#ACTION  SOURCE         DEST            PROTO   DEST    SOURCE     ORIGINAL     RATE            USER/
#                                               PORT    PORT(S)    DEST         LIMIT           GROUP
#                                               PORT    PORT(S)    DEST         LIMIT
#      Accept DNS connections from the firewall to the network
#
AllowDNS        fw              net

#       Accept SSH connections from the local network for administration
#
AllowSSH        loc             fw

#       Accept SSH connections from the internet for administration
AllowSSH        net             fw
AllowWeb       net             fw

#       Allow Ping To And From Firewall
#
AllowPing       loc             fw
AllowPing       fw              loc
AllowPing       fw              net

#       Allow Ping To Firewall from internet
#
AllowPing       net             fw

#
# OpenWRT specific rules:
# allow loc to fw udp/53 for local/caching DNS servers to work
# allow loc to fw tcp/80 for weblet to work
# allow loc to fw udp/67 and udp/68 for dnsmasq's dhcpd to work
AllowDNS        loc             fw
AllowWeb        loc             fw