krachako DD-WRT Novice
Joined: 13 Sep 2014 Posts: 1
|
Posted: Sat Sep 13, 2014 19:43 Post subject: Unable to browse internet on guest-wifi |
|
Hi experts, I am unable to browse internet from guest wifi. I am using Linksys E3200 and Firmware Version DD-WRT v24-sp2 (03/25/13) mega - build 21061.
I followed this url to configure guest network,
http://www.dd-wrt.com/wiki/index.php/Multiple_WLANs
I am able to get IP address from the router in 192.168.2.x subnet, after that no internet . Also I am able to browse 192.168.1.1 UI from this subnet...here are my IP table rules...am I missing anything...
iptables -t nat -I POSTROUTING -o `get_wanface` -j SNAT --to `nvram get wan_ipaddr`
iptables -I FORWARD -i br1 -m state --state NEW -j ACCEPT
iptables -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
iptables -I FORWARD -i br1 -o br0 -m state --state NEW -j DROP
iptables -I FORWARD -i br0 -o br1 -m state --state NEW -j DROP
iptables -I FORWARD -i br1 -o `get_wanface` -j DROP
iptables -I FORWARD -i br1 -d `nvram get wan_ipaddr`/`nvram get wan_netmask` -m state --state NEW -j DROP
iptables -I FORWARD -i br1 -d `nvram get lan_ipaddr`/`nvram get lan_netmask` -m state --state NEW -j DROP
iptables -t nat -I POSTROUTING -o br0 -j SNAT --to `nvram get lan_ipaddr`
iptables -I INPUT -i br1 -m state --state NEW -j DROP
iptables -I INPUT -i br1 -p udp --dport 67 -j ACCEPT
iptables -I INPUT -i br1 -p udp --dport 53 -j ACCEPT
iptables -I INPUT -i br1 -p tcp --dport 53 -j ACCEPT
iptables -t nat -I POSTROUTING -o `get_wanface` -j MASQUERADE |
|