openwrt/package/iptables/files/firewall.config

   1 # RULE SYNTAX:
   2 #
   3 # forward:<match>:<target>[:<port>]
   4 #       - forwards all packets matched by <match> to <target>,
   5 #         optionally changing the port to <port>
   6 #
   7 # accept:<match>
   8 #       - accepts all traffic matched by <match>
   9 #
  10 # drop:<match>
  11 #       - drops all traffic matched by <match>
  12 #
  13 #
  14 # MATCHING OPTIONS:
  15 #
  16 # src=<ip>
  17 #       - match the source ip <ip>
  18 #
  19 # dest=<ip>
  20 #       - match the destination ip <ip>
  21 #
  22 # proto=<proto>
  23 #       - match the protocol by name or number
  24 #
  25 # sport=<port(s)>
  26 #       - match the source port(s), see below for syntax
  27 #
  28 # dport=<port(s)>
  29 #       - match the destination port(s), see below for syntax
  30 #
  31 #
  32 #
  33 # PORT SYNTAX:
  34 #
  35 # You can enter an arbitrary list of ports and port ranges in the following format:
  36 #   - 22,53,993,1000-1024
  37 #
  38 # If you don't set the protocol to tcp or udp, it will apply to both
  39 #
  40 #
  41 #
  42 # EXAMPLES:
  43 #
  44 # drop:dport=22 src=1.3.3.7
  45 # accept:proto=tcp dport=22
  46 # forward:dport=60168:192.168.1.2:60169