[OpenWrt Wiki] Firewall configuration /etc/config/firewall
openwrt.org › docs › guide-userDec 16, 2021 · For DNAT, if the dest_ip is not specified, the rule is translated in a iptables/REDIRECT rule, otherwise it is a iptables/DNAT rule. dest_port: port or range : no (none) For DNAT, redirect matched incoming traffic to the given port on the internal host. For SNAT, match traffic directed at the given ports. Only a single port or range can be ...
[OpenWrt Wiki] Netfilter In OpenWrt
openwrt.org › netfilter_iptables › netfilter_openwrtNetfilter In OpenWrt The purpose of this section is to briefly describe the netfilter/iptables subsystem and then delve into OpenWrt specifics. netfilter rules require a fine level of granularity to tune packet filtering. This can cause undesirable scenarios when many rules are matching on similar packets. Be careful using the iptable application!
[OpenWrt Wiki] Logging Forwarded Packets in OpenWrt
openwrt.org › iptables_log_targetsSep 08, 2019 · Logging Forwarded Packets in OpenWrt. This article demonstrates how to extend the firewall3 configuration to add iptable LOG targets for forwarded packets between the LAN -side and WAN -side of the router. The fw3 application does not support extended logging rules except for rejected packets, so these must be added using the iptables application.