.99.100;
dns2 = 192.168.99.100;
}
websrv {
port = "80";
read_timeout = 15m;
request_timeout = 30s;
keepalive_timeout = 5m;
nokeepalive = "*";
errordir = "/usr/lib/websrv/errors";
webdir = "/usr/www";
cgidir = "cgi-bin";
indexfn = "index.var", "index.htm", "index.html";
}
dhcpserver {
saveinterval = 1h;
generic {
default_lease_time = 10d;
max_lease_time = 13d;
}
}
dhcpclient {
metric = 9;
}
dnsserver {
cache_maxKB = 16;
negative_ttl = 5m;
}
ddns {
accounts {
enabled = no;
domain = "myserver";
iface = 0;
username = "USER";
passwd = "PWD";
ddnsprovider = "dyndns.org";
}
types {
type = "dyndns";
url = "/nic/update?system=dyndns&hostname=<domain>&myip=<ipaddr>&wildcard=NOCHG";
} {
type = "dyndns-custom";
url = "/nic/update?system=custom&hostname=<domain>&myip=<ipaddr>&wildcard=NOCHG";
} {
type = "dyndns-statdns";
url = "/nic/update?system=statdns&hostname=<domain>&myip=<ipaddr>&wildcard=NOCHG";
} {
type = "noip";
url = "/ducupdate.php?update=<b64>username=<username>&pass=<pass>&h[]=<domain>&ip=<ipaddr></b64>";
} {
type = "2mydns";
url = "/dyn.asp?username=<username>&password=<pass>&hostname=<domain>&myip=<ipaddr>";
} {
type = "userdefined";
url = "";
}
provider {
name = "dyndns.org";
type = "dyndns";
livedelay = 0w;
touchtime = 30d;
server = "members.dyndns.org";
infourl = "http://www.dyndns.org/";
} {
name = "dyndns.org-custom";
type = "dyndns-custom";
livedelay = 0w;
touchtime = 30d;
server = "members.dyndns.org";
infourl = "http://www.dyndns.org/";
} {
name = "dyndns.org-statdns";
type = "dyndns-statdns";
livedelay = 0w;
touchtime = 30d;
server = "members.dyndns.org";
infourl = "http://www.dyndns.org/";
} {
name = "No-IP.com";
type = "noip";
livedelay = 4m;
touchtime = 0w;
server = "dynupdate.no-ip.com:8245";
infourl = "http://www.no-ip.com/";
} {
name = "2myDNS";
type = "2mydns";
livedelay = 0w;
touchtime = 0w;
server = "dyn.2mydns.com";
infourl = "http://www.2mydns.com/";
} {
name = "Benutzerdefiniert";
type = "userdefined";
livedelay = 4m;
touchtime = 0w;
server = "";
infourl = "http://";
}
}
webui {
username = "";
password = "";
expertmode = yes;
wizard_completed = no;
}
capiovertcp {
enabled = no;
maxctrl = 1;
port = 5031;
}
// EOF