fish/immortalwrt
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
An opensource OpenWrt variant for mainland China users.
4,977 Commits 6 Branches 17 Tags 782 MiB
C 61.6%
Makefile 19.3%
Shell 6.9%
Roff 6.7%
Perl 2.5%
Other 2.8%
afc9f6ec52
Go to file
Philip Prindeville afc9f6ec52
firewall: add rule for traceroute support 
Running your firewall's "wan" zone in REJECT zone (1) exposes the
presence of the router, (2) depending on the sophistication of
fingerprinting tools might identify the OS and release running on
the firewall which then identifies known vulnerabilities with it
and (3) perhaps most importantly of all, your firewall can be
used in a DDoS reflection attack with spoofed traffic generating
ICMP Unreachables or TCP RST's to overwhelm a victim or saturate
his link.

This rule, when enabled, allows traceroute to work even when the
default input policy of the firewall for the wan zone has been
set to DROP.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2020-05-23 19:17:18 +08:00
config config: enable ext4 rootfs and gzip 2020-04-01 16:08:54 +08:00
include kernel: bump 4.19 to 4.19.123 2020-05-15 11:35:08 +08:00
package firewall: add rule for traceroute support 2020-05-23 19:17:18 +08:00
scripts scripts/download.pl: fix typo 2020-04-25 08:16:20 +08:00
target Merge Lean's source 2020-05-21 12:25:08 +08:00
toolchain glibc: update to latest 2.31 commit 2020-05-14 11:39:37 +08:00
tools tools/mkimage: update to 2020.04 2020-04-27 08:56:26 +08:00
.gitattributes fix permisson 2019-08-16 15:09:42 +08:00
.gitignore gitignore: ignore patches in root directory 2020-02-25 15:39:25 +08:00
BSDmakefile packages: apply usign padding workarounds to package indexes if needed 2019-08-16 14:48:02 +08:00
Config.in packages: apply usign padding workarounds to package indexes if needed 2019-08-16 14:48:02 +08:00
CONTRIBUTED.md Update CONTRIBUTED.md 2020-04-21 12:15:21 +08:00
feeds.conf.default 18.06: adjust url 2020-04-08 02:02:46 +08:00
LICENSE packages: apply usign padding workarounds to package indexes if needed 2019-08-16 14:48:02 +08:00
Makefile build: clean menuconfig utility as part of dirclean 2020-03-12 12:01:00 +08:00
README.md add Xiaoma v1 small photo 2020-05-14 15:30:44 +08:00
rules.mk target/imagebuilder: use multi-thread support for xz compression 2020-03-27 18:40:33 +08:00

README.md

PROJECT OPENWRT

The Source Code of OpenWrt-Lean Modified by CTCGFW

Welcome to our Telegram Group: @ctcgfw_openwrt_discuss.

How to make it

Minimum requirements

Linux with case sensitive
2G DDR2 RAM
2 CPU Cores (AMD64, 1.4Ghz)
25G disk space left
Has access to both ChinaNet & Internet

Install the necessary packages (for Ubuntu user)

sudo apt-get update -y
sudo apt-get full-upgrade -y
sudo apt-get install -y build-essential asciidoc binutils bzip2 gawk gettext git libncurses5-dev libz-dev patch unzip zlib1g-dev lib32gcc1 libc6-dev-i386 subversion flex uglifyjs git-core gcc-multilib g++-multilib p7zip p7zip-full msmtp libssl-dev texinfo libreadline-dev libglib2.0-dev xmlto qemu-utils upx libelf-dev autoconf automake libtool autopoint ccache curl wget vim nano python python3 python-pip python3-pip python-ply python3-ply haveged lrzsz device-tree-compiler scons antlr3 gperf ecj fastjar

For mainland China & Ubuntu(16.04+) user, you may run the following command to setup quickly:

sudo bash -c "bash <(curl -s https://build-scripts.project-openwrt.eu.org/init_build_environment.sh)"

Clone the source

git clone -b openwrt-18.06 --single-branch https://github.com/project-openwrt/openwrt && cd openwrt
./scripts/feeds update -a && ./scripts/feeds install -a

For developer, you may use openwrt-18.06-dev branch instead of openwrt-18.06.

Configure your firmware

make menuconfig

Make it

make -j1 V=s

Tips

You'd better not use root to make it, or you may be not able to use.
Default login address: 192.168.1.1, username is root and password is password.

Contributed

See CONTRIBUTED.md.

License

GNU General Public License v3.0.