111 lines
5.1 KiB
Markdown
111 lines
5.1 KiB
Markdown
# Proxmox WLAN IP-Tables
|
|
### V4
|
|
```
|
|
# Generated by iptables-save v1.8.11 on Wed Sep 9 03:31:03 2026
|
|
*nat
|
|
:PREROUTING ACCEPT [607:102422]
|
|
:INPUT ACCEPT [226:15893]
|
|
:OUTPUT ACCEPT [237:16252]
|
|
:POSTROUTING ACCEPT [2202:155522]
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p tcp -m tcp --dport 51820 -j DNAT --to-destination 192.168.250.2:51820
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p tcp -m tcp --dport 8080 -j DNAT --to-destination 192.168.250.2:8080
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p tcp -m tcp --dport 8443 -j DNAT --to-destination 192.168.250.2:8443
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.250.2:8080
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p tcp -m tcp --dport 443 -j DNAT --to-destination 192.168.250.2:8443
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p udp -m udp --dport 53 -j DNAT --to-destination 192.168.250.2:53
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p udp -m udp --dport 67 -j DNAT --to-destination 192.168.250.2:67
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p tcp -m tcp --dport 51820 -j DNAT --to-destination 192.168.250.2:51820
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p tcp -m tcp --dport 8080 -j DNAT --to-destination 192.168.250.2:8080
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p tcp -m tcp --dport 8443 -j DNAT --to-destination 192.168.250.2:8443
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.250.2:8080
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p tcp -m tcp --dport 443 -j DNAT --to-destination 192.168.250.2:8443
|
|
-A PREROUTING ! -s 192.168.250.0/24 -p udp -m udp --dport 53 -j DNAT --to-destination 192.168.250.2:53
|
|
-A POSTROUTING -s 192.168.250.0/24 -o wlp2s0 -j MASQUERADE
|
|
COMMIT
|
|
# Completed on Wed Sep 9 03:31:03 2026
|
|
# Generated by iptables-save v1.8.11 on Wed Sep 9 03:31:03 2026
|
|
*raw
|
|
:PREROUTING ACCEPT [91865:11405819]
|
|
:OUTPUT ACCEPT [10786:3643869]
|
|
-A PREROUTING -i fwbr+ -j CT --zone 1
|
|
-A PREROUTING -i fwbr+ -j CT --zone 100
|
|
COMMIT
|
|
# Completed on Wed Sep 9 03:31:03 2026
|
|
# Generated by iptables-save v1.8.11 on Wed Sep 9 03:31:03 2026
|
|
*filter
|
|
:INPUT ACCEPT [12340:2837091]
|
|
:FORWARD ACCEPT [34550:5062071]
|
|
:OUTPUT ACCEPT [10728:3637989]
|
|
-A FORWARD -d 192.168.250.2/32 -p tcp -m tcp --dport 51820 -j ACCEPT
|
|
-A FORWARD -d 192.168.250.2/32 -p udp -m udp --dport 51820 -j ACCEPT
|
|
-A FORWARD -d 192.168.250.2/32 -p tcp -m tcp --dport 80 -j ACCEPT
|
|
-A FORWARD -d 192.168.250.2/32 -p udp -m udp --dport 80 -j ACCEPT
|
|
-A FORWARD -d 192.168.250.2/32 -p tcp -m tcp --dport 443 -j ACCEPT
|
|
-A FORWARD -d 192.168.250.2/32 -p udp -m udp --dport 443 -j ACCEPT
|
|
-A FORWARD -d 192.168.250.2/32 -p tcp -m tcp --dport 8080 -j ACCEPT
|
|
-A FORWARD -d 192.168.250.2/32 -p udp -m udp --dport 8080 -j ACCEPT
|
|
-A FORWARD -d 192.168.250.2/32 -p tcp -m tcp --dport 8443 -j ACCEPT
|
|
-A FORWARD -d 192.168.250.2/32 -p udp -m udp --dport 8443 -j ACCEPT
|
|
-A FORWARD -d 192.168.250.2/32 -p tcp -m tcp --dport 53 -j ACCEPT
|
|
-A FORWARD -d 192.168.250.2/32 -p udp -m udp --dport 53 -j ACCEPT
|
|
-A FORWARD -d 192.168.250.2/32 -p udp -m udp --dport 67 -j ACCEPT
|
|
COMMIT
|
|
# Completed on Wed Sep 9 03:31:03 2026
|
|
```
|
|
|
|
### V6
|
|
```
|
|
*filter
|
|
:INPUT ACCEPT [0:0]
|
|
:FORWARD ACCEPT [0:0]
|
|
:OUTPUT ACCEPT [0:0]
|
|
|
|
-A FORWARD -d fd00:0:ffff::2/128 -p tcp -m tcp --dport 51820 -j ACCEPT
|
|
-A FORWARD -d fd00:0:ffff::2/128 -p udp -m udp --dport 51820 -j ACCEPT
|
|
|
|
-A FORWARD -d fd00:0:ffff::2/128 -p tcp -m tcp --dport 80 -j ACCEPT
|
|
-A FORWARD -d fd00:0:ffff::2/128 -p udp -m udp --dport 80 -j ACCEPT
|
|
|
|
-A FORWARD -d fd00:0:ffff::2/128 -p tcp -m tcp --dport 443 -j ACCEPT
|
|
-A FORWARD -d fd00:0:ffff::2/128 -p udp -m udp --dport 443 -j ACCEPT
|
|
|
|
-A FORWARD -d fd00:0:ffff::2/128 -p tcp -m tcp --dport 8080 -j ACCEPT
|
|
-A FORWARD -d fd00:0:ffff::2/128 -p udp -m udp --dport 8080 -j ACCEPT
|
|
|
|
-A FORWARD -d fd00:0:ffff::2/128 -p tcp -m tcp --dport 8443 -j ACCEPT
|
|
-A FORWARD -d fd00:0:ffff::2/128 -p udp -m udp --dport 8443 -j ACCEPT
|
|
|
|
COMMIT
|
|
|
|
*raw
|
|
:PREROUTING ACCEPT [0:0]
|
|
:OUTPUT ACCEPT [0:0]
|
|
|
|
COMMIT
|
|
|
|
*nat
|
|
:PREROUTING ACCEPT [0:0]
|
|
:INPUT ACCEPT [0:0]
|
|
:OUTPUT ACCEPT [0:0]
|
|
:POSTROUTING ACCEPT [0:0]
|
|
|
|
-A PREROUTING ! -s fd00:0:ffff::/64 -p tcp -m tcp --dport 51820 -j DNAT --to-destination [fd00:0:ffff::2]:51820
|
|
-A PREROUTING ! -s fd00:0:ffff::/64 -p udp -m udp --dport 51820 -j DNAT --to-destination [fd00:0:ffff::2]:51820
|
|
|
|
-A PREROUTING ! -s fd00:0:ffff::/64 -p tcp -m tcp --dport 8080 -j DNAT --to-destination [fd00:0:ffff::2]:8080
|
|
-A PREROUTING ! -s fd00:0:ffff::/64 -p udp -m udp --dport 8080 -j DNAT --to-destination [fd00:0:ffff::2]:8080
|
|
|
|
-A PREROUTING ! -s fd00:0:ffff::/64 -p tcp -m tcp --dport 8443 -j DNAT --to-destination [fd00:0:ffff::2]:8443
|
|
-A PREROUTING ! -s fd00:0:ffff::/64 -p udp -m udp --dport 8443 -j DNAT --to-destination [fd00:0:ffff::2]:8443
|
|
|
|
-A PREROUTING ! -s fd00:0:ffff::/64 -p tcp -m tcp --dport 80 -j DNAT --to-destination [fd00:0:ffff::2]:8080
|
|
-A PREROUTING ! -s fd00:0:ffff::/64 -p udp -m udp --dport 80 -j DNAT --to-destination [fd00:0:ffff::2]:8080
|
|
|
|
-A PREROUTING ! -s fd00:0:ffff::/64 -p tcp -m tcp --dport 443 -j DNAT --to-destination [fd00:0:ffff::2]:8443
|
|
-A PREROUTING ! -s fd00:0:ffff::/64 -p udp -m udp --dport 443 -j DNAT --to-destination [fd00:0:ffff::2]:8443
|
|
|
|
-A POSTROUTING -s fd00:0:ffff::/64 -o wlp2s0 -j MASQUERADE
|
|
|
|
COMMIT
|
|
```
|