Search
You can find the results of your search below.
Matching pagenames:
- fw4 Filtering traffic with IP sets by DNS
- Firewall components
- Firewall configuration /etc/config/firewall
- Firewall and network interfaces
- Firewall overview
- Firewall configuration
- Bridge firewall
- Filtering traffic with IP sets by DNS
- IPv4 firewall examples
- Firewall usage guide
- IP set examples
- DMZ configuration using VLANs
- IPv6 firewall examples
- NAT examples
- Parental controls
- Reference network topology
- Logging rejected packets
- DNS hijacking
- Port forwarding
- Firewall configuration
- nftables
- Firewall miscellaneous pages
- How to capture, filter and inspect packets using tcpdump or wireshark tools
- Logging Forwarded Packets in OpenWrt
- netfilter Configuration Examples
- Netfilter Management
- Netfilter In OpenWrt
- netfilter and iptables
- Firewall Builder: Essence Reloaded
- Firewall Builder: fwBuilder GUI
- Firewall Builder: Shell scripts
- Firewall Builder: Shorewall-lite
- Alternate firewall builders
- miniupnpd
- UPnP (Universal Plug and Play)
- Universal Plug'n'Play and NAT-PMP on OpenWrt
- IPsec Firewall
Fulltext results:
- Firewall configuration /etc/config/firewall @docs:guide-user:firewall
- ====== Firewall configuration /etc/config/firewall ====== OpenWrt's firewall management application [[docs:guide-user:firewall:overview|firewall]] is mainly configured through ''/etc/c
- NAT examples @docs:guide-user:firewall:fw3_configurations
- ====== NAT examples ====== The [[docs:guide-user:firewall:overview|fw4 application]] has extensive support f... pical uses of the fw4 NAT features. As with other firewall sections, this section will not delve into NAT ba... For NAT diagnostics please see [[docs:guide-user:firewall:netfilter_iptables:netfilter_management|Netfilter... be used in fw4's config file [[commit>?p=project/firewall4.git;a=blob;f=root/etc/config/firewall| /etc/conf
- Samba @docs:guide-user:services:nas
- stalled the mounted drive is using? - Does your firewall allow clients to access the service on your route... curity by neatly setting up the [[docs:guide-user:firewall:start|Firewall Documentation]]. ==== Start on boot ==== After installing the packages described in Instal... 24.10-snapshot. Read: 120 MB/s, write: 115 MB/s. Firewall configuration - for slower devices throughput may
- Guest Wi-Fi extras @docs:guide-user:network:wifi:guestwifi
- ry. The goal here is to alter the default OpenWRT firewall rules allowing specific ICMP and ICMPv6 types fro... nd "Allow-ICMPv6-Input". <code bash> # Configure firewall uci rename firewall.@rule[1]="icmp" uci rename firewall.@rule[5]="icmp6" uci set firewall.icmp.src="*" uci set firewall.icmp6.s
- WireGuard multi-client server automated @docs:guide-user:services:vpn:wireguard
- erver_IP="${interface}.1" export WG_${LAN}_server_firewall_zone="${LAN}" export quantity="4" # Change the nu... key" >/dev/null 2>&1 echo "Done" echo -n "Rename firewall.@zone[0] to lan and firewall.@zone[1] to wan... " uci rename firewall.@zone[0]="lan" uci rename firewall.@zone[1]="wan" echo "Done" # C
- OpenVPN extras @docs:guide-user:services:vpn:openvpn
- lare the VPN interface. <code bash> uci del_list firewall.wan.device="tun+" uci add_list firewall.wan.network="vpn" uci commit firewall service firewall restart uci -q delete network.vpn uci set network.vpn="interface" uci set network.vpn.prot
- WireGuard road-warrior automated @docs:guide-user:services:vpn:wireguard
- * IPv4 and IPv6 traffic is subject to normal firewall rules based on the zone assigned to the WireGuard... #export WG_SERVER_PORT="51820" ## The (existing) firewall zone for the interface that will receive ## IPv4-... c #export WG_WAN4_FWZONE="wan" ## The (existing) firewall zone name for the new WG interface #export WG_FWZ... v6 config below ############## ## The (existing) firewall zone for the interface that will receive ## IPv6-
- Guest Wi-Fi using CLI @docs:guide-user:network:wifi:guestwifi
- dditional separated guest network and a new guest firewall zone for your OpenWrt device. That is, to create ... et dhcp.${NET_ID}.leasetime=1h commit dhcp delete firewall.${NET_ID} set firewall.${NET_ID}=zone set firewall.${NET_ID}.name=${NET_ID} set firewall.${NET_ID}.network=${NET_ID} set firewall.
- DNS hijacking @docs:guide-user:firewall:fw3_configurations
- ===== Web interface instructions ===== Configure firewall to intercept DNS traffic. - Navigate to **LuCI -> Network -> Firewall -> Port Forwards**. - Click **Add** and specify... ===== Command-line instructions ===== Configure firewall to intercept DNS traffic. <code bash> # Intercept DNS traffic uci -q del firewall.dns_int uci set firewall.dns_int="redirect" uci s
- Filtering traffic with IP sets by DNS @docs:guide-user:firewall:fw3_configurations
- ackages:pkgdata:resolveip]] and [[docs:guide-user:firewall:overview|firewall]] with [[docs:guide-user:firewall:firewall_configuration#ip_sets|IP sets]] to resolve and filter domains. ===== Goals ===== * Filter LAN c
- Guest Wi-Fi basics @docs:guide-user:network:wifi:guestwifi
- mit dhcp service dnsmasq restart </code> ==== 4. Firewall ==== Configure firewall for the guest network. Allow to forward traffic from the guest network to WAN. Allo... equests and DNS queries. <code bash> # Configure firewall uci -q delete firewall.guest uci set firewall.guest="zone" uci set firewall.guest.name="guest" uci set fire
- WireGuard extras @docs:guide-user:services:vpn:wireguard
- LAN zone on VPN client. <code bash> uci del_list firewall.wan.network="vpn" uci add_list firewall.lan.network="vpn" uci commit firewall service firewall restart </code> ==== IPv6 site-to-site ==== Provide IPv6 site-to-site connectivity assumi
- IPv6 firewall examples @docs:guide-user:firewall:fw3_configurations
- ====== IPv6 firewall examples ====== ===== Port accept for IPv6 ===== To open port 80 so that a local webser... on passing a prefix down to your LAN and want to firewall appropriately it is better to create a separate firewall zone as described below. IPv6 packets may not be ... n6'', add the following sections to ''/etc/config/firewall'' to create a new zone ''wan6''. <code bash> con
- IPsec Firewall @docs:guide-user:services:vpn:strongswan
- ====== IPsec Firewall ====== When configuring firewalls, tunnels and zones we always have to keep security i... will find a detailed description of how to setup firewall rules for IPsec VPN connections. The experienced ... able in the POSTROUTING nat table**. At this late firewall stage the system will discover for the first time... packet. ===== Zones ===== As in many commercial firewall solutions OpenWrt works with zones. A zone is mor
- PBR with netifd @docs:guide-user:network:routing
- event traffic leaks. * Enable [[docs:guide-user:firewall:fw3_configurations:fw3_nat#ipv6_nat|IPv6 NAT or N... stinations matching IP set. Mark LAN traffic with firewall to apply custom routing. <code bash> for IPV in 4 6 do uci -q delete firewall.wan_set${IPV%4} uci set firewall.wan_set${IPV%4}="ipset" uci set firewall.wan_set${IPV%4}.name="wan${IPV%4}
- Setting up Wi-Fi repeaters with multiple SSIDs with separated private, tor and guest network @docs:guide-user:network:wifi
- Remote control OpenWrt device via instant messengers (Telegram, XMPP) and EMail @docs:guide-user:services:remote_control