|
config global
|
|
# option uci_enabled '1'
|
|
|
|
config network
|
|
# Logical network dependency, fully tracked, fwknopd gets restarted when
|
|
# necessary. Specifying network takes precedence over config.PCAP_INTF
|
|
# option network 'wan'
|
|
|
|
config access
|
|
option SOURCE 'ANY'
|
|
option HMAC_KEY '__CHANGEME__'
|
|
option KEY '__CHANGEME__'
|
|
|
|
config config
|
|
# Alternative direct physical interface definition, but untracked - you
|
|
# are on your own to correctly start/stop the service when needed
|
|
# option PCAP_INTF 'eth0'
|
|
|
|
# Allow SPA clients to request access to services through an iptables
|
|
# firewall instead of just to it (i.e. access through the FWKNOP_FORWARD
|
|
# chain instead of the INPUT chain
|
|
option ENABLE_IPT_FORWARDING 'Y'
|
|
|
|
# Allow fwknopd to resolve hostnames in NAT access messages
|
|
option ENABLE_NAT_DNS 'Y'
|