{ "zones": [ { "enabled": true, "name": "lan", "network": [ { "invert": false, "val": "lan", "device": "lan" } ], "input": "accept", "output": "accept", "forward": "accept", "auto_helper": true, "counter": true, "family": null, "match_rules": [ { "family": 0, "devices_pos": [ "br-lan" ], "devices_neg": null, "devices_neg_wildcard": null, "subnets_pos": null, "subnets_neg": null, "subnets_masked": null } ], "masq4_src_subnets": [ [ null, null, null ] ], "masq4_dest_subnets": [ [ null, null, null ] ], "masq6_src_subnets": [ [ null, null, null ] ], "masq6_dest_subnets": [ [ null, null, null ] ], "sflags": { "accept": true }, "dflags": { "accept": true, "helper": true, "snat": true }, "match_devices": [ "br-lan" ], "match_subnets": [ "192.168.100.0/24", "2409:8a20:1f62:5be1::/64", "fd57:4f3d:c6fd::/60" ], "related_subnets": [ { "family": 4, "addr": "192.168.100.1", "mask": "255.255.255.0", "bits": 24 }, { "family": 6, "addr": "2409:8a20:1f62:5be1::1", "mask": "ffff:ffff:ffff:ffff::", "bits": 64 }, { "family": 6, "addr": "fd57:4f3d:c6fd::1", "mask": "ffff:ffff:ffff:fff0::", "bits": 60 } ], "related_physdevs": [ "br-lan" ] }, { "enabled": true, "name": "wan", "network": [ { "invert": false, "val": "wan", "device": "wan" }, { "invert": false, "val": "wan6", "device": "wan6" } ], "input": "reject", "output": "accept", "forward": "reject", "masq": true, "mtu_fix": true, "auto_helper": true, "counter": true, "family": null, "match_rules": [ { "family": 0, "devices_pos": [ "eth9", "eth9" ], "devices_neg": null, "devices_neg_wildcard": null, "subnets_pos": null, "subnets_neg": null, "subnets_masked": null } ], "masq4_src_subnets": [ [ null, null, null ] ], "masq4_dest_subnets": [ [ null, null, null ] ], "masq6_src_subnets": [ [ null, null, null ] ], "masq6_dest_subnets": [ [ null, null, null ] ], "sflags": { "reject": true }, "dflags": { "accept": true, "reject": true, "snat": true, "fullcone": true }, "match_devices": [ "eth9", "eth9" ], "match_subnets": [ "192.168.1.0/24", "2409:8a20:1f62:5be0:92e2:baff:feb1:fb53" ], "related_subnets": [ { "family": 4, "addr": "192.168.1.231", "mask": "255.255.255.0", "bits": 24 }, { "family": 6, "addr": "2409:8a20:1f62:5be0:92e2:baff:feb1:fb53", "mask": "ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff", "bits": 128 } ], "related_physdevs": [ "eth9", "eth9" ] }, { "enabled": true, "name": "docker", "subnet": [ { "invert": false, "val": "172.16.0.0/12", "addrs": [ { "family": 4, "addr": "172.16.0.0", "mask": "255.240.0.0", "bits": 12 } ] } ], "input": "accept", "output": "accept", "forward": "accept", "auto_helper": true, "counter": true, "network": [ ], "family": 4, "match_rules": [ { "family": 4, "devices_pos": null, "devices_neg": null, "devices_neg_wildcard": null, "subnets_pos": [ "172.16.0.0/12" ], "subnets_neg": null, "subnets_masked": null } ], "masq4_src_subnets": [ [ null, null, null ] ], "masq4_dest_subnets": [ [ null, null, null ] ], "masq6_src_subnets": [ [ null, null, null ] ], "masq6_dest_subnets": [ [ null, null, null ] ], "sflags": { "accept": true }, "dflags": { "accept": true, "helper": true }, "match_devices": [ ], "match_subnets": [ "172.16.0.0/12" ], "related_subnets": [ { "family": 4, "addr": "172.16.0.0", "mask": "255.240.0.0", "bits": 12, "invert": false } ], "related_physdevs": [ ] } ], "ipsets": null, "networks": { "lan": { "up": true, "device": "br-lan", "physdev": "br-lan", "zone": null, "ipaddrs": [ { "family": 4, "addr": "192.168.100.1", "mask": "255.255.255.0", "bits": 24 }, { "family": 6, "addr": "2409:8a20:1f62:5be1::1", "mask": "ffff:ffff:ffff:ffff::", "bits": 64 }, { "family": 6, "addr": "fd57:4f3d:c6fd::1", "mask": "ffff:ffff:ffff:fff0::", "bits": 60 } ] }, "loopback": { "up": true, "device": "lo", "physdev": "lo", "zone": null, "ipaddrs": [ { "family": 4, "addr": "127.0.0.1", "mask": "255.0.0.0", "bits": 8 } ] }, "wan": { "up": true, "device": "eth9", "physdev": "eth9", "zone": null, "ipaddrs": [ { "family": 4, "addr": "192.168.1.231", "mask": "255.255.255.0", "bits": 24 } ] }, "wan6": { "up": true, "device": "eth9", "physdev": "eth9", "zone": null, "ipaddrs": [ { "family": 6, "addr": "2409:8a20:1f62:5be0:92e2:baff:feb1:fb53", "mask": "ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff", "bits": 128 } ] } }, "ubus_rules": [ { "type": "rule", "proto": "udp", "src": "*", "dest_port": 51819, "target": "ACCEPT", "name": "ubus:unetd[instance1] rule 0" } ], "includes": [ { "enabled": true, "path": "/etc/nikki/scripts/firewall_include.sh", "type": "script", "fw4_compatible": true, "position": "table-append" }, { "enabled": true, "path": "/usr/share/nftables.d/table-post/20-miniupnpd.nft", "type": "nftables", "fw4_compatible": true, "position": "table-append" }, { "enabled": true, "path": "/usr/share/nftables.d/chain-post/dstnat/20-miniupnpd.nft", "type": "nftables", "fw4_compatible": true, "position": "chain-append", "chain": "dstnat" }, { "enabled": true, "path": "/usr/share/nftables.d/chain-post/forward/20-miniupnpd.nft", "type": "nftables", "fw4_compatible": true, "position": "chain-append", "chain": "forward" }, { "enabled": true, "path": "/usr/share/nftables.d/chain-post/srcnat/20-miniupnpd.nft", "type": "nftables", "fw4_compatible": true, "position": "chain-append", "chain": "srcnat" } ] }