firewall

config defaults
    option syn_flood '1'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'REJECT'

config zone
    option name 'wan'
    option network 'wan'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'REJECT'
    option masq '0'
    option mtu_fix '1'

config zone
    option name 'freifunk'
    option network 'freifunk'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'REJECT'

config rule
    option name 'Reject-Telnet'
    option src 'freifunk'
    option proto 'tcp'
    option dest_port '23'
    option target 'REJECT'

config rule
    option src 'freifunk'
    option proto 'tcp'
    option dest_port '22'
    option target 'ACCEPT'

config include
    option path '/etc/firewall.user'

config rule
    option src 'freifunk'
    option dest 'wan'
    option target 'DROP'

config rule
    option src 'wan'
    option dest 'freifunk'
    option target 'DROP'