OpenWrt x Gargoyle - different Firewall defaults. Why?

[wilsonhlacerda]

Hi all!

In OpenWrt the /etc/config/firewall file has this defaults:

config 'defaults'
option 'syn_flood' '1'
option 'input' 'DROP'
option 'output' 'DROP'
option 'forward' 'DROP'

In Gargoyle (v1.1.7 for Atheros) it is:

config 'defaults'
option 'syn_flood' '1'
option 'input' 'ACCEPT'
option 'output' 'ACCEPT'
option 'forward' 'REJECT'


The OpenWrt version is clearly much more secure than the Gargoyle approach.

Is there any reason for this Gargoyle change in the firewall file?
Why Gargoyle just don't let it standard?

[Eric]

It is standard. See here.

[wilsonhlacerda]

Weird!!!

OpenWrt Wiki shows different default:
http://wiki.openwrt.org/doc/uci/firewall

Beside that I google/searched OpenWrt forum and found some users' paste just like the Wiki.

And it makes completely sense to use drop as defaults, for security reasons.

Thanks for reply!