今天终于有时间试试这个固件,刷进了大亚102-C,结果是不能用。
1 N' p4 _+ C, e# k# D M看过这个猫的说明书后,才发现这同时还是个四口的路由器,可能设计上有所不同吧。不会用六针线刷回的最好别试这个固件了!!!!, K) E$ {. ~6 | S( K
把默认的规则贴上来看看:
/ ^: I) m7 r! R1 b \create user smc adsl passwd smcadmin root
/ g8 |5 g- e& t: n' `$ n8 i2 [modify system logthresh 1 dst on timezone "CET"' v. h: m" S; | J$ p& }
size maxvc 2 max1483vc 2 maxppe 2
- L$ M; l) D. O4 \modify nbsize maxipsess 512
( l/ |# Q4 t6 D+ {. Ocreate ethernet intf ifname eth-0 ip 192.168.1.1 mask 255.255.255.0 inside% u8 \/ c! [; u& w
modify dsl config multi bitswap enable* x) D3 ]+ Q* h9 a
create atm port ifname atm-0 maxvc 28 _. ]/ B- ]; @9 n7 D+ _
create atm trfdesc trfindex 0 NOCLP_NOSCR/ }7 B4 n' Z& l. V1 D+ l2 M+ ^# c
create atm vc intf ifname aal5-0 lowif atm-0 vpi 8 vci 35 llcmux
) F/ ~( B+ ~0 x% tcreate ppp security ifname ppp-0 PAP login guest passwd guest0 c7 s& t8 x: z0 @3 S: z
create ppp intf ifname ppp-0 startondata lowif aal5-0 droute true PPOA usedhcp false outside usedns true# `4 b4 n8 q6 ` ~& I6 P
modify ppp global pppsesstimer 5 ignorewantolan true maxauthtries 5 authretrydelay 3
! e# {) A% j. Ycreate rip intf ifname ppp-0 , e: a% c" V) S1 R
create dhcp relay intf ifname ppp-0 ! k0 f U$ D$ j
create dhcp server pool start-ip 192.168.1.100 end-ip 192.168.1.199 mask 255.255.255.0 enable3 A" [! ^0 h8 L
modify dhcp server cfg enable
: A- P/ r1 n J8 A4 Ccreate nat rule entry ruleid 10 napt- {/ H- C; I2 |* }- r1 l
modify nat global tcptimeout 30 udptimeout 60 enable " m) ?' G# {! C9 D! K, G+ s9 M4 V8 N( _
create bridge port intf ifname eth-0/ M+ d) \& I+ I# Q; f+ \
modify bridge mode enable0 ~2 M3 M5 O4 L& @0 s6 Y8 s
modify ipf global pubdefact deny
3 n! D# ~; _: n$ V$ L v) |modify ipf global pvtdefact accept
7 X. ~6 \& ~( B Y) L/ Lmodify ipf global dmzdefact accept+ D- N6 {4 |. D& c6 n
modify ipf global seclevel low) q. w6 t; A' y) q! I
create ipf rule entry ruleid 1001 ifname public dir in destaddr eq 255.255.255.255 seclevel high medium % C1 e0 ]# ~. H2 r, F1 t/ c* t
create ipf rule entry ruleid 1002 ifname public dir in srcaddr range 10.0.0.0 10.255.255.255 log enable seclevel high medium
" l3 X' i g! l, m. G4 Lcreate ipf rule entry ruleid 1003 ifname public dir in srcaddr range 172.16.0.0 172.31.255.255 log enable seclevel high medium ( q# u x. A1 ^# t% ]2 c
create ipf rule entry ruleid 1004 ifname public dir in srcaddr range 192.168.0.0 192.168.255.255 log enable seclevel high medium 9 m* s, U, q4 }7 ]
create ipf rule entry ruleid 1010 ifname public dir out act accept storestate enable seclevel high medium low
5 b: R' A1 D; T3 fcreate ipf rule entry ruleid 1020 ifname public dir in act accept transprot eq num 1 seclevel medium low
B w4 R( q6 ncreate sntp servaddr dname ntp1.curie.fr
: w4 e* R; \9 smodify sntp cfg enable
- P/ y2 q, L9 F" ^' j2 b) J2 }5 |modify autodetect cfg disable mode both pppdetect padilcp vcrange all$ M* U0 a: I$ |$ ^
modify upnp cfg nbstatus disable
$ ]0 g& ~: h9 |3 pmodify mctl access httpwanaccess disable telnetwanaccess disable ftpwanaccess disable tftpwanaccess disable
2 ^! u; J5 ]4 v" \end+ c0 _2 j0 @7 r& H) f, U: j' r
|