Siema mam problem próbuje przekierowac port
5800 na konkretny adres ip w moim przypadku 5800 ale cos mi nie wychodzi, struktura mojego firewall wyglada nastepujacao
config 'defaults'
option 'syn_flood' '1'
option 'input' 'ACCEPT'
option 'output' 'ACCEPT'
option 'forward' 'REJECT'
config 'zone'
option 'name' 'lan'
option 'input' 'ACCEPT'
option 'output' 'ACCEPT'
option 'forward' 'REJECT'
config 'zone'
option 'name' 'wan'
option 'input' 'REJECT'
option 'output' 'ACCEPT'
option 'forward' 'REJECT'
option 'masq' '1'
config 'forwarding'
option 'src' 'lan'
option 'dest' 'wan'
option 'mtu_fix' '1'
config 'rule'
option '_name' 'SSH'
option 'src' 'wan'
option 'target' 'ACCEPT'
option 'proto' 'tcp'
option 'dest_port' '22'
config 'rule'
option '_name' 'ftp'
option 'src' 'wan'
option 'target' 'ACCEPT'
option 'proto' 'tcp'
option 'dest_port' '21'
config 'rule'
option '_name' 'telnecik'
option 'src' 'wan'
option 'target' 'ACCEPT'
option 'proto' 'tcp'
option 'dest_port' '23'
config 'rule'
option '_name' 'Transmission'
option 'src' 'wan'
option 'target' 'ACCEPT'
option 'proto' 'tcp'
option 'dest_port' '9090'
config 'rule'
option '_name' 'Transmission-torrent'
option 'src' 'wan'
option 'target' 'ACCEPT'
option 'proto' 'tcp'
option 'dest_port' '51413'
config 'include'
option 'path' '/etc/config/firewall.user'
config 'rule'
option 'target' 'ACCEPT'
option '_name' 'VNC'
option 'dest_ip' '192.168.1.112'
option 'proto' 'tcp'
option 'src_port' '5800'
option 'src' 'wan'
option 'dest_port' '5800'
config 'rule'
option '_name' 'vnc-wejscie'
option 'src' 'wan'
option 'target' 'ACCEPT'
option 'proto' 'tcp'
option 'dest_port' '5800'
i firewall.user
### Allow PPTP control connections from WAN
iptables -t nat -A prerouting_rule -i eth0.1 -p tcp --dport 1723 -j ACCEPT
iptables -A input_rule -i eth0.1 -p tcp --dport 1723 -j ACCEPT
### Allow GRE protocol (used by PPTP data stream)
iptables -A output_rule -p 47 -j ACCEPT
iptables -A input_rule -p 47 -j ACCEPT
### VPN Section
iptables -A forwarding_rule -s 192.168.1.0/24 -d 192.168.1.0/24 -j ACCEPT
iptables -A output_rule -o ppp+ -s 192.168.1.0/24 -d 192.168.1.0/24 -j ACCEPT
iptables -A input_rule -i ppp+ -s 192.168.1.0/24 -d 192.168.1.0/24 -j ACCEPT
# allow VPN connections to get out WAN interface (to internet)
iptables -A forwarding_rule -i ppp+ -o eth0.1 -j ACCEPT
Jak by ktos mial chwile i by mi pomogl to byl bym bardzo wdzieczny.
Pozdrawiam |
' target='_blank'>Link
