openwrt_x86.install
· 1.9 KiB · Text
Raw
# look also at
# http://wiki.openwrt.org/doc/recipes/relayclient
# http://wiki.openwrt.org/doc/recipes/dumbap
# disable dhcp on lan interface (just in case there is a dhcp server running)
uci set dhcp.lan.ignore=1
uci commit dhcp
/etc/init.d/dnsmasq restart
# set network config (adjust as your needs)
uci set network.lan.gateway=192.168.10.1
uci set network.lan.dns=8.8.8.8
uci commit network
/etc/init.d/network reload
# rename the router
uci set system.@system[0].hostname=MyRouter
uci commit system
/etc/init.d/system restart
# enable remote logging
uci set system.@system[0].log_ip=192.168.1.2
uci set system.@system[0].conloglevel=7
uci commit system
/etc/init.d/log restart
# disable preinstalled firewall
/etc/init.d/firewall disable && /etc/init.d/firewall stop
# refresh list of available packages
opkg update
# install usb keyboad support
opkg install kmod-usb-hid kmod-hid-generic
# install webinterface
opkg install luci-mod-admin-full luci-theme-openwrt uhttpd libiwinfo-lua
/etc/init.d/uhttpd enable && /etc/init.d/uhttpd start
# enable network hardware
opkg install kmod-tulip kmod-e1000e; modprobe e1000e; modprobe tulip
# install shorewall
opkg install shorewall-lite iptables-mod-conntrack-extra iptables-mod-ipopt iptables-mod-iprange
# optional iptables capabilities
opkg install iptables-mod-filter iptables-mod-iface iptables-mod-ipp2p iptables-mod-ipv4options l7-protocols
# here configuration of shorewall needs to be deployed
# maybe look into http://wiki.openwrt.org/doc/recipes/shorewall-on-openwrt
#mkdir -p /etc/shorewall-lite/state/ && touch /etc/shorewall-lite/state/firewall
# Fix broken shorewall-lite Makefile
SBIN=$(which shorewall-lite); sed -i "s#/usr/sbin/shorewall-lite#${SBIN}#g" /etc/shorewall-lite/Makefile
# Fix broken shorewallrc
SBIN=$(which shorewall-lite); SBINDIR=$(dirname ${SBIN}); sed -i s#/usr/sbin#${SBINDIR}#g /usr/share/shorewall/shorewallrc
# enable shorewall
/etc/init.d/shorewall-lite enable
| 1 | # look also at |
| 2 | # http://wiki.openwrt.org/doc/recipes/relayclient |
| 3 | # http://wiki.openwrt.org/doc/recipes/dumbap |
| 4 | |
| 5 | # disable dhcp on lan interface (just in case there is a dhcp server running) |
| 6 | uci set dhcp.lan.ignore=1 |
| 7 | uci commit dhcp |
| 8 | /etc/init.d/dnsmasq restart |
| 9 | |
| 10 | # set network config (adjust as your needs) |
| 11 | uci set network.lan.gateway=192.168.10.1 |
| 12 | uci set network.lan.dns=8.8.8.8 |
| 13 | uci commit network |
| 14 | /etc/init.d/network reload |
| 15 | |
| 16 | # rename the router |
| 17 | uci set system.@system[0].hostname=MyRouter |
| 18 | uci commit system |
| 19 | /etc/init.d/system restart |
| 20 | |
| 21 | # enable remote logging |
| 22 | uci set system.@system[0].log_ip=192.168.1.2 |
| 23 | uci set system.@system[0].conloglevel=7 |
| 24 | uci commit system |
| 25 | /etc/init.d/log restart |
| 26 | |
| 27 | # disable preinstalled firewall |
| 28 | /etc/init.d/firewall disable && /etc/init.d/firewall stop |
| 29 | |
| 30 | # refresh list of available packages |
| 31 | opkg update |
| 32 | |
| 33 | # install usb keyboad support |
| 34 | opkg install kmod-usb-hid kmod-hid-generic |
| 35 | |
| 36 | # install webinterface |
| 37 | opkg install luci-mod-admin-full luci-theme-openwrt uhttpd libiwinfo-lua |
| 38 | /etc/init.d/uhttpd enable && /etc/init.d/uhttpd start |
| 39 | |
| 40 | # enable network hardware |
| 41 | opkg install kmod-tulip kmod-e1000e; modprobe e1000e; modprobe tulip |
| 42 | |
| 43 | # install shorewall |
| 44 | opkg install shorewall-lite iptables-mod-conntrack-extra iptables-mod-ipopt iptables-mod-iprange |
| 45 | # optional iptables capabilities |
| 46 | opkg install iptables-mod-filter iptables-mod-iface iptables-mod-ipp2p iptables-mod-ipv4options l7-protocols |
| 47 | |
| 48 | # here configuration of shorewall needs to be deployed |
| 49 | # maybe look into http://wiki.openwrt.org/doc/recipes/shorewall-on-openwrt |
| 50 | #mkdir -p /etc/shorewall-lite/state/ && touch /etc/shorewall-lite/state/firewall |
| 51 | |
| 52 | # Fix broken shorewall-lite Makefile |
| 53 | SBIN=$(which shorewall-lite); sed -i "s#/usr/sbin/shorewall-lite#${SBIN}#g" /etc/shorewall-lite/Makefile |
| 54 | # Fix broken shorewallrc |
| 55 | SBIN=$(which shorewall-lite); SBINDIR=$(dirname ${SBIN}); sed -i s#/usr/sbin#${SBINDIR}#g /usr/share/shorewall/shorewallrc |
| 56 | # enable shorewall |
| 57 | /etc/init.d/shorewall-lite enable |