Talk:Iptables command
From DD-WRT Wiki
Revision as of 11:52, 9 July 2007 (edit) Wildblue (Talk | contribs) ← Previous diff |
Current revision (05:27, 20 September 2009) (edit) (undo) Another mutant (Talk | contribs) (recommending removal of paragraph on article) |
||
(9 intermediate revisions not shown.) | |||
Line 4: | Line 4: | ||
Can we please get info on how to save iptables so they are restored on reboot? Thanks --[[User:Shibz|Shibz]] 09:30, 23 Jan 2007 (CET) | Can we please get info on how to save iptables so they are restored on reboot? Thanks --[[User:Shibz|Shibz]] 09:30, 23 Jan 2007 (CET) | ||
+ | |||
+ | |||
+ | I think dd-wrt stores the config using nvram, which doesn't seem to store formats for custom iptables commands. | ||
+ | # nvram get forward_spec | ||
+ | SSH:on:both:22>x.x.x.x:22 HTTP:on:both:8080>x.x.x.x:80 FTP:on:both:21>x.x.x.x:21 | ||
+ | |||
+ | It seems like you should enter custom iptables commands in the http interface by accessing '''Administration''' -> '''Commands''' -> '''Save Firewall''' | ||
+ | |||
+ | There is a nice example iptables script for a different purpose here: [http://www.dd-wrt.com/wiki/index.php/Dual-WAN_for_simple_round-robin_load_equalization] | ||
+ | --[[User:Urule99|Urule99]] 04:17, 1 August 2007 (CEST) | ||
+ | |||
+ | == ddwrt chains == | ||
+ | |||
+ | I think is interesting add information about DD-WRT specific chains and rules. | ||
+ | |||
+ | For example, what about "mangle" table with QoS services configured. | ||
+ | |||
+ | == iptables order of operations == | ||
+ | |||
+ | Looking at the comment "Sorry but don't you think this code will be better to run ? [DROP at the end] ", since those are using insert mode, I believe the rules will be pushed on to the top of that table, and will be executed in reverse order. I think the user's comments would be correct if the command was in append mode, but in insert mode I believe they have confused script order with chain execution order. [[User:Another mutant|Another mutant]] 07:27, 20 September 2009 (CEST) |
Current revision
Where do we put IPtable rules should be added?
[edit] Save iptables
Can we please get info on how to save iptables so they are restored on reboot? Thanks --Shibz 09:30, 23 Jan 2007 (CET)
I think dd-wrt stores the config using nvram, which doesn't seem to store formats for custom iptables commands.
- nvram get forward_spec
SSH:on:both:22>x.x.x.x:22 HTTP:on:both:8080>x.x.x.x:80 FTP:on:both:21>x.x.x.x:21
It seems like you should enter custom iptables commands in the http interface by accessing Administration -> Commands -> Save Firewall
There is a nice example iptables script for a different purpose here: [1] --Urule99 04:17, 1 August 2007 (CEST)
[edit] ddwrt chains
I think is interesting add information about DD-WRT specific chains and rules.
For example, what about "mangle" table with QoS services configured.
[edit] iptables order of operations
Looking at the comment "Sorry but don't you think this code will be better to run ? [DROP at the end] ", since those are using insert mode, I believe the rules will be pushed on to the top of that table, and will be executed in reverse order. I think the user's comments would be correct if the command was in append mode, but in insert mode I believe they have confused script order with chain execution order. Another mutant 07:27, 20 September 2009 (CEST)