iptables: prevent connections from outside, but allow Airvpn?

[Thaufawuf7 0]

​Hello.

​Just tried this simple rule:

​-A INPUT -p tcp --syn -j DROP

​...​and found out, it prevents me from establishing an Airvpn session.

​

So, my question is in the subject line - and I'm not good enough at networking to figure that out myself.

​Would appreciate specific suggestions.

​

[MrConducter 11]

This is what I use (DD-WRT)

 

iptables -I FORWARD -i br0 -o tun1 -j ACCEPT
iptables -I FORWARD -i tun1 -o br0 -j ACCEPT
iptables -I FORWARD -i br0 -o vlan2 -j DROP
iptables -I INPUT -i tun1 -j REJECT
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE