Renaming Sentinel to Vigilia; adjusting scripts; adding brctl option in menuconfig...

[lede.git] / sentinel_setup / setup / startup.sh

diff --git a/sentinel_setup/setup/startup.sh b/sentinel_setup/setup/startup.sh
deleted file mode 100755 (executable)
index e9a41d1..0000000
--- a/sentinel_setup/setup/startup.sh
+++ /dev/null
@@ -1,55 +0,0 @@
-#!/bin/sh
-
-# Do IP mangling for checksum error issue after disable_dgaf=1
-iptables -A POSTROUTING -t mangle -p udp --dport 68 -j CHECKSUM --checksum-fill
-
-# block everything except ssh, icmp, http, and dhcp
-# Configure NAT
-iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
-
-# Protocol ICMP
-iptables -A FORWARD -j ACCEPT -p icmp;
-iptables -A INPUT -j ACCEPT -p icmp;
-iptables -A OUTPUT -j ACCEPT -p icmp;
-
-# SSH port 22
-# Note: 192.168.1.198 is the address of the master Raspberry Pi.
-# So, please adjust it to your own setup if needed.
-#iptables -A INPUT -j ACCEPT -s 192.168.1.198 -d 192.168.1.1 -p tcp --dport ssh;
-#iptables -A INPUT -j ACCEPT -s 192.168.1.198 -d 192.168.1.1 -p tcp --sport ssh;
-#iptables -A INPUT -j ACCEPT -s 192.168.1.1 -d 192.168.1.198 -p tcp --dport ssh;
-#iptables -A INPUT -j ACCEPT -s 192.168.1.1 -d 192.168.1.198 -p tcp --sport ssh;
-#iptables -A OUTPUT -j ACCEPT -s 192.168.1.198 -d 192.168.1.1 -p tcp --dport ssh;
-#iptables -A OUTPUT -j ACCEPT -s 192.168.1.198 -d 192.168.1.1 -p tcp --sport ssh;
-#iptables -A OUTPUT -j ACCEPT -s 192.168.1.1 -d 192.168.1.198 -p tcp --dport ssh;
-#iptables -A OUTPUT -j ACCEPT -s 192.168.1.1 -d 192.168.1.198 -p tcp --sport ssh;
-iptables -A INPUT -j ACCEPT -p tcp --dport ssh;                                
-iptables -A INPUT -j ACCEPT -p tcp --sport ssh;
-iptables -A OUTPUT -j ACCEPT -p tcp --dport ssh;                                
-iptables -A OUTPUT -j ACCEPT -p tcp --sport ssh;
-
-iptables -A FORWARD -j ACCEPT -p tcp --dport ssh;
-iptables -A FORWARD -j ACCEPT -p tcp --sport ssh;
-
-# DNS UDP and TCP port 53
-iptables -A INPUT -j ACCEPT -p tcp --dport domain
-iptables -A INPUT -j ACCEPT -p tcp --sport domain
-iptables -A OUTPUT -j ACCEPT -p tcp --dport domain
-iptables -A OUTPUT -j ACCEPT -p tcp --sport domain
-iptables -A INPUT -j ACCEPT -p udp --dport domain
-iptables -A INPUT -j ACCEPT -p udp --sport domain
-iptables -A OUTPUT -j ACCEPT -p udp --dport domain
-iptables -A OUTPUT -j ACCEPT -p udp --sport domain
-# BOOTP Client port 68
-iptables -A INPUT -j ACCEPT -p udp --dport bootpc
-iptables -A INPUT -j ACCEPT -p udp --sport bootpc;
-# BOOTP Server port 67
-iptables -A OUTPUT -j ACCEPT -p udp --dport bootps
-iptables -A OUTPUT -j ACCEPT -p udp --sport bootps;
-iptables -A FORWARD -j REJECT
-iptables -A INPUT -j REJECT
-iptables -A OUTPUT -j REJECT
-
-# bridge hairpin mode
-#/usr/sbin/brctl hairpin br-wifi wlan0 on
-