Talk:Iptables command

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 07:23, 12 July 2007 (edit)
Devu6ka2 (Talk | contribs)
(medecine)
← Previous diff
Current revision (05:27, 20 September 2009) (edit) (undo)
Another mutant (Talk | contribs)
(recommending removal of paragraph on article)
 
(8 intermediate revisions not shown.)
Line 5: Line 5:
Can we please get info on how to save iptables so they are restored on reboot? Thanks --[[User:Shibz|Shibz]] 09:30, 23 Jan 2007 (CET) Can we please get info on how to save iptables so they are restored on reboot? Thanks --[[User:Shibz|Shibz]] 09:30, 23 Jan 2007 (CET)
-== medecine == 
 +I think dd-wrt stores the config using nvram, which doesn't seem to store formats for custom iptables commands.
 +# nvram get forward_spec
 +SSH:on:both:22>x.x.x.x:22 HTTP:on:both:8080>x.x.x.x:80 FTP:on:both:21>x.x.x.x:21
-<a href=http://celebrex.awardspace.us/celebrex-side-effects.html > celebrex side effects </a>+It seems like you should enter custom iptables commands in the http interface by accessing '''Administration''' -> '''Commands''' -> '''Save Firewall'''
-<a href=http://celebrex.awardspace.us/celebrex-recall.html > celebrex recall </a>+
-<a href=http://celebrex.awardspace.us/generic-celebrex.html > generic celebrex </a>+There is a nice example iptables script for a different purpose here: [http://www.dd-wrt.com/wiki/index.php/Dual-WAN_for_simple_round-robin_load_equalization]
 +--[[User:Urule99|Urule99]] 04:17, 1 August 2007 (CEST)
-<a href=http://celebrex.awardspace.us/celebrex-recall-risk.html > celebrex recall risk </a>+== ddwrt chains ==
-<a href=http://celebrex.awardspace.us/celebrex-lawyer-houston.html > celebrex lawyer houston </a>+I think is interesting add information about DD-WRT specific chains and rules.
-<a href=http://celebrex.awardspace.us/celebrex-patient-recall.html > celebrex patient recall </a>+For example, what about "mangle" table with QoS services configured.
-<a href=http://celebrex.awardspace.us/celebrex-attorney-tx.html > celebrex attorney tx </a>+== iptables order of operations ==
-<a href=http://celebrex.awardspace.us/celebrex-alternative.html > celebrex alternative </a>+Looking at the comment "Sorry but don't you think this code will be better to run ? [DROP at the end] ", since those are using insert mode, I believe the rules will be pushed on to the top of that table, and will be executed in reverse order. I think the user's comments would be correct if the command was in append mode, but in insert mode I believe they have confused script order with chain execution order. [[User:Another mutant|Another mutant]] 07:27, 20 September 2009 (CEST)
- +
-<a href=http://celebrex.awardspace.us/celebrex-use.html > celebrex use </a>+
- +
- +
- +
-<a href= " http://celebrex.awardspace.us/celebrex-drug-interaction.html " > celebrex drug interaction </a>+
- +
-<a href= " http://celebrex.awardspace.us/celebrex-lawyer-dallas.html " > celebrex lawyer dallas </a>+
- +
- +
-<a href= " http://celebrex.awardspace.us/celebrex-dose-effects-side.html " > celebrex dose effects side </a>+
- +
- +
-<a href= " http://celebrex.awardspace.us/celebrex-ibuprofen.html " > celebrex ibuprofen </a>+
- +
-<a href= " http://celebrex.awardspace.us/celebrex-side-affect.html " > celebrex side affect </a>+
- +
-<a href= " http://celebrex.awardspace.us/celebrex-ingredient.html " > celebrex ingredient </a>+
- +
-<a href= " http://celebrex.awardspace.us/celebrex-patient-recall-risk.html " > celebrex patient recall risk </a>+
- +
-<a href= " http://celebrex.awardspace.us/allergy-asthma-celebrex.html " > allergy asthma celebrex </a>+

Current revision

Where do we put IPtable rules should be added?

[edit] Save iptables

Can we please get info on how to save iptables so they are restored on reboot? Thanks --Shibz 09:30, 23 Jan 2007 (CET)


I think dd-wrt stores the config using nvram, which doesn't seem to store formats for custom iptables commands.

  1. nvram get forward_spec

SSH:on:both:22>x.x.x.x:22 HTTP:on:both:8080>x.x.x.x:80 FTP:on:both:21>x.x.x.x:21

It seems like you should enter custom iptables commands in the http interface by accessing Administration -> Commands -> Save Firewall

There is a nice example iptables script for a different purpose here: [1] --Urule99 04:17, 1 August 2007 (CEST)

[edit] ddwrt chains

I think is interesting add information about DD-WRT specific chains and rules.

For example, what about "mangle" table with QoS services configured.

[edit] iptables order of operations

Looking at the comment "Sorry but don't you think this code will be better to run ? [DROP at the end] ", since those are using insert mode, I believe the rules will be pushed on to the top of that table, and will be executed in reverse order. I think the user's comments would be correct if the command was in append mode, but in insert mode I believe they have confused script order with chain execution order. Another mutant 07:27, 20 September 2009 (CEST)