PSA to GL.iNet regarding Cruise ships

Here's the corresponding uci commands. No nano/text editing needed:

uci batch <<- __EOF
	add firewall rule
	rename firewall.@rule[-1]='custom_ttl'
	set firewall.custom_ttl.name='Set TTL to 64'
	set firewall.custom_ttl.src='wan'
	set firewall.custom_ttl.proto='ip'
	set firewall.custom_ttl.target='ACCEPT'
	set firewall.custom_ttl.ttl='64'
	reorder firewall.custom_ttl='1'
	set firewall.custom_ttl.enabled='1'
__EOF
uci commit firewall && service firewall restart

It also bumps the rule to the top of the firewall chain (via reorder).

uci set firewall.custom_ttl.enabled='0' && \
uci commit firewall && service firewall restart

... will disable it.

Excellent point. See the below link. One should always have a backup:

1 Like