package/iptables/files/firewall.config

   1 # Copyright (C) 2006 OpenWrt.org
   2
   3 # RULE SYNTAX:
   4 #
   5 # forward:<match>:<target>[:<port>]
   6 #       - forwards all packets matched by <match> to <target>,
   7 #         optionally changing the port to <port>
   8 #
   9 # accept:<match>
  10 #       - accepts all traffic matched by <match>
  11 #
  12 # drop:<match>
  13 #       - drops all traffic matched by <match>
  14 #
  15 #
  16 # MATCHING OPTIONS:
  17 #
  18 # src=<ip>
  19 #       - match the source ip <ip>
  20 #
  21 # dest=<ip>
  22 #       - match the destination ip <ip>
  23 #
  24 # proto=<proto>
  25 #       - match the protocol by name or number
  26 #
  27 # sport=<port(s)>
  28 #       - match the source port(s), see below for syntax
  29 #
  30 # dport=<port(s)>
  31 #       - match the destination port(s), see below for syntax
  32 #
  33 #
  34 #
  35 # PORT SYNTAX:
  36 #
  37 # You can enter an arbitrary list of ports and port ranges in the following format:
  38 #   - 22,53,993,1000-1024
  39 #
  40 # If you don't set the protocol to tcp or udp, it will apply to both
  41 #
  42 #
  43 #
  44 # EXAMPLES:
  45 #
  46 # drop:dport=22 src=1.3.3.7
  47 # accept:proto=tcp dport=22
  48 # forward:dport=60168:192.168.1.2:60169