A place to talk about anything and everything Omega related
3752
Topics
20284
Posts
The application manager on Omega2 dash tells you that Node-Red can't be installed on this device.
Nevertheless I was able to install it.
extend memory according to: https://docs.onion.io/omega2-docs/boot-from-external-storage.html
please consider that some lines of the documentation are outdated. For example: ummount /tmp/mounts/SD-P1 has to be replaced by umount /mnt/mmcblk0p1
opkg install node
opkg install oos-app-nodered
Go-to resource for frequently asked technical questions
41
Topics
62
Posts
The existing firewall on the OS can be used to enable/disable network traffic from specific interfaces
Taking a look at /etc/config/firewall, you'll notice it has zones that control traffic flow of the network interfaces defined in /etc/config/firewall
By default, the wan firewall zone is attached to the wwan network interface.
Looking at /etc/config/network you'll see that the wwan network interface is apcli0, the Omega's WiFi client interface
We can change the wan firewall zone configuration to enable or disable traffic through this interface.
To start, my Omega is connected to WiFi and can ping the internet:
root@Omega-F195:/# ping www.google.com
PING www.google.com (172.217.164.196): 56 data bytes
64 bytes from 172.217.164.196: seq=0 ttl=115 time=18.968 ms
64 bytes from 172.217.164.196: seq=1 ttl=115 time=22.639 ms
...
Then, I'll run these commands to REJECT input and output traffic for the wan zone:
uci set firewall.@zone[1].output='REJECT'
uci set firewall.@zone[1].input='REJECT'
uci commit firewall
Note: these changes can also be made by modifying the /etc/config/firewall file directly
And restart the firewall:
/etc/init.d/firewall restart
I can no longer access the internet. The WiFi client interface is still associated with the network, but no traffic can go through:
root@Omega-F195:/# ping www.google.com
PING www.google.com (172.217.164.196): 56 data bytes
ping: sendto: Operation not permitted
root@Omega-F195:/# ping www.google.com
PING www.google.com (172.217.164.196): 56 data bytes
ping: sendto: Operation not permitted
A few notes:
The default firewall configuration only has zones for the WiFi AP and WiFi Client network interfaces. You'll need to add more zones to the firewall to control the ethernet network interface, or other network interfaces like cellular modems.
The firewall also supports creating Rules. For a deeper dive into the firewall and rules, take a look at the openwrt firewall documentation: https://openwrt.org/docs/guide-user/firewall/firewall_configuration
