From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from tuna.sandelman.ca (unknown [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) by huchra.bufferbloat.net (Postfix) with ESMTP id 4C5F621F0FB for ; Sun, 9 Dec 2012 15:09:25 -0800 (PST) Received: from obiwan.sandelman.ca (desk.marajade.sandelman.ca [209.87.252.247]) by tuna.sandelman.ca (Postfix) with ESMTP id 6141E2016D for ; Sun, 9 Dec 2012 18:11:55 -0500 (EST) Received: by obiwan.sandelman.ca (Postfix, from userid 179) id A243114DBA; Sun, 9 Dec 2012 18:08:51 -0500 (EST) Received: from obiwan.sandelman.ca (localhost [127.0.0.1]) by obiwan.sandelman.ca (Postfix) with ESMTP id 8148F6384A for ; Sun, 9 Dec 2012 18:08:51 -0500 (EST) From: Michael Richardson To: cerowrt-users X-Mailer: MH-E 8.3; nmh 1.3-dev; XEmacs 21.4 (patch 22) X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Sender: mcr@obiwan.sandelman.ca Subject: [Cerowrt-users] custom firewall rules X-BeenThere: cerowrt-users@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Support for user problems regarding cerowrt List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Dec 2012 23:09:25 -0000 I don't seem to actually get any of my custom firewall rules acted on. I expect things to go into the forwarding_rule CHAIN: Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 233 19162 ACCEPT all * * ::/0 ::/0 ctstate RELATED,ESTABLISHED 1 72 DROP all * * ::/0 ::/0 ctstate INVALID 129 14745 forwarding_rule all * * ::/0 ::/0 129 14745 forward all * * ::/0 ::/0 129 14745 reject all * * ::/0 ::/0 but, it always seems to be empty: Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination My rules look enabled, and I see them in /etc/config/firewall. (btw: I'm running CeroWrt Sugarland r33573, v3.3.8 ) -- ] He who is tired of Weird Al is tired of life! | firewalls [ ] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[ ] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[ Kyoto Plus: watch the video then sign the petition.