Turn port forwarding on/off via telnet or REST API?

[jmltech]

Is there a way to turn port forwarding on or off using telnet commands, or sending a web string to the router using REST?

We have a few pet cams in the house. My wife would like to have these be "off" from accessing from the outside internet when she is home, but be able to easily turn on when we are away. I was thinking of putting something together that can control this from my alarm ' away' mode, or writing a script to telnet into the router and issue the proper commands.

Thanks all!

 

[sinshiva]

the port forwards are added like thus;

iptables -A VSERVER -p udp -m udp --dport 3074 -j DNAT --to 192.168.1.100

to specify another inside port i believe would be like;

iptables -A VSERVER -p udp -m udp --dport 3074 -j DNAT --to 192.168.1.100:3075

and to remove the rule would require using the exact same string, but changing -A to -D, like thus;

iptables -D VSERVER -p udp -m udp --dport 3074 -j DNAT --to 192.168.1.100

change udp to tcp as needed, etc

 

[jmltech]

Thanks for the info. I had seen these commands in the WIKI to add and delete. Since the only port forward rules that I have is the webcams, I was looking for something like an on/off switch. After doing some comparisons with 'nvram show' after changing the gui for turning port forwarding on and off, it appears the switch to do this is:
Nvram set vts_enable_x=0 (or 1 to turn on)
Nvram commit

Now i'm looking for how to reload so the router 'sees' the new value - much like hitting "save" on the gui?

Thanks again for your suggestion and help!

 

[jmltech]

After some searching, I found that I can issue a "reboot" to restart the router from telnet. I was wondering if there is another command or service start that I can issue just to reload the value of the port forwarding? Or, is "reboot" faster and safer?

 

[RMerlin]

After some searching, I found that I can issue a "reboot" to restart the router from telnet. I was wondering if there is another command or service start that I can issue just to reload the value of the port forwarding? Or, is "reboot" faster and safer?

Restarting the firewall would probably be enough (I didn't test it):

service restart_firewall