Skip to content

issues Search Results · repo:openwrt/firewall4 language:UnrealScript

Filter by

19 results
 (82 ms)

19 results

inopenwrt/firewall4 (press backspace or delete to remove)

openwrt/firewall4
Firewall is not working for IPSec NAT-T

Tested two OpenWRT 24.10 routers to setup a site to site IPSec connection with Strongswan when the WAN interfaces are over NATed network. After the firewall config were modified to accept the incoming ...
  • kouhj
  • 9
  • Opened 
    25 days ago
  • #53

openwrt/firewall4
Wrong include order for ruleset-prepend

According to the documentation, custom includes with the ruleset-prepend option should be placed before the fw4 table definition . However, this is currently not the case. This seems to be caused by the ...
  • somerandoname
  • 23
  • Opened 
    on Feb 19
  • #51

openwrt/firewall4
destination MAC address matching not supported

Why is this not allowed (destination MAC address matching not supported)? It seems apretty straightforward configuration. config zone option name brians_remote_devices option input REJECT option ...
  • brianjmurrell
  • 9
  • Opened 
    on Feb 17
  • #50

openwrt/firewall4
Use of both `src_ip` and `ipset` in a rule is unclear

If I create a rule: config rule option name Brians PC and server to OPC network for SSH option proto tcp option dest opc_network option src lan list src_ip fd31:aeb1:48df:0:3b14:e643:83d8:7017 ...
  • brianjmurrell
  • 4
  • Opened 
    on Feb 13
  • #48

openwrt/firewall4
`option log '0'` doesn't seem to work

If I want to have a rule that simply suppresses the logging for some noisy (i.e. broadcast) traffic when logging is enabled for the zone, it seems that creating such a rule with option log 0 doesn t actually ...
  • brianjmurrell
  • 5
  • Opened 
    on Feb 11
  • #47

openwrt/firewall4
Unfortunate chain ordering side effect and potential security vulnerability

If I have the following rules defined: config rule option target DROP option src wan option src_ip 1.2.3.4 # bad actor on the WAN, no SSH allowed! option proto tcp option dest_port ...
  • brianjmurrell
  • 8
  • Opened 
    on Feb 10
  • #46

openwrt/firewall4
MAC address ipsets should not be limited to a single family

If I have an ipset: config ipset list match src_mac … it seems that I cannot have multiple (i.e. any) family for it. Instead I need to maintain two duplicate ipsets each with option family ipv4 and ...
  • brianjmurrell
  • 1
  • Opened 
    on Feb 8
  • #45

openwrt/firewall4
FW4 forward chains jump to wrong chain by default

in /usr/share/firewall4/templates/ruleset.uc line 252 creates wrong last rule for all forward chains. For example forward_lan chain jumps to reject_to_lan or accept_to_lan. As this traffic is coming from ...
  • StarryLifeRedoArtisan
  • 5
  • Opened 
    on Jan 17
  • #43

openwrt/firewall4
Is this repo actually used for PRs?

There are currently 9 PRs open, with the eearliest being 9 months old, and seemingly no response from @jow-. This makes me wonder if this is actually a viable route to contribute to fw4? @jow- (or anyone ...
  • jonathanunderwood
  • 3
  • Opened 
    on Oct 16, 2024
  • #39

openwrt/firewall4
rule XOR does not work as expected

set_xmark rule is emitted as if it was set_mark instead The behavior of rule (XOR firewall mark ) is exactly the same as the behavior of the (Assing firewall mark ) rule. A rule with the XOR mark shall ...
  • mirgeam
  • 4
  • Opened 
    on Jun 24, 2024
  • #34
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Restrict your search to the title by using the in:title qualifier.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Restrict your search to the title by using the in:title qualifier.
Issue search results · GitHub