move firewall related stuff from base-files to iptables, bump release number for...
[openwrt/svn-archive/archive.git] / openwrt / package / iptables / files / firewall.config
1 # RULE SYNTAX:
2 #
3 # forward:<match>:<target>[:<port>]
4 # - forwards all packets matched by <match> to <target>,
5 # optionally changing the port to <port>
6 #
7 # accept:<match>
8 # - accepts all traffic matched by <match>
9 #
10 # drop:<match>
11 # - drops all traffic matched by <match>
12 #
13 #
14 # MATCHING OPTIONS:
15 #
16 # src=<ip>
17 # - match the source ip <ip>
18 #
19 # dest=<ip>
20 # - match the destination ip <ip>
21 #
22 # proto=<proto>
23 # - match the protocol by name or number
24 #
25 # sport=<port(s)>
26 # - match the source port(s), see below for syntax
27 #
28 # dport=<port(s)>
29 # - match the destination port(s), see below for syntax
30 #
31 #
32 #
33 # PORT SYNTAX:
34 #
35 # You can enter an arbitrary list of ports and port ranges in the following format:
36 # - 22,53,993,1000-1024
37 #
38 # If you don't set the protocol to tcp or udp, it will apply to both
39 #
40 #
41 #
42 # EXAMPLES:
43 #
44 # drop:dport=22 src=1.3.3.7
45 # accept:proto=tcp dport=22
46 # forward:dport=60168:192.168.1.2:60169