diff options
| author | Mike Baker <mbm@openwrt.org> | 2005-05-25 02:51:57 +0000 |
|---|---|---|
| committer | Mike Baker <mbm@openwrt.org> | 2005-05-25 02:51:57 +0000 |
| commit | 8aeca732f1910ac6575be80b4aef5d2904989401 (patch) | |
| tree | 33079d70213db7a9dd17e135ed6d3d464e3ec0f7 /openwrt/target/default/target_skeleton | |
| parent | 4741784cf869c011f1c61b9e056091d6228aa845 (diff) | |
| download | mtk-20170518-8aeca732f1910ac6575be80b4aef5d2904989401.zip mtk-20170518-8aeca732f1910ac6575be80b4aef5d2904989401.tar.gz mtk-20170518-8aeca732f1910ac6575be80b4aef5d2904989401.tar.bz2 | |
*** empty log message ***
SVN-Revision: 1055
Diffstat (limited to 'openwrt/target/default/target_skeleton')
| -rwxr-xr-x | openwrt/target/default/target_skeleton/etc/init.d/S45firewall | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/openwrt/target/default/target_skeleton/etc/init.d/S45firewall b/openwrt/target/default/target_skeleton/etc/init.d/S45firewall index a506637..bdb4859 100755 --- a/openwrt/target/default/target_skeleton/etc/init.d/S45firewall +++ b/openwrt/target/default/target_skeleton/etc/init.d/S45firewall @@ -16,10 +16,18 @@ iptables -N forwarding_rule iptables -t nat -N prerouting_rule iptables -t nat -N postrouting_rule +### Allow SSH from WAN +# iptables -t nat -A prerouting_rule -i $WAN -p tcp --dport 22 -j ACCEPT +# iptables -A input_rule -i $WAN -p tcp --dport 22 -j ACCEPT + ### Port forwarding # iptables -t nat -A prerouting_rule -i $WAN -p tcp --dport 22 -j DNAT --to 192.168.1.2 # iptables -A forwarding_rule -i $WAN -p tcp --dport 22 -d 192.168.1.2 -j ACCEPT +### DMZ (should be placed after port forwarding / accept rules) +# iptables -t nat -A prerouting_rule -i $WAN -j DNAT --to 192.168.1.2 +# iptables -A forwarding_rule -i $WAN -d 192.168.1.2 -j ACCEPT + ### INPUT ### (connections with the router as destination) |