Can Asuswrt-Merlin restrict port forwarding based on source ip

[gordon]

Hello,

I posted a question about the stock Asus RT-AC66U here: http://forums.smallnetbuilder.com/showthread.php?p=62896

I am thinking that the stock firmware cannot restrict port forwarding based on source ip.

Can Asuswrt-Merlin?

I.e. if I set up a port forwarding rule for 1234 to 192.168.1.123, I would like to reject all WAN traffic except for traffic from a whitelisted ip of 123.123.123.123

Thanks,
Gordon

 

[RMerlin]

Hello,

I posted a question about the stock Asus RT-AC66U here: http://forums.smallnetbuilder.com/showthread.php?p=62896

I am thinking that the stock firmware cannot restrict port forwarding based on source ip.

Can Asuswrt-Merlin?

I.e. if I set up a port forwarding rule for 1234 to 192.168.1.123, I would like to reject all WAN traffic except for traffic from a whitelisted ip of 123.123.123.123

Thanks,
Gordon

Can be done manually: https://github.com/RMerl/asuswrt-merlin/wiki/Iptables-tips

 

[gordon]

Can be done manually: https://github.com/RMerl/asuswrt-merlin/wiki/Iptables-tips

Rmerlin,

That is awesome news. Does the gui show record of the rules? Or is it just something to keep a mental note of?

 

[RMerlin]

Rmerlin,

That is awesome news. Does the gui show record of the rules? Or is it just something to keep a mental note of?

You have to do these through a shell script. The webui has no idea of their existence.

 

[gordon]

Thank you RMerlin