* The makefile produces the nft and iptables capable `pbr` package and the `pbr-iptables` package for legacy setups * This replaces `vpnbypass` and `vpn-policy-routing` packages * I'm soliciting feedback on this package and my intention is to update the version to 1.0.0 before this is merged, but I need the feedback on this and luci-app-pbr before then. Signed-off-by: Stan Grishin <stangri@melmac.ca>
45 lines
1.1 KiB
Text
45 lines
1.1 KiB
Text
config pbr 'config'
|
|
option enabled '0'
|
|
option verbosity '2'
|
|
option strict_enforcement '1'
|
|
option resolver_set 'dnsmasq.ipset'
|
|
option ipv6_enabled '0'
|
|
list ignored_interface 'vpnserver'
|
|
list ignored_interface 'wgserver'
|
|
option boot_timeout '30'
|
|
option rule_create_option 'add'
|
|
option procd_reload_delay '1'
|
|
option webui_show_ignore_target '0'
|
|
list webui_supported_protocol 'all'
|
|
list webui_supported_protocol 'tcp'
|
|
list webui_supported_protocol 'udp'
|
|
list webui_supported_protocol 'tcp udp'
|
|
list webui_supported_protocol 'icmp'
|
|
|
|
config include
|
|
option path '/usr/share/pbr/pbr.user.aws'
|
|
option enabled 0
|
|
|
|
config include
|
|
option path '/usr/share/pbr/pbr.user.netflix'
|
|
option enabled 0
|
|
|
|
config policy
|
|
option name 'Plex/Emby Local Server'
|
|
option interface 'wan'
|
|
option src_port '8096 8920 32400'
|
|
option enabled '0'
|
|
|
|
config policy
|
|
option name 'Plex/Emby Remote Servers'
|
|
option interface 'wan'
|
|
option dest_addr 'plex.tv my.plexapp.com emby.media app.emby.media tv.emby.media'
|
|
option enabled '0'
|
|
|
|
config policy
|
|
option name 'WireGuard Server'
|
|
option interface 'wan'
|
|
option src_port '51820'
|
|
option chain 'OUTPUT'
|
|
option proto 'udp'
|
|
option enabled '0'
|