About the correct rule name for openwrt firewall protocol.

Hongyi Zhao hongyi.zhao at gmail.com
Thu Apr 1 10:49:37 BST 2021


I noticed the following DNAT rule described by openwrt documentation
on <https://openwrt.org/docs/guide-user/firewall/firewall_configuration#destination_nat>:

config redirect
option name 'DNAT WAN to LAN for SSH'
option src 'wan'
option src_dport '19900'
option dest 'lan'
option dest_ip '192.168.1.1'
option dest_port '22'
option proto 'tcp'
option target 'DNAT'

But base on my testing, the proto line mentioned above should be
written as below, otherwise, it won't work at all:

list proto 'tcp'

The testing environment is Proxmox VE 6.3 and the
the firmware of openwrt used for my scenario is retrieved from
<https://downloads.openwrt.org/releases/19.07.7/targets/x86/64/openwrt-19.07.7-x86-64-combined-ext4.img.gz>.

Regards
-- 
Assoc. Prof. Hongyi Zhao <hongyi.zhao at gmail.com>
Theory and Simulation of Materials
Hebei Polytechnic University of Science and Technology engineering
NO. 552 North Gangtie Road, Xingtai, China



More information about the openwrt-devel mailing list