openwrt 笔记

1

# This file is interpreted as shell script.# Put your custom iptables rules here, they will# be executed with each firewall (re-)start.iptables -A input_wan -p tcp --dport 1723 -j ACCEPT# Allow all traffic in and out of the ppp interface. No reason to specify nets./usr/sbin/iptables -A input_rule -i ppp+ -j ACCEPT/usr/sbin/iptables -A output_rule -o ppp+ -j ACCEPT# This rule will allow traffic towards internet/usr/sbin/iptables -A forwarding_rule -i ppp+ -j ACCEPT#iptables -t nat -A PREROUTING -p tcp -d www.google.com -j REDIRECT --to-ports 1081#iptables -t nat -A PREROUTING -p tcp -d www.google.com.hk -j REDIRECT --to-ports 1081#iptables -t nat -A PREROUTING -p tcp -d mail.google.com -j REDIRECT --to-ports 1081#iptables -t nat -A PREROUTING -p tcp -d www.facebook.com -j REDIRECT --to-ports 1081#iptables -t nat -A PREROUTING -p tcp -d www.twitter.com -j REDIRECT --to-ports 1081#iptables -t nat -A PREROUTING -p tcp -d www.youtube.com -j REDIRECT --to-ports 1081#iptables -t nat -A PREROUTING -p tcp -d www.ip.cn -j REDIRECT --to-ports 1081#iptables -t nat -A PREROUTING -p tcp -d weibo.com -j REDIRECT --to-ports 1081#iptables -t nat -A PREROUTING -p tcp -d www.taobao.com -j REDIRECT --to-ports 1081iptables -I zone_wan_forward -d 10.139.21.14 -j ACCEPTiptables -t nat -A PREROUTING -p tcp --dport 4040 -j DNAT --to-destination 10.139.21.14:4040