firewall configuration with N66U

[videodrome]

I have two problems with the N66U
1) I mistakenly entered in the field "access to the WEB GUI" a wrong IP address and now I can not access the router. I wouldn't do the reset, is it possibile to modify this setting by telnet command?

2)I have 2 subnets at home. A Modem TP link with ip address 192.168.1.1 and the router asus with IP address 192.168.2.1. I conncted the 2 lan so i I can ping from 192.168.1.100 to 192.168.2.1 when the firewall on N 66U is turned off. Now i'd like to enable the firewall and allow the pc with ip address 192.168.1.100 to access all the services of the LAN 192.168.2.*. How do I configure IP tables on the router?

 

[john9527]

1) I mistakenly entered in the field "access to the WEB GUI" a wrong IP address and now I can not access the router. I wouldn't do the reset, is it possibile to modify this setting by telnet command?

Try this after telnet to the router

nvram set http_clientlist=
nvram set http_client=0
nvram commit
reboot

 

[videodrome]

Try this after telnet to the router

nvram set http_clientlist=
nvram set http_client=0
nvram commit
reboot

Thanx a lot

anyone can help me with the second problem?

 

[videodrome]

2)I have 2 subnets at home. A Modem TP link with ip address 192.168.1.1 and the router asus with IP address 192.168.2.1. I conncted the 2 lan so i I can ping from 192.168.1.100 to 192.168.2.1 when the firewall on N 66U is turned off. Now i'd like to enable the firewall and allow the pc with ip address 192.168.1.100 to access all the services of the LAN 192.168.2.*. How do I configure IP tables on the router?

Is it correct to add to firewall-start?

iptables -A INPUT -i eth0 -s 192.168.1.0/24 -j ACCEPT

 

[ColinTaylor]

I conncted the 2 lan ...

What does this mean? Please explain more clearly.

 

[videodrome]

What does this mean? Please explain more clearly.

the connection betweenTP link and The asus router is lan to wan.
I have set up on the tp link a static route to the network of the asus router 192.168.2.0. I can ping from 192.168.1.X to 192.168.2.1 if i disable the firewall on the asus, but i can't ping if i enable the firewall.

 

[ColinTaylor]

Is it correct to add to firewall-start?

iptables -A INPUT -i eth0 -s 192.168.1.0/24 -j ACCEPT

Try this:

iptables -I INPUT -i eth0 -s 192.168.1.0/24 -j ACCEPT
iptables -I FORWARD -i eth0 -s 192.168.1.0/24 -j ACCEPT

 

[videodrome]

Try this:

iptables -I INPUT -i eth0 -s 192.168.1.0/24 -j ACCEPT
iptables -I FORWARD -i eth0 -s 192.168.1.0/24 -j ACCEPT

Thanx a lot, now it works fine
The forward rule is related to the NAT configuration?

 

[ColinTaylor]

The INPUT chain is for traffic destined for the router itself (i.e. the GUI interface, FTP server, etc.). The FORWARD chain is for traffic directed to its LAN clients (i.e. attached PC's, laptops, consoles, etc.).