setup port forward nat-start on merlin

[silvianismo 0]

#!/bin/sh

 

iptables -t nat -A POSTROUTING -o tun15 -j MASQUERADE

 

iptables -I FORWARD -i tun15 -p udp -d 192.168.1.40 --dport 61841 -j ACCEPT

iptables -I FORWARD -i tun15 -p tcp -d 192.168.1.40 --dport 61841 -j ACCEPT

iptables -t nat -I PREROUTING -i tun15 -p tcp --dport 61841 -j DNAT --to-destination 192.168.1.40

iptables -t nat -I PREROUTING -i tun15 -p udp --dport 61841 -j DNAT --to-destination 192.168.1.40

iptables -I FORWARD -i tun15 -p udp -d 192.168.1.1 --dport 61840 -j ACCEPT

iptables -I FORWARD -i tun15 -p tcp -d 192.168.1.1 --dport 61840 -j ACCEPT

iptables -t nat -I PREROUTING -i tun15 -p tcp --dport 61840 -j DNAT --to-destination 192.168.1.1

iptables -t nat -I PREROUTING -i tun15 -p udp --dport 61840 -j DNAT --to-destination 192.168.1.1

iptables -I FORWARD -i br0 -o tun15 -j ACCEPT

iptables -I FORWARD -i tun15 -o br0 -j ACCEPT

iptables -I FORWARD -i br0 -o vlan1 -j DROP

iptables -I INPUT -i tun15 -j REJECT

 

 

 

 

whats is wrong with it.. Does he have a simple command to join all my open port to my preconfigure port on airvpn.. Thanks

[silvianismo 0]

61841 work! Not the 61840.. :/

[go558a83nk 364]

Is the router itself 192.168.1.1?

[silvianismo 0]

Yess!

[go558a83nk 364]

Yess!

 

So what is it you're trying to accomplish?  You have a server on the router you're trying to make available remotely?

[silvianismo 0]

Yes! Thanks

[nick75 25]

Hi,

 

Most if not all routers won't allow traffic from the internet onto the LAN-facing interface.

You'll have to allow remote management in your router and access it on your public IP address.

[silvianismo 0]

Thanks.. I will try.. 

[silvianismo 0]

not able.. :S Only able to open 1 port.. 

[nick75 25]

not able.. :S Only able to open 1 port.. 

 

This is too vague, can you clarify?

[silvianismo 0]

I want to use more than one port.. I'm not able to configure 2 ports! Thanks ( Scuse me for my English )

[go558a83nk 364]

I want to use more than one port.. I'm not able to configure 2 ports! Thanks ( Scuse me for my English )

 

you certainly can.  it's just that you can't forward to the router itself it seems.

[silvianismo 0]

2 port from my 192.168.1.40..

 and 1 port from ....197

 

I try many rules but always have router conflict route..

 

Many thanks

[silvianismo 0]

[nick75 25]

You cannot access the router itself through the VPN (or so it seems).

[silvianismo 0]

Just create an other port forward on other ip of my lan..

[silvianismo 0]

nobody..?

[silvianismo 0]

...

[023 0]

nobody..?

 

you need the router ip adres put on dmz