Metacom MC601 Router Page 28
User Manual
• In a future version the user may specify traffic between any of the available interfaces and
forward data between them.
• If there are errors in one of the rules the rule number will be displayed in the output. i.e ***
Invalid rule <num> ***
Here are some things to consider when adding rules:
• The rules are implemented internally using the linux iptables utility
• If eth1 is used for an interface then the interface needs to be enabled.
• If a destination port is specified then the direction may not be <->.
• Internally eth0 eth1 or eth0 eth0 will generate a forward rule between the interfaces
using protocol, IPs and destination port.
• New connections should be allowed if the destination is both ways (ie. <->)
• Internally eth0 <-> eth1 will generate a forward rule between the interfaces using only the
protocol.
• A DNAT (Destination nat) is only allowed for WAN (protocol must be set).
• The router port is ignored for directions or <->.
• Internally WAN<-, WAN<->, VPN<- or VPN<-> generate a forward rule using protocol, IPs
and destination port.
• If a firewall nat is used (section 3.5.5) then all packets are forwarded from ppp0 (ie.WAN) to
the destination IP/network and visa versa.
Cellular Continuum Series
Copyright © Metacom (Pty) Ltd