IP Tables Question

Post new topic   Reply to topic    DD-WRT Forum Index -> General Questions
Author Message
TikiHead
DD-WRT Novice


Joined: 20 Jul 2016
Posts: 20

PostPosted: Mon May 01, 2017 1:46    Post subject: IP Tables Question Reply with quote
Can someone explain these 4 firewalls rules to me? I am looking for an understanding of each line item. Thanks!

-I FORWARD -o eth0 -s 192.168.1.1/24 -p tcp --dport 1723 -j logaccept
-I FORWARD -o eth0 -s 192.168.1.1/24 -p gre -j logaccept
-A FORWARD -i eth0 -o br0 -j TRIGGER --trigger-type in
-A FORWARD -i br0 -j trigger_out
Sponsor
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6447
Location: UK, London, just across the river..

PostPosted: Mon May 01, 2017 5:57    Post subject: Reply with quote
http://ipset.netfilter.org/iptables.man.html
_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
TikiHead
DD-WRT Novice


Joined: 20 Jul 2016
Posts: 20

PostPosted: Mon May 01, 2017 19:20    Post subject: IP Tables Question Reply with quote
Wow, that's so helpful, thanks! Anybody else have input?
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 6447
Location: UK, London, just across the river..

PostPosted: Tue May 02, 2017 4:59    Post subject: Re: IP Tables Question Reply with quote
TikiHead wrote:
Can someone explain these 4 firewalls rules to me? I am looking for an understanding of each line item. Thanks!

-I FORWARD -o eth0 -s 192.168.1.1/24 -p tcp --dport 1723 -j logaccept
-I FORWARD -o eth0 -s 192.168.1.1/24 -p gre -j logaccept
-A FORWARD -i eth0 -o br0 -j TRIGGER --trigger-type in
-A FORWARD -i br0 -j trigger_out


To explain what those lines do
1. insert rule(-I) WAN (FORWARD), output(-o), interface (eth0), source(-s), protocol (-p), dport 1723, jump (-j) to logaccept
2.and so on and on....

the point is to read and understand how it works and find it for yourself its not a rocket science and its not hard to understand but it could be hard to explain if you dont know the language...

_________________
Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum