You can find quick information on this page and detailed information on the Wiki
You can obtain SSH access to the FastGATE using the fastgate-python script as explained here
You can make persistent changes to the root filesystem as explained here.
The stock firewall has various issues, like:
- allowing IPv6 connections from internet to LAN ...
This method allow to replace stock iptables configuration with a new one. A complete IPv6 firewall configuration is provided.
Custom rules are saved in iptables_rules
, the example takes care of clearing
existing rules
The files can be sent to the Fastgate by starting a python3 -m http.server
inside this repository folder, to use wget
on the Fastgate
# mount /tmp/ubifs
cd /tmp
wget http://your-pc-ip:8088/firewall.sh
cd /tmp/ubifs
mv usr/sbin/firewall.sh usr/sbin/firewall //be careful not to overwrite original firewall.sh
mv /tmp/firewall.sh usr/sbin/firewall.sh
chmod 775 usr/sbin/firewall.sh
- copy
iptables_rules
in/etc
in a similar manner
A mainstream distro chroot allows using a package manager to easily get commonly used software (like Python and compilers) running on the gateway. See this wiki page for instructions on how to get a Debian chroot.
Work is being done to get LXC containers running. See wiki page.
Credits to lorenzodes for web-interface exploit