firewall.config 956 B

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748
  1. # Copyright (C) 2006 OpenWrt.org
  2. # RULE SYNTAX:
  3. #
  4. # forward:<match>:<target>[:<port>]
  5. # - forwards all packets matched by <match> to <target>,
  6. # optionally changing the port to <port>
  7. #
  8. # accept:<match>
  9. # - accepts all traffic matched by <match>
  10. #
  11. # drop:<match>
  12. # - drops all traffic matched by <match>
  13. #
  14. #
  15. # MATCHING OPTIONS:
  16. #
  17. # src=<ip>
  18. # - match the source ip <ip>
  19. #
  20. # dest=<ip>
  21. # - match the destination ip <ip>
  22. #
  23. # proto=<proto>
  24. # - match the protocol by name or number
  25. #
  26. # sport=<port(s)>
  27. # - match the source port(s), see below for syntax
  28. #
  29. # dport=<port(s)>
  30. # - match the destination port(s), see below for syntax
  31. #
  32. #
  33. #
  34. # PORT SYNTAX:
  35. #
  36. # You can enter an arbitrary list of ports and port ranges in the following format:
  37. # - 22,53,993,1000-1024
  38. #
  39. # If you don't set the protocol to tcp or udp, it will apply to both
  40. #
  41. #
  42. #
  43. # EXAMPLES:
  44. #
  45. # drop:dport=22 src=1.3.3.7
  46. # accept:proto=tcp dport=22
  47. # forward:dport=60168:192.168.1.2:60169