# Configuration file for the OpenWrt firewall
#
# RULE SYNTAX:
#
# forward:<match>:<target>[:<port>]
#   - forwards all packets matched by <match> to <target>,
#     optionally changing the port to <port>
#
# accept:<match>
#   - accepts all traffic matched by <match>
#
# drop:<match>
#   - drops all traffic matched by <match>
#
#
# MATCHING OPTIONS:
#
# src=<ip>
#   - match the source ip <ip>
#
# dest=<ip>
#   - match the destination ip <ip>
#
# proto=<proto>
#   - match the protocol by name or number
#
# sport=<port(s)>
#   - match the source port(s), see below for syntax
#   - requires proto=tcp or proto=udp
#
# dport=<port(s)>
#   - match the destination port(s), see below for syntax
#   - requires proto=tcp or proto=udp
#
# layer7=<name>
#   - match the layer7 filter <name>
#
# EXAMPLES:
#
# drop:proto=tcp dport=22 src=some.bad.host
# accept:proto=tcp dport=22
# forward:proto=tcp dport=60168:192.168.1.2