diff options
| author | John Crispin <john@openwrt.org> | 2008-08-04 11:51:58 +0000 |
|---|---|---|
| committer | John Crispin <john@openwrt.org> | 2008-08-04 11:51:58 +0000 |
| commit | 21bbdc24c397671e68606e846837f28df89a5a23 (patch) | |
| tree | 372396ee96fd78a83bbffd5e33c073f5c6b9fb25 /package/iptables/files/firewall.user | |
| parent | e4a0bfec3c1c9aaa59f4bd41182d394ec0ceb91d (diff) | |
| download | mtk-20170518-21bbdc24c397671e68606e846837f28df89a5a23.zip mtk-20170518-21bbdc24c397671e68606e846837f28df89a5a23.tar.gz mtk-20170518-21bbdc24c397671e68606e846837f28df89a5a23.tar.bz2 | |
adds a new uci firewall - iptbales and netfilter packages need to be rewrapped when we switch to this firewall as default - there are some examples in the file /etc/config/firewall - iptables-save/restore are still missing - hotplug takes care of adding/removing netdevs during runtime - misisng features ? wishes ? let me know ...
SVN-Revision: 12089
Diffstat (limited to 'package/iptables/files/firewall.user')
| -rw-r--r-- | package/iptables/files/firewall.user | 30 |
1 files changed, 0 insertions, 30 deletions
diff --git a/package/iptables/files/firewall.user b/package/iptables/files/firewall.user deleted file mode 100644 index f4eb18e..0000000 --- a/package/iptables/files/firewall.user +++ /dev/null @@ -1,30 +0,0 @@ -#!/bin/sh -# Copyright (C) 2006 OpenWrt.org - -iptables -F input_rule -iptables -F output_rule -iptables -F forwarding_rule -iptables -t nat -F prerouting_rule -iptables -t nat -F postrouting_rule - -# The following chains are for traffic directed at the IP of the -# WAN interface - -iptables -F input_wan -iptables -F forwarding_wan -iptables -t nat -F prerouting_wan - -### Open port to WAN -## -- This allows port 22 to be answered by (dropbear on) the router -# iptables -t nat -A prerouting_wan -p tcp --dport 22 -j ACCEPT -# iptables -A input_wan -p tcp --dport 22 -j ACCEPT - -### Port forwarding -## -- This forwards port 8080 on the WAN to port 80 on 192.168.1.2 -# iptables -t nat -A prerouting_wan -p tcp --dport 8080 -j DNAT --to 192.168.1.2:80 -# iptables -A forwarding_wan -p tcp --dport 80 -d 192.168.1.2 -j ACCEPT - -### DMZ -## -- Connections to ports not handled above will be forwarded to 192.168.1.2 -# iptables -t nat -A prerouting_wan -j DNAT --to 192.168.1.2 -# iptables -A forwarding_wan -d 192.168.1.2 -j ACCEPT |