Are these Firewall setting ok

[Notconnected]

HI again everyone.
I managed to re install OpenWrt and it is working.
I connect this OpenWrt router to my switch, and use the WiFi on this device to bridge to my phone.
This provides all the devices on the network with internet access.
I am not sure if my Firewall settings are correct, may be someone could advise.
The settings of the Wan seem too open, but am afraid to alter them as I do not want to brick this device.
Advise welcome, thank you all.

 

[dave14305]

What is the wan port plugged into? Post these outputs:

cat /etc/config/network
cat /etc/config/firewall

You wouldn’t want wan Input set to accept if your wan has a public IP.

 

[dave14305]

My Mobile phone is set to a hotspot, the WiFi on the router connects to this hotspot,
does this mean I do not have public IP.

You can check the wan IP with this command:

ifstatus wwan | jsonfilter -e '@["ipv4-address"][0].address'

You don’t need to post it, but if it doesn’t start with 10., 192.168., or 172., you might be at risk. I don’t know if the phone would provide any protection from the carrier end, I’ve never had to bother with hotspots/tethering.

 

[Notconnected]

You can check the wan IP with this command:

ifstatus wwan | jsonfilter -e '@["ipv4-address"][0].address'

You don’t need to post it, but if it doesn’t start with 10., 196.168., or 172., you might be at risk. I don’t know if the phone would provide any protection from the carrier end, I’ve never had to bother with hotspots/tethering.

Thanks @dave14305 , I pasted in your command, and I an IP am not familiar with beginning with a 10. it is not in the IP range of any of my network.

I am ordering a new mobile router that a forum user sent me a link to, after it is up and running I will experiment with the firewall settings on this OpenWrt setup, I still think I
do not require the wan port to ACCEPT incoming traffic, should it not be enough to allow outgoing traffic, am not sure until I can safely do the experiment.
If I recall when doing iptables I use out and established, I do not see an uption for established in OpenWrt.