Entware and sslh, port forwarding question

[henrikk]

I am trying to configure sshl from entware on my RT-N66U (Merlin) (I want to multiplex SSH and OpenVPN). I have it working on my internal LAN just fine. External (WAN) it is not working. Seems like it is a port forwarding issue. So, I am trying to forward port 443 to the router and I add the rule to the port forwarding list (forward 443 to 192.168.1.1), but it appears it is not working. Does anything special need to be done to forward ports to the router itself?

-Henrik

 

[RMerlin]

Rules related to traffic that must be terminated on the router itself should be put in the INPUT chain. You will have to manually add it through a firewall-start script (for example).

 

[henrikk]

Thanks... Merlin. I should have no problems doing this.

- Henrik

 

[henrikk]

Merlin,
I have this working now. Thanks.

Please help me understand the first rule in iptables on the INPUT chain when enabling openvpn:

ACCEPT all -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp dpt:1194

The second line enables port 1194/UDP for openvpn, but the first line appears redundant to me.

- Henrik

 

[RMerlin]

Merlin,
I have this working now. Thanks.

Please help me understand the first rule in iptables on the INPUT chain when enabling openvpn:

ACCEPT all -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp dpt:1194

The second line enables port 1194/UDP for openvpn, but the first line appears redundant to me.

- Henrik

You are not seeing the complete rule, only a summary of it. To see the full rule:

iptables -L -v

You will then see the interfaces to which the rule applies.

 

[henrikk]

Thanks Merlin. That explains it.

- Henrik