Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dropbear: Enable SSH from WAN firewall rule #7138

Closed
wants to merge 4 commits into from

Commits on May 26, 2024

  1. luci-mod-system: Dropbear: add flag to enable SSH firewall rule

    The wan_ssh_allow firewall rule should be pre-configured but disabled by default.
    For the main Dropbear instance will be shown an additional flag to enable the rule.
    Once the rule is enabled, the only way to disable it is on the Firewall page.
    
    Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
    stokito committed May 26, 2024
    Configuration menu
    Copy the full SHA
    2ce1c95 View commit details
    Browse the repository at this point in the history
  2. luci-mod-system: uhttpd: add flag to enable HTTP(S) firewall rule

    The wan_https_allow firewall rule should be pre-configured but disabled by default.
    For the main uhttpd instance will be shown an additional flag to enable the rule.
    Once the rule is enabled, the only way to disable it is on the Firewall page.
    
    Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
    stokito committed May 26, 2024
    Configuration menu
    Copy the full SHA
    3c83300 View commit details
    Browse the repository at this point in the history
  3. luci-mod-system: uhttpd: add flag for rfc1918_filter

    The rfc1918_filter blocks access to Luci from LAN when opening it by a domain which resolves to a public IP.
    So we need this option here to uncheck to get access.
    
    Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
    stokito committed May 26, 2024
    Configuration menu
    Copy the full SHA
    d8f2c53 View commit details
    Browse the repository at this point in the history
  4. luci-mod-system: uhttpd: add listen_http, listen_https, and enabled o…

    …ptions
    
    A user may want to change the uhttpd port or IP address e.g. set it to 192.168.1.1.
    If the user switched to another web server e.g. nginx or lighttpd he may also want to stop the uhttpd.
    The settings normally shouldn't be changed, but if a user starts to use a second web server then it will be enough to change only these options.
    
    Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
    stokito committed May 26, 2024
    Configuration menu
    Copy the full SHA
    59b7907 View commit details
    Browse the repository at this point in the history