openwrt 笔记

1

# This file is interpreted as shell script.
# Put your custom iptables rules here, they will
# be executed with each firewall (re-)start.

iptables -A input_wan -p tcp --dport 1723 -j ACCEPT

# Allow all traffic in and out of the ppp interface. No reason to specify nets.
/usr/sbin/iptables -A input_rule -i ppp+ -j ACCEPT
/usr/sbin/iptables -A output_rule -o ppp+ -j ACCEPT
# This rule will allow traffic towards internet
/usr/sbin/iptables -A forwarding_rule -i ppp+ -j ACCEPT


#iptables -t nat -A PREROUTING -p tcp -d www.google.com -j REDIRECT --to-ports 1081
#iptables -t nat -A PREROUTING -p tcp -d www.google.com.hk -j REDIRECT --to-ports 1081
#iptables -t nat -A PREROUTING -p tcp -d mail.google.com -j REDIRECT --to-ports 1081
#iptables -t nat -A PREROUTING -p tcp -d www.facebook.com -j REDIRECT --to-ports 1081
#iptables -t nat -A PREROUTING -p tcp -d www.twitter.com -j REDIRECT --to-ports 1081
#iptables -t nat -A PREROUTING -p tcp -d www.youtube.com -j REDIRECT --to-ports 1081
#iptables -t nat -A PREROUTING -p tcp -d www.ip.cn -j REDIRECT --to-ports 1081
#iptables -t nat -A PREROUTING -p tcp -d weibo.com -j REDIRECT --to-ports 1081
#iptables -t nat -A PREROUTING -p tcp -d www.taobao.com -j REDIRECT --to-ports 1081

iptables -I zone_wan_forward -d 10.139.21.14 -j ACCEPT
iptables -t nat -A PREROUTING -p tcp --dport 4040 -j DNAT --to-destination 10.139.21.14:4040