System
Hostname LEDE
Model NETGEAR WNDR3800CHMYCHART
Firmware Version LEDE Reboot 17.01.1 r3316-7eb58cf109 / LuCI lede-17.01 branch (git-17.100.70571-29fabe2)
Kernel Version 4.4.61
Not accepting ANY Configuration changes to the firewall for portforwarding. I've tried everything here: https://lede-project.org/docs/user-guide/failsafe_and_factory_reset and hard resets. NADA.
You need to give more details about what you're trying to do, and what you have tried so far. Could you explain what you are trying to forward? How does your network and firewall configuration look like?
Edit: the network and firewall config files I mean.
I'm trying to simply port forward or dmz my xbox box which has an ipv4 address behind nat. I'm not new to doing this so it seems to be a bug. I can create rules, but not port forwards. It acts as if it its saving and applying my forward but doesn't actually apply anything. EX. goto http://lede/cgi-bin/luci/admin/network/firewall; click the port forwards tab; enter any info and click save&apply; Nothing sticks. I didn't have this issue with kernel 4.4.50, but the latest lede bulletin suggested an update so...
root@LEDE:~# cat /etc/config/firewall
config defaults
option syn_flood '1'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
config zone
option name 'lan'
list network 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
config zone
option name 'wan'
list network 'wan'
list network 'wan6'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option src_ip 'fc00::/6'
option dest_ip 'fc00::/6'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config include
option path '/etc/firewall.user'
config rule
option target 'ACCEPT'
option src 'lan'
option dest 'wan'
option src_ip '192.168.1.200'
option name 'XBOXONE_out'
config rule
option enabled '1'
option target 'ACCEPT'
option src 'wan'
option dest 'lan'
option dest_ip '192.168.1.200'
option name 'XBOXONE_in'
You need to press "[Add]" next to the port forward line.
Mmmm a duh moment! I couldn't see that button using the material theme unless I maximized the window, which on osx, chrome is already large. lmao. Consider this closed. Thanks @jow