archivos iniciales
This commit is contained in:
parent
009c9bdd10
commit
f12fa06ccf
37
config/dhcp
Normal file
37
config/dhcp
Normal file
@ -0,0 +1,37 @@
|
|||||||
|
|
||||||
|
config dnsmasq
|
||||||
|
option domainneeded '1'
|
||||||
|
option boguspriv '1'
|
||||||
|
option filterwin2k '0'
|
||||||
|
option localise_queries '1'
|
||||||
|
option rebind_protection '1'
|
||||||
|
option rebind_localhost '1'
|
||||||
|
option local '/lan/'
|
||||||
|
option domain 'lan'
|
||||||
|
option expandhosts '1'
|
||||||
|
option nonegcache '0'
|
||||||
|
option authoritative '1'
|
||||||
|
option readethers '1'
|
||||||
|
option leasefile '/tmp/dhcp.leases'
|
||||||
|
option resolvfile '/tmp/resolv.conf.auto'
|
||||||
|
option nonwildcard '1'
|
||||||
|
option localservice '1'
|
||||||
|
|
||||||
|
config dhcp 'lan'
|
||||||
|
option interface 'lan'
|
||||||
|
option start '100'
|
||||||
|
option limit '150'
|
||||||
|
option leasetime '12h'
|
||||||
|
option dhcpv6 'server'
|
||||||
|
option ra 'server'
|
||||||
|
|
||||||
|
config dhcp 'wan'
|
||||||
|
option interface 'wan'
|
||||||
|
option ignore '1'
|
||||||
|
|
||||||
|
config odhcpd 'odhcpd'
|
||||||
|
option maindhcp '0'
|
||||||
|
option leasefile '/tmp/hosts/odhcpd'
|
||||||
|
option leasetrigger '/usr/sbin/odhcpd-update'
|
||||||
|
option loglevel '4'
|
||||||
|
|
||||||
6
config/dropbear
Normal file
6
config/dropbear
Normal file
@ -0,0 +1,6 @@
|
|||||||
|
|
||||||
|
config dropbear
|
||||||
|
option PasswordAuth 'on'
|
||||||
|
option Port '22'
|
||||||
|
option Interface 'lan'
|
||||||
|
|
||||||
130
config/firewall
Normal file
130
config/firewall
Normal file
@ -0,0 +1,130 @@
|
|||||||
|
|
||||||
|
config defaults
|
||||||
|
option syn_flood '1'
|
||||||
|
option input 'ACCEPT'
|
||||||
|
option output 'ACCEPT'
|
||||||
|
option forward 'REJECT'
|
||||||
|
|
||||||
|
config zone
|
||||||
|
option name 'lan'
|
||||||
|
list network 'lan'
|
||||||
|
option input 'ACCEPT'
|
||||||
|
option output 'ACCEPT'
|
||||||
|
option forward 'ACCEPT'
|
||||||
|
|
||||||
|
config zone
|
||||||
|
option name 'wan'
|
||||||
|
list network 'wan'
|
||||||
|
list network 'wan6'
|
||||||
|
option input 'REJECT'
|
||||||
|
option output 'ACCEPT'
|
||||||
|
option forward 'REJECT'
|
||||||
|
option masq '1'
|
||||||
|
option mtu_fix '1'
|
||||||
|
|
||||||
|
config forwarding
|
||||||
|
option src 'lan'
|
||||||
|
option dest 'wan'
|
||||||
|
|
||||||
|
config rule
|
||||||
|
option name 'Allow-DHCP-Renew'
|
||||||
|
option src 'wan'
|
||||||
|
option proto 'udp'
|
||||||
|
option dest_port '68'
|
||||||
|
option target 'ACCEPT'
|
||||||
|
option family 'ipv4'
|
||||||
|
|
||||||
|
config rule
|
||||||
|
option name 'Allow-Ping'
|
||||||
|
option src 'wan'
|
||||||
|
option proto 'icmp'
|
||||||
|
option icmp_type 'echo-request'
|
||||||
|
option family 'ipv4'
|
||||||
|
option target 'ACCEPT'
|
||||||
|
|
||||||
|
config rule
|
||||||
|
option name 'Allow-IGMP'
|
||||||
|
option src 'wan'
|
||||||
|
option proto 'igmp'
|
||||||
|
option family 'ipv4'
|
||||||
|
option target 'ACCEPT'
|
||||||
|
|
||||||
|
config rule
|
||||||
|
option name 'Allow-DHCPv6'
|
||||||
|
option src 'wan'
|
||||||
|
option proto 'udp'
|
||||||
|
option src_ip 'fc00::/6'
|
||||||
|
option dest_ip 'fc00::/6'
|
||||||
|
option dest_port '546'
|
||||||
|
option family 'ipv6'
|
||||||
|
option target 'ACCEPT'
|
||||||
|
|
||||||
|
config rule
|
||||||
|
option name 'Allow-MLD'
|
||||||
|
option src 'wan'
|
||||||
|
option proto 'icmp'
|
||||||
|
option src_ip 'fe80::/10'
|
||||||
|
list icmp_type '130/0'
|
||||||
|
list icmp_type '131/0'
|
||||||
|
list icmp_type '132/0'
|
||||||
|
list icmp_type '143/0'
|
||||||
|
option family 'ipv6'
|
||||||
|
option target 'ACCEPT'
|
||||||
|
|
||||||
|
config rule
|
||||||
|
option name 'Allow-ICMPv6-Input'
|
||||||
|
option src 'wan'
|
||||||
|
option proto 'icmp'
|
||||||
|
list icmp_type 'echo-request'
|
||||||
|
list icmp_type 'echo-reply'
|
||||||
|
list icmp_type 'destination-unreachable'
|
||||||
|
list icmp_type 'packet-too-big'
|
||||||
|
list icmp_type 'time-exceeded'
|
||||||
|
list icmp_type 'bad-header'
|
||||||
|
list icmp_type 'unknown-header-type'
|
||||||
|
list icmp_type 'router-solicitation'
|
||||||
|
list icmp_type 'neighbour-solicitation'
|
||||||
|
list icmp_type 'router-advertisement'
|
||||||
|
list icmp_type 'neighbour-advertisement'
|
||||||
|
option limit '1000/sec'
|
||||||
|
option family 'ipv6'
|
||||||
|
option target 'ACCEPT'
|
||||||
|
|
||||||
|
config rule
|
||||||
|
option name 'Allow-ICMPv6-Forward'
|
||||||
|
option src 'wan'
|
||||||
|
option dest '*'
|
||||||
|
option proto 'icmp'
|
||||||
|
list icmp_type 'echo-request'
|
||||||
|
list icmp_type 'echo-reply'
|
||||||
|
list icmp_type 'destination-unreachable'
|
||||||
|
list icmp_type 'packet-too-big'
|
||||||
|
list icmp_type 'time-exceeded'
|
||||||
|
list icmp_type 'bad-header'
|
||||||
|
list icmp_type 'unknown-header-type'
|
||||||
|
option limit '1000/sec'
|
||||||
|
option family 'ipv6'
|
||||||
|
option target 'ACCEPT'
|
||||||
|
|
||||||
|
config rule
|
||||||
|
option name 'Allow-IPSec-ESP'
|
||||||
|
option src 'wan'
|
||||||
|
option dest 'lan'
|
||||||
|
option proto 'esp'
|
||||||
|
option target 'ACCEPT'
|
||||||
|
|
||||||
|
config rule
|
||||||
|
option name 'Allow-ISAKMP'
|
||||||
|
option src 'wan'
|
||||||
|
option dest 'lan'
|
||||||
|
option dest_port '500'
|
||||||
|
option proto 'udp'
|
||||||
|
option target 'ACCEPT'
|
||||||
|
|
||||||
|
config include
|
||||||
|
option path '/etc/firewall.user'
|
||||||
|
|
||||||
|
config include 'nodogsplash'
|
||||||
|
option type 'script'
|
||||||
|
option path '/usr/lib/nodogsplash/restart.sh'
|
||||||
|
|
||||||
38
config/luci
Normal file
38
config/luci
Normal file
@ -0,0 +1,38 @@
|
|||||||
|
|
||||||
|
config core 'main'
|
||||||
|
option lang 'auto'
|
||||||
|
option mediaurlbase '/luci-static/bootstrap'
|
||||||
|
option resourcebase '/luci-static/resources'
|
||||||
|
|
||||||
|
config extern 'flash_keep'
|
||||||
|
option uci '/etc/config/'
|
||||||
|
option dropbear '/etc/dropbear/'
|
||||||
|
option openvpn '/etc/openvpn/'
|
||||||
|
option passwd '/etc/passwd'
|
||||||
|
option opkg '/etc/opkg.conf'
|
||||||
|
option firewall '/etc/firewall.user'
|
||||||
|
option uploads '/lib/uci/upload/'
|
||||||
|
|
||||||
|
config internal 'languages'
|
||||||
|
|
||||||
|
config internal 'sauth'
|
||||||
|
option sessionpath '/tmp/luci-sessions'
|
||||||
|
option sessiontime '3600'
|
||||||
|
|
||||||
|
config internal 'ccache'
|
||||||
|
option enable '1'
|
||||||
|
|
||||||
|
config internal 'themes'
|
||||||
|
option Bootstrap '/luci-static/bootstrap'
|
||||||
|
|
||||||
|
config internal 'apply'
|
||||||
|
option rollback '30'
|
||||||
|
option holdoff '4'
|
||||||
|
option timeout '5'
|
||||||
|
option display '1.5'
|
||||||
|
|
||||||
|
config internal 'diag'
|
||||||
|
option dns 'openwrt.org'
|
||||||
|
option ping 'openwrt.org'
|
||||||
|
option route 'openwrt.org'
|
||||||
|
|
||||||
18
config/network
Normal file
18
config/network
Normal file
@ -0,0 +1,18 @@
|
|||||||
|
|
||||||
|
config interface 'loopback'
|
||||||
|
option ifname 'lo'
|
||||||
|
option proto 'static'
|
||||||
|
option ipaddr '127.0.0.1'
|
||||||
|
option netmask '255.0.0.0'
|
||||||
|
|
||||||
|
config globals 'globals'
|
||||||
|
option ula_prefix 'fdc0:a85c:e1de::/48'
|
||||||
|
|
||||||
|
config interface 'lan'
|
||||||
|
option type 'bridge'
|
||||||
|
option ifname 'eth0'
|
||||||
|
option proto 'static'
|
||||||
|
option ipaddr '192.168.1.1'
|
||||||
|
option netmask '255.255.255.0'
|
||||||
|
option ip6assign '60'
|
||||||
|
|
||||||
144
config/nodogsplash
Normal file
144
config/nodogsplash
Normal file
@ -0,0 +1,144 @@
|
|||||||
|
|
||||||
|
# The options available here are an adaptation of the settings used in nodogsplash.conf.
|
||||||
|
# See https://github.com/nodogsplash/nodogsplash/blob/master/resources/nodogsplash.conf
|
||||||
|
|
||||||
|
config nodogsplash
|
||||||
|
# Set to 0 to disable nodogsplash
|
||||||
|
option enabled 1
|
||||||
|
|
||||||
|
# Set to 0 to disable hook that makes nodogsplash restart when the firewall restarts.
|
||||||
|
# This hook is needed as a restart of Firewall overwrites nodogsplash iptables entries.
|
||||||
|
option fwhook_enabled '1'
|
||||||
|
|
||||||
|
# Serve the file splash.html from this directory
|
||||||
|
option webroot '/etc/nodogsplash/htdocs'
|
||||||
|
|
||||||
|
# Use plain configuration file
|
||||||
|
#option config '/etc/nodogsplash/nodogsplash.conf'
|
||||||
|
|
||||||
|
# Use this option to set the device nogogsplash will bind to.
|
||||||
|
# The value may be an interface section in /etc/config/network or a device name such as br-lan.
|
||||||
|
option gatewayinterface 'br-lan'
|
||||||
|
|
||||||
|
option gatewayname 'OpenWrt Nodogsplash'
|
||||||
|
option maxclients '250'
|
||||||
|
|
||||||
|
# Enables debug output (0-7)
|
||||||
|
#option debuglevel '7'
|
||||||
|
|
||||||
|
# Client timeouts in minutes
|
||||||
|
option preauthidletimeout '30'
|
||||||
|
option authidletimeout '120'
|
||||||
|
# Session Timeout is the interval after which clients are forced out (a value of 0 means never)
|
||||||
|
option sessiontimeout '1200'
|
||||||
|
|
||||||
|
# The interval in seconds at which nodogsplash checks client timeout status
|
||||||
|
option checkinterval '600'
|
||||||
|
|
||||||
|
# Enable BinAuth Support.
|
||||||
|
# If set, a program is called with several parameters on authentication (request) and deauthentication.
|
||||||
|
# Request for authentication:
|
||||||
|
# $<BinAuth> auth_client <client_mac> '<username>' '<password>'
|
||||||
|
#
|
||||||
|
# The username and password values may be empty strings and are URL encoded.
|
||||||
|
# The program is expected to output the number of seconds the client
|
||||||
|
# is to be authenticated. Zero or negative seconds will cause the authentification request
|
||||||
|
# to be rejected. The same goes for an exit code that is not 0.
|
||||||
|
# The output may contain a user specific download and upload limit in KBit/s:
|
||||||
|
# <seconds> <upload> <download>
|
||||||
|
#
|
||||||
|
# Called on authentication or deauthentication:
|
||||||
|
# $<BinAuth> <*auth|*deauth> <incoming_bytes> <outgoing_bytes> <session_start> <session_end>
|
||||||
|
#
|
||||||
|
# "client_auth": Client authenticated via this script.
|
||||||
|
# "client_deauth": Client deauthenticated by the client via splash page.
|
||||||
|
# "idle_deauth": Client was deauthenticated because of inactivity.
|
||||||
|
# "timeout_deauth": Client was deauthenticated because the session timed out.
|
||||||
|
# "ndsctl_auth": Client was authenticated manually by the ndsctl tool.
|
||||||
|
# "ndsctl_deauth": Client was deauthenticated by the ndsctl tool.
|
||||||
|
# "shutdown_deauth": Client was deauthenticated by Nodogsplash terminating.
|
||||||
|
#
|
||||||
|
# Values session_start and session_start are in seconds since 1970 or 0 for unknown/unlimited.
|
||||||
|
#
|
||||||
|
#option binauth '/bin/myauth.sh'
|
||||||
|
|
||||||
|
# Enable Forwarding Authentication Service (FAS)
|
||||||
|
# If set redirection is changed from splash.html to a FAS (provided by the system administrator)
|
||||||
|
# The value is the IP port number of the FAS
|
||||||
|
#option fasport '80'
|
||||||
|
|
||||||
|
# Option: fasremoteip
|
||||||
|
# Default: GatewayAddress (the IP of NDS)
|
||||||
|
# If set, this is the remote ip address of the FAS.
|
||||||
|
#option fasremoteip '46.32.240.41'
|
||||||
|
|
||||||
|
# Option: faspath
|
||||||
|
# Default: /
|
||||||
|
# This is the path from the FAS Web Root to the FAS login page
|
||||||
|
# (not the file system root).
|
||||||
|
#option faspath '/onboard-wifi.net/nodog/fas.php'
|
||||||
|
|
||||||
|
# Option: fas_secure_enabled
|
||||||
|
# Default: 1
|
||||||
|
# If set to "1", authaction and the client token are not revealed and it is the responsibility
|
||||||
|
# of the FAS to request the token from NDSCTL.
|
||||||
|
# If set to "0", the client token is sent to the FAS in clear text in the query string of the
|
||||||
|
# redirect along with authaction and redir.
|
||||||
|
#option fas_secure_enabled '0'
|
||||||
|
|
||||||
|
# Your router may have several interfaces, and you
|
||||||
|
# probably want to keep them private from the network/gatewayinterface.
|
||||||
|
# If so, you should block the entire subnets on those interfaces, e.g.:
|
||||||
|
#list authenticated_users 'block to 192.168.0.0/16'
|
||||||
|
#list authenticated_users 'block to 10.0.0.0/8'
|
||||||
|
|
||||||
|
# Typical ports you will probably want to open up.
|
||||||
|
#list authenticated_users 'allow tcp port 22'
|
||||||
|
#list authenticated_users 'allow tcp port 53'
|
||||||
|
#list authenticated_users 'allow udp port 53'
|
||||||
|
#list authenticated_users 'allow tcp port 80'
|
||||||
|
#list authenticated_users 'allow tcp port 443'
|
||||||
|
# Or for happy customers allow all
|
||||||
|
list authenticated_users 'allow all'
|
||||||
|
|
||||||
|
# For preauthenticated users to resolve IP addresses in their
|
||||||
|
# initial request not using the router itself as a DNS server,
|
||||||
|
# Leave commented to help prevent DNS tunnelling
|
||||||
|
#list preauthenticated_users 'allow tcp port 53'
|
||||||
|
#list preauthenticated_users 'allow udp port 53'
|
||||||
|
|
||||||
|
# Allow ports for SSH/Telnet/DNS/DHCP/HTTP/HTTPS
|
||||||
|
list users_to_router 'allow tcp port 22'
|
||||||
|
list users_to_router 'allow tcp port 23'
|
||||||
|
list users_to_router 'allow tcp port 53'
|
||||||
|
list users_to_router 'allow udp port 53'
|
||||||
|
list users_to_router 'allow udp port 67'
|
||||||
|
list users_to_router 'allow tcp port 80'
|
||||||
|
|
||||||
|
# MAC addresses that are / are not allowed to access the splash page
|
||||||
|
# Value is either 'allow' or 'block'. The allowedmac or blockedmac list is used.
|
||||||
|
#option macmechanism 'allow'
|
||||||
|
#list allowedmac '00:00:C0:01:D0:0D'
|
||||||
|
#list allowedmac '00:00:C0:01:D0:1D'
|
||||||
|
#list blockedmac '00:00:C0:01:D0:2D'
|
||||||
|
|
||||||
|
# MAC addresses that do not need to authenticate
|
||||||
|
#list trustedmac '00:00:C0:01:D0:1D'
|
||||||
|
|
||||||
|
# Nodogsplash uses specific HEXADECIMAL values to mark packets used by iptables as a bitwise mask.
|
||||||
|
# This mask can conflict with the requirements of other packages such as mwan3, sqm etc
|
||||||
|
# Any values set here are interpreted as in hex format.
|
||||||
|
#
|
||||||
|
# List: fw_mark_authenticated
|
||||||
|
# Default: 30000 (0011|0000|0000|0000|0000 binary)
|
||||||
|
#
|
||||||
|
# List: fw_mark_trusted
|
||||||
|
# Default: 20000 (0010|0000|0000|0000|0000 binary)
|
||||||
|
#
|
||||||
|
# List: fw_mark_blocked
|
||||||
|
# Default: 10000 (0001|0000|0000|0000|0000 binary)
|
||||||
|
#
|
||||||
|
#list fw_mark_authenticated '30000'
|
||||||
|
#list fw_mark_trusted '20000'
|
||||||
|
#list fw_mark_blocked '10000'
|
||||||
|
|
||||||
10
config/rpcd
Normal file
10
config/rpcd
Normal file
@ -0,0 +1,10 @@
|
|||||||
|
config rpcd
|
||||||
|
option socket /var/run/ubus.sock
|
||||||
|
option timeout 30
|
||||||
|
|
||||||
|
config login
|
||||||
|
option username 'root'
|
||||||
|
option password '$p$root'
|
||||||
|
list read '*'
|
||||||
|
list write '*'
|
||||||
|
|
||||||
52
config/system
Normal file
52
config/system
Normal file
@ -0,0 +1,52 @@
|
|||||||
|
|
||||||
|
config system
|
||||||
|
option hostname 'OpenWrt'
|
||||||
|
option timezone 'UTC'
|
||||||
|
option ttylogin '0'
|
||||||
|
option log_size '64'
|
||||||
|
option urandom_seed '0'
|
||||||
|
|
||||||
|
config timeserver 'ntp'
|
||||||
|
option enabled '1'
|
||||||
|
option enable_server '0'
|
||||||
|
list server '0.openwrt.pool.ntp.org'
|
||||||
|
list server '1.openwrt.pool.ntp.org'
|
||||||
|
list server '2.openwrt.pool.ntp.org'
|
||||||
|
list server '3.openwrt.pool.ntp.org'
|
||||||
|
|
||||||
|
config led 'led_rssilow'
|
||||||
|
option sysfs 'ubnt:red:link1'
|
||||||
|
option trigger 'rssi'
|
||||||
|
option iface 'rssid_wlan0'
|
||||||
|
option minq '1'
|
||||||
|
option maxq '100'
|
||||||
|
option offset '0'
|
||||||
|
option factor '13'
|
||||||
|
|
||||||
|
config led 'led_rssimediumlow'
|
||||||
|
option sysfs 'ubnt:orange:link2'
|
||||||
|
option trigger 'rssi'
|
||||||
|
option iface 'rssid_wlan0'
|
||||||
|
option minq '26'
|
||||||
|
option maxq '100'
|
||||||
|
option offset '-25'
|
||||||
|
option factor '13'
|
||||||
|
|
||||||
|
config led 'led_rssimediumhigh'
|
||||||
|
option sysfs 'ubnt:green:link3'
|
||||||
|
option trigger 'rssi'
|
||||||
|
option iface 'rssid_wlan0'
|
||||||
|
option minq '51'
|
||||||
|
option maxq '100'
|
||||||
|
option offset '-50'
|
||||||
|
option factor '13'
|
||||||
|
|
||||||
|
config led 'led_rssihigh'
|
||||||
|
option sysfs 'ubnt:green:link4'
|
||||||
|
option trigger 'rssi'
|
||||||
|
option iface 'rssid_wlan0'
|
||||||
|
option minq '76'
|
||||||
|
option maxq '100'
|
||||||
|
option offset '-75'
|
||||||
|
option factor '13'
|
||||||
|
|
||||||
0
config/ubootenv
Normal file
0
config/ubootenv
Normal file
56
config/ucitrack
Normal file
56
config/ucitrack
Normal file
@ -0,0 +1,56 @@
|
|||||||
|
config network
|
||||||
|
option init network
|
||||||
|
list affects dhcp
|
||||||
|
list affects radvd
|
||||||
|
|
||||||
|
config wireless
|
||||||
|
list affects network
|
||||||
|
|
||||||
|
config firewall
|
||||||
|
option init firewall
|
||||||
|
list affects luci-splash
|
||||||
|
list affects qos
|
||||||
|
list affects miniupnpd
|
||||||
|
|
||||||
|
config olsr
|
||||||
|
option init olsrd
|
||||||
|
|
||||||
|
config dhcp
|
||||||
|
option init dnsmasq
|
||||||
|
list affects odhcpd
|
||||||
|
|
||||||
|
config odhcpd
|
||||||
|
option init odhcpd
|
||||||
|
|
||||||
|
config dropbear
|
||||||
|
option init dropbear
|
||||||
|
|
||||||
|
config httpd
|
||||||
|
option init httpd
|
||||||
|
|
||||||
|
config fstab
|
||||||
|
option exec '/sbin/block mount'
|
||||||
|
|
||||||
|
config qos
|
||||||
|
option init qos
|
||||||
|
|
||||||
|
config system
|
||||||
|
option init led
|
||||||
|
option exec '/etc/init.d/log reload'
|
||||||
|
list affects luci_statistics
|
||||||
|
list affects dhcp
|
||||||
|
|
||||||
|
config luci_splash
|
||||||
|
option init luci_splash
|
||||||
|
|
||||||
|
config upnpd
|
||||||
|
option init miniupnpd
|
||||||
|
|
||||||
|
config ntpclient
|
||||||
|
option init ntpclient
|
||||||
|
|
||||||
|
config samba
|
||||||
|
option init samba
|
||||||
|
|
||||||
|
config tinyproxy
|
||||||
|
option init tinyproxy
|
||||||
135
config/uhttpd
Normal file
135
config/uhttpd
Normal file
@ -0,0 +1,135 @@
|
|||||||
|
# Server configuration
|
||||||
|
config uhttpd main
|
||||||
|
|
||||||
|
# HTTP listen addresses, multiple allowed
|
||||||
|
list listen_http 0.0.0.0:80
|
||||||
|
list listen_http [::]:80
|
||||||
|
|
||||||
|
# HTTPS listen addresses, multiple allowed
|
||||||
|
list listen_https 0.0.0.0:443
|
||||||
|
list listen_https [::]:443
|
||||||
|
|
||||||
|
# Redirect HTTP requests to HTTPS if possible
|
||||||
|
option redirect_https 1
|
||||||
|
|
||||||
|
# Server document root
|
||||||
|
option home /www
|
||||||
|
|
||||||
|
# Reject requests from RFC1918 IP addresses
|
||||||
|
# directed to the servers public IP(s).
|
||||||
|
# This is a DNS rebinding countermeasure.
|
||||||
|
option rfc1918_filter 1
|
||||||
|
|
||||||
|
# Maximum number of concurrent requests.
|
||||||
|
# If this number is exceeded, further requests are
|
||||||
|
# queued until the number of running requests drops
|
||||||
|
# below the limit again.
|
||||||
|
option max_requests 3
|
||||||
|
|
||||||
|
# Maximum number of concurrent connections.
|
||||||
|
# If this number is exceeded, further TCP connection
|
||||||
|
# attempts are queued until the number of active
|
||||||
|
# connections drops below the limit again.
|
||||||
|
option max_connections 100
|
||||||
|
|
||||||
|
# Certificate and private key for HTTPS.
|
||||||
|
# If no listen_https addresses are given,
|
||||||
|
# the key options are ignored.
|
||||||
|
option cert /etc/uhttpd.crt
|
||||||
|
option key /etc/uhttpd.key
|
||||||
|
|
||||||
|
# CGI url prefix, will be searched in docroot.
|
||||||
|
# Default is /cgi-bin
|
||||||
|
option cgi_prefix /cgi-bin
|
||||||
|
|
||||||
|
# List of extension->interpreter mappings.
|
||||||
|
# Files with an associated interpreter can
|
||||||
|
# be called outside of the CGI prefix and do
|
||||||
|
# not need to be executable.
|
||||||
|
# list interpreter ".php=/usr/bin/php-cgi"
|
||||||
|
# list interpreter ".cgi=/usr/bin/perl"
|
||||||
|
|
||||||
|
# List of prefix->Lua handler mappings.
|
||||||
|
# Any request to an URL beneath the prefix
|
||||||
|
# will be dispatched to the associated Lua
|
||||||
|
# handler script. Lua support is disabled when
|
||||||
|
# no handler mappings are specified. Lua prefix
|
||||||
|
# matches have precedence over the CGI prefix.
|
||||||
|
list lua_prefix "/cgi-bin/luci=/usr/lib/lua/luci/sgi/uhttpd.lua"
|
||||||
|
|
||||||
|
# Specify the ubus-rpc prefix and socket path.
|
||||||
|
# option ubus_prefix /ubus
|
||||||
|
# option ubus_socket /var/run/ubus.sock
|
||||||
|
|
||||||
|
# CGI/Lua timeout, if the called script does not
|
||||||
|
# write data within the given amount of seconds,
|
||||||
|
# the server will terminate the request with
|
||||||
|
# 504 Gateway Timeout response.
|
||||||
|
option script_timeout 60
|
||||||
|
|
||||||
|
# Network timeout, if the current connection is
|
||||||
|
# blocked for the specified amount of seconds,
|
||||||
|
# the server will terminate the associated
|
||||||
|
# request process.
|
||||||
|
option network_timeout 30
|
||||||
|
|
||||||
|
# HTTP Keep-Alive, specifies the timeout for persistent
|
||||||
|
# HTTP/1.1 connections. Setting this to 0 will disable
|
||||||
|
# persistent HTTP connections.
|
||||||
|
option http_keepalive 20
|
||||||
|
|
||||||
|
# TCP Keep-Alive, send periodic keep-alive probes
|
||||||
|
# over established connections to detect dead peers.
|
||||||
|
# The value is given in seconds to specify the
|
||||||
|
# interval between subsequent probes.
|
||||||
|
# Setting this to 0 will disable TCP keep-alive.
|
||||||
|
option tcp_keepalive 1
|
||||||
|
|
||||||
|
# Basic auth realm, defaults to local hostname
|
||||||
|
# option realm OpenWrt
|
||||||
|
|
||||||
|
# Configuration file in busybox httpd format
|
||||||
|
# option config /etc/httpd.conf
|
||||||
|
|
||||||
|
# Do not follow symlinks that point outside of the
|
||||||
|
# home directory.
|
||||||
|
# option no_symlinks 0
|
||||||
|
|
||||||
|
# Do not produce directory listings but send 403
|
||||||
|
# instead if a client requests an url pointing to
|
||||||
|
# a directory without any index file.
|
||||||
|
# option no_dirlists 0
|
||||||
|
|
||||||
|
# Do not authenticate any ubus-rpc requests against
|
||||||
|
# the ubus session/access procedure.
|
||||||
|
# This is dangerous and should be always left off
|
||||||
|
# except for development and debug purposes!
|
||||||
|
# option no_ubusauth 0
|
||||||
|
|
||||||
|
# For this instance of uhttpd use the listed httpauth
|
||||||
|
# sections to require Basic auth to the specified
|
||||||
|
# resources.
|
||||||
|
# list httpauth prefix_user
|
||||||
|
|
||||||
|
|
||||||
|
# Defaults for automatic certificate and key generation
|
||||||
|
config cert defaults
|
||||||
|
|
||||||
|
# Validity time
|
||||||
|
option days 730
|
||||||
|
|
||||||
|
# RSA key size
|
||||||
|
option bits 2048
|
||||||
|
|
||||||
|
# Location
|
||||||
|
option country ZZ
|
||||||
|
option state Somewhere
|
||||||
|
option location Unknown
|
||||||
|
|
||||||
|
# Common name
|
||||||
|
option commonname 'OpenWrt'
|
||||||
|
|
||||||
|
# config httpauth prefix_user
|
||||||
|
# option prefix /protected/url/path
|
||||||
|
# option username user
|
||||||
|
# option password 'plaintext_or_md5_or_$p$user_for_system_user'
|
||||||
15
config/wireless
Normal file
15
config/wireless
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
|
||||||
|
config wifi-device 'radio0'
|
||||||
|
option type 'mac80211'
|
||||||
|
option channel '11'
|
||||||
|
option hwmode '11g'
|
||||||
|
option path 'pci0000:00/0000:00:00.0'
|
||||||
|
option htmode 'HT20'
|
||||||
|
|
||||||
|
config wifi-iface 'default_radio0'
|
||||||
|
option device 'radio0'
|
||||||
|
option network 'lan'
|
||||||
|
option mode 'ap'
|
||||||
|
option ssid 'OpenWrt'
|
||||||
|
option encryption 'none'
|
||||||
|
|
||||||
BIN
nodogsplash/htdocs/images/splash.jpg
Normal file
BIN
nodogsplash/htdocs/images/splash.jpg
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 2.1 KiB |
55
nodogsplash/htdocs/splash.css
Normal file
55
nodogsplash/htdocs/splash.css
Normal file
@ -0,0 +1,55 @@
|
|||||||
|
body {
|
||||||
|
background-color: lightgrey;
|
||||||
|
color: black;
|
||||||
|
margin-left: 5%;
|
||||||
|
margin-right: 5%;
|
||||||
|
text-align: left;
|
||||||
|
}
|
||||||
|
|
||||||
|
img {
|
||||||
|
width: 40%;
|
||||||
|
max-width: 180px;
|
||||||
|
margin-left: 0%;
|
||||||
|
margin-right: 5%;
|
||||||
|
}
|
||||||
|
|
||||||
|
input[type=submit] {
|
||||||
|
color: white;
|
||||||
|
background: green;
|
||||||
|
margin-left: 0%;
|
||||||
|
margin-right: 5%;
|
||||||
|
text-align: left;
|
||||||
|
font-size: 1.0em;
|
||||||
|
line-height: 2.5em;
|
||||||
|
font-weight: bold;
|
||||||
|
border: 3px;
|
||||||
|
border-style: inset;
|
||||||
|
}
|
||||||
|
|
||||||
|
med-blue {
|
||||||
|
font-size: 1.3em;
|
||||||
|
color: blue;
|
||||||
|
font-weight: bold;
|
||||||
|
font-style: normal;
|
||||||
|
}
|
||||||
|
|
||||||
|
big-red {
|
||||||
|
font-size: 1.7em;
|
||||||
|
color: red;
|
||||||
|
font-weight: bold;
|
||||||
|
}
|
||||||
|
|
||||||
|
italic-black {
|
||||||
|
font-size: 1.3em;
|
||||||
|
color: black;
|
||||||
|
font-weight: bold;
|
||||||
|
font-style: italic;
|
||||||
|
}
|
||||||
|
|
||||||
|
copy-right {
|
||||||
|
font-size: 0.7em;
|
||||||
|
color: darkgrey;
|
||||||
|
font-weight: bold;
|
||||||
|
font-style:italic;
|
||||||
|
}
|
||||||
|
|
||||||
93
nodogsplash/htdocs/splash.html
Normal file
93
nodogsplash/htdocs/splash.html
Normal file
@ -0,0 +1,93 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html>
|
||||||
|
<head>
|
||||||
|
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate">
|
||||||
|
<meta http-equiv="Pragma" content="no-cache">
|
||||||
|
<meta http-equiv="Expires" content="0">
|
||||||
|
<meta charset="utf-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
|
|
||||||
|
<link rel="shortcut icon" href="/$imagesdir/splash.jpg" type="image/x-icon">
|
||||||
|
<link rel="stylesheet" type="text/css" href="/splash.css">
|
||||||
|
|
||||||
|
<title>$gatewayname Hotspot Gateway.</title>
|
||||||
|
|
||||||
|
<!--
|
||||||
|
Content:
|
||||||
|
Nodogsplash (NDS), by default, serves this splash page (splash.html)
|
||||||
|
when a client device Captive Portal Detection (CPD) process
|
||||||
|
attempts to send a port 80 request to the Internet.
|
||||||
|
|
||||||
|
You may either embed css in this file or use a separate .css file
|
||||||
|
in the same directory as this file, as demonstrated here.
|
||||||
|
|
||||||
|
It should be noted when designing a custom splash page
|
||||||
|
that for security reasons many CPD implementations:
|
||||||
|
Immediately close the browser when the client has authenticated.
|
||||||
|
Prohibit the use of href links.
|
||||||
|
Prohibit downloading of external files
|
||||||
|
(including .css and .js).
|
||||||
|
Prohibit the execution of javascript.
|
||||||
|
|
||||||
|
Also, note that any images you reference should reside in the
|
||||||
|
subdirectory that is defined by $imagesdir (default: "images").
|
||||||
|
|
||||||
|
Authentication:
|
||||||
|
A client is authenticated on submitting an HTTP form, method=get,
|
||||||
|
passing $authaction, $tok and $redir.
|
||||||
|
|
||||||
|
It is also possible to authenticate using an href link to
|
||||||
|
$authtarget but be aware that many device Captive Portal Detection
|
||||||
|
processes prohibit href links, so this method may not work with
|
||||||
|
all client devices.
|
||||||
|
|
||||||
|
Available variables:
|
||||||
|
error_msg: $error_msg
|
||||||
|
gatewayname: $gatewayname
|
||||||
|
tok: $tok
|
||||||
|
redir: $redir
|
||||||
|
authaction: $authaction
|
||||||
|
denyaction: $denyaction
|
||||||
|
authtarget: $authtarget
|
||||||
|
clientip: $clientip
|
||||||
|
clientmac: $clientmac
|
||||||
|
clientupload: $clientupload
|
||||||
|
clientdownload: $clientdownload
|
||||||
|
gatewaymac: $gatewaymac
|
||||||
|
nclients: $nclients
|
||||||
|
maxclients: $maxclients
|
||||||
|
uptime: $uptime
|
||||||
|
imagesdir: $imagesdir
|
||||||
|
pagesdir: $pagesdir
|
||||||
|
|
||||||
|
Additional Variables that can be passed back via the HTTP get,
|
||||||
|
or appended to the query string of the authtarget link:
|
||||||
|
username
|
||||||
|
password
|
||||||
|
-->
|
||||||
|
|
||||||
|
</head>
|
||||||
|
|
||||||
|
<body>
|
||||||
|
<med-blue>$gatewayname Hotspot Gateway.</med-blue>
|
||||||
|
<br><br>
|
||||||
|
<img src="$imagesdir/splash.jpg" alt="Splash Page: For access to the Internet, please click Continue.">
|
||||||
|
<hr>
|
||||||
|
<big-red>Welcome!</big-red>
|
||||||
|
<hr>
|
||||||
|
<br>
|
||||||
|
<italic-black>For access to the Internet, please tap or click Continue.</italic-black>
|
||||||
|
<br><br>
|
||||||
|
<hr>
|
||||||
|
|
||||||
|
<form method="get" action="$authaction">
|
||||||
|
<input type="hidden" name="tok" value="$tok">
|
||||||
|
<input type="hidden" name="redir" value="$redir">
|
||||||
|
<input type="submit" value="Continue">
|
||||||
|
</form>
|
||||||
|
|
||||||
|
<hr>
|
||||||
|
<copy-right>Copyright © The Nodogsplash Contributors 2004-2018.<br>This software is released under the GNU GPL license.</copy-right>
|
||||||
|
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
41
nodogsplash/htdocs/status.html
Normal file
41
nodogsplash/htdocs/status.html
Normal file
@ -0,0 +1,41 @@
|
|||||||
|
<!DOCTYPE html>
|
||||||
|
<html>
|
||||||
|
<head>
|
||||||
|
|
||||||
|
<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate">
|
||||||
|
<meta http-equiv="Pragma" content="no-cache">
|
||||||
|
<meta http-equiv="Expires" content="0">
|
||||||
|
<meta charset="utf-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
|
|
||||||
|
<link rel="shortcut icon" href="/$imagesdir/splash.jpg" type="image/x-icon">
|
||||||
|
<link rel="stylesheet" type="text/css" href="/splash.css">
|
||||||
|
|
||||||
|
<title>$gatewayname Hotspot Gateway Status</title>
|
||||||
|
|
||||||
|
<!--
|
||||||
|
Status:
|
||||||
|
The Status page is served to a client if they are already authenticated.
|
||||||
|
This may occur if the client user selects "Back" on the CPD browser
|
||||||
|
screen after they have successfully authenticated.
|
||||||
|
|
||||||
|
The same template variables are available as for the splash page.
|
||||||
|
-->
|
||||||
|
|
||||||
|
</head>
|
||||||
|
|
||||||
|
<body>
|
||||||
|
|
||||||
|
<med-blue>$gatewayname Hotspot Gateway.</med-blue>
|
||||||
|
<br><br>
|
||||||
|
<img src="$imagesdir/splash.jpg" alt="You are already logged in and have access to the Internet.">
|
||||||
|
<hr>
|
||||||
|
<p><big-red>You are already logged in and have access to the Internet.</big-red></p>
|
||||||
|
<hr>
|
||||||
|
<p><italic-black>You can use your Browser, Email and other network Apps as you normally would.</italic-black></p>
|
||||||
|
|
||||||
|
<hr>
|
||||||
|
<copy-right>Copyright © The Nodogsplash Contributors 2004-2018.<br>This software is released under the GNU GPL license.</copy-right>
|
||||||
|
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
Loading…
Reference in New Issue
Block a user