Changeset 1224 for trunk/wifidog/wifidog.conf

Timestamp:

04/27/07 13:15:47 (5 years ago)

Author:

benoitg

Message:

• wifidog.conf: Improve comments and add examples of blocking access to the upstream LAN.

Files:

• trunk/wifidog/wifidog.conf (modified) (5 diffs)

trunk/wifidog/wifidog.conf

@@ -18 +18 @@
 # Optional
 #
-# Set this to the external interface.  Typically vlan1 for OpenWrt, and eth0 or ppp0 otherwise,
+# Set this to the external interface (the one going out to the Inernet or your larger LAN).  
+# Typically vlan1 for OpenWrt, and eth0 or ppp0 otherwise,
 # Normally autodetected
 
@@ -27 +28 @@
 # Mandatory
 #
-# Set this to the internal interface.    Typically br0 for OpenWrt, and eth1 otherwise
+# Set this to the internal interface (typically your wifi interface).    
+# Typically br0 for OpenWrt, and eth1, wlan0, ath0, etc. otherwise
 
 GatewayInterface eth1
@@ -35 +37 @@
 # Optional
 #
-# Set this to the internal IP address of the gateway
+# Set this to the internal IP address of the gateway.  Not normally required.
 
 # GatewayAddress 192.168.1.1
@@ -65 +67 @@
 #    Path /
 #}
-
-# Parameter: Portal
-# Default: none
-# Optional
-#
-# Set this to a URL for your portal, if you run without an auth server
-# Portal http://www.ilesansfil.org/
 
 # Parameter: Daemon
@@ -144 +139 @@
 # Used for rules to be applied to all other rulesets except locked.
 FirewallRuleSet global {
-    # This is the default config for the Teliphone service.
+    ## To block SMTP out, as it's a tech support nightmare, and a legal liability
+    #FirewallRule block tcp port 25
+    
+    ## Use the following if you don't want clients to be able to access machines on 
+    ## the private LAN that gives internet access to wifidog.  Note that this is not
+    ## client isolation;  The laptops will still be able to talk to one another, as
+    ## well as to any machine bridged to the wifi of the router.
+    # FirewallRule block to 192.168.0.0/16
+    # FirewallRule block to 172.16.0.0/12
+    # FirewallRule block to 10.0.0.0/8
+    
+    ## This is an example ruleset for the Teliphone service.
     #FirewallRule allow udp to 69.90.89.192/27
     #FirewallRule allow udp to 69.90.85.0/27
     #FirewallRule allow tcp port 80 to 69.90.89.205
-    # To block SMTP out, as it's a tech support nightmare, and a legal liability
-    #FirewallRule block tcp port 25
 }