openWRT学习笔记

防火墙的修改

防火墙的修改生效，需要重启防火墙执行以下指令：

root@OpenWrt:/# /etc/init.d/firewall reload

或执行：

root@OpenWrt:/# /etc/init.d/firewall restart

查看当前iptables的已启用策略语法为：

root@OpenWrt:/# iptables -L

默认配置

config defaults
option syn_flood 1
option input ACCEPT
option output ACCEPT
option forward REJECT
# Uncomment this line to disable ipv6 rules
# option disable_ipv6 1

端口转发和DMZ

config redirect
option name '9020-80'
option proto 'tcp'
option src 'wan'
option src_dport '9020'
option dest 'lan'
option dest_ip '192.168.1.100'
option dest_port '80'

将电脑192.168.1.2设置DMZ隔离区，举例：

config redirect
option src wan
option proto all
option dest_ip 192.168.1.2

UPNP安装

root@OpenWrt:/# opkg update
root@OpenWrt:/# opkg install miniupnpd