Re: [LEDE-DEV] firewall question

2017-12-16 Thread Mathias Kresin
15.12.2017 09:24, e9hack: Hi, I did set-up a openvpn server on my router. /etc/config/network contains the interface definition: config interface 'vpn' option proto 'none' option ifname 'tun1' In /etc/config/firewall, I've the following definitions related to vpn, lan and wan

Re: [LEDE-DEV] firewall question

2017-12-15 Thread e9hack
Am 15.12.2017 um 18:03 schrieb Eric Romano: > The "input" option of your LAN zone is set to ACCEPT. This means that > any traffic to the interface ip address(es) of that zone will be > allowed unless otherwise blocked by a rule. > > It's not obvious but zone forwarding rules only for traffic forwa

Re: [LEDE-DEV] firewall question

2017-12-15 Thread Eric Romano
The "input" option of your LAN zone is set to ACCEPT. This means that any traffic to the interface ip address(es) of that zone will be allowed unless otherwise blocked by a rule. It's not obvious but zone forwarding rules only for traffic forwarded on behalf of clients on the network, not for traf

[LEDE-DEV] firewall question

2017-12-15 Thread e9hack
Hi, I did set-up a openvpn server on my router. /etc/config/network contains the interface definition: config interface 'vpn' option proto 'none' option ifname 'tun1' In /etc/config/firewall, I've the following definitions related to vpn, lan and wan: config zone optio